{&(0x7f0000000e40)=""/77, 0x4d}, {&(0x7f0000000ec0)=""/150, 0x96}, {&(0x7f0000000f80)=""/116, 0x74}, {&(0x7f0000001000)=""/212, 0xd4}, {0x0}, {0x0}], 0x8, &(0x7f00000000c0)=""/40, 0x28}, 0x7f}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000002480)=""/199, 0xc7}, {&(0x7f00000008c0)=""/55, 0x37}], 0x2, &(0x7f00000025c0)=""/157, 0x9d}, 0x9}, {{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002680)=""/238, 0xee}, {&(0x7f0000002780)=""/37, 0x25}, {&(0x7f00000027c0)=""/240, 0xf0}, {&(0x7f00000028c0)=""/10, 0xa}, {&(0x7f0000002900)=""/202, 0xca}, {&(0x7f0000002a00)=""/247, 0xf7}, {0x0}], 0x7, &(0x7f0000002c80)=""/184, 0xb8}, 0x7}, {{&(0x7f0000002d40)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f0000003040)=[{&(0x7f0000002dc0)=""/18, 0x12}, {&(0x7f0000002e00)=""/213, 0xd5}, {&(0x7f0000002f00)=""/62, 0x3e}, {0x0}, {0x0}, {&(0x7f0000002fc0)=""/31, 0x1f}, {&(0x7f0000003000)}], 0x7, &(0x7f00000030c0)=""/191, 0xbf}, 0x3}, {{&(0x7f0000003180)=@vsock, 0x80, &(0x7f0000004400)=[{&(0x7f0000007f40)=""/215, 0xd7}, {&(0x7f0000004300)=""/34, 0x22}, {&(0x7f0000004340)=""/28, 0x1c}, {&(0x7f0000004380)=""/108, 0x6c}], 0x4, &(0x7f0000004480)=""/222, 0xde}, 0x6}, {{&(0x7f0000004580)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000004a80)=[{&(0x7f0000004600)=""/120, 0x78}, {&(0x7f0000004700)=""/167, 0xa7}, {&(0x7f0000004800)=""/131, 0x83}, {0x0}, {&(0x7f0000004980)=""/212, 0xd4}], 0x5}, 0x8c2}, {{&(0x7f0000004b00)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000006cc0)=""/4096, 0x1000}, 0x52}], 0x8, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) write$UHID_DESTROY(r5, &(0x7f00000001c0), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x10001, 0xffff}, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x1) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000900)="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", 0x223, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 17:07:23 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x413e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x1}}, 0x0) r0 = socket(0x10, 0x800000000080003, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000380)=[@op, @op]}], 0x4924aa4, 0x0) 17:07:23 executing program 4: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair(0x11, 0x3, 0x0, 0x0) r0 = openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000540)='/proc/self/attr/current\x00', 0x2, 0x0) fcntl$setlease(r0, 0x400, 0x1) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000540)='/proc/self/attr/current\x00', 0x2, 0x0) 17:07:23 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x413e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000003a00fd030000"], 0x1}}, 0x0) r0 = socket(0x10, 0x800000000080003, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000380)=[@op, @op]}], 0x4924aa4, 0x0) 17:07:23 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x413e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000003a00fd030000"], 0x1}}, 0x0) r0 = socket(0x10, 0x800000000080003, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000380)=[@op, @op]}], 0x4924aa4, 0x0) 17:07:23 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x413e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000003a00fd030000"], 0x1}}, 0x0) r0 = socket(0x10, 0x800000000080003, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000380)=[@op, @op]}], 0x4924aa4, 0x0) 17:07:23 executing program 3: socket$packet(0x11, 0x1000000000000002, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x280080, 0x0) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000100)) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x15, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000003200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x680, 0x478, 0x210, 0x478, 0x0, 0x340, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x6, &(0x7f0000000580), {[{{@uncond, 0x0, 0xc8, 0x108}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "3c745d713ded54eb04d1bcfe4ec5e3722f760ca03b47ed1d735abcf07e43"}}, {{@uncond, 0x0, 0xc8, 0x108}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3, 0x38000, @ipv6=@rand_addr="f65360ce35d79792c798d9967e3df2d3", 0x4e21}}}, {{@ipv6={@empty, @mcast1, [0xffffff00, 0xffffff00, 0xff, 0xff000000], [0xff, 0x0, 0x17fffff01, 0xffffffff], 'rose0\x00', 'ipddp0\x00', {}, {}, 0x67, 0x9, 0x4, 0x1}, 0x0, 0xf0, 0x130, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0xe}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x5, 0x5, @ipv6=@ipv4={[], [], @empty}, 0x4e21}}}, {{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@ipv6header={0x28, 'ipv6header\x00', 0x0, {0x40, 0x20, 0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@multicast2, @ipv6=@empty, 0x2e, 0x26, 0x9}}}, {{@ipv6={@mcast1, @remote, [0xffffffff, 0xff000000, 0x7f000080, 0xff000000], [0xffffff00, 0xffffff00], 'ip6tnl0\x00', 'ip6tnl0\x00', {}, {}, 0xff, 0x1, 0x0, 0x63}, 0x0, 0xf0, 0x138, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@empty, @ipv4=@local, 0x37, 0x3b, 0x1}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6e0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000007cc0)=[{{&(0x7f00000002c0)=@caif=@dbg, 0x80, &(0x7f0000000840)=[{&(0x7f0000000340)=""/251, 0xfb}, {&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000007ec0)=""/108, 0x6c}, {&(0x7f0000000600)=""/241, 0xf1}, {0x0}], 0x5, &(0x7f0000000b40)=""/234, 0xea}, 0xd9b9}, {{&(0x7f0000000c40)=@pppol2tpv3, 0x80, &(0x7f0000002340)=[{&(0x7f0000000cc0)=""/63, 0x3f}, {&(0x7f0000000d40)=""/232, 0xe8}, {&(0x7f0000000e40)=""/77, 0x4d}, {&(0x7f0000000ec0)=""/150, 0x96}, {&(0x7f0000000f80)=""/116, 0x74}, {&(0x7f0000001000)=""/212, 0xd4}, {0x0}, {&(0x7f00000012c0)=""/4096, 0x1000}, {0x0}], 0x9, &(0x7f00000000c0)=""/40, 0x28}, 0x7f}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000002480)=""/199, 0xc7}, {&(0x7f00000008c0)=""/55, 0x37}], 0x2, &(0x7f00000025c0)=""/157, 0x9d}, 0x9}, {{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002680)=""/238, 0xee}, {&(0x7f0000002780)=""/37, 0x25}, {&(0x7f00000027c0)=""/240, 0xf0}, {&(0x7f00000028c0)=""/10, 0xa}, {&(0x7f0000002900)=""/202, 0xca}, {&(0x7f0000002a00)=""/247, 0xf7}, {0x0}], 0x7, &(0x7f0000002c80)=""/184, 0xb8}, 0x7}, {{&(0x7f0000002d40)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f0000003040)=[{&(0x7f0000002dc0)=""/18, 0x12}, {&(0x7f0000002e00)=""/213, 0xd5}, {&(0x7f0000002f00)=""/62, 0x3e}, {0x0}, {0x0}, {&(0x7f0000003000)}], 0x6, &(0x7f00000030c0)=""/191, 0xbf}, 0x3}, {{&(0x7f0000003180)=@vsock, 0x80, &(0x7f0000004400)=[{&(0x7f0000007f40)=""/215, 0xd7}, {&(0x7f0000004300)=""/34, 0x22}, {&(0x7f0000004340)=""/28, 0x1c}, {&(0x7f0000004380)=""/108, 0x6c}], 0x4, &(0x7f0000004480)=""/222, 0xde}, 0x6}, {{&(0x7f0000004580)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000004a80)=[{&(0x7f0000004600)=""/120, 0x78}, {&(0x7f0000004700)=""/167, 0xa7}, {&(0x7f0000004800)=""/131, 0x83}, {0x0}, {&(0x7f0000004980)=""/212, 0xd4}], 0x5}, 0x8c2}, {{&(0x7f0000004b00)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000006cc0)=""/4096, 0x1000}, 0x52}], 0x8, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) write$UHID_DESTROY(r5, &(0x7f00000001c0), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x10001, 0xffff}, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x1) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000900)="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", 0x223, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 17:07:23 executing program 1: socket$packet(0x11, 0x1000000000000002, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x280080, 0x0) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000100)) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x15, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, 0x0, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000007cc0)=[{{&(0x7f00000002c0)=@caif=@dbg, 0x80, &(0x7f0000000840)=[{&(0x7f0000000340)=""/251, 0xfb}, {&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000007ec0)=""/108, 0x6c}, {&(0x7f0000000600)=""/241, 0xf1}, {0x0}], 0x5, &(0x7f0000000b40)=""/234, 0xea}, 0xd9b9}, {{&(0x7f0000000c40)=@pppol2tpv3, 0x80, &(0x7f0000002340)=[{&(0x7f0000000cc0)=""/63, 0x3f}, {&(0x7f0000000d40)=""/232, 0xe8}, {&(0x7f0000000e40)=""/77, 0x4d}, {&(0x7f0000000ec0)=""/150, 0x96}, {&(0x7f0000000f80)=""/116, 0x74}, {&(0x7f0000001000)=""/212, 0xd4}, {0x0}, {0x0}, {0x0}], 0x9, &(0x7f00000000c0)=""/40, 0x28}, 0x7f}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000002480)=""/199, 0xc7}, {&(0x7f00000008c0)=""/55, 0x37}], 0x2, &(0x7f00000025c0)=""/157, 0x9d}, 0x9}, {{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002680)=""/238, 0xee}, {&(0x7f0000002780)=""/37, 0x25}, {&(0x7f00000027c0)=""/240, 0xf0}, {&(0x7f00000028c0)=""/10, 0xa}, {&(0x7f0000002900)=""/202, 0xca}, {&(0x7f0000002a00)=""/247, 0xf7}, {0x0}], 0x7, &(0x7f0000002c80)=""/184, 0xb8}, 0x7}, {{&(0x7f0000002d40)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f0000003040)=[{&(0x7f0000002dc0)=""/18, 0x12}, {&(0x7f0000002e00)=""/213, 0xd5}, {&(0x7f0000002f00)=""/62, 0x3e}, {0x0}, {0x0}, {&(0x7f0000002fc0)=""/31, 0x1f}, {&(0x7f0000003000)}], 0x7, &(0x7f00000030c0)=""/191, 0xbf}, 0x3}, {{&(0x7f0000003180)=@vsock, 0x80, &(0x7f0000004400)=[{&(0x7f0000007f40)=""/215, 0xd7}, {&(0x7f0000004300)=""/34, 0x22}, {&(0x7f0000004340)=""/28, 0x1c}, {&(0x7f0000004380)=""/108, 0x6c}], 0x4, &(0x7f0000004480)=""/222, 0xde}, 0x6}, {{&(0x7f0000004580)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000004a80)=[{&(0x7f0000004600)=""/120, 0x78}, {&(0x7f0000004700)=""/167, 0xa7}, {&(0x7f0000004800)=""/131, 0x83}, {0x0}, {&(0x7f0000004980)=""/212, 0xd4}], 0x5}, 0x8c2}, {{&(0x7f0000004b00)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000006cc0)=""/4096, 0x1000}, 0x52}], 0x8, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) write$UHID_DESTROY(r5, &(0x7f00000001c0), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x10001, 0xffff}, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x1) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000900)="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", 0x223, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 17:07:23 executing program 4: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair(0x11, 0x3, 0x0, 0x0) r0 = openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000540)='/proc/self/attr/current\x00', 0x2, 0x0) fcntl$setlease(r0, 0x400, 0x1) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000540)='/proc/self/attr/current\x00', 0x2, 0x0) 17:07:23 executing program 2: socket$packet(0x11, 0x1000000000000002, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x280080, 0x0) ioctl$RTC_VL_READ(r0, 0x80047013, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x15, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000003200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x680, 0x478, 0x210, 0x478, 0x0, 0x340, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x6, 0x0, {[{{@uncond, 0x0, 0xc8, 0x108}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "3c745d713ded54eb04d1bcfe4ec5e3722f760ca03b47ed1d735abcf07e43"}}, {{@uncond, 0x0, 0xc8, 0x108}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3, 0x38000, @ipv6=@rand_addr="f65360ce35d79792c798d9967e3df2d3", 0x4e21}}}, {{@ipv6={@empty, @mcast1, [0xffffff00, 0xffffff00, 0xff, 0xff000000], [0xff, 0x0, 0x17fffff01, 0xffffffff], 'rose0\x00', 'ipddp0\x00', {}, {}, 0x67, 0x9, 0x4, 0x1}, 0x0, 0xf0, 0x130, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0xe}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x5, 0x5, @ipv6=@ipv4={[], [], @empty}, 0x4e21}}}, {{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@ipv6header={0x28, 'ipv6header\x00', 0x0, {0x40, 0x20, 0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@multicast2, @ipv6=@empty, 0x2e, 0x26, 0x9}}}, {{@ipv6={@mcast1, @remote, [0xffffffff, 0xff000000, 0x7f000080, 0xff000000], [0xffffff00, 0xffffff00], 'ip6tnl0\x00', 'ip6tnl0\x00', {}, {}, 0xff, 0x1, 0x0, 0x63}, 0x0, 0xf0, 0x138, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@empty, @ipv4=@local, 0x37, 0x3b, 0x1}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6e0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000007cc0)=[{{&(0x7f00000002c0)=@caif=@dbg, 0x80, &(0x7f0000000840)=[{&(0x7f0000000340)=""/251, 0xfb}, {&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000007ec0)=""/108, 0x6c}, {&(0x7f0000000600)=""/241, 0xf1}, {0x0}], 0x5, &(0x7f0000000b40)=""/234, 0xea}, 0xd9b9}, {{&(0x7f0000000c40)=@pppol2tpv3, 0x80, &(0x7f0000002340)=[{&(0x7f0000000cc0)=""/63, 0x3f}, {&(0x7f0000000d40)=""/232, 0xe8}, {&(0x7f0000000e40)=""/77, 0x4d}, {&(0x7f0000000ec0)=""/150, 0x96}, {&(0x7f0000000f80)=""/116, 0x74}, {&(0x7f0000001000)=""/212, 0xd4}, {0x0}, {&(0x7f00000012c0)=""/4096, 0x1000}, {0x0}], 0x9, &(0x7f00000000c0)=""/40, 0x28}, 0x7f}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000002480)=""/199, 0xc7}, {&(0x7f00000008c0)=""/55, 0x37}], 0x2, &(0x7f00000025c0)=""/157, 0x9d}, 0x9}, {{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002680)=""/238, 0xee}, {&(0x7f0000002780)=""/37, 0x25}, {&(0x7f00000027c0)=""/240, 0xf0}, {&(0x7f00000028c0)=""/10, 0xa}, {&(0x7f0000002900)=""/202, 0xca}, {&(0x7f0000002a00)=""/247, 0xf7}, {0x0}], 0x7, &(0x7f0000002c80)=""/184, 0xb8}, 0x7}, {{&(0x7f0000002d40)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f0000003040)=[{&(0x7f0000002dc0)=""/18, 0x12}, {&(0x7f0000002e00)=""/213, 0xd5}, {&(0x7f0000002f00)=""/62, 0x3e}, {0x0}, {0x0}, {&(0x7f0000002fc0)=""/31, 0x1f}], 0x6, &(0x7f00000030c0)=""/191, 0xbf}, 0x3}, {{&(0x7f0000003180)=@vsock, 0x80, &(0x7f0000004400)=[{&(0x7f0000007f40)=""/215, 0xd7}, {&(0x7f0000004300)=""/34, 0x22}, {&(0x7f0000004340)=""/28, 0x1c}, {&(0x7f0000004380)=""/108, 0x6c}], 0x4, &(0x7f0000004480)=""/222, 0xde}, 0x6}, {{&(0x7f0000004580)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000004a80)=[{&(0x7f0000004600)=""/120, 0x78}, {&(0x7f0000004700)=""/167, 0xa7}, {&(0x7f0000004800)=""/131, 0x83}, {0x0}, {&(0x7f0000004980)=""/212, 0xd4}], 0x5}, 0x8c2}, {{&(0x7f0000004b00)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000006cc0)=""/4096, 0x1000}, 0x52}], 0x8, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) write$UHID_DESTROY(r5, &(0x7f00000001c0), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x10001, 0xffff}, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x1) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000900)="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", 0x223, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 17:07:24 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000000)=""/11, 0x13a) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000180)={0x0, 0x7530}, 0x10) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) clone(0x3502001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) ioctl$TIOCL_GETSHIFTSTATE(r0, 0x541c, 0x0) 17:07:24 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x413e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000003a00fd0300000000001000"], 0x1}}, 0x0) r0 = socket(0x10, 0x800000000080003, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000380)=[@op, @op]}], 0x4924aa4, 0x0) 17:07:24 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080), 0x1c) creat(&(0x7f0000000040)='./file0\x00', 0x0) socketpair(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$sock_timeval(r1, 0x1, 0x0, 0x0, 0x0) socketpair(0x0, 0x80803, 0x0, 0x0) sched_getattr(0x0, &(0x7f0000000240), 0x30, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, &(0x7f00000004c0)=@v2={0x2, @aes128, 0x0, [], "e5afb031a7a3fd465b5506e949e8923c"}) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0xd, 0x0, {{0x1}, 0x8}}, 0x18) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0x12) splice(r0, 0x0, r2, 0x0, 0x1, 0x0) 17:07:24 executing program 2: socket$packet(0x11, 0x1000000000000002, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x280080, 0x0) ioctl$RTC_VL_READ(r0, 0x80047013, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x15, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000003200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x680, 0x478, 0x210, 0x478, 0x0, 0x340, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x6, 0x0, {[{{@uncond, 0x0, 0xc8, 0x108}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "3c745d713ded54eb04d1bcfe4ec5e3722f760ca03b47ed1d735abcf07e43"}}, {{@uncond, 0x0, 0xc8, 0x108}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3, 0x38000, @ipv6=@rand_addr="f65360ce35d79792c798d9967e3df2d3", 0x4e21}}}, {{@ipv6={@empty, @mcast1, [0xffffff00, 0xffffff00, 0xff, 0xff000000], [0xff, 0x0, 0x17fffff01, 0xffffffff], 'rose0\x00', 'ipddp0\x00', {}, {}, 0x67, 0x9, 0x4, 0x1}, 0x0, 0xf0, 0x130, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0xe}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x5, 0x5, @ipv6=@ipv4={[], [], @empty}, 0x4e21}}}, {{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@ipv6header={0x28, 'ipv6header\x00', 0x0, {0x40, 0x20, 0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@multicast2, @ipv6=@empty, 0x2e, 0x26, 0x9}}}, {{@ipv6={@mcast1, @remote, [0xffffffff, 0xff000000, 0x7f000080, 0xff000000], [0xffffff00, 0xffffff00], 'ip6tnl0\x00', 'ip6tnl0\x00', {}, {}, 0xff, 0x1, 0x0, 0x63}, 0x0, 0xf0, 0x138, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@empty, @ipv4=@local, 0x37, 0x3b, 0x1}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6e0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000007cc0)=[{{&(0x7f00000002c0)=@caif=@dbg, 0x80, &(0x7f0000000840)=[{&(0x7f0000000340)=""/251, 0xfb}, {&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000007ec0)=""/108, 0x6c}, {&(0x7f0000000600)=""/241, 0xf1}, {0x0}], 0x5, &(0x7f0000000b40)=""/234, 0xea}, 0xd9b9}, {{&(0x7f0000000c40)=@pppol2tpv3, 0x80, &(0x7f0000002340)=[{&(0x7f0000000cc0)=""/63, 0x3f}, {&(0x7f0000000d40)=""/232, 0xe8}, {&(0x7f0000000e40)=""/77, 0x4d}, {&(0x7f0000000ec0)=""/150, 0x96}, {&(0x7f0000000f80)=""/116, 0x74}, {&(0x7f0000001000)=""/212, 0xd4}, {0x0}, {&(0x7f00000012c0)=""/4096, 0x1000}, {0x0}], 0x9, &(0x7f00000000c0)=""/40, 0x28}, 0x7f}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000002480)=""/199, 0xc7}, {&(0x7f00000008c0)=""/55, 0x37}], 0x2, &(0x7f00000025c0)=""/157, 0x9d}, 0x9}, {{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002680)=""/238, 0xee}, {&(0x7f0000002780)=""/37, 0x25}, {&(0x7f00000027c0)=""/240, 0xf0}, {&(0x7f00000028c0)=""/10, 0xa}, {&(0x7f0000002900)=""/202, 0xca}, {&(0x7f0000002a00)=""/247, 0xf7}, {0x0}], 0x7, &(0x7f0000002c80)=""/184, 0xb8}, 0x7}, {{&(0x7f0000002d40)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f0000003040)=[{&(0x7f0000002dc0)=""/18, 0x12}, {&(0x7f0000002e00)=""/213, 0xd5}, {&(0x7f0000002f00)=""/62, 0x3e}, {0x0}, {0x0}, {&(0x7f0000002fc0)=""/31, 0x1f}, {0x0}], 0x7, &(0x7f00000030c0)=""/191, 0xbf}, 0x3}, {{&(0x7f0000003180)=@vsock, 0x80, &(0x7f0000004400)=[{&(0x7f0000007f40)=""/215, 0xd7}, {&(0x7f0000004300)=""/34, 0x22}, {&(0x7f0000004340)=""/28, 0x1c}, {&(0x7f0000004380)=""/108, 0x6c}], 0x4, &(0x7f0000004480)=""/222, 0xde}, 0x6}, {{&(0x7f0000004580)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000004a80)=[{&(0x7f0000004600)=""/120, 0x78}, {&(0x7f0000004700)=""/167, 0xa7}, {&(0x7f0000004800)=""/131, 0x83}, {0x0}, {&(0x7f0000004980)=""/212, 0xd4}], 0x5}, 0x8c2}, {{&(0x7f0000004b00)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000006cc0)=""/4096, 0x1000}, 0x52}], 0x8, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) write$UHID_DESTROY(r5, &(0x7f00000001c0), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x10001, 0xffff}, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x1) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000900)="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", 0x223, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 17:07:24 executing program 1: socket$packet(0x11, 0x1000000000000002, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x280080, 0x0) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000100)) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x15, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, 0x0, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000007cc0)=[{{&(0x7f00000002c0)=@caif=@dbg, 0x80, &(0x7f0000000840)=[{&(0x7f0000000340)=""/251, 0xfb}, {&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000007ec0)=""/108, 0x6c}, {&(0x7f0000000600)=""/241, 0xf1}, {0x0}], 0x5, &(0x7f0000000b40)=""/234, 0xea}, 0xd9b9}, {{&(0x7f0000000c40)=@pppol2tpv3, 0x80, &(0x7f0000002340)=[{&(0x7f0000000cc0)=""/63, 0x3f}, {&(0x7f0000000d40)=""/232, 0xe8}, {&(0x7f0000000e40)=""/77, 0x4d}, {&(0x7f0000000ec0)=""/150, 0x96}, {&(0x7f0000000f80)=""/116, 0x74}, {&(0x7f0000001000)=""/212, 0xd4}, {0x0}, {0x0}, {0x0}], 0x9, &(0x7f00000000c0)=""/40, 0x28}, 0x7f}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000002480)=""/199, 0xc7}, {&(0x7f00000008c0)=""/55, 0x37}], 0x2, &(0x7f00000025c0)=""/157, 0x9d}, 0x9}, {{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002680)=""/238, 0xee}, {&(0x7f0000002780)=""/37, 0x25}, {&(0x7f00000027c0)=""/240, 0xf0}, {&(0x7f00000028c0)=""/10, 0xa}, {&(0x7f0000002900)=""/202, 0xca}, {&(0x7f0000002a00)=""/247, 0xf7}, {0x0}], 0x7, &(0x7f0000002c80)=""/184, 0xb8}, 0x7}, {{&(0x7f0000002d40)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f0000003040)=[{&(0x7f0000002dc0)=""/18, 0x12}, {&(0x7f0000002e00)=""/213, 0xd5}, {&(0x7f0000002f00)=""/62, 0x3e}, {0x0}, {0x0}, {&(0x7f0000002fc0)=""/31, 0x1f}, {&(0x7f0000003000)}], 0x7, &(0x7f00000030c0)=""/191, 0xbf}, 0x3}, {{&(0x7f0000003180)=@vsock, 0x80, &(0x7f0000004400)=[{&(0x7f0000007f40)=""/215, 0xd7}, {&(0x7f0000004300)=""/34, 0x22}, {&(0x7f0000004340)=""/28, 0x1c}, {&(0x7f0000004380)=""/108, 0x6c}], 0x4, &(0x7f0000004480)=""/222, 0xde}, 0x6}, {{&(0x7f0000004580)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000004a80)=[{&(0x7f0000004600)=""/120, 0x78}, {&(0x7f0000004700)=""/167, 0xa7}, {&(0x7f0000004800)=""/131, 0x83}, {0x0}, {&(0x7f0000004980)=""/212, 0xd4}], 0x5}, 0x8c2}, {{&(0x7f0000004b00)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000006cc0)=""/4096, 0x1000}, 0x52}], 0x8, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) write$UHID_DESTROY(r5, &(0x7f00000001c0), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x10001, 0xffff}, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x1) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000900)="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", 0x223, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 17:07:24 executing program 3: socket$packet(0x11, 0x1000000000000002, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x280080, 0x0) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000100)) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x15, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000003200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x680, 0x478, 0x210, 0x478, 0x0, 0x340, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x6, &(0x7f0000000580), {[{{@uncond, 0x0, 0xc8, 0x108}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "3c745d713ded54eb04d1bcfe4ec5e3722f760ca03b47ed1d735abcf07e43"}}, {{@uncond, 0x0, 0xc8, 0x108}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3, 0x38000, @ipv6=@rand_addr="f65360ce35d79792c798d9967e3df2d3", 0x4e21}}}, {{@ipv6={@empty, @mcast1, [0xffffff00, 0xffffff00, 0xff, 0xff000000], [0xff, 0x0, 0x17fffff01, 0xffffffff], 'rose0\x00', 'ipddp0\x00', {}, {}, 0x67, 0x9, 0x4, 0x1}, 0x0, 0xf0, 0x130, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0xe}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x5, 0x5, @ipv6=@ipv4={[], [], @empty}, 0x4e21}}}, {{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@ipv6header={0x28, 'ipv6header\x00', 0x0, {0x40, 0x20, 0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@multicast2, @ipv6=@empty, 0x2e, 0x26, 0x9}}}, {{@ipv6={@mcast1, @remote, [0xffffffff, 0xff000000, 0x7f000080, 0xff000000], [0xffffff00, 0xffffff00], 'ip6tnl0\x00', 'ip6tnl0\x00', {}, {}, 0xff, 0x1, 0x0, 0x63}, 0x0, 0xf0, 0x138, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@empty, @ipv4=@local, 0x37, 0x3b, 0x1}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6e0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000007cc0)=[{{&(0x7f00000002c0)=@caif=@dbg, 0x80, &(0x7f0000000840)=[{&(0x7f0000000340)=""/251, 0xfb}, {&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000007ec0)=""/108, 0x6c}, {&(0x7f0000000600)=""/241, 0xf1}, {0x0}], 0x5, &(0x7f0000000b40)=""/234, 0xea}, 0xd9b9}, {{&(0x7f0000000c40)=@pppol2tpv3, 0x80, &(0x7f0000002340)=[{&(0x7f0000000cc0)=""/63, 0x3f}, {&(0x7f0000000d40)=""/232, 0xe8}, {&(0x7f0000000e40)=""/77, 0x4d}, {&(0x7f0000000ec0)=""/150, 0x96}, {&(0x7f0000000f80)=""/116, 0x74}, {&(0x7f0000001000)=""/212, 0xd4}, {0x0}, {&(0x7f00000012c0)=""/4096, 0x1000}, {0x0}], 0x9, &(0x7f00000000c0)=""/40, 0x28}, 0x7f}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000002480)=""/199, 0xc7}, {&(0x7f00000008c0)=""/55, 0x37}], 0x2, &(0x7f00000025c0)=""/157, 0x9d}, 0x9}, {{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002680)=""/238, 0xee}, {&(0x7f0000002780)=""/37, 0x25}, {&(0x7f00000027c0)=""/240, 0xf0}, {&(0x7f00000028c0)=""/10, 0xa}, {&(0x7f0000002900)=""/202, 0xca}, {&(0x7f0000002a00)=""/247, 0xf7}, {0x0}], 0x7, &(0x7f0000002c80)=""/184, 0xb8}, 0x7}, {{&(0x7f0000002d40)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f0000003040)=[{&(0x7f0000002dc0)=""/18, 0x12}, {&(0x7f0000002e00)=""/213, 0xd5}, {&(0x7f0000002f00)=""/62, 0x3e}, {0x0}, {0x0}, {0x0}, {&(0x7f0000003000)}], 0x7, &(0x7f00000030c0)=""/191, 0xbf}, 0x3}, {{&(0x7f0000003180)=@vsock, 0x80, &(0x7f0000004400)=[{&(0x7f0000007f40)=""/215, 0xd7}, {&(0x7f0000004300)=""/34, 0x22}, {&(0x7f0000004340)=""/28, 0x1c}, {&(0x7f0000004380)=""/108, 0x6c}], 0x4, &(0x7f0000004480)=""/222, 0xde}, 0x6}, {{&(0x7f0000004580)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000004a80)=[{&(0x7f0000004600)=""/120, 0x78}, {&(0x7f0000004700)=""/167, 0xa7}, {&(0x7f0000004800)=""/131, 0x83}, {0x0}, {&(0x7f0000004980)=""/212, 0xd4}], 0x5}, 0x8c2}, {{&(0x7f0000004b00)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000006cc0)=""/4096, 0x1000}, 0x52}], 0x8, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) write$UHID_DESTROY(r5, &(0x7f00000001c0), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x10001, 0xffff}, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x1) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000900)="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", 0x223, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 17:07:24 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x413e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000003a00fd0300000000001000"], 0x1}}, 0x0) r0 = socket(0x10, 0x800000000080003, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000380)=[@op, @op]}], 0x4924aa4, 0x0) 17:07:24 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x413e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000003a00fd0300000000001000"], 0x1}}, 0x0) r0 = socket(0x10, 0x800000000080003, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000380)=[@op, @op]}], 0x4924aa4, 0x0) 17:07:24 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xeb4, 0x0) fcntl$setlease(r0, 0x400, 0x0) [ 515.015185] audit: type=1400 audit(1576602444.352:110): avc: denied { create } for pid=22850 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_scsitransport_socket permissive=1 17:07:24 executing program 3: socket$packet(0x11, 0x1000000000000002, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x280080, 0x0) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000100)) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x15, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000003200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x680, 0x478, 0x210, 0x478, 0x0, 0x340, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x6, &(0x7f0000000580), {[{{@uncond, 0x0, 0xc8, 0x108}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "3c745d713ded54eb04d1bcfe4ec5e3722f760ca03b47ed1d735abcf07e43"}}, {{@uncond, 0x0, 0xc8, 0x108}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3, 0x38000, @ipv6=@rand_addr="f65360ce35d79792c798d9967e3df2d3", 0x4e21}}}, {{@ipv6={@empty, @mcast1, [0xffffff00, 0xffffff00, 0xff, 0xff000000], [0xff, 0x0, 0x17fffff01, 0xffffffff], 'rose0\x00', 'ipddp0\x00', {}, {}, 0x67, 0x9, 0x4, 0x1}, 0x0, 0xf0, 0x130, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0xe}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x5, 0x5, @ipv6=@ipv4={[], [], @empty}, 0x4e21}}}, {{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@ipv6header={0x28, 'ipv6header\x00', 0x0, {0x40, 0x20, 0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@multicast2, @ipv6=@empty, 0x2e, 0x26, 0x9}}}, {{@ipv6={@mcast1, @remote, [0xffffffff, 0xff000000, 0x7f000080, 0xff000000], [0xffffff00, 0xffffff00], 'ip6tnl0\x00', 'ip6tnl0\x00', {}, {}, 0xff, 0x1, 0x0, 0x63}, 0x0, 0xf0, 0x138, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@empty, @ipv4=@local, 0x37, 0x3b, 0x1}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6e0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000007cc0)=[{{&(0x7f00000002c0)=@caif=@dbg, 0x80, &(0x7f0000000840)=[{&(0x7f0000000340)=""/251, 0xfb}, {&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000007ec0)=""/108, 0x6c}, {&(0x7f0000000600)=""/241, 0xf1}, {0x0}], 0x5, &(0x7f0000000b40)=""/234, 0xea}, 0xd9b9}, {{&(0x7f0000000c40)=@pppol2tpv3, 0x80, &(0x7f0000002340)=[{&(0x7f0000000cc0)=""/63, 0x3f}, {&(0x7f0000000d40)=""/232, 0xe8}, {&(0x7f0000000e40)=""/77, 0x4d}, {&(0x7f0000000ec0)=""/150, 0x96}, {&(0x7f0000000f80)=""/116, 0x74}, {&(0x7f0000001000)=""/212, 0xd4}, {0x0}, {&(0x7f00000012c0)=""/4096, 0x1000}, {0x0}], 0x9, &(0x7f00000000c0)=""/40, 0x28}, 0x7f}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000002480)=""/199, 0xc7}, {&(0x7f00000008c0)=""/55, 0x37}], 0x2, &(0x7f00000025c0)=""/157, 0x9d}, 0x9}, {{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002680)=""/238, 0xee}, {&(0x7f0000002780)=""/37, 0x25}, {&(0x7f00000027c0)=""/240, 0xf0}, {&(0x7f00000028c0)=""/10, 0xa}, {&(0x7f0000002900)=""/202, 0xca}, {&(0x7f0000002a00)=""/247, 0xf7}, {0x0}], 0x7, &(0x7f0000002c80)=""/184, 0xb8}, 0x7}, {{&(0x7f0000002d40)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f0000003040)=[{&(0x7f0000002dc0)=""/18, 0x12}, {&(0x7f0000002e00)=""/213, 0xd5}, {&(0x7f0000002f00)=""/62, 0x3e}, {0x0}, {0x0}, {0x0}, {&(0x7f0000003000)}], 0x7, &(0x7f00000030c0)=""/191, 0xbf}, 0x3}, {{&(0x7f0000003180)=@vsock, 0x80, &(0x7f0000004400)=[{&(0x7f0000007f40)=""/215, 0xd7}, {&(0x7f0000004300)=""/34, 0x22}, {&(0x7f0000004340)=""/28, 0x1c}, {&(0x7f0000004380)=""/108, 0x6c}], 0x4, &(0x7f0000004480)=""/222, 0xde}, 0x6}, {{&(0x7f0000004580)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000004a80)=[{&(0x7f0000004600)=""/120, 0x78}, {&(0x7f0000004700)=""/167, 0xa7}, {&(0x7f0000004800)=""/131, 0x83}, {0x0}, {&(0x7f0000004980)=""/212, 0xd4}], 0x5}, 0x8c2}, {{&(0x7f0000004b00)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000006cc0)=""/4096, 0x1000}, 0x52}], 0x8, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) write$UHID_DESTROY(r5, &(0x7f00000001c0), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x10001, 0xffff}, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x1) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000900)="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", 0x223, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 17:07:24 executing program 4: r0 = syz_open_dev$evdev(&(0x7f00000009c0)='/dev/input/event#\x00', 0x0, 0x5) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r1 = dup(r0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r1, 0x8983, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) shutdown(r3, 0x0) 17:07:24 executing program 1: socket$packet(0x11, 0x1000000000000002, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x280080, 0x0) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000100)) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x15, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, 0x0, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000007cc0)=[{{&(0x7f00000002c0)=@caif=@dbg, 0x80, &(0x7f0000000840)=[{&(0x7f0000000340)=""/251, 0xfb}, {&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000007ec0)=""/108, 0x6c}, {&(0x7f0000000600)=""/241, 0xf1}, {0x0}], 0x5, &(0x7f0000000b40)=""/234, 0xea}, 0xd9b9}, {{&(0x7f0000000c40)=@pppol2tpv3, 0x80, &(0x7f0000002340)=[{&(0x7f0000000cc0)=""/63, 0x3f}, {&(0x7f0000000d40)=""/232, 0xe8}, {&(0x7f0000000e40)=""/77, 0x4d}, {&(0x7f0000000ec0)=""/150, 0x96}, {&(0x7f0000000f80)=""/116, 0x74}, {&(0x7f0000001000)=""/212, 0xd4}, {0x0}, {0x0}, {0x0}], 0x9, &(0x7f00000000c0)=""/40, 0x28}, 0x7f}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000002480)=""/199, 0xc7}, {&(0x7f00000008c0)=""/55, 0x37}], 0x2, &(0x7f00000025c0)=""/157, 0x9d}, 0x9}, {{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002680)=""/238, 0xee}, {&(0x7f0000002780)=""/37, 0x25}, {&(0x7f00000027c0)=""/240, 0xf0}, {&(0x7f00000028c0)=""/10, 0xa}, {&(0x7f0000002900)=""/202, 0xca}, {&(0x7f0000002a00)=""/247, 0xf7}, {0x0}], 0x7, &(0x7f0000002c80)=""/184, 0xb8}, 0x7}, {{&(0x7f0000002d40)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f0000003040)=[{&(0x7f0000002dc0)=""/18, 0x12}, {&(0x7f0000002e00)=""/213, 0xd5}, {&(0x7f0000002f00)=""/62, 0x3e}, {0x0}, {0x0}, {&(0x7f0000002fc0)=""/31, 0x1f}, {&(0x7f0000003000)}], 0x7, &(0x7f00000030c0)=""/191, 0xbf}, 0x3}, {{&(0x7f0000003180)=@vsock, 0x80, &(0x7f0000004400)=[{&(0x7f0000007f40)=""/215, 0xd7}, {&(0x7f0000004300)=""/34, 0x22}, {&(0x7f0000004340)=""/28, 0x1c}, {&(0x7f0000004380)=""/108, 0x6c}], 0x4, &(0x7f0000004480)=""/222, 0xde}, 0x6}, {{&(0x7f0000004580)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000004a80)=[{&(0x7f0000004600)=""/120, 0x78}, {&(0x7f0000004700)=""/167, 0xa7}, {&(0x7f0000004800)=""/131, 0x83}, {0x0}, {&(0x7f0000004980)=""/212, 0xd4}], 0x5}, 0x8c2}, {{&(0x7f0000004b00)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000006cc0)=""/4096, 0x1000}, 0x52}], 0x8, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) write$UHID_DESTROY(r5, &(0x7f00000001c0), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x10001, 0xffff}, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x1) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000900)="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", 0x223, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) [ 515.520118] net_ratelimit: 16 callbacks suppressed [ 515.520124] protocol 88fb is buggy, dev hsr_slave_0 [ 515.530216] protocol 88fb is buggy, dev hsr_slave_1 17:07:25 executing program 0: 17:07:25 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x413e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000003a00fd0300000000001000000af0"], 0x1}}, 0x0) r0 = socket(0x10, 0x800000000080003, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000380)=[@op, @op]}], 0x4924aa4, 0x0) 17:07:25 executing program 2: socket$packet(0x11, 0x1000000000000002, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x280080, 0x0) ioctl$RTC_VL_READ(r0, 0x80047013, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x15, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000003200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x680, 0x478, 0x210, 0x478, 0x0, 0x340, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x6, 0x0, {[{{@uncond, 0x0, 0xc8, 0x108}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "3c745d713ded54eb04d1bcfe4ec5e3722f760ca03b47ed1d735abcf07e43"}}, {{@uncond, 0x0, 0xc8, 0x108}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3, 0x38000, @ipv6=@rand_addr="f65360ce35d79792c798d9967e3df2d3", 0x4e21}}}, {{@ipv6={@empty, @mcast1, [0xffffff00, 0xffffff00, 0xff, 0xff000000], [0xff, 0x0, 0x17fffff01, 0xffffffff], 'rose0\x00', 'ipddp0\x00', {}, {}, 0x67, 0x9, 0x4, 0x1}, 0x0, 0xf0, 0x130, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0xe}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x5, 0x5, @ipv6=@ipv4={[], [], @empty}, 0x4e21}}}, {{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@ipv6header={0x28, 'ipv6header\x00', 0x0, {0x40, 0x20, 0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@multicast2, @ipv6=@empty, 0x2e, 0x26, 0x9}}}, {{@ipv6={@mcast1, @remote, [0xffffffff, 0xff000000, 0x7f000080, 0xff000000], [0xffffff00, 0xffffff00], 'ip6tnl0\x00', 'ip6tnl0\x00', {}, {}, 0xff, 0x1, 0x0, 0x63}, 0x0, 0xf0, 0x138, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@empty, @ipv4=@local, 0x37, 0x3b, 0x1}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6e0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000007cc0)=[{{&(0x7f00000002c0)=@caif=@dbg, 0x80, &(0x7f0000000840)=[{&(0x7f0000000340)=""/251, 0xfb}, {&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000007ec0)=""/108, 0x6c}, {&(0x7f0000000600)=""/241, 0xf1}, {0x0}], 0x5, &(0x7f0000000b40)=""/234, 0xea}, 0xd9b9}, {{&(0x7f0000000c40)=@pppol2tpv3, 0x80, &(0x7f0000002340)=[{&(0x7f0000000cc0)=""/63, 0x3f}, {&(0x7f0000000d40)=""/232, 0xe8}, {&(0x7f0000000e40)=""/77, 0x4d}, {&(0x7f0000000ec0)=""/150, 0x96}, {&(0x7f0000000f80)=""/116, 0x74}, {&(0x7f0000001000)=""/212, 0xd4}, {0x0}, {&(0x7f00000012c0)=""/4096, 0x1000}, {0x0}], 0x9, &(0x7f00000000c0)=""/40, 0x28}, 0x7f}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000002480)=""/199, 0xc7}, {&(0x7f00000008c0)=""/55, 0x37}], 0x2, &(0x7f00000025c0)=""/157, 0x9d}, 0x9}, {{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002680)=""/238, 0xee}, {&(0x7f0000002780)=""/37, 0x25}, {&(0x7f00000027c0)=""/240, 0xf0}, {&(0x7f00000028c0)=""/10, 0xa}, {&(0x7f0000002900)=""/202, 0xca}, {&(0x7f0000002a00)=""/247, 0xf7}, {0x0}], 0x7, &(0x7f0000002c80)=""/184, 0xb8}, 0x7}, {{&(0x7f0000002d40)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f0000003040)=[{&(0x7f0000002dc0)=""/18, 0x12}, {&(0x7f0000002e00)=""/213, 0xd5}, {&(0x7f0000002f00)=""/62, 0x3e}, {0x0}, {0x0}, {&(0x7f0000002fc0)=""/31, 0x1f}, {0x0}], 0x7, &(0x7f00000030c0)=""/191, 0xbf}, 0x3}, {{&(0x7f0000003180)=@vsock, 0x80, &(0x7f0000004400)=[{&(0x7f0000007f40)=""/215, 0xd7}, {&(0x7f0000004300)=""/34, 0x22}, {&(0x7f0000004340)=""/28, 0x1c}, {&(0x7f0000004380)=""/108, 0x6c}], 0x4, &(0x7f0000004480)=""/222, 0xde}, 0x6}, {{&(0x7f0000004580)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000004a80)=[{&(0x7f0000004600)=""/120, 0x78}, {&(0x7f0000004700)=""/167, 0xa7}, {&(0x7f0000004800)=""/131, 0x83}, {0x0}, {&(0x7f0000004980)=""/212, 0xd4}], 0x5}, 0x8c2}, {{&(0x7f0000004b00)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000006cc0)=""/4096, 0x1000}, 0x52}], 0x8, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) write$UHID_DESTROY(r5, &(0x7f00000001c0), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x10001, 0xffff}, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x1) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000900)="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", 0x223, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 17:07:25 executing program 3: socket$packet(0x11, 0x1000000000000002, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x280080, 0x0) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000100)) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x15, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000003200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x680, 0x478, 0x210, 0x478, 0x0, 0x340, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x6, &(0x7f0000000580), {[{{@uncond, 0x0, 0xc8, 0x108}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "3c745d713ded54eb04d1bcfe4ec5e3722f760ca03b47ed1d735abcf07e43"}}, {{@uncond, 0x0, 0xc8, 0x108}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3, 0x38000, @ipv6=@rand_addr="f65360ce35d79792c798d9967e3df2d3", 0x4e21}}}, {{@ipv6={@empty, @mcast1, [0xffffff00, 0xffffff00, 0xff, 0xff000000], [0xff, 0x0, 0x17fffff01, 0xffffffff], 'rose0\x00', 'ipddp0\x00', {}, {}, 0x67, 0x9, 0x4, 0x1}, 0x0, 0xf0, 0x130, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0xe}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x5, 0x5, @ipv6=@ipv4={[], [], @empty}, 0x4e21}}}, {{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@ipv6header={0x28, 'ipv6header\x00', 0x0, {0x40, 0x20, 0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@multicast2, @ipv6=@empty, 0x2e, 0x26, 0x9}}}, {{@ipv6={@mcast1, @remote, [0xffffffff, 0xff000000, 0x7f000080, 0xff000000], [0xffffff00, 0xffffff00], 'ip6tnl0\x00', 'ip6tnl0\x00', {}, {}, 0xff, 0x1, 0x0, 0x63}, 0x0, 0xf0, 0x138, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@empty, @ipv4=@local, 0x37, 0x3b, 0x1}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6e0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000007cc0)=[{{&(0x7f00000002c0)=@caif=@dbg, 0x80, &(0x7f0000000840)=[{&(0x7f0000000340)=""/251, 0xfb}, {&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000007ec0)=""/108, 0x6c}, {&(0x7f0000000600)=""/241, 0xf1}, {0x0}], 0x5, &(0x7f0000000b40)=""/234, 0xea}, 0xd9b9}, {{&(0x7f0000000c40)=@pppol2tpv3, 0x80, &(0x7f0000002340)=[{&(0x7f0000000cc0)=""/63, 0x3f}, {&(0x7f0000000d40)=""/232, 0xe8}, {&(0x7f0000000e40)=""/77, 0x4d}, {&(0x7f0000000ec0)=""/150, 0x96}, {&(0x7f0000000f80)=""/116, 0x74}, {&(0x7f0000001000)=""/212, 0xd4}, {0x0}, {&(0x7f00000012c0)=""/4096, 0x1000}, {0x0}], 0x9, &(0x7f00000000c0)=""/40, 0x28}, 0x7f}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000002480)=""/199, 0xc7}, {&(0x7f00000008c0)=""/55, 0x37}], 0x2, &(0x7f00000025c0)=""/157, 0x9d}, 0x9}, {{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002680)=""/238, 0xee}, {&(0x7f0000002780)=""/37, 0x25}, {&(0x7f00000027c0)=""/240, 0xf0}, {&(0x7f00000028c0)=""/10, 0xa}, {&(0x7f0000002900)=""/202, 0xca}, {&(0x7f0000002a00)=""/247, 0xf7}, {0x0}], 0x7, &(0x7f0000002c80)=""/184, 0xb8}, 0x7}, {{&(0x7f0000002d40)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f0000003040)=[{&(0x7f0000002dc0)=""/18, 0x12}, {&(0x7f0000002e00)=""/213, 0xd5}, {&(0x7f0000002f00)=""/62, 0x3e}, {0x0}, {0x0}, {0x0}, {&(0x7f0000003000)}], 0x7, &(0x7f00000030c0)=""/191, 0xbf}, 0x3}, {{&(0x7f0000003180)=@vsock, 0x80, &(0x7f0000004400)=[{&(0x7f0000007f40)=""/215, 0xd7}, {&(0x7f0000004300)=""/34, 0x22}, {&(0x7f0000004340)=""/28, 0x1c}, {&(0x7f0000004380)=""/108, 0x6c}], 0x4, &(0x7f0000004480)=""/222, 0xde}, 0x6}, {{&(0x7f0000004580)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000004a80)=[{&(0x7f0000004600)=""/120, 0x78}, {&(0x7f0000004700)=""/167, 0xa7}, {&(0x7f0000004800)=""/131, 0x83}, {0x0}, {&(0x7f0000004980)=""/212, 0xd4}], 0x5}, 0x8c2}, {{&(0x7f0000004b00)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000006cc0)=""/4096, 0x1000}, 0x52}], 0x8, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) write$UHID_DESTROY(r5, &(0x7f00000001c0), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x10001, 0xffff}, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x1) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000900)="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", 0x223, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 17:07:25 executing program 1: socket$packet(0x11, 0x1000000000000002, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x280080, 0x0) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000100)) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x15, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, 0x0, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000007cc0)=[{{&(0x7f00000002c0)=@caif=@dbg, 0x80, &(0x7f0000000840)=[{&(0x7f0000000340)=""/251, 0xfb}, {&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000007ec0)=""/108, 0x6c}, {&(0x7f0000000600)=""/241, 0xf1}, {0x0}], 0x5, &(0x7f0000000b40)=""/234, 0xea}, 0xd9b9}, {{&(0x7f0000000c40)=@pppol2tpv3, 0x80, &(0x7f0000002340)=[{&(0x7f0000000cc0)=""/63, 0x3f}, {&(0x7f0000000d40)=""/232, 0xe8}, {&(0x7f0000000e40)=""/77, 0x4d}, {&(0x7f0000000ec0)=""/150, 0x96}, {&(0x7f0000000f80)=""/116, 0x74}, {&(0x7f0000001000)=""/212, 0xd4}, {&(0x7f00000012c0)=""/4096, 0x1000}, {0x0}], 0x8, &(0x7f00000000c0)=""/40, 0x28}, 0x7f}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000002480)=""/199, 0xc7}, {&(0x7f00000008c0)=""/55, 0x37}], 0x2, &(0x7f00000025c0)=""/157, 0x9d}, 0x9}, {{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002680)=""/238, 0xee}, {&(0x7f0000002780)=""/37, 0x25}, {&(0x7f00000027c0)=""/240, 0xf0}, {&(0x7f00000028c0)=""/10, 0xa}, {&(0x7f0000002900)=""/202, 0xca}, {&(0x7f0000002a00)=""/247, 0xf7}, {0x0}], 0x7, &(0x7f0000002c80)=""/184, 0xb8}, 0x7}, {{&(0x7f0000002d40)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f0000003040)=[{&(0x7f0000002dc0)=""/18, 0x12}, {&(0x7f0000002e00)=""/213, 0xd5}, {&(0x7f0000002f00)=""/62, 0x3e}, {0x0}, {0x0}, {&(0x7f0000002fc0)=""/31, 0x1f}, {&(0x7f0000003000)}], 0x7, &(0x7f00000030c0)=""/191, 0xbf}, 0x3}, {{&(0x7f0000003180)=@vsock, 0x80, &(0x7f0000004400)=[{&(0x7f0000007f40)=""/215, 0xd7}, {&(0x7f0000004300)=""/34, 0x22}, {&(0x7f0000004340)=""/28, 0x1c}, {&(0x7f0000004380)=""/108, 0x6c}], 0x4, &(0x7f0000004480)=""/222, 0xde}, 0x6}, {{&(0x7f0000004580)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000004a80)=[{&(0x7f0000004600)=""/120, 0x78}, {&(0x7f0000004700)=""/167, 0xa7}, {&(0x7f0000004800)=""/131, 0x83}, {0x0}, {&(0x7f0000004980)=""/212, 0xd4}], 0x5}, 0x8c2}, {{&(0x7f0000004b00)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000006cc0)=""/4096, 0x1000}, 0x52}], 0x8, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) write$UHID_DESTROY(r5, &(0x7f00000001c0), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x10001, 0xffff}, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x1) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000900)="585ccbc4ed83b836c1a6474914dc5500b66147b3c7218a91690000000042e3d35228897501f93191b076ac446ff0022b8753a1fa748c569f435fb3bae96efb74b50ec93c2db8eae3198a29e5c0cfc60000ce0637cef580b4ec61221adf59be045b70e48884ca000018cea71fcfed06fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff33c1e8e036e5031949762d009d308bd73f477252d0000000000004000000000000000000000000000000000195e23fb4430a9a4c2850b6380a743d6ea0c3b121f66c716d746aa81c301621b7662c06aae720b872d4b7828e3b48522c673aa6cb366d4201e2aee3261eb52f14533b7a54203cf9a4fa587c0385cdba539e9bd34717b0dfab09db7b064fbe2ecf9f40fa3a4015d0d0db3f9d562686fcdc3342c88c6f1b6f11449f8aeabf54c5533ec6acc2270d41713ae1538256af3719a07f55223a6eaa7c1eae5d6efa12fe95e2b0f1c500b28c5c76e731d5250e395526d04063718f448e62d4dd7cefeed6b72b31b894093aa37337784c00d68a4185f349e41455f12d31aa2d0ff79a4d69d97421a0042f0c7a664a8c4945104b25dc49be950c5af7405b86482d7314fcc3a0ad5eb24268ccd24a2996019f7c006a0b3c39c7b98c5a5406a2e4ff6d9c0ce12c4251756a667b4731c4b0eb5dc7d4381fecf196c4404b54c3c11c48f09734d9a6842f52d3307a688208b7a4681b101e1abe5fecfca1f464c03e933cbd15ab589ccd3c559542355190522a712b8f5128a6a00", 0x223, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 17:07:25 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x413e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000003a00fd0300000000001000000af0"], 0x1}}, 0x0) r0 = socket(0x10, 0x800000000080003, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000380)=[@op, @op]}], 0x4924aa4, 0x0) 17:07:25 executing program 0: 17:07:25 executing program 0: [ 516.080183] protocol 88fb is buggy, dev hsr_slave_0 [ 516.085304] protocol 88fb is buggy, dev hsr_slave_1 17:07:25 executing program 1: socket$packet(0x11, 0x1000000000000002, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x280080, 0x0) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000100)) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x15, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, 0x0, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000007cc0)=[{{&(0x7f00000002c0)=@caif=@dbg, 0x80, &(0x7f0000000840)=[{&(0x7f0000000340)=""/251, 0xfb}, {&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000007ec0)=""/108, 0x6c}, {&(0x7f0000000600)=""/241, 0xf1}, {0x0}], 0x5, &(0x7f0000000b40)=""/234, 0xea}, 0xd9b9}, {{&(0x7f0000000c40)=@pppol2tpv3, 0x80, &(0x7f0000002340)=[{&(0x7f0000000cc0)=""/63, 0x3f}, {&(0x7f0000000d40)=""/232, 0xe8}, {&(0x7f0000000e40)=""/77, 0x4d}, {&(0x7f0000000ec0)=""/150, 0x96}, {&(0x7f0000000f80)=""/116, 0x74}, {&(0x7f0000001000)=""/212, 0xd4}, {&(0x7f00000012c0)=""/4096, 0x1000}, {0x0}], 0x8, &(0x7f00000000c0)=""/40, 0x28}, 0x7f}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000002480)=""/199, 0xc7}, {&(0x7f00000008c0)=""/55, 0x37}], 0x2, &(0x7f00000025c0)=""/157, 0x9d}, 0x9}, {{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002680)=""/238, 0xee}, {&(0x7f0000002780)=""/37, 0x25}, {&(0x7f00000027c0)=""/240, 0xf0}, {&(0x7f00000028c0)=""/10, 0xa}, {&(0x7f0000002900)=""/202, 0xca}, {&(0x7f0000002a00)=""/247, 0xf7}, {0x0}], 0x7, &(0x7f0000002c80)=""/184, 0xb8}, 0x7}, {{&(0x7f0000002d40)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f0000003040)=[{&(0x7f0000002dc0)=""/18, 0x12}, {&(0x7f0000002e00)=""/213, 0xd5}, {&(0x7f0000002f00)=""/62, 0x3e}, {0x0}, {0x0}, {&(0x7f0000002fc0)=""/31, 0x1f}, {&(0x7f0000003000)}], 0x7, &(0x7f00000030c0)=""/191, 0xbf}, 0x3}, {{&(0x7f0000003180)=@vsock, 0x80, &(0x7f0000004400)=[{&(0x7f0000007f40)=""/215, 0xd7}, {&(0x7f0000004300)=""/34, 0x22}, {&(0x7f0000004340)=""/28, 0x1c}, {&(0x7f0000004380)=""/108, 0x6c}], 0x4, &(0x7f0000004480)=""/222, 0xde}, 0x6}, {{&(0x7f0000004580)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000004a80)=[{&(0x7f0000004600)=""/120, 0x78}, {&(0x7f0000004700)=""/167, 0xa7}, {&(0x7f0000004800)=""/131, 0x83}, {0x0}, {&(0x7f0000004980)=""/212, 0xd4}], 0x5}, 0x8c2}, {{&(0x7f0000004b00)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000006cc0)=""/4096, 0x1000}, 0x52}], 0x8, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) write$UHID_DESTROY(r5, &(0x7f00000001c0), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x10001, 0xffff}, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x1) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000900)="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", 0x223, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 17:07:25 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x413e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000003a00fd0300000000001000000af0"], 0x1}}, 0x0) r0 = socket(0x10, 0x800000000080003, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000380)=[@op, @op]}], 0x4924aa4, 0x0) [ 516.480110] protocol 88fb is buggy, dev hsr_slave_0 [ 516.485276] protocol 88fb is buggy, dev hsr_slave_1 [ 516.560139] protocol 88fb is buggy, dev hsr_slave_0 [ 516.565267] protocol 88fb is buggy, dev hsr_slave_1 [ 516.640145] protocol 88fb is buggy, dev hsr_slave_0 [ 516.645314] protocol 88fb is buggy, dev hsr_slave_1 17:07:27 executing program 4: 17:07:27 executing program 2: socket$packet(0x11, 0x1000000000000002, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x280080, 0x0) ioctl$RTC_VL_READ(r0, 0x80047013, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x15, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000003200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x680, 0x478, 0x210, 0x478, 0x0, 0x340, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x6, 0x0, {[{{@uncond, 0x0, 0xc8, 0x108}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "3c745d713ded54eb04d1bcfe4ec5e3722f760ca03b47ed1d735abcf07e43"}}, {{@uncond, 0x0, 0xc8, 0x108}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3, 0x38000, @ipv6=@rand_addr="f65360ce35d79792c798d9967e3df2d3", 0x4e21}}}, {{@ipv6={@empty, @mcast1, [0xffffff00, 0xffffff00, 0xff, 0xff000000], [0xff, 0x0, 0x17fffff01, 0xffffffff], 'rose0\x00', 'ipddp0\x00', {}, {}, 0x67, 0x9, 0x4, 0x1}, 0x0, 0xf0, 0x130, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0xe}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x5, 0x5, @ipv6=@ipv4={[], [], @empty}, 0x4e21}}}, {{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@ipv6header={0x28, 'ipv6header\x00', 0x0, {0x40, 0x20, 0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@multicast2, @ipv6=@empty, 0x2e, 0x26, 0x9}}}, {{@ipv6={@mcast1, @remote, [0xffffffff, 0xff000000, 0x7f000080, 0xff000000], [0xffffff00, 0xffffff00], 'ip6tnl0\x00', 'ip6tnl0\x00', {}, {}, 0xff, 0x1, 0x0, 0x63}, 0x0, 0xf0, 0x138, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@empty, @ipv4=@local, 0x37, 0x3b, 0x1}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6e0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000007cc0)=[{{&(0x7f00000002c0)=@caif=@dbg, 0x80, &(0x7f0000000840)=[{&(0x7f0000000340)=""/251, 0xfb}, {&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000007ec0)=""/108, 0x6c}, {&(0x7f0000000600)=""/241, 0xf1}, {0x0}], 0x5, &(0x7f0000000b40)=""/234, 0xea}, 0xd9b9}, {{&(0x7f0000000c40)=@pppol2tpv3, 0x80, &(0x7f0000002340)=[{&(0x7f0000000cc0)=""/63, 0x3f}, {&(0x7f0000000d40)=""/232, 0xe8}, {&(0x7f0000000e40)=""/77, 0x4d}, {&(0x7f0000000ec0)=""/150, 0x96}, {&(0x7f0000000f80)=""/116, 0x74}, {&(0x7f0000001000)=""/212, 0xd4}, {0x0}, {&(0x7f00000012c0)=""/4096, 0x1000}, {0x0}], 0x9, &(0x7f00000000c0)=""/40, 0x28}, 0x7f}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000002480)=""/199, 0xc7}, {&(0x7f00000008c0)=""/55, 0x37}], 0x2, &(0x7f00000025c0)=""/157, 0x9d}, 0x9}, {{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002680)=""/238, 0xee}, {&(0x7f0000002780)=""/37, 0x25}, {&(0x7f00000027c0)=""/240, 0xf0}, {&(0x7f00000028c0)=""/10, 0xa}, {&(0x7f0000002900)=""/202, 0xca}, {&(0x7f0000002a00)=""/247, 0xf7}, {0x0}], 0x7, &(0x7f0000002c80)=""/184, 0xb8}, 0x7}, {{&(0x7f0000002d40)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f0000003040)=[{&(0x7f0000002dc0)=""/18, 0x12}, {&(0x7f0000002e00)=""/213, 0xd5}, {&(0x7f0000002f00)=""/62, 0x3e}, {0x0}, {0x0}, {&(0x7f0000002fc0)=""/31, 0x1f}, {0x0}], 0x7, &(0x7f00000030c0)=""/191, 0xbf}, 0x3}, {{&(0x7f0000003180)=@vsock, 0x80, &(0x7f0000004400)=[{&(0x7f0000007f40)=""/215, 0xd7}, {&(0x7f0000004300)=""/34, 0x22}, {&(0x7f0000004340)=""/28, 0x1c}, {&(0x7f0000004380)=""/108, 0x6c}], 0x4, &(0x7f0000004480)=""/222, 0xde}, 0x6}, {{&(0x7f0000004580)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000004a80)=[{&(0x7f0000004600)=""/120, 0x78}, {&(0x7f0000004700)=""/167, 0xa7}, {&(0x7f0000004800)=""/131, 0x83}, {0x0}, {&(0x7f0000004980)=""/212, 0xd4}], 0x5}, 0x8c2}, {{&(0x7f0000004b00)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000006cc0)=""/4096, 0x1000}, 0x52}], 0x8, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) write$UHID_DESTROY(r5, &(0x7f00000001c0), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x10001, 0xffff}, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x1) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000900)="585ccbc4ed83b836c1a6474914dc5500b66147b3c7218a91690000000042e3d35228897501f93191b076ac446ff0022b8753a1fa748c569f435fb3bae96efb74b50ec93c2db8eae3198a29e5c0cfc60000ce0637cef580b4ec61221adf59be045b70e48884ca000018cea71fcfed06fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff33c1e8e036e5031949762d009d308bd73f477252d0000000000004000000000000000000000000000000000195e23fb4430a9a4c2850b6380a743d6ea0c3b121f66c716d746aa81c301621b7662c06aae720b872d4b7828e3b48522c673aa6cb366d4201e2aee3261eb52f14533b7a54203cf9a4fa587c0385cdba539e9bd34717b0dfab09db7b064fbe2ecf9f40fa3a4015d0d0db3f9d562686fcdc3342c88c6f1b6f11449f8aeabf54c5533ec6acc2270d41713ae1538256af3719a07f55223a6eaa7c1eae5d6efa12fe95e2b0f1c500b28c5c76e731d5250e395526d04063718f448e62d4dd7cefeed6b72b31b894093aa37337784c00d68a4185f349e41455f12d31aa2d0ff79a4d69d97421a0042f0c7a664a8c4945104b25dc49be950c5af7405b86482d7314fcc3a0ad5eb24268ccd24a2996019f7c006a0b3c39c7b98c5a5406a2e4ff6d9c0ce12c4251756a667b4731c4b0eb5dc7d4381fecf196c4404b54c3c11c48f09734d9a6842f52d3307a688208b7a4681b101e1abe5fecfca1f464c03e933cbd15ab589ccd3c559542355190522a712b8f5128a6a00", 0x223, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 17:07:27 executing program 3: socket$packet(0x11, 0x1000000000000002, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x280080, 0x0) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000100)) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x15, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000003200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x680, 0x478, 0x210, 0x478, 0x0, 0x340, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x6, &(0x7f0000000580), {[{{@uncond, 0x0, 0xc8, 0x108}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "3c745d713ded54eb04d1bcfe4ec5e3722f760ca03b47ed1d735abcf07e43"}}, {{@uncond, 0x0, 0xc8, 0x108}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3, 0x38000, @ipv6=@rand_addr="f65360ce35d79792c798d9967e3df2d3", 0x4e21}}}, {{@ipv6={@empty, @mcast1, [0xffffff00, 0xffffff00, 0xff, 0xff000000], [0xff, 0x0, 0x17fffff01, 0xffffffff], 'rose0\x00', 'ipddp0\x00', {}, {}, 0x67, 0x9, 0x4, 0x1}, 0x0, 0xf0, 0x130, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0xe}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x5, 0x5, @ipv6=@ipv4={[], [], @empty}, 0x4e21}}}, {{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@ipv6header={0x28, 'ipv6header\x00', 0x0, {0x40, 0x20, 0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@multicast2, @ipv6=@empty, 0x2e, 0x26, 0x9}}}, {{@ipv6={@mcast1, @remote, [0xffffffff, 0xff000000, 0x7f000080, 0xff000000], [0xffffff00, 0xffffff00], 'ip6tnl0\x00', 'ip6tnl0\x00', {}, {}, 0xff, 0x1, 0x0, 0x63}, 0x0, 0xf0, 0x138, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@empty, @ipv4=@local, 0x37, 0x3b, 0x1}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6e0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000007cc0)=[{{&(0x7f00000002c0)=@caif=@dbg, 0x80, &(0x7f0000000840)=[{&(0x7f0000000340)=""/251, 0xfb}, {&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000007ec0)=""/108, 0x6c}, {&(0x7f0000000600)=""/241, 0xf1}, {0x0}], 0x5, &(0x7f0000000b40)=""/234, 0xea}, 0xd9b9}, {{&(0x7f0000000c40)=@pppol2tpv3, 0x80, &(0x7f0000002340)=[{&(0x7f0000000cc0)=""/63, 0x3f}, {&(0x7f0000000d40)=""/232, 0xe8}, {&(0x7f0000000e40)=""/77, 0x4d}, {&(0x7f0000000ec0)=""/150, 0x96}, {&(0x7f0000000f80)=""/116, 0x74}, {&(0x7f0000001000)=""/212, 0xd4}, {0x0}, {&(0x7f00000012c0)=""/4096, 0x1000}, {0x0}], 0x9, &(0x7f00000000c0)=""/40, 0x28}, 0x7f}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000002480)=""/199, 0xc7}, {&(0x7f00000008c0)=""/55, 0x37}], 0x2, &(0x7f00000025c0)=""/157, 0x9d}, 0x9}, {{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002680)=""/238, 0xee}, {&(0x7f0000002780)=""/37, 0x25}, {&(0x7f00000027c0)=""/240, 0xf0}, {&(0x7f00000028c0)=""/10, 0xa}, {&(0x7f0000002900)=""/202, 0xca}, {&(0x7f0000002a00)=""/247, 0xf7}, {0x0}], 0x7, &(0x7f0000002c80)=""/184, 0xb8}, 0x7}, {{&(0x7f0000002d40)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f0000003040)=[{&(0x7f0000002dc0)=""/18, 0x12}, {&(0x7f0000002e00)=""/213, 0xd5}, {&(0x7f0000002f00)=""/62, 0x3e}, {0x0}, {&(0x7f0000002fc0)=""/31, 0x1f}, {&(0x7f0000003000)}], 0x6, &(0x7f00000030c0)=""/191, 0xbf}, 0x3}, {{&(0x7f0000003180)=@vsock, 0x80, &(0x7f0000004400)=[{&(0x7f0000007f40)=""/215, 0xd7}, {&(0x7f0000004300)=""/34, 0x22}, {&(0x7f0000004340)=""/28, 0x1c}, {&(0x7f0000004380)=""/108, 0x6c}], 0x4, &(0x7f0000004480)=""/222, 0xde}, 0x6}, {{&(0x7f0000004580)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000004a80)=[{&(0x7f0000004600)=""/120, 0x78}, {&(0x7f0000004700)=""/167, 0xa7}, {&(0x7f0000004800)=""/131, 0x83}, {0x0}, {&(0x7f0000004980)=""/212, 0xd4}], 0x5}, 0x8c2}, {{&(0x7f0000004b00)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000006cc0)=""/4096, 0x1000}, 0x52}], 0x8, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) write$UHID_DESTROY(r5, &(0x7f00000001c0), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x10001, 0xffff}, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x1) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000900)="585ccbc4ed83b836c1a6474914dc5500b66147b3c7218a91690000000042e3d35228897501f93191b076ac446ff0022b8753a1fa748c569f435fb3bae96efb74b50ec93c2db8eae3198a29e5c0cfc60000ce0637cef580b4ec61221adf59be045b70e48884ca000018cea71fcfed06fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff33c1e8e036e5031949762d009d308bd73f477252d0000000000004000000000000000000000000000000000195e23fb4430a9a4c2850b6380a743d6ea0c3b121f66c716d746aa81c301621b7662c06aae720b872d4b7828e3b48522c673aa6cb366d4201e2aee3261eb52f14533b7a54203cf9a4fa587c0385cdba539e9bd34717b0dfab09db7b064fbe2ecf9f40fa3a4015d0d0db3f9d562686fcdc3342c88c6f1b6f11449f8aeabf54c5533ec6acc2270d41713ae1538256af3719a07f55223a6eaa7c1eae5d6efa12fe95e2b0f1c500b28c5c76e731d5250e395526d04063718f448e62d4dd7cefeed6b72b31b894093aa37337784c00d68a4185f349e41455f12d31aa2d0ff79a4d69d97421a0042f0c7a664a8c4945104b25dc49be950c5af7405b86482d7314fcc3a0ad5eb24268ccd24a2996019f7c006a0b3c39c7b98c5a5406a2e4ff6d9c0ce12c4251756a667b4731c4b0eb5dc7d4381fecf196c4404b54c3c11c48f09734d9a6842f52d3307a688208b7a4681b101e1abe5fecfca1f464c03e933cbd15ab589ccd3c559542355190522a712b8f5128a6a00", 0x223, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 17:07:27 executing program 0: 17:07:27 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x413e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000003a00fd0300000000001000000af000"], 0x1}}, 0x0) r0 = socket(0x10, 0x800000000080003, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000380)=[@op, @op]}], 0x4924aa4, 0x0) 17:07:27 executing program 1: socket$packet(0x11, 0x1000000000000002, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x280080, 0x0) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000100)) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x15, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, 0x0, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000007cc0)=[{{&(0x7f00000002c0)=@caif=@dbg, 0x80, &(0x7f0000000840)=[{&(0x7f0000000340)=""/251, 0xfb}, {&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000007ec0)=""/108, 0x6c}, {&(0x7f0000000600)=""/241, 0xf1}, {0x0}], 0x5, &(0x7f0000000b40)=""/234, 0xea}, 0xd9b9}, {{&(0x7f0000000c40)=@pppol2tpv3, 0x80, &(0x7f0000002340)=[{&(0x7f0000000cc0)=""/63, 0x3f}, {&(0x7f0000000d40)=""/232, 0xe8}, {&(0x7f0000000e40)=""/77, 0x4d}, {&(0x7f0000000ec0)=""/150, 0x96}, {&(0x7f0000000f80)=""/116, 0x74}, {&(0x7f0000001000)=""/212, 0xd4}, {&(0x7f00000012c0)=""/4096, 0x1000}, {0x0}], 0x8, &(0x7f00000000c0)=""/40, 0x28}, 0x7f}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000002480)=""/199, 0xc7}, {&(0x7f00000008c0)=""/55, 0x37}], 0x2, &(0x7f00000025c0)=""/157, 0x9d}, 0x9}, {{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002680)=""/238, 0xee}, {&(0x7f0000002780)=""/37, 0x25}, {&(0x7f00000027c0)=""/240, 0xf0}, {&(0x7f00000028c0)=""/10, 0xa}, {&(0x7f0000002900)=""/202, 0xca}, {&(0x7f0000002a00)=""/247, 0xf7}, {0x0}], 0x7, &(0x7f0000002c80)=""/184, 0xb8}, 0x7}, {{&(0x7f0000002d40)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f0000003040)=[{&(0x7f0000002dc0)=""/18, 0x12}, {&(0x7f0000002e00)=""/213, 0xd5}, {&(0x7f0000002f00)=""/62, 0x3e}, {0x0}, {0x0}, {&(0x7f0000002fc0)=""/31, 0x1f}, {&(0x7f0000003000)}], 0x7, &(0x7f00000030c0)=""/191, 0xbf}, 0x3}, {{&(0x7f0000003180)=@vsock, 0x80, &(0x7f0000004400)=[{&(0x7f0000007f40)=""/215, 0xd7}, {&(0x7f0000004300)=""/34, 0x22}, {&(0x7f0000004340)=""/28, 0x1c}, {&(0x7f0000004380)=""/108, 0x6c}], 0x4, &(0x7f0000004480)=""/222, 0xde}, 0x6}, {{&(0x7f0000004580)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000004a80)=[{&(0x7f0000004600)=""/120, 0x78}, {&(0x7f0000004700)=""/167, 0xa7}, {&(0x7f0000004800)=""/131, 0x83}, {0x0}, {&(0x7f0000004980)=""/212, 0xd4}], 0x5}, 0x8c2}, {{&(0x7f0000004b00)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000006cc0)=""/4096, 0x1000}, 0x52}], 0x8, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) write$UHID_DESTROY(r5, &(0x7f00000001c0), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x10001, 0xffff}, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x1) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000900)="585ccbc4ed83b836c1a6474914dc5500b66147b3c7218a91690000000042e3d35228897501f93191b076ac446ff0022b8753a1fa748c569f435fb3bae96efb74b50ec93c2db8eae3198a29e5c0cfc60000ce0637cef580b4ec61221adf59be045b70e48884ca000018cea71fcfed06fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff33c1e8e036e5031949762d009d308bd73f477252d0000000000004000000000000000000000000000000000195e23fb4430a9a4c2850b6380a743d6ea0c3b121f66c716d746aa81c301621b7662c06aae720b872d4b7828e3b48522c673aa6cb366d4201e2aee3261eb52f14533b7a54203cf9a4fa587c0385cdba539e9bd34717b0dfab09db7b064fbe2ecf9f40fa3a4015d0d0db3f9d562686fcdc3342c88c6f1b6f11449f8aeabf54c5533ec6acc2270d41713ae1538256af3719a07f55223a6eaa7c1eae5d6efa12fe95e2b0f1c500b28c5c76e731d5250e395526d04063718f448e62d4dd7cefeed6b72b31b894093aa37337784c00d68a4185f349e41455f12d31aa2d0ff79a4d69d97421a0042f0c7a664a8c4945104b25dc49be950c5af7405b86482d7314fcc3a0ad5eb24268ccd24a2996019f7c006a0b3c39c7b98c5a5406a2e4ff6d9c0ce12c4251756a667b4731c4b0eb5dc7d4381fecf196c4404b54c3c11c48f09734d9a6842f52d3307a688208b7a4681b101e1abe5fecfca1f464c03e933cbd15ab589ccd3c559542355190522a712b8f5128a6a00", 0x223, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 17:07:27 executing program 4: 17:07:27 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x413e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000003a00fd0300000000001000000af000"], 0x1}}, 0x0) r0 = socket(0x10, 0x800000000080003, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000380)=[@op, @op]}], 0x4924aa4, 0x0) 17:07:27 executing program 0: 17:07:27 executing program 4: 17:07:27 executing program 4: 17:07:27 executing program 0: 17:07:27 executing program 1: socket$packet(0x11, 0x1000000000000002, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x280080, 0x0) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000100)) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x15, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, 0x0, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000007cc0)=[{{&(0x7f00000002c0)=@caif=@dbg, 0x80, &(0x7f0000000840)=[{&(0x7f0000000340)=""/251, 0xfb}, {&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000007ec0)=""/108, 0x6c}, {&(0x7f0000000600)=""/241, 0xf1}, {0x0}], 0x5, &(0x7f0000000b40)=""/234, 0xea}, 0xd9b9}, {{&(0x7f0000000c40)=@pppol2tpv3, 0x80, &(0x7f0000002340)=[{&(0x7f0000000cc0)=""/63, 0x3f}, {&(0x7f0000000d40)=""/232, 0xe8}, {&(0x7f0000000e40)=""/77, 0x4d}, {&(0x7f0000000ec0)=""/150, 0x96}, {&(0x7f0000000f80)=""/116, 0x74}, {0x0}, {&(0x7f00000012c0)=""/4096, 0x1000}, {0x0}], 0x8, &(0x7f00000000c0)=""/40, 0x28}, 0x7f}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000002480)=""/199, 0xc7}, {&(0x7f00000008c0)=""/55, 0x37}], 0x2, &(0x7f00000025c0)=""/157, 0x9d}, 0x9}, {{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002680)=""/238, 0xee}, {&(0x7f0000002780)=""/37, 0x25}, {&(0x7f00000027c0)=""/240, 0xf0}, {&(0x7f00000028c0)=""/10, 0xa}, {&(0x7f0000002900)=""/202, 0xca}, {&(0x7f0000002a00)=""/247, 0xf7}, {0x0}], 0x7, &(0x7f0000002c80)=""/184, 0xb8}, 0x7}, {{&(0x7f0000002d40)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f0000003040)=[{&(0x7f0000002dc0)=""/18, 0x12}, {&(0x7f0000002e00)=""/213, 0xd5}, {&(0x7f0000002f00)=""/62, 0x3e}, {0x0}, {0x0}, {&(0x7f0000002fc0)=""/31, 0x1f}, {&(0x7f0000003000)}], 0x7, &(0x7f00000030c0)=""/191, 0xbf}, 0x3}, {{&(0x7f0000003180)=@vsock, 0x80, &(0x7f0000004400)=[{&(0x7f0000007f40)=""/215, 0xd7}, {&(0x7f0000004300)=""/34, 0x22}, {&(0x7f0000004340)=""/28, 0x1c}, {&(0x7f0000004380)=""/108, 0x6c}], 0x4, &(0x7f0000004480)=""/222, 0xde}, 0x6}, {{&(0x7f0000004580)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000004a80)=[{&(0x7f0000004600)=""/120, 0x78}, {&(0x7f0000004700)=""/167, 0xa7}, {&(0x7f0000004800)=""/131, 0x83}, {0x0}, {&(0x7f0000004980)=""/212, 0xd4}], 0x5}, 0x8c2}, {{&(0x7f0000004b00)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000006cc0)=""/4096, 0x1000}, 0x52}], 0x8, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) write$UHID_DESTROY(r5, &(0x7f00000001c0), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x10001, 0xffff}, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x1) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000900)="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", 0x223, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 17:07:27 executing program 2: socket$packet(0x11, 0x1000000000000002, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x280080, 0x0) ioctl$RTC_VL_READ(r0, 0x80047013, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x15, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000003200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x680, 0x478, 0x210, 0x478, 0x0, 0x340, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x6, 0x0, {[{{@uncond, 0x0, 0xc8, 0x108}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "3c745d713ded54eb04d1bcfe4ec5e3722f760ca03b47ed1d735abcf07e43"}}, {{@uncond, 0x0, 0xc8, 0x108}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3, 0x38000, @ipv6=@rand_addr="f65360ce35d79792c798d9967e3df2d3", 0x4e21}}}, {{@ipv6={@empty, @mcast1, [0xffffff00, 0xffffff00, 0xff, 0xff000000], [0xff, 0x0, 0x17fffff01, 0xffffffff], 'rose0\x00', 'ipddp0\x00', {}, {}, 0x67, 0x9, 0x4, 0x1}, 0x0, 0xf0, 0x130, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0xe}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x5, 0x5, @ipv6=@ipv4={[], [], @empty}, 0x4e21}}}, {{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@ipv6header={0x28, 'ipv6header\x00', 0x0, {0x40, 0x20, 0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@multicast2, @ipv6=@empty, 0x2e, 0x26, 0x9}}}, {{@ipv6={@mcast1, @remote, [0xffffffff, 0xff000000, 0x7f000080, 0xff000000], [0xffffff00, 0xffffff00], 'ip6tnl0\x00', 'ip6tnl0\x00', {}, {}, 0xff, 0x1, 0x0, 0x63}, 0x0, 0xf0, 0x138, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@empty, @ipv4=@local, 0x37, 0x3b, 0x1}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6e0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000007cc0)=[{{&(0x7f00000002c0)=@caif=@dbg, 0x80, &(0x7f0000000840)=[{&(0x7f0000000340)=""/251, 0xfb}, {&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000007ec0)=""/108, 0x6c}, {&(0x7f0000000600)=""/241, 0xf1}, {0x0}], 0x5, &(0x7f0000000b40)=""/234, 0xea}, 0xd9b9}, {{&(0x7f0000000c40)=@pppol2tpv3, 0x80, &(0x7f0000002340)=[{&(0x7f0000000cc0)=""/63, 0x3f}, {&(0x7f0000000d40)=""/232, 0xe8}, {&(0x7f0000000e40)=""/77, 0x4d}, {&(0x7f0000000ec0)=""/150, 0x96}, {&(0x7f0000000f80)=""/116, 0x74}, {&(0x7f0000001000)=""/212, 0xd4}, {0x0}, {&(0x7f00000012c0)=""/4096, 0x1000}, {0x0}], 0x9, &(0x7f00000000c0)=""/40, 0x28}, 0x7f}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000002480)=""/199, 0xc7}, {&(0x7f00000008c0)=""/55, 0x37}], 0x2, &(0x7f00000025c0)=""/157, 0x9d}, 0x9}, {{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002680)=""/238, 0xee}, {&(0x7f0000002780)=""/37, 0x25}, {&(0x7f00000027c0)=""/240, 0xf0}, {&(0x7f00000028c0)=""/10, 0xa}, {&(0x7f0000002900)=""/202, 0xca}, {&(0x7f0000002a00)=""/247, 0xf7}, {0x0}], 0x7, &(0x7f0000002c80)=""/184, 0xb8}, 0x7}, {{&(0x7f0000002d40)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f0000003040)=[{&(0x7f0000002dc0)=""/18, 0x12}, {&(0x7f0000002e00)=""/213, 0xd5}, {&(0x7f0000002f00)=""/62, 0x3e}, {0x0}, {0x0}, {&(0x7f0000003000)}], 0x6, &(0x7f00000030c0)=""/191, 0xbf}, 0x3}, {{&(0x7f0000003180)=@vsock, 0x80, &(0x7f0000004400)=[{&(0x7f0000007f40)=""/215, 0xd7}, {&(0x7f0000004300)=""/34, 0x22}, {&(0x7f0000004340)=""/28, 0x1c}, {&(0x7f0000004380)=""/108, 0x6c}], 0x4, &(0x7f0000004480)=""/222, 0xde}, 0x6}, {{&(0x7f0000004580)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000004a80)=[{&(0x7f0000004600)=""/120, 0x78}, {&(0x7f0000004700)=""/167, 0xa7}, {&(0x7f0000004800)=""/131, 0x83}, {0x0}, {&(0x7f0000004980)=""/212, 0xd4}], 0x5}, 0x8c2}, {{&(0x7f0000004b00)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000006cc0)=""/4096, 0x1000}, 0x52}], 0x8, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) write$UHID_DESTROY(r5, &(0x7f00000001c0), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x10001, 0xffff}, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x1) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000900)="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", 0x223, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 17:07:27 executing program 3: socket$packet(0x11, 0x1000000000000002, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x280080, 0x0) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000100)) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x15, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000003200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x680, 0x478, 0x210, 0x478, 0x0, 0x340, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x6, &(0x7f0000000580), {[{{@uncond, 0x0, 0xc8, 0x108}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "3c745d713ded54eb04d1bcfe4ec5e3722f760ca03b47ed1d735abcf07e43"}}, {{@uncond, 0x0, 0xc8, 0x108}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3, 0x38000, @ipv6=@rand_addr="f65360ce35d79792c798d9967e3df2d3", 0x4e21}}}, {{@ipv6={@empty, @mcast1, [0xffffff00, 0xffffff00, 0xff, 0xff000000], [0xff, 0x0, 0x17fffff01, 0xffffffff], 'rose0\x00', 'ipddp0\x00', {}, {}, 0x67, 0x9, 0x4, 0x1}, 0x0, 0xf0, 0x130, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0xe}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x5, 0x5, @ipv6=@ipv4={[], [], @empty}, 0x4e21}}}, {{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@ipv6header={0x28, 'ipv6header\x00', 0x0, {0x40, 0x20, 0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@multicast2, @ipv6=@empty, 0x2e, 0x26, 0x9}}}, {{@ipv6={@mcast1, @remote, [0xffffffff, 0xff000000, 0x7f000080, 0xff000000], [0xffffff00, 0xffffff00], 'ip6tnl0\x00', 'ip6tnl0\x00', {}, {}, 0xff, 0x1, 0x0, 0x63}, 0x0, 0xf0, 0x138, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@empty, @ipv4=@local, 0x37, 0x3b, 0x1}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6e0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000007cc0)=[{{&(0x7f00000002c0)=@caif=@dbg, 0x80, &(0x7f0000000840)=[{&(0x7f0000000340)=""/251, 0xfb}, {&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000007ec0)=""/108, 0x6c}, {&(0x7f0000000600)=""/241, 0xf1}, {0x0}], 0x5, &(0x7f0000000b40)=""/234, 0xea}, 0xd9b9}, {{&(0x7f0000000c40)=@pppol2tpv3, 0x80, &(0x7f0000002340)=[{&(0x7f0000000cc0)=""/63, 0x3f}, {&(0x7f0000000d40)=""/232, 0xe8}, {&(0x7f0000000e40)=""/77, 0x4d}, {&(0x7f0000000ec0)=""/150, 0x96}, {&(0x7f0000000f80)=""/116, 0x74}, {&(0x7f0000001000)=""/212, 0xd4}, {0x0}, {&(0x7f00000012c0)=""/4096, 0x1000}, {0x0}], 0x9, &(0x7f00000000c0)=""/40, 0x28}, 0x7f}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000002480)=""/199, 0xc7}, {&(0x7f00000008c0)=""/55, 0x37}], 0x2, &(0x7f00000025c0)=""/157, 0x9d}, 0x9}, {{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002680)=""/238, 0xee}, {&(0x7f0000002780)=""/37, 0x25}, {&(0x7f00000027c0)=""/240, 0xf0}, {&(0x7f00000028c0)=""/10, 0xa}, {&(0x7f0000002900)=""/202, 0xca}, {&(0x7f0000002a00)=""/247, 0xf7}, {0x0}], 0x7, &(0x7f0000002c80)=""/184, 0xb8}, 0x7}, {{&(0x7f0000002d40)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f0000003040)=[{&(0x7f0000002dc0)=""/18, 0x12}, {&(0x7f0000002e00)=""/213, 0xd5}, {&(0x7f0000002f00)=""/62, 0x3e}, {0x0}, {&(0x7f0000002fc0)=""/31, 0x1f}, {&(0x7f0000003000)}], 0x6, &(0x7f00000030c0)=""/191, 0xbf}, 0x3}, {{&(0x7f0000003180)=@vsock, 0x80, &(0x7f0000004400)=[{&(0x7f0000007f40)=""/215, 0xd7}, {&(0x7f0000004300)=""/34, 0x22}, {&(0x7f0000004340)=""/28, 0x1c}, {&(0x7f0000004380)=""/108, 0x6c}], 0x4, &(0x7f0000004480)=""/222, 0xde}, 0x6}, {{&(0x7f0000004580)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000004a80)=[{&(0x7f0000004600)=""/120, 0x78}, {&(0x7f0000004700)=""/167, 0xa7}, {&(0x7f0000004800)=""/131, 0x83}, {0x0}, {&(0x7f0000004980)=""/212, 0xd4}], 0x5}, 0x8c2}, {{&(0x7f0000004b00)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000006cc0)=""/4096, 0x1000}, 0x52}], 0x8, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) write$UHID_DESTROY(r5, &(0x7f00000001c0), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x10001, 0xffff}, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x1) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000900)="585ccbc4ed83b836c1a6474914dc5500b66147b3c7218a91690000000042e3d35228897501f93191b076ac446ff0022b8753a1fa748c569f435fb3bae96efb74b50ec93c2db8eae3198a29e5c0cfc60000ce0637cef580b4ec61221adf59be045b70e48884ca000018cea71fcfed06fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff33c1e8e036e5031949762d009d308bd73f477252d0000000000004000000000000000000000000000000000195e23fb4430a9a4c2850b6380a743d6ea0c3b121f66c716d746aa81c301621b7662c06aae720b872d4b7828e3b48522c673aa6cb366d4201e2aee3261eb52f14533b7a54203cf9a4fa587c0385cdba539e9bd34717b0dfab09db7b064fbe2ecf9f40fa3a4015d0d0db3f9d562686fcdc3342c88c6f1b6f11449f8aeabf54c5533ec6acc2270d41713ae1538256af3719a07f55223a6eaa7c1eae5d6efa12fe95e2b0f1c500b28c5c76e731d5250e395526d04063718f448e62d4dd7cefeed6b72b31b894093aa37337784c00d68a4185f349e41455f12d31aa2d0ff79a4d69d97421a0042f0c7a664a8c4945104b25dc49be950c5af7405b86482d7314fcc3a0ad5eb24268ccd24a2996019f7c006a0b3c39c7b98c5a5406a2e4ff6d9c0ce12c4251756a667b4731c4b0eb5dc7d4381fecf196c4404b54c3c11c48f09734d9a6842f52d3307a688208b7a4681b101e1abe5fecfca1f464c03e933cbd15ab589ccd3c559542355190522a712b8f5128a6a00", 0x223, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 17:07:27 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x413e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000003a00fd0300000000001000000af000"], 0x1}}, 0x0) r0 = socket(0x10, 0x800000000080003, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000380)=[@op, @op]}], 0x4924aa4, 0x0) 17:07:27 executing program 0: 17:07:27 executing program 4: 17:07:27 executing program 4: ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) syz_extract_tcp_res(0x0, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @random="c69a6b4c3e77", [], {@ipv6={0x86dd, {0x0, 0x6, "8000", 0x14, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 17:07:28 executing program 4: ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) syz_extract_tcp_res(0x0, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @random="c69a6b4c3e77", [], {@ipv6={0x86dd, {0x0, 0x6, "8000", 0x14, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 17:07:28 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x40541, 0x0) write$FUSE_POLL(r0, &(0x7f0000000040)={0x18}, 0x18) 17:07:28 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x413e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x2a4, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000003a00fd0300000000001000000af00000"], 0x14}}, 0x0) r0 = socket(0x0, 0x800000000080003, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000380)=[@op, @op]}], 0x4924aa4, 0x0) 17:07:28 executing program 3: socket$packet(0x11, 0x1000000000000002, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x280080, 0x0) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000100)) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x15, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000003200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x680, 0x478, 0x210, 0x478, 0x0, 0x340, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x6, &(0x7f0000000580), {[{{@uncond, 0x0, 0xc8, 0x108}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "3c745d713ded54eb04d1bcfe4ec5e3722f760ca03b47ed1d735abcf07e43"}}, {{@uncond, 0x0, 0xc8, 0x108}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3, 0x38000, @ipv6=@rand_addr="f65360ce35d79792c798d9967e3df2d3", 0x4e21}}}, {{@ipv6={@empty, @mcast1, [0xffffff00, 0xffffff00, 0xff, 0xff000000], [0xff, 0x0, 0x17fffff01, 0xffffffff], 'rose0\x00', 'ipddp0\x00', {}, {}, 0x67, 0x9, 0x4, 0x1}, 0x0, 0xf0, 0x130, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0xe}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x5, 0x5, @ipv6=@ipv4={[], [], @empty}, 0x4e21}}}, {{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@ipv6header={0x28, 'ipv6header\x00', 0x0, {0x40, 0x20, 0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@multicast2, @ipv6=@empty, 0x2e, 0x26, 0x9}}}, {{@ipv6={@mcast1, @remote, [0xffffffff, 0xff000000, 0x7f000080, 0xff000000], [0xffffff00, 0xffffff00], 'ip6tnl0\x00', 'ip6tnl0\x00', {}, {}, 0xff, 0x1, 0x0, 0x63}, 0x0, 0xf0, 0x138, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@empty, @ipv4=@local, 0x37, 0x3b, 0x1}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6e0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000007cc0)=[{{&(0x7f00000002c0)=@caif=@dbg, 0x80, &(0x7f0000000840)=[{&(0x7f0000000340)=""/251, 0xfb}, {&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000007ec0)=""/108, 0x6c}, {&(0x7f0000000600)=""/241, 0xf1}, {0x0}], 0x5, &(0x7f0000000b40)=""/234, 0xea}, 0xd9b9}, {{&(0x7f0000000c40)=@pppol2tpv3, 0x80, &(0x7f0000002340)=[{&(0x7f0000000cc0)=""/63, 0x3f}, {&(0x7f0000000d40)=""/232, 0xe8}, {&(0x7f0000000e40)=""/77, 0x4d}, {&(0x7f0000000ec0)=""/150, 0x96}, {&(0x7f0000000f80)=""/116, 0x74}, {&(0x7f0000001000)=""/212, 0xd4}, {0x0}, {&(0x7f00000012c0)=""/4096, 0x1000}, {0x0}], 0x9, &(0x7f00000000c0)=""/40, 0x28}, 0x7f}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000002480)=""/199, 0xc7}, {&(0x7f00000008c0)=""/55, 0x37}], 0x2, &(0x7f00000025c0)=""/157, 0x9d}, 0x9}, {{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002680)=""/238, 0xee}, {&(0x7f0000002780)=""/37, 0x25}, {&(0x7f00000027c0)=""/240, 0xf0}, {&(0x7f00000028c0)=""/10, 0xa}, {&(0x7f0000002900)=""/202, 0xca}, {&(0x7f0000002a00)=""/247, 0xf7}, {0x0}], 0x7, &(0x7f0000002c80)=""/184, 0xb8}, 0x7}, {{&(0x7f0000002d40)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f0000003040)=[{&(0x7f0000002dc0)=""/18, 0x12}, {&(0x7f0000002e00)=""/213, 0xd5}, {&(0x7f0000002f00)=""/62, 0x3e}, {0x0}, {&(0x7f0000002fc0)=""/31, 0x1f}, {&(0x7f0000003000)}], 0x6, &(0x7f00000030c0)=""/191, 0xbf}, 0x3}, {{&(0x7f0000003180)=@vsock, 0x80, &(0x7f0000004400)=[{&(0x7f0000007f40)=""/215, 0xd7}, {&(0x7f0000004300)=""/34, 0x22}, {&(0x7f0000004340)=""/28, 0x1c}, {&(0x7f0000004380)=""/108, 0x6c}], 0x4, &(0x7f0000004480)=""/222, 0xde}, 0x6}, {{&(0x7f0000004580)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000004a80)=[{&(0x7f0000004600)=""/120, 0x78}, {&(0x7f0000004700)=""/167, 0xa7}, {&(0x7f0000004800)=""/131, 0x83}, {0x0}, {&(0x7f0000004980)=""/212, 0xd4}], 0x5}, 0x8c2}, {{&(0x7f0000004b00)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000006cc0)=""/4096, 0x1000}, 0x52}], 0x8, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) write$UHID_DESTROY(r5, &(0x7f00000001c0), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x10001, 0xffff}, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x1) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000900)="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", 0x223, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 17:07:28 executing program 2: socket$packet(0x11, 0x1000000000000002, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x280080, 0x0) ioctl$RTC_VL_READ(r0, 0x80047013, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x15, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000003200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x680, 0x478, 0x210, 0x478, 0x0, 0x340, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x6, 0x0, {[{{@uncond, 0x0, 0xc8, 0x108}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "3c745d713ded54eb04d1bcfe4ec5e3722f760ca03b47ed1d735abcf07e43"}}, {{@uncond, 0x0, 0xc8, 0x108}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3, 0x38000, @ipv6=@rand_addr="f65360ce35d79792c798d9967e3df2d3", 0x4e21}}}, {{@ipv6={@empty, @mcast1, [0xffffff00, 0xffffff00, 0xff, 0xff000000], [0xff, 0x0, 0x17fffff01, 0xffffffff], 'rose0\x00', 'ipddp0\x00', {}, {}, 0x67, 0x9, 0x4, 0x1}, 0x0, 0xf0, 0x130, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0xe}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x5, 0x5, @ipv6=@ipv4={[], [], @empty}, 0x4e21}}}, {{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@ipv6header={0x28, 'ipv6header\x00', 0x0, {0x40, 0x20, 0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@multicast2, @ipv6=@empty, 0x2e, 0x26, 0x9}}}, {{@ipv6={@mcast1, @remote, [0xffffffff, 0xff000000, 0x7f000080, 0xff000000], [0xffffff00, 0xffffff00], 'ip6tnl0\x00', 'ip6tnl0\x00', {}, {}, 0xff, 0x1, 0x0, 0x63}, 0x0, 0xf0, 0x138, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@empty, @ipv4=@local, 0x37, 0x3b, 0x1}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6e0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000007cc0)=[{{&(0x7f00000002c0)=@caif=@dbg, 0x80, &(0x7f0000000840)=[{&(0x7f0000000340)=""/251, 0xfb}, {&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000007ec0)=""/108, 0x6c}, {&(0x7f0000000600)=""/241, 0xf1}, {0x0}], 0x5, &(0x7f0000000b40)=""/234, 0xea}, 0xd9b9}, {{&(0x7f0000000c40)=@pppol2tpv3, 0x80, &(0x7f0000002340)=[{&(0x7f0000000cc0)=""/63, 0x3f}, {&(0x7f0000000d40)=""/232, 0xe8}, {&(0x7f0000000e40)=""/77, 0x4d}, {&(0x7f0000000ec0)=""/150, 0x96}, {&(0x7f0000000f80)=""/116, 0x74}, {&(0x7f0000001000)=""/212, 0xd4}, {0x0}, {&(0x7f00000012c0)=""/4096, 0x1000}, {0x0}], 0x9, &(0x7f00000000c0)=""/40, 0x28}, 0x7f}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000002480)=""/199, 0xc7}, {&(0x7f00000008c0)=""/55, 0x37}], 0x2, &(0x7f00000025c0)=""/157, 0x9d}, 0x9}, {{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002680)=""/238, 0xee}, {&(0x7f0000002780)=""/37, 0x25}, {&(0x7f00000027c0)=""/240, 0xf0}, {&(0x7f00000028c0)=""/10, 0xa}, {&(0x7f0000002900)=""/202, 0xca}, {&(0x7f0000002a00)=""/247, 0xf7}, {0x0}], 0x7, &(0x7f0000002c80)=""/184, 0xb8}, 0x7}, {{&(0x7f0000002d40)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f0000003040)=[{&(0x7f0000002dc0)=""/18, 0x12}, {&(0x7f0000002e00)=""/213, 0xd5}, {&(0x7f0000002f00)=""/62, 0x3e}, {0x0}, {0x0}, {&(0x7f0000003000)}], 0x6, &(0x7f00000030c0)=""/191, 0xbf}, 0x3}, {{&(0x7f0000003180)=@vsock, 0x80, &(0x7f0000004400)=[{&(0x7f0000007f40)=""/215, 0xd7}, {&(0x7f0000004300)=""/34, 0x22}, {&(0x7f0000004340)=""/28, 0x1c}, {&(0x7f0000004380)=""/108, 0x6c}], 0x4, &(0x7f0000004480)=""/222, 0xde}, 0x6}, {{&(0x7f0000004580)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000004a80)=[{&(0x7f0000004600)=""/120, 0x78}, {&(0x7f0000004700)=""/167, 0xa7}, {&(0x7f0000004800)=""/131, 0x83}, {0x0}, {&(0x7f0000004980)=""/212, 0xd4}], 0x5}, 0x8c2}, {{&(0x7f0000004b00)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000006cc0)=""/4096, 0x1000}, 0x52}], 0x8, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) write$UHID_DESTROY(r5, &(0x7f00000001c0), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x10001, 0xffff}, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x1) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000900)="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", 0x223, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 17:07:28 executing program 1: socket$packet(0x11, 0x1000000000000002, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x280080, 0x0) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000100)) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x15, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, 0x0, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000007cc0)=[{{&(0x7f00000002c0)=@caif=@dbg, 0x80, &(0x7f0000000840)=[{&(0x7f0000000340)=""/251, 0xfb}, {&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000007ec0)=""/108, 0x6c}, {&(0x7f0000000600)=""/241, 0xf1}, {0x0}], 0x5, &(0x7f0000000b40)=""/234, 0xea}, 0xd9b9}, {{&(0x7f0000000c40)=@pppol2tpv3, 0x80, &(0x7f0000002340)=[{&(0x7f0000000cc0)=""/63, 0x3f}, {&(0x7f0000000d40)=""/232, 0xe8}, {&(0x7f0000000e40)=""/77, 0x4d}, {&(0x7f0000000ec0)=""/150, 0x96}, {&(0x7f0000000f80)=""/116, 0x74}, {0x0}, {&(0x7f00000012c0)=""/4096, 0x1000}, {0x0}], 0x8, &(0x7f00000000c0)=""/40, 0x28}, 0x7f}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000002480)=""/199, 0xc7}, {&(0x7f00000008c0)=""/55, 0x37}], 0x2, &(0x7f00000025c0)=""/157, 0x9d}, 0x9}, {{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002680)=""/238, 0xee}, {&(0x7f0000002780)=""/37, 0x25}, {&(0x7f00000027c0)=""/240, 0xf0}, {&(0x7f00000028c0)=""/10, 0xa}, {&(0x7f0000002900)=""/202, 0xca}, {&(0x7f0000002a00)=""/247, 0xf7}, {0x0}], 0x7, &(0x7f0000002c80)=""/184, 0xb8}, 0x7}, {{&(0x7f0000002d40)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f0000003040)=[{&(0x7f0000002dc0)=""/18, 0x12}, {&(0x7f0000002e00)=""/213, 0xd5}, {&(0x7f0000002f00)=""/62, 0x3e}, {0x0}, {0x0}, {&(0x7f0000002fc0)=""/31, 0x1f}, {&(0x7f0000003000)}], 0x7, &(0x7f00000030c0)=""/191, 0xbf}, 0x3}, {{&(0x7f0000003180)=@vsock, 0x80, &(0x7f0000004400)=[{&(0x7f0000007f40)=""/215, 0xd7}, {&(0x7f0000004300)=""/34, 0x22}, {&(0x7f0000004340)=""/28, 0x1c}, {&(0x7f0000004380)=""/108, 0x6c}], 0x4, &(0x7f0000004480)=""/222, 0xde}, 0x6}, {{&(0x7f0000004580)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000004a80)=[{&(0x7f0000004600)=""/120, 0x78}, {&(0x7f0000004700)=""/167, 0xa7}, {&(0x7f0000004800)=""/131, 0x83}, {0x0}, {&(0x7f0000004980)=""/212, 0xd4}], 0x5}, 0x8c2}, {{&(0x7f0000004b00)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000006cc0)=""/4096, 0x1000}, 0x52}], 0x8, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) write$UHID_DESTROY(r5, &(0x7f00000001c0), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x10001, 0xffff}, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x1) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000900)="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", 0x223, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 17:07:28 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50}, 0x50) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000580)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0)='TIPCv2\x00') ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, &(0x7f0000000000)={0x0, 0x6b9, 0x9}) 17:07:28 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x40541, 0x0) write$FUSE_POLL(r0, &(0x7f0000000040)={0x18}, 0x18) 17:07:28 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x413e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x2a4, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000003a00fd0300000000001000000af00000"], 0x14}}, 0x0) r0 = socket(0x0, 0x800000000080003, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000380)=[@op, @op]}], 0x4924aa4, 0x0) 17:07:28 executing program 0: socket$inet6(0xa, 0x80002, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xa) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x8) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() tkill(r0, 0x9) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) r1 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f6800fe01b2a4a280930a060001fe8000020200000039000900350050560800000019000540fe800000000022dc1338d54400009b84136ef75afb83de4411000500c43ab822004c060cec4fab91d4", 0x55}], 0x1}, 0x0) 17:07:28 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50}, 0x50) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f00000001c0)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000580)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0)='TIPCv2\x00') ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, &(0x7f0000000000)={0x0, 0x0, 0x9}) 17:07:28 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x413e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x2a4, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000003a00fd0300000000001000000af00000"], 0x14}}, 0x0) r0 = socket(0x0, 0x800000000080003, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000380)=[@op, @op]}], 0x4924aa4, 0x0) 17:07:28 executing program 2: socket$packet(0x11, 0x1000000000000002, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x280080, 0x0) ioctl$RTC_VL_READ(r0, 0x80047013, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x15, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000003200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x680, 0x478, 0x210, 0x478, 0x0, 0x340, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x6, 0x0, {[{{@uncond, 0x0, 0xc8, 0x108}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "3c745d713ded54eb04d1bcfe4ec5e3722f760ca03b47ed1d735abcf07e43"}}, {{@uncond, 0x0, 0xc8, 0x108}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3, 0x38000, @ipv6=@rand_addr="f65360ce35d79792c798d9967e3df2d3", 0x4e21}}}, {{@ipv6={@empty, @mcast1, [0xffffff00, 0xffffff00, 0xff, 0xff000000], [0xff, 0x0, 0x17fffff01, 0xffffffff], 'rose0\x00', 'ipddp0\x00', {}, {}, 0x67, 0x9, 0x4, 0x1}, 0x0, 0xf0, 0x130, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0xe}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x5, 0x5, @ipv6=@ipv4={[], [], @empty}, 0x4e21}}}, {{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@ipv6header={0x28, 'ipv6header\x00', 0x0, {0x40, 0x20, 0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@multicast2, @ipv6=@empty, 0x2e, 0x26, 0x9}}}, {{@ipv6={@mcast1, @remote, [0xffffffff, 0xff000000, 0x7f000080, 0xff000000], [0xffffff00, 0xffffff00], 'ip6tnl0\x00', 'ip6tnl0\x00', {}, {}, 0xff, 0x1, 0x0, 0x63}, 0x0, 0xf0, 0x138, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@empty, @ipv4=@local, 0x37, 0x3b, 0x1}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6e0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000007cc0)=[{{&(0x7f00000002c0)=@caif=@dbg, 0x80, &(0x7f0000000840)=[{&(0x7f0000000340)=""/251, 0xfb}, {&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000007ec0)=""/108, 0x6c}, {&(0x7f0000000600)=""/241, 0xf1}, {0x0}], 0x5, &(0x7f0000000b40)=""/234, 0xea}, 0xd9b9}, {{&(0x7f0000000c40)=@pppol2tpv3, 0x80, &(0x7f0000002340)=[{&(0x7f0000000cc0)=""/63, 0x3f}, {&(0x7f0000000d40)=""/232, 0xe8}, {&(0x7f0000000e40)=""/77, 0x4d}, {&(0x7f0000000ec0)=""/150, 0x96}, {&(0x7f0000000f80)=""/116, 0x74}, {&(0x7f0000001000)=""/212, 0xd4}, {0x0}, {&(0x7f00000012c0)=""/4096, 0x1000}, {0x0}], 0x9, &(0x7f00000000c0)=""/40, 0x28}, 0x7f}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000002480)=""/199, 0xc7}, {&(0x7f00000008c0)=""/55, 0x37}], 0x2, &(0x7f00000025c0)=""/157, 0x9d}, 0x9}, {{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002680)=""/238, 0xee}, {&(0x7f0000002780)=""/37, 0x25}, {&(0x7f00000027c0)=""/240, 0xf0}, {&(0x7f00000028c0)=""/10, 0xa}, {&(0x7f0000002900)=""/202, 0xca}, {&(0x7f0000002a00)=""/247, 0xf7}, {0x0}], 0x7, &(0x7f0000002c80)=""/184, 0xb8}, 0x7}, {{&(0x7f0000002d40)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f0000003040)=[{&(0x7f0000002dc0)=""/18, 0x12}, {&(0x7f0000002e00)=""/213, 0xd5}, {&(0x7f0000002f00)=""/62, 0x3e}, {0x0}, {0x0}, {&(0x7f0000003000)}], 0x6, &(0x7f00000030c0)=""/191, 0xbf}, 0x3}, {{&(0x7f0000003180)=@vsock, 0x80, &(0x7f0000004400)=[{&(0x7f0000007f40)=""/215, 0xd7}, {&(0x7f0000004300)=""/34, 0x22}, {&(0x7f0000004340)=""/28, 0x1c}, {&(0x7f0000004380)=""/108, 0x6c}], 0x4, &(0x7f0000004480)=""/222, 0xde}, 0x6}, {{&(0x7f0000004580)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000004a80)=[{&(0x7f0000004600)=""/120, 0x78}, {&(0x7f0000004700)=""/167, 0xa7}, {&(0x7f0000004800)=""/131, 0x83}, {0x0}, {&(0x7f0000004980)=""/212, 0xd4}], 0x5}, 0x8c2}, {{&(0x7f0000004b00)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000006cc0)=""/4096, 0x1000}, 0x52}], 0x8, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) write$UHID_DESTROY(r5, &(0x7f00000001c0), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x10001, 0xffff}, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x1) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000900)="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", 0x223, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 17:07:28 executing program 1: socket$packet(0x11, 0x1000000000000002, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x280080, 0x0) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000100)) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x15, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, 0x0, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000007cc0)=[{{&(0x7f00000002c0)=@caif=@dbg, 0x80, &(0x7f0000000840)=[{&(0x7f0000000340)=""/251, 0xfb}, {&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000007ec0)=""/108, 0x6c}, {&(0x7f0000000600)=""/241, 0xf1}, {0x0}], 0x5, &(0x7f0000000b40)=""/234, 0xea}, 0xd9b9}, {{&(0x7f0000000c40)=@pppol2tpv3, 0x80, &(0x7f0000002340)=[{&(0x7f0000000cc0)=""/63, 0x3f}, {&(0x7f0000000d40)=""/232, 0xe8}, {&(0x7f0000000e40)=""/77, 0x4d}, {&(0x7f0000000ec0)=""/150, 0x96}, {&(0x7f0000000f80)=""/116, 0x74}, {0x0}, {&(0x7f00000012c0)=""/4096, 0x1000}, {0x0}], 0x8, &(0x7f00000000c0)=""/40, 0x28}, 0x7f}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000002480)=""/199, 0xc7}, {&(0x7f00000008c0)=""/55, 0x37}], 0x2, &(0x7f00000025c0)=""/157, 0x9d}, 0x9}, {{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002680)=""/238, 0xee}, {&(0x7f0000002780)=""/37, 0x25}, {&(0x7f00000027c0)=""/240, 0xf0}, {&(0x7f00000028c0)=""/10, 0xa}, {&(0x7f0000002900)=""/202, 0xca}, {&(0x7f0000002a00)=""/247, 0xf7}, {0x0}], 0x7, &(0x7f0000002c80)=""/184, 0xb8}, 0x7}, {{&(0x7f0000002d40)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f0000003040)=[{&(0x7f0000002dc0)=""/18, 0x12}, {&(0x7f0000002e00)=""/213, 0xd5}, {&(0x7f0000002f00)=""/62, 0x3e}, {0x0}, {0x0}, {&(0x7f0000002fc0)=""/31, 0x1f}, {&(0x7f0000003000)}], 0x7, &(0x7f00000030c0)=""/191, 0xbf}, 0x3}, {{&(0x7f0000003180)=@vsock, 0x80, &(0x7f0000004400)=[{&(0x7f0000007f40)=""/215, 0xd7}, {&(0x7f0000004300)=""/34, 0x22}, {&(0x7f0000004340)=""/28, 0x1c}, {&(0x7f0000004380)=""/108, 0x6c}], 0x4, &(0x7f0000004480)=""/222, 0xde}, 0x6}, {{&(0x7f0000004580)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000004a80)=[{&(0x7f0000004600)=""/120, 0x78}, {&(0x7f0000004700)=""/167, 0xa7}, {&(0x7f0000004800)=""/131, 0x83}, {0x0}, {&(0x7f0000004980)=""/212, 0xd4}], 0x5}, 0x8c2}, {{&(0x7f0000004b00)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000006cc0)=""/4096, 0x1000}, 0x52}], 0x8, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) write$UHID_DESTROY(r5, &(0x7f00000001c0), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x10001, 0xffff}, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x1) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000900)="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", 0x223, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 17:07:28 executing program 3: socket$packet(0x11, 0x1000000000000002, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x280080, 0x0) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000100)) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x15, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000003200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x680, 0x478, 0x210, 0x478, 0x0, 0x340, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x6, &(0x7f0000000580), {[{{@uncond, 0x0, 0xc8, 0x108}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "3c745d713ded54eb04d1bcfe4ec5e3722f760ca03b47ed1d735abcf07e43"}}, {{@uncond, 0x0, 0xc8, 0x108}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3, 0x38000, @ipv6=@rand_addr="f65360ce35d79792c798d9967e3df2d3", 0x4e21}}}, {{@ipv6={@empty, @mcast1, [0xffffff00, 0xffffff00, 0xff, 0xff000000], [0xff, 0x0, 0x17fffff01, 0xffffffff], 'rose0\x00', 'ipddp0\x00', {}, {}, 0x67, 0x9, 0x4, 0x1}, 0x0, 0xf0, 0x130, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0xe}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x5, 0x5, @ipv6=@ipv4={[], [], @empty}, 0x4e21}}}, {{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@ipv6header={0x28, 'ipv6header\x00', 0x0, {0x40, 0x20, 0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@multicast2, @ipv6=@empty, 0x2e, 0x26, 0x9}}}, {{@ipv6={@mcast1, @remote, [0xffffffff, 0xff000000, 0x7f000080, 0xff000000], [0xffffff00, 0xffffff00], 'ip6tnl0\x00', 'ip6tnl0\x00', {}, {}, 0xff, 0x1, 0x0, 0x63}, 0x0, 0xf0, 0x138, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@empty, @ipv4=@local, 0x37, 0x3b, 0x1}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6e0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000007cc0)=[{{&(0x7f00000002c0)=@caif=@dbg, 0x80, &(0x7f0000000840)=[{&(0x7f0000000340)=""/251, 0xfb}, {&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000007ec0)=""/108, 0x6c}, {&(0x7f0000000600)=""/241, 0xf1}, {0x0}], 0x5, &(0x7f0000000b40)=""/234, 0xea}, 0xd9b9}, {{&(0x7f0000000c40)=@pppol2tpv3, 0x80, &(0x7f0000002340)=[{&(0x7f0000000cc0)=""/63, 0x3f}, {&(0x7f0000000d40)=""/232, 0xe8}, {&(0x7f0000000e40)=""/77, 0x4d}, {&(0x7f0000000ec0)=""/150, 0x96}, {&(0x7f0000000f80)=""/116, 0x74}, {&(0x7f0000001000)=""/212, 0xd4}, {0x0}, {&(0x7f00000012c0)=""/4096, 0x1000}, {0x0}], 0x9, &(0x7f00000000c0)=""/40, 0x28}, 0x7f}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000002480)=""/199, 0xc7}, {&(0x7f00000008c0)=""/55, 0x37}], 0x2, &(0x7f00000025c0)=""/157, 0x9d}, 0x9}, {{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002680)=""/238, 0xee}, {&(0x7f0000002780)=""/37, 0x25}, {&(0x7f00000027c0)=""/240, 0xf0}, {&(0x7f00000028c0)=""/10, 0xa}, {&(0x7f0000002900)=""/202, 0xca}, {&(0x7f0000002a00)=""/247, 0xf7}, {0x0}], 0x7, &(0x7f0000002c80)=""/184, 0xb8}, 0x7}, {{&(0x7f0000002d40)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f0000003040)=[{&(0x7f0000002dc0)=""/18, 0x12}, {&(0x7f0000002e00)=""/213, 0xd5}, {&(0x7f0000002f00)=""/62, 0x3e}, {0x0}, {&(0x7f0000002fc0)=""/31, 0x1f}, {&(0x7f0000003000)}], 0x6, &(0x7f00000030c0)=""/191, 0xbf}, 0x3}, {{&(0x7f0000003180)=@vsock, 0x80, &(0x7f0000004400)=[{&(0x7f0000007f40)=""/215, 0xd7}, {&(0x7f0000004300)=""/34, 0x22}, {&(0x7f0000004340)=""/28, 0x1c}, {&(0x7f0000004380)=""/108, 0x6c}], 0x4, &(0x7f0000004480)=""/222, 0xde}, 0x6}, {{&(0x7f0000004580)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000004a80)=[{&(0x7f0000004600)=""/120, 0x78}, {&(0x7f0000004700)=""/167, 0xa7}, {&(0x7f0000004800)=""/131, 0x83}, {0x0}, {&(0x7f0000004980)=""/212, 0xd4}], 0x5}, 0x8c2}, {{&(0x7f0000004b00)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000006cc0)=""/4096, 0x1000}, 0x52}], 0x8, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) write$UHID_DESTROY(r5, &(0x7f00000001c0), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x10001, 0xffff}, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x1) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000900)="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", 0x223, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 17:07:28 executing program 4: pipe(&(0x7f0000000140)) socket$alg(0x26, 0x5, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) ioctl$TCSETA(0xffffffffffffffff, 0x5406, 0x0) inotify_init1(0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) 17:07:28 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x413e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x2a4, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000003a00fd0300000000001000000af00000"], 0x14}}, 0x0) r0 = socket(0x10, 0x0, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000380)=[@op, @op]}], 0x4924aa4, 0x0) 17:07:28 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x413e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x2a4, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000003a00fd0300000000001000000af00000"], 0x14}}, 0x0) r0 = socket(0x10, 0x0, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000380)=[@op, @op]}], 0x4924aa4, 0x0) 17:07:28 executing program 4: mlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000) r0 = socket$inet6(0xa, 0x80003, 0x6b) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8476071") mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000000)=0x1, 0x7, 0x0) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) 17:07:28 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50}, 0x50) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f00000001c0)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000580)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0)='TIPCv2\x00') ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, &(0x7f0000000000)={0x0, 0x0, 0x9}) 17:07:28 executing program 3: socket$packet(0x11, 0x1000000000000002, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x280080, 0x0) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000100)) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x15, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000003200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x680, 0x478, 0x210, 0x478, 0x0, 0x340, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x6, &(0x7f0000000580), {[{{@uncond, 0x0, 0xc8, 0x108}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "3c745d713ded54eb04d1bcfe4ec5e3722f760ca03b47ed1d735abcf07e43"}}, {{@uncond, 0x0, 0xc8, 0x108}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3, 0x38000, @ipv6=@rand_addr="f65360ce35d79792c798d9967e3df2d3", 0x4e21}}}, {{@ipv6={@empty, @mcast1, [0xffffff00, 0xffffff00, 0xff, 0xff000000], [0xff, 0x0, 0x17fffff01, 0xffffffff], 'rose0\x00', 'ipddp0\x00', {}, {}, 0x67, 0x9, 0x4, 0x1}, 0x0, 0xf0, 0x130, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0xe}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x5, 0x5, @ipv6=@ipv4={[], [], @empty}, 0x4e21}}}, {{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@ipv6header={0x28, 'ipv6header\x00', 0x0, {0x40, 0x20, 0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@multicast2, @ipv6=@empty, 0x2e, 0x26, 0x9}}}, {{@ipv6={@mcast1, @remote, [0xffffffff, 0xff000000, 0x7f000080, 0xff000000], [0xffffff00, 0xffffff00], 'ip6tnl0\x00', 'ip6tnl0\x00', {}, {}, 0xff, 0x1, 0x0, 0x63}, 0x0, 0xf0, 0x138, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@empty, @ipv4=@local, 0x37, 0x3b, 0x1}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6e0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000007cc0)=[{{&(0x7f00000002c0)=@caif=@dbg, 0x80, &(0x7f0000000840)=[{&(0x7f0000000340)=""/251, 0xfb}, {&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000007ec0)=""/108, 0x6c}, {&(0x7f0000000600)=""/241, 0xf1}, {0x0}], 0x5, &(0x7f0000000b40)=""/234, 0xea}, 0xd9b9}, {{&(0x7f0000000c40)=@pppol2tpv3, 0x80, &(0x7f0000002340)=[{&(0x7f0000000cc0)=""/63, 0x3f}, {&(0x7f0000000d40)=""/232, 0xe8}, {&(0x7f0000000e40)=""/77, 0x4d}, {&(0x7f0000000ec0)=""/150, 0x96}, {&(0x7f0000000f80)=""/116, 0x74}, {&(0x7f0000001000)=""/212, 0xd4}, {0x0}, {&(0x7f00000012c0)=""/4096, 0x1000}, {0x0}], 0x9, &(0x7f00000000c0)=""/40, 0x28}, 0x7f}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000002480)=""/199, 0xc7}, {&(0x7f00000008c0)=""/55, 0x37}], 0x2, &(0x7f00000025c0)=""/157, 0x9d}, 0x9}, {{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002680)=""/238, 0xee}, {&(0x7f0000002780)=""/37, 0x25}, {&(0x7f00000027c0)=""/240, 0xf0}, {&(0x7f00000028c0)=""/10, 0xa}, {&(0x7f0000002900)=""/202, 0xca}, {&(0x7f0000002a00)=""/247, 0xf7}, {0x0}], 0x7, &(0x7f0000002c80)=""/184, 0xb8}, 0x7}, {{&(0x7f0000002d40)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f0000003040)=[{&(0x7f0000002dc0)=""/18, 0x12}, {&(0x7f0000002e00)=""/213, 0xd5}, {&(0x7f0000002f00)=""/62, 0x3e}, {0x0}, {&(0x7f0000002fc0)=""/31, 0x1f}, {&(0x7f0000003000)}], 0x6, &(0x7f00000030c0)=""/191, 0xbf}, 0x3}, {{&(0x7f0000003180)=@vsock, 0x80, &(0x7f0000004400)=[{&(0x7f0000007f40)=""/215, 0xd7}, {&(0x7f0000004300)=""/34, 0x22}, {&(0x7f0000004340)=""/28, 0x1c}, {&(0x7f0000004380)=""/108, 0x6c}], 0x4, &(0x7f0000004480)=""/222, 0xde}, 0x6}, {{&(0x7f0000004580)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000004a80)=[{&(0x7f0000004600)=""/120, 0x78}, {&(0x7f0000004700)=""/167, 0xa7}, {&(0x7f0000004800)=""/131, 0x83}, {0x0}, {&(0x7f0000004980)=""/212, 0xd4}], 0x5}, 0x8c2}, {{&(0x7f0000004b00)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000006cc0)=""/4096, 0x1000}, 0x52}], 0x8, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) write$UHID_DESTROY(r5, &(0x7f00000001c0), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x10001, 0xffff}, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x1) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000900)="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", 0x223, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 17:07:28 executing program 2: socket$packet(0x11, 0x1000000000000002, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x280080, 0x0) ioctl$RTC_VL_READ(r0, 0x80047013, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x15, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000003200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x680, 0x478, 0x210, 0x478, 0x0, 0x340, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x6, 0x0, {[{{@uncond, 0x0, 0xc8, 0x108}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "3c745d713ded54eb04d1bcfe4ec5e3722f760ca03b47ed1d735abcf07e43"}}, {{@uncond, 0x0, 0xc8, 0x108}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3, 0x38000, @ipv6=@rand_addr="f65360ce35d79792c798d9967e3df2d3", 0x4e21}}}, {{@ipv6={@empty, @mcast1, [0xffffff00, 0xffffff00, 0xff, 0xff000000], [0xff, 0x0, 0x17fffff01, 0xffffffff], 'rose0\x00', 'ipddp0\x00', {}, {}, 0x67, 0x9, 0x4, 0x1}, 0x0, 0xf0, 0x130, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0xe}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x5, 0x5, @ipv6=@ipv4={[], [], @empty}, 0x4e21}}}, {{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@ipv6header={0x28, 'ipv6header\x00', 0x0, {0x40, 0x20, 0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@multicast2, @ipv6=@empty, 0x2e, 0x26, 0x9}}}, {{@ipv6={@mcast1, @remote, [0xffffffff, 0xff000000, 0x7f000080, 0xff000000], [0xffffff00, 0xffffff00], 'ip6tnl0\x00', 'ip6tnl0\x00', {}, {}, 0xff, 0x1, 0x0, 0x63}, 0x0, 0xf0, 0x138, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@empty, @ipv4=@local, 0x37, 0x3b, 0x1}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6e0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000007cc0)=[{{&(0x7f00000002c0)=@caif=@dbg, 0x80, &(0x7f0000000840)=[{&(0x7f0000000340)=""/251, 0xfb}, {&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000007ec0)=""/108, 0x6c}, {&(0x7f0000000600)=""/241, 0xf1}, {0x0}], 0x5, &(0x7f0000000b40)=""/234, 0xea}, 0xd9b9}, {{&(0x7f0000000c40)=@pppol2tpv3, 0x80, &(0x7f0000002340)=[{&(0x7f0000000cc0)=""/63, 0x3f}, {&(0x7f0000000d40)=""/232, 0xe8}, {&(0x7f0000000e40)=""/77, 0x4d}, {&(0x7f0000000ec0)=""/150, 0x96}, {&(0x7f0000000f80)=""/116, 0x74}, {&(0x7f0000001000)=""/212, 0xd4}, {0x0}, {&(0x7f00000012c0)=""/4096, 0x1000}, {0x0}], 0x9, &(0x7f00000000c0)=""/40, 0x28}, 0x7f}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000002480)=""/199, 0xc7}, {&(0x7f00000008c0)=""/55, 0x37}], 0x2, &(0x7f00000025c0)=""/157, 0x9d}, 0x9}, {{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002680)=""/238, 0xee}, {&(0x7f0000002780)=""/37, 0x25}, {&(0x7f00000027c0)=""/240, 0xf0}, {&(0x7f00000028c0)=""/10, 0xa}, {&(0x7f0000002900)=""/202, 0xca}, {&(0x7f0000002a00)=""/247, 0xf7}, {0x0}], 0x7, &(0x7f0000002c80)=""/184, 0xb8}, 0x7}, {{&(0x7f0000002d40)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f0000003040)=[{&(0x7f0000002dc0)=""/18, 0x12}, {&(0x7f0000002e00)=""/213, 0xd5}, {&(0x7f0000002f00)=""/62, 0x3e}, {0x0}, {0x0}, {0x0}, {&(0x7f0000003000)}], 0x7, &(0x7f00000030c0)=""/191, 0xbf}, 0x3}, {{&(0x7f0000003180)=@vsock, 0x80, &(0x7f0000004400)=[{&(0x7f0000007f40)=""/215, 0xd7}, {&(0x7f0000004300)=""/34, 0x22}, {&(0x7f0000004340)=""/28, 0x1c}, {&(0x7f0000004380)=""/108, 0x6c}], 0x4, &(0x7f0000004480)=""/222, 0xde}, 0x6}, {{&(0x7f0000004580)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000004a80)=[{&(0x7f0000004600)=""/120, 0x78}, {&(0x7f0000004700)=""/167, 0xa7}, {&(0x7f0000004800)=""/131, 0x83}, {0x0}, {&(0x7f0000004980)=""/212, 0xd4}], 0x5}, 0x8c2}, {{&(0x7f0000004b00)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000006cc0)=""/4096, 0x1000}, 0x52}], 0x8, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) write$UHID_DESTROY(r5, &(0x7f00000001c0), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x10001, 0xffff}, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x1) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000900)="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", 0x223, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 17:07:28 executing program 1: socket$packet(0x11, 0x1000000000000002, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x280080, 0x0) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000100)) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x15, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, 0x0, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000007cc0)=[{{&(0x7f00000002c0)=@caif=@dbg, 0x80, &(0x7f0000000840)=[{&(0x7f0000000340)=""/251, 0xfb}, {&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000007ec0)=""/108, 0x6c}, {&(0x7f0000000600)=""/241, 0xf1}, {0x0}], 0x5, &(0x7f0000000b40)=""/234, 0xea}, 0xd9b9}, {{&(0x7f0000000c40)=@pppol2tpv3, 0x80, &(0x7f0000002340)=[{&(0x7f0000000cc0)=""/63, 0x3f}, {&(0x7f0000000d40)=""/232, 0xe8}, {&(0x7f0000000e40)=""/77, 0x4d}, {&(0x7f0000000ec0)=""/150, 0x96}, {&(0x7f0000000f80)=""/116, 0x74}, {0x0}, {0x0}, {&(0x7f00000012c0)=""/4096, 0x1000}, {0x0}], 0x9, &(0x7f00000000c0)=""/40, 0x28}, 0x7f}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000002480)=""/199, 0xc7}, {&(0x7f00000008c0)=""/55, 0x37}], 0x2, &(0x7f00000025c0)=""/157, 0x9d}, 0x9}, {{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002680)=""/238, 0xee}, {&(0x7f0000002780)=""/37, 0x25}, {&(0x7f00000027c0)=""/240, 0xf0}, {&(0x7f00000028c0)=""/10, 0xa}, {&(0x7f0000002900)=""/202, 0xca}, {&(0x7f0000002a00)=""/247, 0xf7}, {0x0}], 0x7, &(0x7f0000002c80)=""/184, 0xb8}, 0x7}, {{&(0x7f0000002d40)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f0000003040)=[{&(0x7f0000002dc0)=""/18, 0x12}, {&(0x7f0000002e00)=""/213, 0xd5}, {&(0x7f0000002f00)=""/62, 0x3e}, {0x0}, {0x0}, {&(0x7f0000002fc0)=""/31, 0x1f}, {&(0x7f0000003000)}], 0x7, &(0x7f00000030c0)=""/191, 0xbf}, 0x3}, {{&(0x7f0000003180)=@vsock, 0x80, &(0x7f0000004400)=[{&(0x7f0000007f40)=""/215, 0xd7}, {&(0x7f0000004300)=""/34, 0x22}, {&(0x7f0000004340)=""/28, 0x1c}, {&(0x7f0000004380)=""/108, 0x6c}], 0x4, &(0x7f0000004480)=""/222, 0xde}, 0x6}, {{&(0x7f0000004580)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000004a80)=[{&(0x7f0000004600)=""/120, 0x78}, {&(0x7f0000004700)=""/167, 0xa7}, {&(0x7f0000004800)=""/131, 0x83}, {0x0}, {&(0x7f0000004980)=""/212, 0xd4}], 0x5}, 0x8c2}, {{&(0x7f0000004b00)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000006cc0)=""/4096, 0x1000}, 0x52}], 0x8, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) write$UHID_DESTROY(r5, &(0x7f00000001c0), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x10001, 0xffff}, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x1) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000900)="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", 0x223, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 17:07:28 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x413e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x2a4, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000003a00fd0300000000001000000af00000"], 0x14}}, 0x0) r0 = socket(0x10, 0x0, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000380)=[@op, @op]}], 0x4924aa4, 0x0) 17:07:28 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50}, 0x50) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000580)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, &(0x7f0000000000)={0x0, 0x6b9, 0x9}) 17:07:28 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x413e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x2a4, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000003a00fd0300000000001000000af00000"], 0x14}}, 0x0) socket(0x10, 0x800000000080003, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140)=[{0x0, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000380)=[@op, @op]}], 0x4924aa4, 0x0) 17:07:29 executing program 1: socket$packet(0x11, 0x1000000000000002, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x280080, 0x0) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000100)) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x15, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, 0x0, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000007cc0)=[{{&(0x7f00000002c0)=@caif=@dbg, 0x80, &(0x7f0000000840)=[{&(0x7f0000000340)=""/251, 0xfb}, {&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000007ec0)=""/108, 0x6c}, {&(0x7f0000000600)=""/241, 0xf1}, {0x0}], 0x5, &(0x7f0000000b40)=""/234, 0xea}, 0xd9b9}, {{&(0x7f0000000c40)=@pppol2tpv3, 0x80, &(0x7f0000002340)=[{&(0x7f0000000cc0)=""/63, 0x3f}, {&(0x7f0000000d40)=""/232, 0xe8}, {&(0x7f0000000e40)=""/77, 0x4d}, {&(0x7f0000000ec0)=""/150, 0x96}, {&(0x7f0000000f80)=""/116, 0x74}, {0x0}, {0x0}, {&(0x7f00000012c0)=""/4096, 0x1000}, {0x0}], 0x9, &(0x7f00000000c0)=""/40, 0x28}, 0x7f}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000002480)=""/199, 0xc7}, {&(0x7f00000008c0)=""/55, 0x37}], 0x2, &(0x7f00000025c0)=""/157, 0x9d}, 0x9}, {{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002680)=""/238, 0xee}, {&(0x7f0000002780)=""/37, 0x25}, {&(0x7f00000027c0)=""/240, 0xf0}, {&(0x7f00000028c0)=""/10, 0xa}, {&(0x7f0000002900)=""/202, 0xca}, {&(0x7f0000002a00)=""/247, 0xf7}, {0x0}], 0x7, &(0x7f0000002c80)=""/184, 0xb8}, 0x7}, {{&(0x7f0000002d40)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f0000003040)=[{&(0x7f0000002dc0)=""/18, 0x12}, {&(0x7f0000002e00)=""/213, 0xd5}, {&(0x7f0000002f00)=""/62, 0x3e}, {0x0}, {0x0}, {&(0x7f0000002fc0)=""/31, 0x1f}, {&(0x7f0000003000)}], 0x7, &(0x7f00000030c0)=""/191, 0xbf}, 0x3}, {{&(0x7f0000003180)=@vsock, 0x80, &(0x7f0000004400)=[{&(0x7f0000007f40)=""/215, 0xd7}, {&(0x7f0000004300)=""/34, 0x22}, {&(0x7f0000004340)=""/28, 0x1c}, {&(0x7f0000004380)=""/108, 0x6c}], 0x4, &(0x7f0000004480)=""/222, 0xde}, 0x6}, {{&(0x7f0000004580)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000004a80)=[{&(0x7f0000004600)=""/120, 0x78}, {&(0x7f0000004700)=""/167, 0xa7}, {&(0x7f0000004800)=""/131, 0x83}, {0x0}, {&(0x7f0000004980)=""/212, 0xd4}], 0x5}, 0x8c2}, {{&(0x7f0000004b00)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000006cc0)=""/4096, 0x1000}, 0x52}], 0x8, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) write$UHID_DESTROY(r5, &(0x7f00000001c0), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x10001, 0xffff}, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x1) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000900)="585ccbc4ed83b836c1a6474914dc5500b66147b3c7218a91690000000042e3d35228897501f93191b076ac446ff0022b8753a1fa748c569f435fb3bae96efb74b50ec93c2db8eae3198a29e5c0cfc60000ce0637cef580b4ec61221adf59be045b70e48884ca000018cea71fcfed06fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff33c1e8e036e5031949762d009d308bd73f477252d0000000000004000000000000000000000000000000000195e23fb4430a9a4c2850b6380a743d6ea0c3b121f66c716d746aa81c301621b7662c06aae720b872d4b7828e3b48522c673aa6cb366d4201e2aee3261eb52f14533b7a54203cf9a4fa587c0385cdba539e9bd34717b0dfab09db7b064fbe2ecf9f40fa3a4015d0d0db3f9d562686fcdc3342c88c6f1b6f11449f8aeabf54c5533ec6acc2270d41713ae1538256af3719a07f55223a6eaa7c1eae5d6efa12fe95e2b0f1c500b28c5c76e731d5250e395526d04063718f448e62d4dd7cefeed6b72b31b894093aa37337784c00d68a4185f349e41455f12d31aa2d0ff79a4d69d97421a0042f0c7a664a8c4945104b25dc49be950c5af7405b86482d7314fcc3a0ad5eb24268ccd24a2996019f7c006a0b3c39c7b98c5a5406a2e4ff6d9c0ce12c4251756a667b4731c4b0eb5dc7d4381fecf196c4404b54c3c11c48f09734d9a6842f52d3307a688208b7a4681b101e1abe5fecfca1f464c03e933cbd15ab589ccd3c559542355190522a712b8f5128a6a00", 0x223, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 17:07:29 executing program 3: socket$packet(0x11, 0x1000000000000002, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x280080, 0x0) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000100)) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x15, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000003200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x680, 0x478, 0x210, 0x478, 0x0, 0x340, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x6, &(0x7f0000000580), {[{{@uncond, 0x0, 0xc8, 0x108}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "3c745d713ded54eb04d1bcfe4ec5e3722f760ca03b47ed1d735abcf07e43"}}, {{@uncond, 0x0, 0xc8, 0x108}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3, 0x38000, @ipv6=@rand_addr="f65360ce35d79792c798d9967e3df2d3", 0x4e21}}}, {{@ipv6={@empty, @mcast1, [0xffffff00, 0xffffff00, 0xff, 0xff000000], [0xff, 0x0, 0x17fffff01, 0xffffffff], 'rose0\x00', 'ipddp0\x00', {}, {}, 0x67, 0x9, 0x4, 0x1}, 0x0, 0xf0, 0x130, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0xe}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x5, 0x5, @ipv6=@ipv4={[], [], @empty}, 0x4e21}}}, {{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@ipv6header={0x28, 'ipv6header\x00', 0x0, {0x40, 0x20, 0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@multicast2, @ipv6=@empty, 0x2e, 0x26, 0x9}}}, {{@ipv6={@mcast1, @remote, [0xffffffff, 0xff000000, 0x7f000080, 0xff000000], [0xffffff00, 0xffffff00], 'ip6tnl0\x00', 'ip6tnl0\x00', {}, {}, 0xff, 0x1, 0x0, 0x63}, 0x0, 0xf0, 0x138, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@empty, @ipv4=@local, 0x37, 0x3b, 0x1}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6e0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000007cc0)=[{{&(0x7f00000002c0)=@caif=@dbg, 0x80, &(0x7f0000000840)=[{&(0x7f0000000340)=""/251, 0xfb}, {&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000007ec0)=""/108, 0x6c}, {&(0x7f0000000600)=""/241, 0xf1}, {0x0}], 0x5, &(0x7f0000000b40)=""/234, 0xea}, 0xd9b9}, {{&(0x7f0000000c40)=@pppol2tpv3, 0x80, &(0x7f0000002340)=[{&(0x7f0000000cc0)=""/63, 0x3f}, {&(0x7f0000000d40)=""/232, 0xe8}, {&(0x7f0000000e40)=""/77, 0x4d}, {&(0x7f0000000ec0)=""/150, 0x96}, {&(0x7f0000000f80)=""/116, 0x74}, {&(0x7f0000001000)=""/212, 0xd4}, {0x0}, {&(0x7f00000012c0)=""/4096, 0x1000}, {0x0}], 0x9, &(0x7f00000000c0)=""/40, 0x28}, 0x7f}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000002480)=""/199, 0xc7}, {&(0x7f00000008c0)=""/55, 0x37}], 0x2, &(0x7f00000025c0)=""/157, 0x9d}, 0x9}, {{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002680)=""/238, 0xee}, {&(0x7f0000002780)=""/37, 0x25}, {&(0x7f00000027c0)=""/240, 0xf0}, {&(0x7f00000028c0)=""/10, 0xa}, {&(0x7f0000002900)=""/202, 0xca}, {&(0x7f0000002a00)=""/247, 0xf7}, {0x0}], 0x7, &(0x7f0000002c80)=""/184, 0xb8}, 0x7}, {{&(0x7f0000002d40)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f0000003040)=[{&(0x7f0000002dc0)=""/18, 0x12}, {&(0x7f0000002e00)=""/213, 0xd5}, {&(0x7f0000002f00)=""/62, 0x3e}, {0x0}, {&(0x7f0000002fc0)=""/31, 0x1f}, {&(0x7f0000003000)}], 0x6, &(0x7f00000030c0)=""/191, 0xbf}, 0x3}, {{&(0x7f0000003180)=@vsock, 0x80, &(0x7f0000004400)=[{&(0x7f0000007f40)=""/215, 0xd7}, {&(0x7f0000004300)=""/34, 0x22}, {&(0x7f0000004340)=""/28, 0x1c}, {&(0x7f0000004380)=""/108, 0x6c}], 0x4, &(0x7f0000004480)=""/222, 0xde}, 0x6}, {{&(0x7f0000004580)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000004a80)=[{&(0x7f0000004600)=""/120, 0x78}, {&(0x7f0000004700)=""/167, 0xa7}, {&(0x7f0000004800)=""/131, 0x83}, {0x0}, {&(0x7f0000004980)=""/212, 0xd4}], 0x5}, 0x8c2}, {{&(0x7f0000004b00)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000006cc0)=""/4096, 0x1000}, 0x52}], 0x8, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) write$UHID_DESTROY(r5, &(0x7f00000001c0), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x10001, 0xffff}, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x1) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000900)="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", 0x223, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 17:07:29 executing program 2: socket$packet(0x11, 0x1000000000000002, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x280080, 0x0) ioctl$RTC_VL_READ(r0, 0x80047013, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x15, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000003200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x680, 0x478, 0x210, 0x478, 0x0, 0x340, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x6, 0x0, {[{{@uncond, 0x0, 0xc8, 0x108}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "3c745d713ded54eb04d1bcfe4ec5e3722f760ca03b47ed1d735abcf07e43"}}, {{@uncond, 0x0, 0xc8, 0x108}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3, 0x38000, @ipv6=@rand_addr="f65360ce35d79792c798d9967e3df2d3", 0x4e21}}}, {{@ipv6={@empty, @mcast1, [0xffffff00, 0xffffff00, 0xff, 0xff000000], [0xff, 0x0, 0x17fffff01, 0xffffffff], 'rose0\x00', 'ipddp0\x00', {}, {}, 0x67, 0x9, 0x4, 0x1}, 0x0, 0xf0, 0x130, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0xe}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x5, 0x5, @ipv6=@ipv4={[], [], @empty}, 0x4e21}}}, {{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@ipv6header={0x28, 'ipv6header\x00', 0x0, {0x40, 0x20, 0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@multicast2, @ipv6=@empty, 0x2e, 0x26, 0x9}}}, {{@ipv6={@mcast1, @remote, [0xffffffff, 0xff000000, 0x7f000080, 0xff000000], [0xffffff00, 0xffffff00], 'ip6tnl0\x00', 'ip6tnl0\x00', {}, {}, 0xff, 0x1, 0x0, 0x63}, 0x0, 0xf0, 0x138, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@empty, @ipv4=@local, 0x37, 0x3b, 0x1}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6e0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000007cc0)=[{{&(0x7f00000002c0)=@caif=@dbg, 0x80, &(0x7f0000000840)=[{&(0x7f0000000340)=""/251, 0xfb}, {&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000007ec0)=""/108, 0x6c}, {&(0x7f0000000600)=""/241, 0xf1}, {0x0}], 0x5, &(0x7f0000000b40)=""/234, 0xea}, 0xd9b9}, {{&(0x7f0000000c40)=@pppol2tpv3, 0x80, &(0x7f0000002340)=[{&(0x7f0000000cc0)=""/63, 0x3f}, {&(0x7f0000000d40)=""/232, 0xe8}, {&(0x7f0000000e40)=""/77, 0x4d}, {&(0x7f0000000ec0)=""/150, 0x96}, {&(0x7f0000000f80)=""/116, 0x74}, {&(0x7f0000001000)=""/212, 0xd4}, {0x0}, {&(0x7f00000012c0)=""/4096, 0x1000}, {0x0}], 0x9, &(0x7f00000000c0)=""/40, 0x28}, 0x7f}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000002480)=""/199, 0xc7}, {&(0x7f00000008c0)=""/55, 0x37}], 0x2, &(0x7f00000025c0)=""/157, 0x9d}, 0x9}, {{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002680)=""/238, 0xee}, {&(0x7f0000002780)=""/37, 0x25}, {&(0x7f00000027c0)=""/240, 0xf0}, {&(0x7f00000028c0)=""/10, 0xa}, {&(0x7f0000002900)=""/202, 0xca}, {&(0x7f0000002a00)=""/247, 0xf7}, {0x0}], 0x7, &(0x7f0000002c80)=""/184, 0xb8}, 0x7}, {{&(0x7f0000002d40)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f0000003040)=[{&(0x7f0000002dc0)=""/18, 0x12}, {&(0x7f0000002e00)=""/213, 0xd5}, {&(0x7f0000002f00)=""/62, 0x3e}, {0x0}, {0x0}, {0x0}, {&(0x7f0000003000)}], 0x7, &(0x7f00000030c0)=""/191, 0xbf}, 0x3}, {{&(0x7f0000003180)=@vsock, 0x80, &(0x7f0000004400)=[{&(0x7f0000007f40)=""/215, 0xd7}, {&(0x7f0000004300)=""/34, 0x22}, {&(0x7f0000004340)=""/28, 0x1c}, {&(0x7f0000004380)=""/108, 0x6c}], 0x4, &(0x7f0000004480)=""/222, 0xde}, 0x6}, {{&(0x7f0000004580)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000004a80)=[{&(0x7f0000004600)=""/120, 0x78}, {&(0x7f0000004700)=""/167, 0xa7}, {&(0x7f0000004800)=""/131, 0x83}, {0x0}, {&(0x7f0000004980)=""/212, 0xd4}], 0x5}, 0x8c2}, {{&(0x7f0000004b00)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000006cc0)=""/4096, 0x1000}, 0x52}], 0x8, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) write$UHID_DESTROY(r5, &(0x7f00000001c0), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x10001, 0xffff}, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x1) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000900)="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", 0x223, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 17:07:29 executing program 0: unshare(0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xe) wait4(0x0, 0x0, 0x80000000, 0x0) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, &(0x7f00000001c0)={0x1, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) kcmp(0xffffffffffffffff, 0x0, 0x1, r0, r1) getpid() tkill(0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000340)='/dev/loop-control\x00', 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000100)='\x00\xec\x95B8\x93\xb9Z\xc8', 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x0) 17:07:29 executing program 4: unshare(0x6c060000) r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000000), 0x10) creat(0x0, 0x0) inotify_init1(0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) 17:07:29 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x413e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x2a4, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000003a00fd0300000000001000000af00000"], 0x14}}, 0x0) socket(0x10, 0x800000000080003, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140)=[{0x0, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000380)=[@op, @op]}], 0x4924aa4, 0x0) 17:07:29 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x1}) 17:07:29 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x413e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x2a4, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000003a00fd0300000000001000000af00000"], 0x14}}, 0x0) socket(0x10, 0x800000000080003, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140)=[{0x0, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000380)=[@op, @op]}], 0x4924aa4, 0x0) 17:07:29 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x413e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x2a4, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000003a00fd0300000000001000000af00000"], 0x14}}, 0x0) r0 = socket(0x10, 0x800000000080003, 0x0) sendmmsg$alg(r0, 0x0, 0x0, 0x0) 17:07:29 executing program 3: socket$packet(0x11, 0x1000000000000002, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x280080, 0x0) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000100)) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x15, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000003200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x680, 0x478, 0x210, 0x478, 0x0, 0x340, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x6, &(0x7f0000000580), {[{{@uncond, 0x0, 0xc8, 0x108}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "3c745d713ded54eb04d1bcfe4ec5e3722f760ca03b47ed1d735abcf07e43"}}, {{@uncond, 0x0, 0xc8, 0x108}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3, 0x38000, @ipv6=@rand_addr="f65360ce35d79792c798d9967e3df2d3", 0x4e21}}}, {{@ipv6={@empty, @mcast1, [0xffffff00, 0xffffff00, 0xff, 0xff000000], [0xff, 0x0, 0x17fffff01, 0xffffffff], 'rose0\x00', 'ipddp0\x00', {}, {}, 0x67, 0x9, 0x4, 0x1}, 0x0, 0xf0, 0x130, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0xe}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x5, 0x5, @ipv6=@ipv4={[], [], @empty}, 0x4e21}}}, {{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@ipv6header={0x28, 'ipv6header\x00', 0x0, {0x40, 0x20, 0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@multicast2, @ipv6=@empty, 0x2e, 0x26, 0x9}}}, {{@ipv6={@mcast1, @remote, [0xffffffff, 0xff000000, 0x7f000080, 0xff000000], [0xffffff00, 0xffffff00], 'ip6tnl0\x00', 'ip6tnl0\x00', {}, {}, 0xff, 0x1, 0x0, 0x63}, 0x0, 0xf0, 0x138, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@empty, @ipv4=@local, 0x37, 0x3b, 0x1}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6e0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000007cc0)=[{{&(0x7f00000002c0)=@caif=@dbg, 0x80, &(0x7f0000000840)=[{&(0x7f0000000340)=""/251, 0xfb}, {&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000007ec0)=""/108, 0x6c}, {&(0x7f0000000600)=""/241, 0xf1}, {0x0}], 0x5, &(0x7f0000000b40)=""/234, 0xea}, 0xd9b9}, {{&(0x7f0000000c40)=@pppol2tpv3, 0x80, &(0x7f0000002340)=[{&(0x7f0000000cc0)=""/63, 0x3f}, {&(0x7f0000000d40)=""/232, 0xe8}, {&(0x7f0000000e40)=""/77, 0x4d}, {&(0x7f0000000ec0)=""/150, 0x96}, {&(0x7f0000000f80)=""/116, 0x74}, {&(0x7f0000001000)=""/212, 0xd4}, {0x0}, {&(0x7f00000012c0)=""/4096, 0x1000}, {0x0}], 0x9, &(0x7f00000000c0)=""/40, 0x28}, 0x7f}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000002480)=""/199, 0xc7}, {&(0x7f00000008c0)=""/55, 0x37}], 0x2, &(0x7f00000025c0)=""/157, 0x9d}, 0x9}, {{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002680)=""/238, 0xee}, {&(0x7f0000002780)=""/37, 0x25}, {&(0x7f00000027c0)=""/240, 0xf0}, {&(0x7f00000028c0)=""/10, 0xa}, {&(0x7f0000002900)=""/202, 0xca}, {&(0x7f0000002a00)=""/247, 0xf7}, {0x0}], 0x7, &(0x7f0000002c80)=""/184, 0xb8}, 0x7}, {{&(0x7f0000002d40)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f0000003040)=[{&(0x7f0000002dc0)=""/18, 0x12}, {&(0x7f0000002e00)=""/213, 0xd5}, {0x0}, {0x0}, {&(0x7f0000002fc0)=""/31, 0x1f}, {&(0x7f0000003000)}], 0x6, &(0x7f00000030c0)=""/191, 0xbf}, 0x3}, {{&(0x7f0000003180)=@vsock, 0x80, &(0x7f0000004400)=[{&(0x7f0000007f40)=""/215, 0xd7}, {&(0x7f0000004300)=""/34, 0x22}, {&(0x7f0000004340)=""/28, 0x1c}, {&(0x7f0000004380)=""/108, 0x6c}], 0x4, &(0x7f0000004480)=""/222, 0xde}, 0x6}, {{&(0x7f0000004580)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000004a80)=[{&(0x7f0000004600)=""/120, 0x78}, {&(0x7f0000004700)=""/167, 0xa7}, {&(0x7f0000004800)=""/131, 0x83}, {0x0}, {&(0x7f0000004980)=""/212, 0xd4}], 0x5}, 0x8c2}, {{&(0x7f0000004b00)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000006cc0)=""/4096, 0x1000}, 0x52}], 0x8, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) write$UHID_DESTROY(r5, &(0x7f00000001c0), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x10001, 0xffff}, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x1) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000900)="585ccbc4ed83b836c1a6474914dc5500b66147b3c7218a91690000000042e3d35228897501f93191b076ac446ff0022b8753a1fa748c569f435fb3bae96efb74b50ec93c2db8eae3198a29e5c0cfc60000ce0637cef580b4ec61221adf59be045b70e48884ca000018cea71fcfed06fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff33c1e8e036e5031949762d009d308bd73f477252d0000000000004000000000000000000000000000000000195e23fb4430a9a4c2850b6380a743d6ea0c3b121f66c716d746aa81c301621b7662c06aae720b872d4b7828e3b48522c673aa6cb366d4201e2aee3261eb52f14533b7a54203cf9a4fa587c0385cdba539e9bd34717b0dfab09db7b064fbe2ecf9f40fa3a4015d0d0db3f9d562686fcdc3342c88c6f1b6f11449f8aeabf54c5533ec6acc2270d41713ae1538256af3719a07f55223a6eaa7c1eae5d6efa12fe95e2b0f1c500b28c5c76e731d5250e395526d04063718f448e62d4dd7cefeed6b72b31b894093aa37337784c00d68a4185f349e41455f12d31aa2d0ff79a4d69d97421a0042f0c7a664a8c4945104b25dc49be950c5af7405b86482d7314fcc3a0ad5eb24268ccd24a2996019f7c006a0b3c39c7b98c5a5406a2e4ff6d9c0ce12c4251756a667b4731c4b0eb5dc7d4381fecf196c4404b54c3c11c48f09734d9a6842f52d3307a688208b7a4681b101e1abe5fecfca1f464c03e933cbd15ab589ccd3c559542355190522a712b8f5128a6a00", 0x223, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 17:07:29 executing program 1: socket$packet(0x11, 0x1000000000000002, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x280080, 0x0) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000100)) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x15, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, 0x0, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000007cc0)=[{{&(0x7f00000002c0)=@caif=@dbg, 0x80, &(0x7f0000000840)=[{&(0x7f0000000340)=""/251, 0xfb}, {&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000007ec0)=""/108, 0x6c}, {&(0x7f0000000600)=""/241, 0xf1}, {0x0}], 0x5, &(0x7f0000000b40)=""/234, 0xea}, 0xd9b9}, {{&(0x7f0000000c40)=@pppol2tpv3, 0x80, &(0x7f0000002340)=[{&(0x7f0000000cc0)=""/63, 0x3f}, {&(0x7f0000000d40)=""/232, 0xe8}, {&(0x7f0000000e40)=""/77, 0x4d}, {&(0x7f0000000ec0)=""/150, 0x96}, {&(0x7f0000000f80)=""/116, 0x74}, {0x0}, {0x0}, {&(0x7f00000012c0)=""/4096, 0x1000}, {0x0}], 0x9, &(0x7f00000000c0)=""/40, 0x28}, 0x7f}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000002480)=""/199, 0xc7}, {&(0x7f00000008c0)=""/55, 0x37}], 0x2, &(0x7f00000025c0)=""/157, 0x9d}, 0x9}, {{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002680)=""/238, 0xee}, {&(0x7f0000002780)=""/37, 0x25}, {&(0x7f00000027c0)=""/240, 0xf0}, {&(0x7f00000028c0)=""/10, 0xa}, {&(0x7f0000002900)=""/202, 0xca}, {&(0x7f0000002a00)=""/247, 0xf7}, {0x0}], 0x7, &(0x7f0000002c80)=""/184, 0xb8}, 0x7}, {{&(0x7f0000002d40)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f0000003040)=[{&(0x7f0000002dc0)=""/18, 0x12}, {&(0x7f0000002e00)=""/213, 0xd5}, {&(0x7f0000002f00)=""/62, 0x3e}, {0x0}, {0x0}, {&(0x7f0000002fc0)=""/31, 0x1f}, {&(0x7f0000003000)}], 0x7, &(0x7f00000030c0)=""/191, 0xbf}, 0x3}, {{&(0x7f0000003180)=@vsock, 0x80, &(0x7f0000004400)=[{&(0x7f0000007f40)=""/215, 0xd7}, {&(0x7f0000004300)=""/34, 0x22}, {&(0x7f0000004340)=""/28, 0x1c}, {&(0x7f0000004380)=""/108, 0x6c}], 0x4, &(0x7f0000004480)=""/222, 0xde}, 0x6}, {{&(0x7f0000004580)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000004a80)=[{&(0x7f0000004600)=""/120, 0x78}, {&(0x7f0000004700)=""/167, 0xa7}, {&(0x7f0000004800)=""/131, 0x83}, {0x0}, {&(0x7f0000004980)=""/212, 0xd4}], 0x5}, 0x8c2}, {{&(0x7f0000004b00)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000006cc0)=""/4096, 0x1000}, 0x52}], 0x8, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) write$UHID_DESTROY(r5, &(0x7f00000001c0), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x10001, 0xffff}, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x1) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000900)="585ccbc4ed83b836c1a6474914dc5500b66147b3c7218a91690000000042e3d35228897501f93191b076ac446ff0022b8753a1fa748c569f435fb3bae96efb74b50ec93c2db8eae3198a29e5c0cfc60000ce0637cef580b4ec61221adf59be045b70e48884ca000018cea71fcfed06fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff33c1e8e036e5031949762d009d308bd73f477252d0000000000004000000000000000000000000000000000195e23fb4430a9a4c2850b6380a743d6ea0c3b121f66c716d746aa81c301621b7662c06aae720b872d4b7828e3b48522c673aa6cb366d4201e2aee3261eb52f14533b7a54203cf9a4fa587c0385cdba539e9bd34717b0dfab09db7b064fbe2ecf9f40fa3a4015d0d0db3f9d562686fcdc3342c88c6f1b6f11449f8aeabf54c5533ec6acc2270d41713ae1538256af3719a07f55223a6eaa7c1eae5d6efa12fe95e2b0f1c500b28c5c76e731d5250e395526d04063718f448e62d4dd7cefeed6b72b31b894093aa37337784c00d68a4185f349e41455f12d31aa2d0ff79a4d69d97421a0042f0c7a664a8c4945104b25dc49be950c5af7405b86482d7314fcc3a0ad5eb24268ccd24a2996019f7c006a0b3c39c7b98c5a5406a2e4ff6d9c0ce12c4251756a667b4731c4b0eb5dc7d4381fecf196c4404b54c3c11c48f09734d9a6842f52d3307a688208b7a4681b101e1abe5fecfca1f464c03e933cbd15ab589ccd3c559542355190522a712b8f5128a6a00", 0x223, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 17:07:29 executing program 2: socket$packet(0x11, 0x1000000000000002, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x280080, 0x0) ioctl$RTC_VL_READ(r0, 0x80047013, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x15, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000003200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x680, 0x478, 0x210, 0x478, 0x0, 0x340, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x6, 0x0, {[{{@uncond, 0x0, 0xc8, 0x108}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "3c745d713ded54eb04d1bcfe4ec5e3722f760ca03b47ed1d735abcf07e43"}}, {{@uncond, 0x0, 0xc8, 0x108}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3, 0x38000, @ipv6=@rand_addr="f65360ce35d79792c798d9967e3df2d3", 0x4e21}}}, {{@ipv6={@empty, @mcast1, [0xffffff00, 0xffffff00, 0xff, 0xff000000], [0xff, 0x0, 0x17fffff01, 0xffffffff], 'rose0\x00', 'ipddp0\x00', {}, {}, 0x67, 0x9, 0x4, 0x1}, 0x0, 0xf0, 0x130, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0xe}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x5, 0x5, @ipv6=@ipv4={[], [], @empty}, 0x4e21}}}, {{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@ipv6header={0x28, 'ipv6header\x00', 0x0, {0x40, 0x20, 0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@multicast2, @ipv6=@empty, 0x2e, 0x26, 0x9}}}, {{@ipv6={@mcast1, @remote, [0xffffffff, 0xff000000, 0x7f000080, 0xff000000], [0xffffff00, 0xffffff00], 'ip6tnl0\x00', 'ip6tnl0\x00', {}, {}, 0xff, 0x1, 0x0, 0x63}, 0x0, 0xf0, 0x138, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@empty, @ipv4=@local, 0x37, 0x3b, 0x1}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6e0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000007cc0)=[{{&(0x7f00000002c0)=@caif=@dbg, 0x80, &(0x7f0000000840)=[{&(0x7f0000000340)=""/251, 0xfb}, {&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000007ec0)=""/108, 0x6c}, {&(0x7f0000000600)=""/241, 0xf1}, {0x0}], 0x5, &(0x7f0000000b40)=""/234, 0xea}, 0xd9b9}, {{&(0x7f0000000c40)=@pppol2tpv3, 0x80, &(0x7f0000002340)=[{&(0x7f0000000cc0)=""/63, 0x3f}, {&(0x7f0000000d40)=""/232, 0xe8}, {&(0x7f0000000e40)=""/77, 0x4d}, {&(0x7f0000000ec0)=""/150, 0x96}, {&(0x7f0000000f80)=""/116, 0x74}, {&(0x7f0000001000)=""/212, 0xd4}, {0x0}, {&(0x7f00000012c0)=""/4096, 0x1000}, {0x0}], 0x9, &(0x7f00000000c0)=""/40, 0x28}, 0x7f}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000002480)=""/199, 0xc7}, {&(0x7f00000008c0)=""/55, 0x37}], 0x2, &(0x7f00000025c0)=""/157, 0x9d}, 0x9}, {{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002680)=""/238, 0xee}, {&(0x7f0000002780)=""/37, 0x25}, {&(0x7f00000027c0)=""/240, 0xf0}, {&(0x7f00000028c0)=""/10, 0xa}, {&(0x7f0000002900)=""/202, 0xca}, {&(0x7f0000002a00)=""/247, 0xf7}, {0x0}], 0x7, &(0x7f0000002c80)=""/184, 0xb8}, 0x7}, {{&(0x7f0000002d40)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f0000003040)=[{&(0x7f0000002dc0)=""/18, 0x12}, {&(0x7f0000002e00)=""/213, 0xd5}, {&(0x7f0000002f00)=""/62, 0x3e}, {0x0}, {0x0}, {0x0}, {&(0x7f0000003000)}], 0x7, &(0x7f00000030c0)=""/191, 0xbf}, 0x3}, {{&(0x7f0000003180)=@vsock, 0x80, &(0x7f0000004400)=[{&(0x7f0000007f40)=""/215, 0xd7}, {&(0x7f0000004300)=""/34, 0x22}, {&(0x7f0000004340)=""/28, 0x1c}, {&(0x7f0000004380)=""/108, 0x6c}], 0x4, &(0x7f0000004480)=""/222, 0xde}, 0x6}, {{&(0x7f0000004580)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000004a80)=[{&(0x7f0000004600)=""/120, 0x78}, {&(0x7f0000004700)=""/167, 0xa7}, {&(0x7f0000004800)=""/131, 0x83}, {0x0}, {&(0x7f0000004980)=""/212, 0xd4}], 0x5}, 0x8c2}, {{&(0x7f0000004b00)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000006cc0)=""/4096, 0x1000}, 0x52}], 0x8, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) write$UHID_DESTROY(r5, &(0x7f00000001c0), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x10001, 0xffff}, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x1) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000900)="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", 0x223, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 17:07:29 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x1}) [ 520.331476] IPVS: ftp: loaded support on port[0] = 21 17:07:29 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x413e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x2a4, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000003a00fd0300000000001000000af00000"], 0x14}}, 0x0) r0 = socket(0x10, 0x800000000080003, 0x0) sendmmsg$alg(r0, 0x0, 0x0, 0x0) 17:07:29 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x413e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x2a4, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000003a00fd0300000000001000000af00000"], 0x14}}, 0x0) r0 = socket(0x10, 0x800000000080003, 0x0) sendmmsg$alg(r0, 0x0, 0x0, 0x0) 17:07:29 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x0, 0x0, &(0x7f0000000080)='GPL\x04\x9c5\x14\xbfw-\xa0z\xe8.vY\n6\xf6I>\xc1\xab\x91\xb3\x97\xe4*\xbf\x1e\xa6\xcd\x8c\xd7t\'\xfc\x9a\x9e+qe\xf5+A\a\xbf\bP\xd8\x99\xdcR\xd0\x13\x17]\xdb\x1b/F <*\x05\xb7\"\xe3>Uo\xb2\xe3\xf3\x9a<\xde\x1f\xcaSd\x037\xec\x95aF\xbd\xbf\xcb\x11Pp\x19V1\xde]!\xa5\xea\x9ec\x8c+\xdbx\xa5\x01\xcaKn\xa3\x13\xd8%h\xf98,,?o\xab\xa6\xb4\xeeTy;N\xd2m\xae>R\"P)\xbb*\xc0\x00\x7fwuL?#\xce\xda\x98\t\xb9\xa9hJ\x94\n\xbc\xaa\x8c\xfc\xc7\x13>\xc4\"\xe9\xc88\x881\x8dA\xe9\xa4\x93\xf0\x19_\xe2Y\x96Q\xb8\x95\x04\xf5\xdb\xa1F%\xce#f\xf3=\x95\xdb\xa9/\x86ry\xca\xbfJ\xce\xdd\xc8Z\x8a\xf7\xa0\xfah\xd7g\xceQ6\xb9\xd0\xd1\x96lI\x9c\xb6\xbf4\xc2\x98\x86f\x97\x00'/248, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 520.640121] net_ratelimit: 14 callbacks suppressed [ 520.640126] protocol 88fb is buggy, dev hsr_slave_0 [ 520.645191] protocol 88fb is buggy, dev hsr_slave_1 [ 520.720115] protocol 88fb is buggy, dev hsr_slave_0 [ 520.725247] protocol 88fb is buggy, dev hsr_slave_1 [ 520.800145] protocol 88fb is buggy, dev hsr_slave_0 [ 520.805294] protocol 88fb is buggy, dev hsr_slave_1 17:07:30 executing program 4: ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x22) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = getpid() pipe(0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x2, 0x812a000) tkill(r0, 0x9) r1 = socket$inet6(0xa, 0x400000000803, 0x5f) close(r1) r2 = open(&(0x7f0000000100)='./file1\x00', 0x143042, 0x0) ftruncate(r2, 0x200004) sendfile(r1, r2, 0x0, 0x80001d00c0d0) 17:07:30 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x413e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x2a4, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000003a00fd0300000000001000000af00000"], 0x14}}, 0x0) r0 = socket(0x10, 0x800000000080003, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x0, 0x0) 17:07:30 executing program 1: socket$packet(0x11, 0x1000000000000002, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x280080, 0x0) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000100)) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x15, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, 0x0, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000007cc0)=[{{&(0x7f00000002c0)=@caif=@dbg, 0x80, &(0x7f0000000840)=[{&(0x7f0000000340)=""/251, 0xfb}, {&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000007ec0)=""/108, 0x6c}, {&(0x7f0000000600)=""/241, 0xf1}, {0x0}], 0x5, &(0x7f0000000b40)=""/234, 0xea}, 0xd9b9}, {{&(0x7f0000000c40)=@pppol2tpv3, 0x80, &(0x7f0000002340)=[{&(0x7f0000000cc0)=""/63, 0x3f}, {&(0x7f0000000d40)=""/232, 0xe8}, {&(0x7f0000000e40)=""/77, 0x4d}, {&(0x7f0000000ec0)=""/150, 0x96}, {&(0x7f0000001000)=""/212, 0xd4}, {0x0}, {&(0x7f00000012c0)=""/4096, 0x1000}, {0x0}], 0x8, &(0x7f00000000c0)=""/40, 0x28}, 0x7f}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000002480)=""/199, 0xc7}, {&(0x7f00000008c0)=""/55, 0x37}], 0x2, &(0x7f00000025c0)=""/157, 0x9d}, 0x9}, {{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002680)=""/238, 0xee}, {&(0x7f0000002780)=""/37, 0x25}, {&(0x7f00000027c0)=""/240, 0xf0}, {&(0x7f00000028c0)=""/10, 0xa}, {&(0x7f0000002900)=""/202, 0xca}, {&(0x7f0000002a00)=""/247, 0xf7}, {0x0}], 0x7, &(0x7f0000002c80)=""/184, 0xb8}, 0x7}, {{&(0x7f0000002d40)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f0000003040)=[{&(0x7f0000002dc0)=""/18, 0x12}, {&(0x7f0000002e00)=""/213, 0xd5}, {&(0x7f0000002f00)=""/62, 0x3e}, {0x0}, {0x0}, {&(0x7f0000002fc0)=""/31, 0x1f}, {&(0x7f0000003000)}], 0x7, &(0x7f00000030c0)=""/191, 0xbf}, 0x3}, {{&(0x7f0000003180)=@vsock, 0x80, &(0x7f0000004400)=[{&(0x7f0000007f40)=""/215, 0xd7}, {&(0x7f0000004300)=""/34, 0x22}, {&(0x7f0000004340)=""/28, 0x1c}, {&(0x7f0000004380)=""/108, 0x6c}], 0x4, &(0x7f0000004480)=""/222, 0xde}, 0x6}, {{&(0x7f0000004580)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000004a80)=[{&(0x7f0000004600)=""/120, 0x78}, {&(0x7f0000004700)=""/167, 0xa7}, {&(0x7f0000004800)=""/131, 0x83}, {0x0}, {&(0x7f0000004980)=""/212, 0xd4}], 0x5}, 0x8c2}, {{&(0x7f0000004b00)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000006cc0)=""/4096, 0x1000}, 0x52}], 0x8, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) write$UHID_DESTROY(r5, &(0x7f00000001c0), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x10001, 0xffff}, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x1) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000900)="585ccbc4ed83b836c1a6474914dc5500b66147b3c7218a91690000000042e3d35228897501f93191b076ac446ff0022b8753a1fa748c569f435fb3bae96efb74b50ec93c2db8eae3198a29e5c0cfc60000ce0637cef580b4ec61221adf59be045b70e48884ca000018cea71fcfed06fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff33c1e8e036e5031949762d009d308bd73f477252d0000000000004000000000000000000000000000000000195e23fb4430a9a4c2850b6380a743d6ea0c3b121f66c716d746aa81c301621b7662c06aae720b872d4b7828e3b48522c673aa6cb366d4201e2aee3261eb52f14533b7a54203cf9a4fa587c0385cdba539e9bd34717b0dfab09db7b064fbe2ecf9f40fa3a4015d0d0db3f9d562686fcdc3342c88c6f1b6f11449f8aeabf54c5533ec6acc2270d41713ae1538256af3719a07f55223a6eaa7c1eae5d6efa12fe95e2b0f1c500b28c5c76e731d5250e395526d04063718f448e62d4dd7cefeed6b72b31b894093aa37337784c00d68a4185f349e41455f12d31aa2d0ff79a4d69d97421a0042f0c7a664a8c4945104b25dc49be950c5af7405b86482d7314fcc3a0ad5eb24268ccd24a2996019f7c006a0b3c39c7b98c5a5406a2e4ff6d9c0ce12c4251756a667b4731c4b0eb5dc7d4381fecf196c4404b54c3c11c48f09734d9a6842f52d3307a688208b7a4681b101e1abe5fecfca1f464c03e933cbd15ab589ccd3c559542355190522a712b8f5128a6a00", 0x223, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 17:07:30 executing program 3: socket$packet(0x11, 0x1000000000000002, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x280080, 0x0) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000100)) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x15, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000003200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x680, 0x478, 0x210, 0x478, 0x0, 0x340, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x6, &(0x7f0000000580), {[{{@uncond, 0x0, 0xc8, 0x108}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "3c745d713ded54eb04d1bcfe4ec5e3722f760ca03b47ed1d735abcf07e43"}}, {{@uncond, 0x0, 0xc8, 0x108}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3, 0x38000, @ipv6=@rand_addr="f65360ce35d79792c798d9967e3df2d3", 0x4e21}}}, {{@ipv6={@empty, @mcast1, [0xffffff00, 0xffffff00, 0xff, 0xff000000], [0xff, 0x0, 0x17fffff01, 0xffffffff], 'rose0\x00', 'ipddp0\x00', {}, {}, 0x67, 0x9, 0x4, 0x1}, 0x0, 0xf0, 0x130, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0xe}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x5, 0x5, @ipv6=@ipv4={[], [], @empty}, 0x4e21}}}, {{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@ipv6header={0x28, 'ipv6header\x00', 0x0, {0x40, 0x20, 0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@multicast2, @ipv6=@empty, 0x2e, 0x26, 0x9}}}, {{@ipv6={@mcast1, @remote, [0xffffffff, 0xff000000, 0x7f000080, 0xff000000], [0xffffff00, 0xffffff00], 'ip6tnl0\x00', 'ip6tnl0\x00', {}, {}, 0xff, 0x1, 0x0, 0x63}, 0x0, 0xf0, 0x138, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@empty, @ipv4=@local, 0x37, 0x3b, 0x1}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6e0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000007cc0)=[{{&(0x7f00000002c0)=@caif=@dbg, 0x80, &(0x7f0000000840)=[{&(0x7f0000000340)=""/251, 0xfb}, {&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000007ec0)=""/108, 0x6c}, {&(0x7f0000000600)=""/241, 0xf1}, {0x0}], 0x5, &(0x7f0000000b40)=""/234, 0xea}, 0xd9b9}, {{&(0x7f0000000c40)=@pppol2tpv3, 0x80, &(0x7f0000002340)=[{&(0x7f0000000cc0)=""/63, 0x3f}, {&(0x7f0000000d40)=""/232, 0xe8}, {&(0x7f0000000e40)=""/77, 0x4d}, {&(0x7f0000000ec0)=""/150, 0x96}, {&(0x7f0000000f80)=""/116, 0x74}, {&(0x7f0000001000)=""/212, 0xd4}, {0x0}, {&(0x7f00000012c0)=""/4096, 0x1000}, {0x0}], 0x9, &(0x7f00000000c0)=""/40, 0x28}, 0x7f}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000002480)=""/199, 0xc7}, {&(0x7f00000008c0)=""/55, 0x37}], 0x2, &(0x7f00000025c0)=""/157, 0x9d}, 0x9}, {{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002680)=""/238, 0xee}, {&(0x7f0000002780)=""/37, 0x25}, {&(0x7f00000027c0)=""/240, 0xf0}, {&(0x7f00000028c0)=""/10, 0xa}, {&(0x7f0000002900)=""/202, 0xca}, {&(0x7f0000002a00)=""/247, 0xf7}, {0x0}], 0x7, &(0x7f0000002c80)=""/184, 0xb8}, 0x7}, {{&(0x7f0000002d40)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f0000003040)=[{&(0x7f0000002dc0)=""/18, 0x12}, {&(0x7f0000002e00)=""/213, 0xd5}, {0x0}, {0x0}, {&(0x7f0000002fc0)=""/31, 0x1f}, {&(0x7f0000003000)}], 0x6, &(0x7f00000030c0)=""/191, 0xbf}, 0x3}, {{&(0x7f0000003180)=@vsock, 0x80, &(0x7f0000004400)=[{&(0x7f0000007f40)=""/215, 0xd7}, {&(0x7f0000004300)=""/34, 0x22}, {&(0x7f0000004340)=""/28, 0x1c}, {&(0x7f0000004380)=""/108, 0x6c}], 0x4, &(0x7f0000004480)=""/222, 0xde}, 0x6}, {{&(0x7f0000004580)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000004a80)=[{&(0x7f0000004600)=""/120, 0x78}, {&(0x7f0000004700)=""/167, 0xa7}, {&(0x7f0000004800)=""/131, 0x83}, {0x0}, {&(0x7f0000004980)=""/212, 0xd4}], 0x5}, 0x8c2}, {{&(0x7f0000004b00)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000006cc0)=""/4096, 0x1000}, 0x52}], 0x8, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) write$UHID_DESTROY(r5, &(0x7f00000001c0), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x10001, 0xffff}, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x1) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000900)="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", 0x223, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 17:07:30 executing program 0: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) preadv(r0, &(0x7f0000000740)=[{&(0x7f0000000480)=""/164, 0xa4}], 0x1, 0x0) mknod$loop(&(0x7f00000001c0)='./file0/file1\x00', 0x0, 0xffffffffffffffff) read$FUSE(r0, &(0x7f0000000780), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1, {0x7, 0x1e}}, 0x50) read$FUSE(r0, &(0x7f0000001780), 0x1000) write$FUSE_ENTRY(r0, &(0x7f00000005c0)={0x90, 0x0, 0x2, {0x0, 0x0, 0x0, 0x0, 0x400}}, 0x90) write$FUSE_ENTRY(r0, &(0x7f0000000380)={0x90, 0x0, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x4}}}, 0x90) 17:07:30 executing program 2: socket$packet(0x11, 0x1000000000000002, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x280080, 0x0) ioctl$RTC_VL_READ(r0, 0x80047013, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x15, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000003200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x680, 0x478, 0x210, 0x478, 0x0, 0x340, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x6, 0x0, {[{{@uncond, 0x0, 0xc8, 0x108}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "3c745d713ded54eb04d1bcfe4ec5e3722f760ca03b47ed1d735abcf07e43"}}, {{@uncond, 0x0, 0xc8, 0x108}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3, 0x38000, @ipv6=@rand_addr="f65360ce35d79792c798d9967e3df2d3", 0x4e21}}}, {{@ipv6={@empty, @mcast1, [0xffffff00, 0xffffff00, 0xff, 0xff000000], [0xff, 0x0, 0x17fffff01, 0xffffffff], 'rose0\x00', 'ipddp0\x00', {}, {}, 0x67, 0x9, 0x4, 0x1}, 0x0, 0xf0, 0x130, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0xe}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x5, 0x5, @ipv6=@ipv4={[], [], @empty}, 0x4e21}}}, {{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@ipv6header={0x28, 'ipv6header\x00', 0x0, {0x40, 0x20, 0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@multicast2, @ipv6=@empty, 0x2e, 0x26, 0x9}}}, {{@ipv6={@mcast1, @remote, [0xffffffff, 0xff000000, 0x7f000080, 0xff000000], [0xffffff00, 0xffffff00], 'ip6tnl0\x00', 'ip6tnl0\x00', {}, {}, 0xff, 0x1, 0x0, 0x63}, 0x0, 0xf0, 0x138, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@empty, @ipv4=@local, 0x37, 0x3b, 0x1}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6e0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000007cc0)=[{{&(0x7f00000002c0)=@caif=@dbg, 0x80, &(0x7f0000000840)=[{&(0x7f0000000340)=""/251, 0xfb}, {&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000007ec0)=""/108, 0x6c}, {&(0x7f0000000600)=""/241, 0xf1}, {0x0}], 0x5, &(0x7f0000000b40)=""/234, 0xea}, 0xd9b9}, {{&(0x7f0000000c40)=@pppol2tpv3, 0x80, &(0x7f0000002340)=[{&(0x7f0000000cc0)=""/63, 0x3f}, {&(0x7f0000000d40)=""/232, 0xe8}, {&(0x7f0000000e40)=""/77, 0x4d}, {&(0x7f0000000ec0)=""/150, 0x96}, {&(0x7f0000000f80)=""/116, 0x74}, {&(0x7f0000001000)=""/212, 0xd4}, {0x0}, {&(0x7f00000012c0)=""/4096, 0x1000}, {0x0}], 0x9, &(0x7f00000000c0)=""/40, 0x28}, 0x7f}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000002480)=""/199, 0xc7}, {&(0x7f00000008c0)=""/55, 0x37}], 0x2, &(0x7f00000025c0)=""/157, 0x9d}, 0x9}, {{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002680)=""/238, 0xee}, {&(0x7f0000002780)=""/37, 0x25}, {&(0x7f00000027c0)=""/240, 0xf0}, {&(0x7f00000028c0)=""/10, 0xa}, {&(0x7f0000002900)=""/202, 0xca}, {&(0x7f0000002a00)=""/247, 0xf7}, {0x0}], 0x7, &(0x7f0000002c80)=""/184, 0xb8}, 0x7}, {{&(0x7f0000002d40)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f0000003040)=[{&(0x7f0000002dc0)=""/18, 0x12}, {&(0x7f0000002e00)=""/213, 0xd5}, {&(0x7f0000002f00)=""/62, 0x3e}, {0x0}, {&(0x7f0000002fc0)=""/31, 0x1f}, {&(0x7f0000003000)}], 0x6, &(0x7f00000030c0)=""/191, 0xbf}, 0x3}, {{&(0x7f0000003180)=@vsock, 0x80, &(0x7f0000004400)=[{&(0x7f0000007f40)=""/215, 0xd7}, {&(0x7f0000004300)=""/34, 0x22}, {&(0x7f0000004340)=""/28, 0x1c}, {&(0x7f0000004380)=""/108, 0x6c}], 0x4, &(0x7f0000004480)=""/222, 0xde}, 0x6}, {{&(0x7f0000004580)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000004a80)=[{&(0x7f0000004600)=""/120, 0x78}, {&(0x7f0000004700)=""/167, 0xa7}, {&(0x7f0000004800)=""/131, 0x83}, {0x0}, {&(0x7f0000004980)=""/212, 0xd4}], 0x5}, 0x8c2}, {{&(0x7f0000004b00)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000006cc0)=""/4096, 0x1000}, 0x52}], 0x8, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) write$UHID_DESTROY(r5, &(0x7f00000001c0), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x10001, 0xffff}, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x1) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000900)="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", 0x223, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 17:07:30 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x413e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x2a4, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000003a00fd0300000000001000000af00000"], 0x14}}, 0x0) r0 = socket(0x10, 0x800000000080003, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x0, 0x0) 17:07:30 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x413e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x2a4, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000003a00fd0300000000001000000af00000"], 0x14}}, 0x0) r0 = socket(0x10, 0x800000000080003, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x0, 0x0) 17:07:30 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x413e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x2a4, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000003a00fd0300000000001000000af00000"], 0x14}}, 0x0) r0 = socket(0x10, 0x800000000080003, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0xd2efff7f00000000, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18}, @op={0x18}], 0x30}], 0x1, 0x0) 17:07:30 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x413e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x2a4, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000003a00fd0300000000001000000af00000"], 0x14}}, 0x0) r0 = socket(0x10, 0x800000000080003, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0xd2efff7f00000000, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18}, @op={0x18}], 0x30}], 0x1, 0x0) 17:07:30 executing program 2: socket$packet(0x11, 0x1000000000000002, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x280080, 0x0) ioctl$RTC_VL_READ(r0, 0x80047013, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x15, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000003200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x680, 0x478, 0x210, 0x478, 0x0, 0x340, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x6, 0x0, {[{{@uncond, 0x0, 0xc8, 0x108}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "3c745d713ded54eb04d1bcfe4ec5e3722f760ca03b47ed1d735abcf07e43"}}, {{@uncond, 0x0, 0xc8, 0x108}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3, 0x38000, @ipv6=@rand_addr="f65360ce35d79792c798d9967e3df2d3", 0x4e21}}}, {{@ipv6={@empty, @mcast1, [0xffffff00, 0xffffff00, 0xff, 0xff000000], [0xff, 0x0, 0x17fffff01, 0xffffffff], 'rose0\x00', 'ipddp0\x00', {}, {}, 0x67, 0x9, 0x4, 0x1}, 0x0, 0xf0, 0x130, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0xe}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x5, 0x5, @ipv6=@ipv4={[], [], @empty}, 0x4e21}}}, {{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@ipv6header={0x28, 'ipv6header\x00', 0x0, {0x40, 0x20, 0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@multicast2, @ipv6=@empty, 0x2e, 0x26, 0x9}}}, {{@ipv6={@mcast1, @remote, [0xffffffff, 0xff000000, 0x7f000080, 0xff000000], [0xffffff00, 0xffffff00], 'ip6tnl0\x00', 'ip6tnl0\x00', {}, {}, 0xff, 0x1, 0x0, 0x63}, 0x0, 0xf0, 0x138, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@empty, @ipv4=@local, 0x37, 0x3b, 0x1}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6e0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000007cc0)=[{{&(0x7f00000002c0)=@caif=@dbg, 0x80, &(0x7f0000000840)=[{&(0x7f0000000340)=""/251, 0xfb}, {&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000007ec0)=""/108, 0x6c}, {&(0x7f0000000600)=""/241, 0xf1}, {0x0}], 0x5, &(0x7f0000000b40)=""/234, 0xea}, 0xd9b9}, {{&(0x7f0000000c40)=@pppol2tpv3, 0x80, &(0x7f0000002340)=[{&(0x7f0000000cc0)=""/63, 0x3f}, {&(0x7f0000000d40)=""/232, 0xe8}, {&(0x7f0000000e40)=""/77, 0x4d}, {&(0x7f0000000ec0)=""/150, 0x96}, {&(0x7f0000000f80)=""/116, 0x74}, {&(0x7f0000001000)=""/212, 0xd4}, {0x0}, {&(0x7f00000012c0)=""/4096, 0x1000}, {0x0}], 0x9, &(0x7f00000000c0)=""/40, 0x28}, 0x7f}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000002480)=""/199, 0xc7}, {&(0x7f00000008c0)=""/55, 0x37}], 0x2, &(0x7f00000025c0)=""/157, 0x9d}, 0x9}, {{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002680)=""/238, 0xee}, {&(0x7f0000002780)=""/37, 0x25}, {&(0x7f00000027c0)=""/240, 0xf0}, {&(0x7f00000028c0)=""/10, 0xa}, {&(0x7f0000002900)=""/202, 0xca}, {&(0x7f0000002a00)=""/247, 0xf7}, {0x0}], 0x7, &(0x7f0000002c80)=""/184, 0xb8}, 0x7}, {{&(0x7f0000002d40)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f0000003040)=[{&(0x7f0000002dc0)=""/18, 0x12}, {&(0x7f0000002e00)=""/213, 0xd5}, {&(0x7f0000002f00)=""/62, 0x3e}, {0x0}, {&(0x7f0000002fc0)=""/31, 0x1f}, {&(0x7f0000003000)}], 0x6, &(0x7f00000030c0)=""/191, 0xbf}, 0x3}, {{&(0x7f0000003180)=@vsock, 0x80, &(0x7f0000004400)=[{&(0x7f0000007f40)=""/215, 0xd7}, {&(0x7f0000004300)=""/34, 0x22}, {&(0x7f0000004340)=""/28, 0x1c}, {&(0x7f0000004380)=""/108, 0x6c}], 0x4, &(0x7f0000004480)=""/222, 0xde}, 0x6}, {{&(0x7f0000004580)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000004a80)=[{&(0x7f0000004600)=""/120, 0x78}, {&(0x7f0000004700)=""/167, 0xa7}, {&(0x7f0000004800)=""/131, 0x83}, {0x0}, {&(0x7f0000004980)=""/212, 0xd4}], 0x5}, 0x8c2}, {{&(0x7f0000004b00)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000006cc0)=""/4096, 0x1000}, 0x52}], 0x8, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) write$UHID_DESTROY(r5, &(0x7f00000001c0), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x10001, 0xffff}, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x1) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000900)="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", 0x223, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 17:07:30 executing program 3: socket$packet(0x11, 0x1000000000000002, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x280080, 0x0) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000100)) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x15, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000003200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x680, 0x478, 0x210, 0x478, 0x0, 0x340, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x6, &(0x7f0000000580), {[{{@uncond, 0x0, 0xc8, 0x108}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "3c745d713ded54eb04d1bcfe4ec5e3722f760ca03b47ed1d735abcf07e43"}}, {{@uncond, 0x0, 0xc8, 0x108}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3, 0x38000, @ipv6=@rand_addr="f65360ce35d79792c798d9967e3df2d3", 0x4e21}}}, {{@ipv6={@empty, @mcast1, [0xffffff00, 0xffffff00, 0xff, 0xff000000], [0xff, 0x0, 0x17fffff01, 0xffffffff], 'rose0\x00', 'ipddp0\x00', {}, {}, 0x67, 0x9, 0x4, 0x1}, 0x0, 0xf0, 0x130, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0xe}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x5, 0x5, @ipv6=@ipv4={[], [], @empty}, 0x4e21}}}, {{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@ipv6header={0x28, 'ipv6header\x00', 0x0, {0x40, 0x20, 0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@multicast2, @ipv6=@empty, 0x2e, 0x26, 0x9}}}, {{@ipv6={@mcast1, @remote, [0xffffffff, 0xff000000, 0x7f000080, 0xff000000], [0xffffff00, 0xffffff00], 'ip6tnl0\x00', 'ip6tnl0\x00', {}, {}, 0xff, 0x1, 0x0, 0x63}, 0x0, 0xf0, 0x138, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@empty, @ipv4=@local, 0x37, 0x3b, 0x1}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6e0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000007cc0)=[{{&(0x7f00000002c0)=@caif=@dbg, 0x80, &(0x7f0000000840)=[{&(0x7f0000000340)=""/251, 0xfb}, {&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000007ec0)=""/108, 0x6c}, {&(0x7f0000000600)=""/241, 0xf1}, {0x0}], 0x5, &(0x7f0000000b40)=""/234, 0xea}, 0xd9b9}, {{&(0x7f0000000c40)=@pppol2tpv3, 0x80, &(0x7f0000002340)=[{&(0x7f0000000cc0)=""/63, 0x3f}, {&(0x7f0000000d40)=""/232, 0xe8}, {&(0x7f0000000e40)=""/77, 0x4d}, {&(0x7f0000000ec0)=""/150, 0x96}, {&(0x7f0000000f80)=""/116, 0x74}, {&(0x7f0000001000)=""/212, 0xd4}, {0x0}, {&(0x7f00000012c0)=""/4096, 0x1000}, {0x0}], 0x9, &(0x7f00000000c0)=""/40, 0x28}, 0x7f}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000002480)=""/199, 0xc7}, {&(0x7f00000008c0)=""/55, 0x37}], 0x2, &(0x7f00000025c0)=""/157, 0x9d}, 0x9}, {{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002680)=""/238, 0xee}, {&(0x7f0000002780)=""/37, 0x25}, {&(0x7f00000027c0)=""/240, 0xf0}, {&(0x7f00000028c0)=""/10, 0xa}, {&(0x7f0000002900)=""/202, 0xca}, {&(0x7f0000002a00)=""/247, 0xf7}, {0x0}], 0x7, &(0x7f0000002c80)=""/184, 0xb8}, 0x7}, {{&(0x7f0000002d40)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f0000003040)=[{&(0x7f0000002dc0)=""/18, 0x12}, {&(0x7f0000002e00)=""/213, 0xd5}, {0x0}, {0x0}, {&(0x7f0000002fc0)=""/31, 0x1f}, {&(0x7f0000003000)}], 0x6, &(0x7f00000030c0)=""/191, 0xbf}, 0x3}, {{&(0x7f0000003180)=@vsock, 0x80, &(0x7f0000004400)=[{&(0x7f0000007f40)=""/215, 0xd7}, {&(0x7f0000004300)=""/34, 0x22}, {&(0x7f0000004340)=""/28, 0x1c}, {&(0x7f0000004380)=""/108, 0x6c}], 0x4, &(0x7f0000004480)=""/222, 0xde}, 0x6}, {{&(0x7f0000004580)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000004a80)=[{&(0x7f0000004600)=""/120, 0x78}, {&(0x7f0000004700)=""/167, 0xa7}, {&(0x7f0000004800)=""/131, 0x83}, {0x0}, {&(0x7f0000004980)=""/212, 0xd4}], 0x5}, 0x8c2}, {{&(0x7f0000004b00)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000006cc0)=""/4096, 0x1000}, 0x52}], 0x8, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) write$UHID_DESTROY(r5, &(0x7f00000001c0), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x10001, 0xffff}, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x1) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000900)="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", 0x223, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) [ 521.760130] protocol 88fb is buggy, dev hsr_slave_0 [ 521.765261] protocol 88fb is buggy, dev hsr_slave_1 17:07:31 executing program 4: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) write$P9_RATTACH(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x20000000000001cb, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) creat(0x0, 0x0) pipe2$9p(0x0, 0x0) 17:07:31 executing program 1: socket$packet(0x11, 0x1000000000000002, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x280080, 0x0) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000100)) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x15, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, 0x0, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000007cc0)=[{{&(0x7f00000002c0)=@caif=@dbg, 0x80, &(0x7f0000000840)=[{&(0x7f0000000340)=""/251, 0xfb}, {&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000007ec0)=""/108, 0x6c}, {&(0x7f0000000600)=""/241, 0xf1}, {0x0}], 0x5, &(0x7f0000000b40)=""/234, 0xea}, 0xd9b9}, {{&(0x7f0000000c40)=@pppol2tpv3, 0x80, &(0x7f0000002340)=[{&(0x7f0000000cc0)=""/63, 0x3f}, {&(0x7f0000000d40)=""/232, 0xe8}, {&(0x7f0000000e40)=""/77, 0x4d}, {&(0x7f0000000ec0)=""/150, 0x96}, {&(0x7f0000001000)=""/212, 0xd4}, {0x0}, {&(0x7f00000012c0)=""/4096, 0x1000}, {0x0}], 0x8, &(0x7f00000000c0)=""/40, 0x28}, 0x7f}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000002480)=""/199, 0xc7}, {&(0x7f00000008c0)=""/55, 0x37}], 0x2, &(0x7f00000025c0)=""/157, 0x9d}, 0x9}, {{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002680)=""/238, 0xee}, {&(0x7f0000002780)=""/37, 0x25}, {&(0x7f00000027c0)=""/240, 0xf0}, {&(0x7f00000028c0)=""/10, 0xa}, {&(0x7f0000002900)=""/202, 0xca}, {&(0x7f0000002a00)=""/247, 0xf7}, {0x0}], 0x7, &(0x7f0000002c80)=""/184, 0xb8}, 0x7}, {{&(0x7f0000002d40)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f0000003040)=[{&(0x7f0000002dc0)=""/18, 0x12}, {&(0x7f0000002e00)=""/213, 0xd5}, {&(0x7f0000002f00)=""/62, 0x3e}, {0x0}, {0x0}, {&(0x7f0000002fc0)=""/31, 0x1f}, {&(0x7f0000003000)}], 0x7, &(0x7f00000030c0)=""/191, 0xbf}, 0x3}, {{&(0x7f0000003180)=@vsock, 0x80, &(0x7f0000004400)=[{&(0x7f0000007f40)=""/215, 0xd7}, {&(0x7f0000004300)=""/34, 0x22}, {&(0x7f0000004340)=""/28, 0x1c}, {&(0x7f0000004380)=""/108, 0x6c}], 0x4, &(0x7f0000004480)=""/222, 0xde}, 0x6}, {{&(0x7f0000004580)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000004a80)=[{&(0x7f0000004600)=""/120, 0x78}, {&(0x7f0000004700)=""/167, 0xa7}, {&(0x7f0000004800)=""/131, 0x83}, {0x0}, {&(0x7f0000004980)=""/212, 0xd4}], 0x5}, 0x8c2}, {{&(0x7f0000004b00)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000006cc0)=""/4096, 0x1000}, 0x52}], 0x8, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) write$UHID_DESTROY(r5, &(0x7f00000001c0), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x10001, 0xffff}, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x1) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000900)="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", 0x223, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 17:07:31 executing program 0: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) preadv(r0, &(0x7f0000000740)=[{&(0x7f0000000480)=""/164, 0xa4}], 0x1, 0x0) mknod$loop(&(0x7f00000001c0)='./file0/file1\x00', 0x0, 0xffffffffffffffff) read$FUSE(r0, &(0x7f0000000780), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1, {0x7, 0x1e}}, 0x50) read$FUSE(r0, &(0x7f0000001780), 0x1000) write$FUSE_ENTRY(r0, &(0x7f00000005c0)={0x90, 0x0, 0x2, {0x0, 0x0, 0x0, 0x0, 0x400}}, 0x90) write$FUSE_ENTRY(r0, &(0x7f0000000380)={0x90, 0x0, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x4}}}, 0x90) 17:07:31 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x413e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x2a4, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000003a00fd0300000000001000000af00000"], 0x14}}, 0x0) r0 = socket(0x10, 0x800000000080003, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0xd2efff7f00000000, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18}, @op={0x18}], 0x30}], 0x1, 0x0) 17:07:31 executing program 2: socket$packet(0x11, 0x1000000000000002, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x280080, 0x0) ioctl$RTC_VL_READ(r0, 0x80047013, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x15, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000003200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x680, 0x478, 0x210, 0x478, 0x0, 0x340, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x6, 0x0, {[{{@uncond, 0x0, 0xc8, 0x108}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "3c745d713ded54eb04d1bcfe4ec5e3722f760ca03b47ed1d735abcf07e43"}}, {{@uncond, 0x0, 0xc8, 0x108}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3, 0x38000, @ipv6=@rand_addr="f65360ce35d79792c798d9967e3df2d3", 0x4e21}}}, {{@ipv6={@empty, @mcast1, [0xffffff00, 0xffffff00, 0xff, 0xff000000], [0xff, 0x0, 0x17fffff01, 0xffffffff], 'rose0\x00', 'ipddp0\x00', {}, {}, 0x67, 0x9, 0x4, 0x1}, 0x0, 0xf0, 0x130, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0xe}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x5, 0x5, @ipv6=@ipv4={[], [], @empty}, 0x4e21}}}, {{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@ipv6header={0x28, 'ipv6header\x00', 0x0, {0x40, 0x20, 0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@multicast2, @ipv6=@empty, 0x2e, 0x26, 0x9}}}, {{@ipv6={@mcast1, @remote, [0xffffffff, 0xff000000, 0x7f000080, 0xff000000], [0xffffff00, 0xffffff00], 'ip6tnl0\x00', 'ip6tnl0\x00', {}, {}, 0xff, 0x1, 0x0, 0x63}, 0x0, 0xf0, 0x138, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@empty, @ipv4=@local, 0x37, 0x3b, 0x1}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6e0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000007cc0)=[{{&(0x7f00000002c0)=@caif=@dbg, 0x80, &(0x7f0000000840)=[{&(0x7f0000000340)=""/251, 0xfb}, {&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000007ec0)=""/108, 0x6c}, {&(0x7f0000000600)=""/241, 0xf1}, {0x0}], 0x5, &(0x7f0000000b40)=""/234, 0xea}, 0xd9b9}, {{&(0x7f0000000c40)=@pppol2tpv3, 0x80, &(0x7f0000002340)=[{&(0x7f0000000cc0)=""/63, 0x3f}, {&(0x7f0000000d40)=""/232, 0xe8}, {&(0x7f0000000e40)=""/77, 0x4d}, {&(0x7f0000000ec0)=""/150, 0x96}, {&(0x7f0000000f80)=""/116, 0x74}, {&(0x7f0000001000)=""/212, 0xd4}, {0x0}, {&(0x7f00000012c0)=""/4096, 0x1000}, {0x0}], 0x9, &(0x7f00000000c0)=""/40, 0x28}, 0x7f}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000002480)=""/199, 0xc7}, {&(0x7f00000008c0)=""/55, 0x37}], 0x2, &(0x7f00000025c0)=""/157, 0x9d}, 0x9}, {{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002680)=""/238, 0xee}, {&(0x7f0000002780)=""/37, 0x25}, {&(0x7f00000027c0)=""/240, 0xf0}, {&(0x7f00000028c0)=""/10, 0xa}, {&(0x7f0000002900)=""/202, 0xca}, {&(0x7f0000002a00)=""/247, 0xf7}, {0x0}], 0x7, &(0x7f0000002c80)=""/184, 0xb8}, 0x7}, {{&(0x7f0000002d40)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f0000003040)=[{&(0x7f0000002dc0)=""/18, 0x12}, {&(0x7f0000002e00)=""/213, 0xd5}, {&(0x7f0000002f00)=""/62, 0x3e}, {0x0}, {&(0x7f0000002fc0)=""/31, 0x1f}, {&(0x7f0000003000)}], 0x6, &(0x7f00000030c0)=""/191, 0xbf}, 0x3}, {{&(0x7f0000003180)=@vsock, 0x80, &(0x7f0000004400)=[{&(0x7f0000007f40)=""/215, 0xd7}, {&(0x7f0000004300)=""/34, 0x22}, {&(0x7f0000004340)=""/28, 0x1c}, {&(0x7f0000004380)=""/108, 0x6c}], 0x4, &(0x7f0000004480)=""/222, 0xde}, 0x6}, {{&(0x7f0000004580)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000004a80)=[{&(0x7f0000004600)=""/120, 0x78}, {&(0x7f0000004700)=""/167, 0xa7}, {&(0x7f0000004800)=""/131, 0x83}, {0x0}, {&(0x7f0000004980)=""/212, 0xd4}], 0x5}, 0x8c2}, {{&(0x7f0000004b00)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000006cc0)=""/4096, 0x1000}, 0x52}], 0x8, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) write$UHID_DESTROY(r5, &(0x7f00000001c0), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x10001, 0xffff}, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x1) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000900)="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", 0x223, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 17:07:31 executing program 3: socket$packet(0x11, 0x1000000000000002, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x280080, 0x0) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000100)) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x15, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000003200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x680, 0x478, 0x210, 0x478, 0x0, 0x340, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x6, &(0x7f0000000580), {[{{@uncond, 0x0, 0xc8, 0x108}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "3c745d713ded54eb04d1bcfe4ec5e3722f760ca03b47ed1d735abcf07e43"}}, {{@uncond, 0x0, 0xc8, 0x108}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3, 0x38000, @ipv6=@rand_addr="f65360ce35d79792c798d9967e3df2d3", 0x4e21}}}, {{@ipv6={@empty, @mcast1, [0xffffff00, 0xffffff00, 0xff, 0xff000000], [0xff, 0x0, 0x17fffff01, 0xffffffff], 'rose0\x00', 'ipddp0\x00', {}, {}, 0x67, 0x9, 0x4, 0x1}, 0x0, 0xf0, 0x130, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0xe}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x5, 0x5, @ipv6=@ipv4={[], [], @empty}, 0x4e21}}}, {{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@ipv6header={0x28, 'ipv6header\x00', 0x0, {0x40, 0x20, 0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@multicast2, @ipv6=@empty, 0x2e, 0x26, 0x9}}}, {{@ipv6={@mcast1, @remote, [0xffffffff, 0xff000000, 0x7f000080, 0xff000000], [0xffffff00, 0xffffff00], 'ip6tnl0\x00', 'ip6tnl0\x00', {}, {}, 0xff, 0x1, 0x0, 0x63}, 0x0, 0xf0, 0x138, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@empty, @ipv4=@local, 0x37, 0x3b, 0x1}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6e0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000007cc0)=[{{&(0x7f00000002c0)=@caif=@dbg, 0x80, &(0x7f0000000840)=[{&(0x7f0000000340)=""/251, 0xfb}, {&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000007ec0)=""/108, 0x6c}, {&(0x7f0000000600)=""/241, 0xf1}, {0x0}], 0x5, &(0x7f0000000b40)=""/234, 0xea}, 0xd9b9}, {{&(0x7f0000000c40)=@pppol2tpv3, 0x80, &(0x7f0000002340)=[{&(0x7f0000000cc0)=""/63, 0x3f}, {&(0x7f0000000d40)=""/232, 0xe8}, {&(0x7f0000000e40)=""/77, 0x4d}, {&(0x7f0000000ec0)=""/150, 0x96}, {&(0x7f0000000f80)=""/116, 0x74}, {&(0x7f0000001000)=""/212, 0xd4}, {0x0}, {&(0x7f00000012c0)=""/4096, 0x1000}, {0x0}], 0x9, &(0x7f00000000c0)=""/40, 0x28}, 0x7f}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000002480)=""/199, 0xc7}, {&(0x7f00000008c0)=""/55, 0x37}], 0x2, &(0x7f00000025c0)=""/157, 0x9d}, 0x9}, {{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002680)=""/238, 0xee}, {&(0x7f0000002780)=""/37, 0x25}, {&(0x7f00000027c0)=""/240, 0xf0}, {&(0x7f00000028c0)=""/10, 0xa}, {&(0x7f0000002900)=""/202, 0xca}, {&(0x7f0000002a00)=""/247, 0xf7}, {0x0}], 0x7, &(0x7f0000002c80)=""/184, 0xb8}, 0x7}, {{&(0x7f0000002d40)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f0000003040)=[{&(0x7f0000002dc0)=""/18, 0x12}, {&(0x7f0000002e00)=""/213, 0xd5}, {0x0}, {0x0}, {0x0}, {&(0x7f0000002fc0)=""/31, 0x1f}, {&(0x7f0000003000)}], 0x7, &(0x7f00000030c0)=""/191, 0xbf}, 0x3}, {{&(0x7f0000003180)=@vsock, 0x80, &(0x7f0000004400)=[{&(0x7f0000007f40)=""/215, 0xd7}, {&(0x7f0000004300)=""/34, 0x22}, {&(0x7f0000004340)=""/28, 0x1c}, {&(0x7f0000004380)=""/108, 0x6c}], 0x4, &(0x7f0000004480)=""/222, 0xde}, 0x6}, {{&(0x7f0000004580)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000004a80)=[{&(0x7f0000004600)=""/120, 0x78}, {&(0x7f0000004700)=""/167, 0xa7}, {&(0x7f0000004800)=""/131, 0x83}, {0x0}, {&(0x7f0000004980)=""/212, 0xd4}], 0x5}, 0x8c2}, {{&(0x7f0000004b00)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000006cc0)=""/4096, 0x1000}, 0x52}], 0x8, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) write$UHID_DESTROY(r5, &(0x7f00000001c0), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x10001, 0xffff}, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x1) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000900)="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", 0x223, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 17:07:31 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x413e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x2a4, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000003a00fd0300000000001000000af00000"], 0x14}}, 0x0) r0 = socket(0x10, 0x800000000080003, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0xd2efff7f00000000, &(0x7f0000000100)}], 0x1, 0x0) 17:07:31 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x413e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x2a4, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000003a00fd0300000000001000000af00000"], 0x14}}, 0x0) r0 = socket(0x10, 0x800000000080003, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0xd2efff7f00000000, &(0x7f0000000100)}], 0x1, 0x0) 17:07:31 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x413e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x2a4, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000003a00fd0300000000001000000af00000"], 0x14}}, 0x0) r0 = socket(0x10, 0x800000000080003, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0xd2efff7f00000000, &(0x7f0000000100)}], 0x1, 0x0) 17:07:31 executing program 4: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)) r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r1, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) ftruncate(r0, 0x48280) open(&(0x7f00000002c0)='./bus\x00', 0x40000, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) socket(0x10, 0x0, 0x0) r2 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) statfs(&(0x7f0000000100)='./file0\x00', &(0x7f0000000800)=""/182) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000200)={0x0, r2, 0x9, 0xffffffe4, 0x0, 0x4}) 17:07:31 executing program 3: socket$packet(0x11, 0x1000000000000002, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x280080, 0x0) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000100)) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x15, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000003200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x680, 0x478, 0x210, 0x478, 0x0, 0x340, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x6, &(0x7f0000000580), {[{{@uncond, 0x0, 0xc8, 0x108}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "3c745d713ded54eb04d1bcfe4ec5e3722f760ca03b47ed1d735abcf07e43"}}, {{@uncond, 0x0, 0xc8, 0x108}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3, 0x38000, @ipv6=@rand_addr="f65360ce35d79792c798d9967e3df2d3", 0x4e21}}}, {{@ipv6={@empty, @mcast1, [0xffffff00, 0xffffff00, 0xff, 0xff000000], [0xff, 0x0, 0x17fffff01, 0xffffffff], 'rose0\x00', 'ipddp0\x00', {}, {}, 0x67, 0x9, 0x4, 0x1}, 0x0, 0xf0, 0x130, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0xe}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x5, 0x5, @ipv6=@ipv4={[], [], @empty}, 0x4e21}}}, {{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@ipv6header={0x28, 'ipv6header\x00', 0x0, {0x40, 0x20, 0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@multicast2, @ipv6=@empty, 0x2e, 0x26, 0x9}}}, {{@ipv6={@mcast1, @remote, [0xffffffff, 0xff000000, 0x7f000080, 0xff000000], [0xffffff00, 0xffffff00], 'ip6tnl0\x00', 'ip6tnl0\x00', {}, {}, 0xff, 0x1, 0x0, 0x63}, 0x0, 0xf0, 0x138, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@empty, @ipv4=@local, 0x37, 0x3b, 0x1}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6e0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000007cc0)=[{{&(0x7f00000002c0)=@caif=@dbg, 0x80, &(0x7f0000000840)=[{&(0x7f0000000340)=""/251, 0xfb}, {&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000007ec0)=""/108, 0x6c}, {&(0x7f0000000600)=""/241, 0xf1}, {0x0}], 0x5, &(0x7f0000000b40)=""/234, 0xea}, 0xd9b9}, {{&(0x7f0000000c40)=@pppol2tpv3, 0x80, &(0x7f0000002340)=[{&(0x7f0000000cc0)=""/63, 0x3f}, {&(0x7f0000000d40)=""/232, 0xe8}, {&(0x7f0000000e40)=""/77, 0x4d}, {&(0x7f0000000ec0)=""/150, 0x96}, {&(0x7f0000000f80)=""/116, 0x74}, {&(0x7f0000001000)=""/212, 0xd4}, {0x0}, {&(0x7f00000012c0)=""/4096, 0x1000}, {0x0}], 0x9, &(0x7f00000000c0)=""/40, 0x28}, 0x7f}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000002480)=""/199, 0xc7}, {&(0x7f00000008c0)=""/55, 0x37}], 0x2, &(0x7f00000025c0)=""/157, 0x9d}, 0x9}, {{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002680)=""/238, 0xee}, {&(0x7f0000002780)=""/37, 0x25}, {&(0x7f00000027c0)=""/240, 0xf0}, {&(0x7f00000028c0)=""/10, 0xa}, {&(0x7f0000002900)=""/202, 0xca}, {&(0x7f0000002a00)=""/247, 0xf7}, {0x0}], 0x7, &(0x7f0000002c80)=""/184, 0xb8}, 0x7}, {{&(0x7f0000002d40)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f0000003040)=[{&(0x7f0000002dc0)=""/18, 0x12}, {&(0x7f0000002e00)=""/213, 0xd5}, {0x0}, {0x0}, {0x0}, {&(0x7f0000002fc0)=""/31, 0x1f}, {&(0x7f0000003000)}], 0x7, &(0x7f00000030c0)=""/191, 0xbf}, 0x3}, {{&(0x7f0000003180)=@vsock, 0x80, &(0x7f0000004400)=[{&(0x7f0000007f40)=""/215, 0xd7}, {&(0x7f0000004300)=""/34, 0x22}, {&(0x7f0000004340)=""/28, 0x1c}, {&(0x7f0000004380)=""/108, 0x6c}], 0x4, &(0x7f0000004480)=""/222, 0xde}, 0x6}, {{&(0x7f0000004580)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000004a80)=[{&(0x7f0000004600)=""/120, 0x78}, {&(0x7f0000004700)=""/167, 0xa7}, {&(0x7f0000004800)=""/131, 0x83}, {0x0}, {&(0x7f0000004980)=""/212, 0xd4}], 0x5}, 0x8c2}, {{&(0x7f0000004b00)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000006cc0)=""/4096, 0x1000}, 0x52}], 0x8, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) write$UHID_DESTROY(r5, &(0x7f00000001c0), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x10001, 0xffff}, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x1) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000900)="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", 0x223, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 17:07:31 executing program 2: socket$packet(0x11, 0x1000000000000002, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x280080, 0x0) ioctl$RTC_VL_READ(r0, 0x80047013, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x15, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000003200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x680, 0x478, 0x210, 0x478, 0x0, 0x340, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x6, 0x0, {[{{@uncond, 0x0, 0xc8, 0x108}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "3c745d713ded54eb04d1bcfe4ec5e3722f760ca03b47ed1d735abcf07e43"}}, {{@uncond, 0x0, 0xc8, 0x108}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3, 0x38000, @ipv6=@rand_addr="f65360ce35d79792c798d9967e3df2d3", 0x4e21}}}, {{@ipv6={@empty, @mcast1, [0xffffff00, 0xffffff00, 0xff, 0xff000000], [0xff, 0x0, 0x17fffff01, 0xffffffff], 'rose0\x00', 'ipddp0\x00', {}, {}, 0x67, 0x9, 0x4, 0x1}, 0x0, 0xf0, 0x130, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0xe}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x5, 0x5, @ipv6=@ipv4={[], [], @empty}, 0x4e21}}}, {{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@ipv6header={0x28, 'ipv6header\x00', 0x0, {0x40, 0x20, 0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@multicast2, @ipv6=@empty, 0x2e, 0x26, 0x9}}}, {{@ipv6={@mcast1, @remote, [0xffffffff, 0xff000000, 0x7f000080, 0xff000000], [0xffffff00, 0xffffff00], 'ip6tnl0\x00', 'ip6tnl0\x00', {}, {}, 0xff, 0x1, 0x0, 0x63}, 0x0, 0xf0, 0x138, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@empty, @ipv4=@local, 0x37, 0x3b, 0x1}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6e0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000007cc0)=[{{&(0x7f00000002c0)=@caif=@dbg, 0x80, &(0x7f0000000840)=[{&(0x7f0000000340)=""/251, 0xfb}, {&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000007ec0)=""/108, 0x6c}, {&(0x7f0000000600)=""/241, 0xf1}, {0x0}], 0x5, &(0x7f0000000b40)=""/234, 0xea}, 0xd9b9}, {{&(0x7f0000000c40)=@pppol2tpv3, 0x80, &(0x7f0000002340)=[{&(0x7f0000000cc0)=""/63, 0x3f}, {&(0x7f0000000d40)=""/232, 0xe8}, {&(0x7f0000000e40)=""/77, 0x4d}, {&(0x7f0000000ec0)=""/150, 0x96}, {&(0x7f0000000f80)=""/116, 0x74}, {&(0x7f0000001000)=""/212, 0xd4}, {0x0}, {&(0x7f00000012c0)=""/4096, 0x1000}, {0x0}], 0x9, &(0x7f00000000c0)=""/40, 0x28}, 0x7f}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000002480)=""/199, 0xc7}, {&(0x7f00000008c0)=""/55, 0x37}], 0x2, &(0x7f00000025c0)=""/157, 0x9d}, 0x9}, {{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002680)=""/238, 0xee}, {&(0x7f0000002780)=""/37, 0x25}, {&(0x7f00000027c0)=""/240, 0xf0}, {&(0x7f00000028c0)=""/10, 0xa}, {&(0x7f0000002900)=""/202, 0xca}, {&(0x7f0000002a00)=""/247, 0xf7}, {0x0}], 0x7, &(0x7f0000002c80)=""/184, 0xb8}, 0x7}, {{&(0x7f0000002d40)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f0000003040)=[{&(0x7f0000002dc0)=""/18, 0x12}, {&(0x7f0000002e00)=""/213, 0xd5}, {&(0x7f0000002f00)=""/62, 0x3e}, {0x0}, {&(0x7f0000002fc0)=""/31, 0x1f}, {&(0x7f0000003000)}], 0x6, &(0x7f00000030c0)=""/191, 0xbf}, 0x3}, {{&(0x7f0000003180)=@vsock, 0x80, &(0x7f0000004400)=[{&(0x7f0000007f40)=""/215, 0xd7}, {&(0x7f0000004300)=""/34, 0x22}, {&(0x7f0000004340)=""/28, 0x1c}, {&(0x7f0000004380)=""/108, 0x6c}], 0x4, &(0x7f0000004480)=""/222, 0xde}, 0x6}, {{&(0x7f0000004580)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000004a80)=[{&(0x7f0000004600)=""/120, 0x78}, {&(0x7f0000004700)=""/167, 0xa7}, {&(0x7f0000004800)=""/131, 0x83}, {0x0}, {&(0x7f0000004980)=""/212, 0xd4}], 0x5}, 0x8c2}, {{&(0x7f0000004b00)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000006cc0)=""/4096, 0x1000}, 0x52}], 0x8, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) write$UHID_DESTROY(r5, &(0x7f00000001c0), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x10001, 0xffff}, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x1) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000900)="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", 0x223, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 17:07:31 executing program 1: socket$packet(0x11, 0x1000000000000002, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x280080, 0x0) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000100)) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x15, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, 0x0, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000007cc0)=[{{&(0x7f00000002c0)=@caif=@dbg, 0x80, &(0x7f0000000840)=[{&(0x7f0000000340)=""/251, 0xfb}, {&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000007ec0)=""/108, 0x6c}, {&(0x7f0000000600)=""/241, 0xf1}, {0x0}], 0x5, &(0x7f0000000b40)=""/234, 0xea}, 0xd9b9}, {{&(0x7f0000000c40)=@pppol2tpv3, 0x80, &(0x7f0000002340)=[{&(0x7f0000000cc0)=""/63, 0x3f}, {&(0x7f0000000d40)=""/232, 0xe8}, {&(0x7f0000000e40)=""/77, 0x4d}, {&(0x7f0000000ec0)=""/150, 0x96}, {&(0x7f0000001000)=""/212, 0xd4}, {0x0}, {&(0x7f00000012c0)=""/4096, 0x1000}, {0x0}], 0x8, &(0x7f00000000c0)=""/40, 0x28}, 0x7f}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000002480)=""/199, 0xc7}, {&(0x7f00000008c0)=""/55, 0x37}], 0x2, &(0x7f00000025c0)=""/157, 0x9d}, 0x9}, {{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002680)=""/238, 0xee}, {&(0x7f0000002780)=""/37, 0x25}, {&(0x7f00000027c0)=""/240, 0xf0}, {&(0x7f00000028c0)=""/10, 0xa}, {&(0x7f0000002900)=""/202, 0xca}, {&(0x7f0000002a00)=""/247, 0xf7}, {0x0}], 0x7, &(0x7f0000002c80)=""/184, 0xb8}, 0x7}, {{&(0x7f0000002d40)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f0000003040)=[{&(0x7f0000002dc0)=""/18, 0x12}, {&(0x7f0000002e00)=""/213, 0xd5}, {&(0x7f0000002f00)=""/62, 0x3e}, {0x0}, {0x0}, {&(0x7f0000002fc0)=""/31, 0x1f}, {&(0x7f0000003000)}], 0x7, &(0x7f00000030c0)=""/191, 0xbf}, 0x3}, {{&(0x7f0000003180)=@vsock, 0x80, &(0x7f0000004400)=[{&(0x7f0000007f40)=""/215, 0xd7}, {&(0x7f0000004300)=""/34, 0x22}, {&(0x7f0000004340)=""/28, 0x1c}, {&(0x7f0000004380)=""/108, 0x6c}], 0x4, &(0x7f0000004480)=""/222, 0xde}, 0x6}, {{&(0x7f0000004580)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000004a80)=[{&(0x7f0000004600)=""/120, 0x78}, {&(0x7f0000004700)=""/167, 0xa7}, {&(0x7f0000004800)=""/131, 0x83}, {0x0}, {&(0x7f0000004980)=""/212, 0xd4}], 0x5}, 0x8c2}, {{&(0x7f0000004b00)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000006cc0)=""/4096, 0x1000}, 0x52}], 0x8, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) write$UHID_DESTROY(r5, &(0x7f00000001c0), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x10001, 0xffff}, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x1) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000900)="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", 0x223, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 17:07:31 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x413e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x2a4, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000003a00fd0300000000001000000af00000"], 0x14}}, 0x0) r0 = socket(0x10, 0x800000000080003, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0xd2efff7f00000000, &(0x7f0000000100), 0x0, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x1, 0x0) [ 522.320091] protocol 88fb is buggy, dev hsr_slave_0 [ 522.325234] protocol 88fb is buggy, dev hsr_slave_1 [ 522.330452] audit: type=1804 audit(1576602451.662:111): pid=23380 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir209839217/syzkaller.Zydzrp/403/bus" dev="sda1" ino=16544 res=1 [ 522.379773] audit: type=1804 audit(1576602451.702:112): pid=23370 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir209839217/syzkaller.Zydzrp/403/bus" dev="sda1" ino=16544 res=1 [ 522.436683] audit: type=1804 audit(1576602451.742:113): pid=23370 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.4" name="/root/syzkaller-testdir209839217/syzkaller.Zydzrp/403/bus" dev="sda1" ino=16544 res=1 [ 522.566797] audit: type=1804 audit(1576602451.752:114): pid=23370 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir209839217/syzkaller.Zydzrp/403/bus" dev="sda1" ino=16544 res=1 17:07:32 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a280930206000100000001020b00000a0007003500280014000000090005407f", 0x3f2}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 17:07:32 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x413e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x2a4, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000003a00fd0300000000001000000af00000"], 0x14}}, 0x0) r0 = socket(0x10, 0x800000000080003, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0xd2efff7f00000000, &(0x7f0000000100), 0x0, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x1, 0x0) 17:07:32 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr="ff3e6808e92b7abafc47d822996f60e4"}, 0x1c) sendmmsg$inet(r0, &(0x7f0000003e40)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000002740)={0x2, 0x4e23}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_retopts={{0x18, 0x0, 0x7, {[@ssrr={0x89, 0x10b, 0x4, [@broadcast]}]}}}], 0x18}}], 0x2, 0x0) 17:07:32 executing program 3: socket$packet(0x11, 0x1000000000000002, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x280080, 0x0) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000100)) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x15, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000003200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x680, 0x478, 0x210, 0x478, 0x0, 0x340, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x6, &(0x7f0000000580), {[{{@uncond, 0x0, 0xc8, 0x108}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "3c745d713ded54eb04d1bcfe4ec5e3722f760ca03b47ed1d735abcf07e43"}}, {{@uncond, 0x0, 0xc8, 0x108}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3, 0x38000, @ipv6=@rand_addr="f65360ce35d79792c798d9967e3df2d3", 0x4e21}}}, {{@ipv6={@empty, @mcast1, [0xffffff00, 0xffffff00, 0xff, 0xff000000], [0xff, 0x0, 0x17fffff01, 0xffffffff], 'rose0\x00', 'ipddp0\x00', {}, {}, 0x67, 0x9, 0x4, 0x1}, 0x0, 0xf0, 0x130, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0xe}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x5, 0x5, @ipv6=@ipv4={[], [], @empty}, 0x4e21}}}, {{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@ipv6header={0x28, 'ipv6header\x00', 0x0, {0x40, 0x20, 0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@multicast2, @ipv6=@empty, 0x2e, 0x26, 0x9}}}, {{@ipv6={@mcast1, @remote, [0xffffffff, 0xff000000, 0x7f000080, 0xff000000], [0xffffff00, 0xffffff00], 'ip6tnl0\x00', 'ip6tnl0\x00', {}, {}, 0xff, 0x1, 0x0, 0x63}, 0x0, 0xf0, 0x138, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@empty, @ipv4=@local, 0x37, 0x3b, 0x1}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6e0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000007cc0)=[{{&(0x7f00000002c0)=@caif=@dbg, 0x80, &(0x7f0000000840)=[{&(0x7f0000000340)=""/251, 0xfb}, {&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000007ec0)=""/108, 0x6c}, {&(0x7f0000000600)=""/241, 0xf1}, {0x0}], 0x5, &(0x7f0000000b40)=""/234, 0xea}, 0xd9b9}, {{&(0x7f0000000c40)=@pppol2tpv3, 0x80, &(0x7f0000002340)=[{&(0x7f0000000cc0)=""/63, 0x3f}, {&(0x7f0000000d40)=""/232, 0xe8}, {&(0x7f0000000e40)=""/77, 0x4d}, {&(0x7f0000000ec0)=""/150, 0x96}, {&(0x7f0000000f80)=""/116, 0x74}, {&(0x7f0000001000)=""/212, 0xd4}, {0x0}, {&(0x7f00000012c0)=""/4096, 0x1000}, {0x0}], 0x9, &(0x7f00000000c0)=""/40, 0x28}, 0x7f}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000002480)=""/199, 0xc7}, {&(0x7f00000008c0)=""/55, 0x37}], 0x2, &(0x7f00000025c0)=""/157, 0x9d}, 0x9}, {{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002680)=""/238, 0xee}, {&(0x7f0000002780)=""/37, 0x25}, {&(0x7f00000027c0)=""/240, 0xf0}, {&(0x7f00000028c0)=""/10, 0xa}, {&(0x7f0000002900)=""/202, 0xca}, {&(0x7f0000002a00)=""/247, 0xf7}, {0x0}], 0x7, &(0x7f0000002c80)=""/184, 0xb8}, 0x7}, {{&(0x7f0000002d40)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f0000003040)=[{&(0x7f0000002dc0)=""/18, 0x12}, {&(0x7f0000002e00)=""/213, 0xd5}, {0x0}, {0x0}, {0x0}, {&(0x7f0000002fc0)=""/31, 0x1f}, {&(0x7f0000003000)}], 0x7, &(0x7f00000030c0)=""/191, 0xbf}, 0x3}, {{&(0x7f0000003180)=@vsock, 0x80, &(0x7f0000004400)=[{&(0x7f0000007f40)=""/215, 0xd7}, {&(0x7f0000004300)=""/34, 0x22}, {&(0x7f0000004340)=""/28, 0x1c}, {&(0x7f0000004380)=""/108, 0x6c}], 0x4, &(0x7f0000004480)=""/222, 0xde}, 0x6}, {{&(0x7f0000004580)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000004a80)=[{&(0x7f0000004600)=""/120, 0x78}, {&(0x7f0000004700)=""/167, 0xa7}, {&(0x7f0000004800)=""/131, 0x83}, {0x0}, {&(0x7f0000004980)=""/212, 0xd4}], 0x5}, 0x8c2}, {{&(0x7f0000004b00)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000006cc0)=""/4096, 0x1000}, 0x52}], 0x8, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) write$UHID_DESTROY(r5, &(0x7f00000001c0), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x10001, 0xffff}, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x1) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000900)="585ccbc4ed83b836c1a6474914dc5500b66147b3c7218a91690000000042e3d35228897501f93191b076ac446ff0022b8753a1fa748c569f435fb3bae96efb74b50ec93c2db8eae3198a29e5c0cfc60000ce0637cef580b4ec61221adf59be045b70e48884ca000018cea71fcfed06fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff33c1e8e036e5031949762d009d308bd73f477252d0000000000004000000000000000000000000000000000195e23fb4430a9a4c2850b6380a743d6ea0c3b121f66c716d746aa81c301621b7662c06aae720b872d4b7828e3b48522c673aa6cb366d4201e2aee3261eb52f14533b7a54203cf9a4fa587c0385cdba539e9bd34717b0dfab09db7b064fbe2ecf9f40fa3a4015d0d0db3f9d562686fcdc3342c88c6f1b6f11449f8aeabf54c5533ec6acc2270d41713ae1538256af3719a07f55223a6eaa7c1eae5d6efa12fe95e2b0f1c500b28c5c76e731d5250e395526d04063718f448e62d4dd7cefeed6b72b31b894093aa37337784c00d68a4185f349e41455f12d31aa2d0ff79a4d69d97421a0042f0c7a664a8c4945104b25dc49be950c5af7405b86482d7314fcc3a0ad5eb24268ccd24a2996019f7c006a0b3c39c7b98c5a5406a2e4ff6d9c0ce12c4251756a667b4731c4b0eb5dc7d4381fecf196c4404b54c3c11c48f09734d9a6842f52d3307a688208b7a4681b101e1abe5fecfca1f464c03e933cbd15ab589ccd3c559542355190522a712b8f5128a6a00", 0x223, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 17:07:32 executing program 2: socket$packet(0x11, 0x1000000000000002, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x280080, 0x0) ioctl$RTC_VL_READ(r0, 0x80047013, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x15, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000003200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x680, 0x478, 0x210, 0x478, 0x0, 0x340, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x6, 0x0, {[{{@uncond, 0x0, 0xc8, 0x108}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "3c745d713ded54eb04d1bcfe4ec5e3722f760ca03b47ed1d735abcf07e43"}}, {{@uncond, 0x0, 0xc8, 0x108}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3, 0x38000, @ipv6=@rand_addr="f65360ce35d79792c798d9967e3df2d3", 0x4e21}}}, {{@ipv6={@empty, @mcast1, [0xffffff00, 0xffffff00, 0xff, 0xff000000], [0xff, 0x0, 0x17fffff01, 0xffffffff], 'rose0\x00', 'ipddp0\x00', {}, {}, 0x67, 0x9, 0x4, 0x1}, 0x0, 0xf0, 0x130, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0xe}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x5, 0x5, @ipv6=@ipv4={[], [], @empty}, 0x4e21}}}, {{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@ipv6header={0x28, 'ipv6header\x00', 0x0, {0x40, 0x20, 0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@multicast2, @ipv6=@empty, 0x2e, 0x26, 0x9}}}, {{@ipv6={@mcast1, @remote, [0xffffffff, 0xff000000, 0x7f000080, 0xff000000], [0xffffff00, 0xffffff00], 'ip6tnl0\x00', 'ip6tnl0\x00', {}, {}, 0xff, 0x1, 0x0, 0x63}, 0x0, 0xf0, 0x138, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@empty, @ipv4=@local, 0x37, 0x3b, 0x1}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6e0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000007cc0)=[{{&(0x7f00000002c0)=@caif=@dbg, 0x80, &(0x7f0000000840)=[{&(0x7f0000000340)=""/251, 0xfb}, {&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000007ec0)=""/108, 0x6c}, {&(0x7f0000000600)=""/241, 0xf1}, {0x0}], 0x5, &(0x7f0000000b40)=""/234, 0xea}, 0xd9b9}, {{&(0x7f0000000c40)=@pppol2tpv3, 0x80, &(0x7f0000002340)=[{&(0x7f0000000cc0)=""/63, 0x3f}, {&(0x7f0000000d40)=""/232, 0xe8}, {&(0x7f0000000e40)=""/77, 0x4d}, {&(0x7f0000000ec0)=""/150, 0x96}, {&(0x7f0000000f80)=""/116, 0x74}, {&(0x7f0000001000)=""/212, 0xd4}, {0x0}, {&(0x7f00000012c0)=""/4096, 0x1000}, {0x0}], 0x9, &(0x7f00000000c0)=""/40, 0x28}, 0x7f}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000002480)=""/199, 0xc7}, {&(0x7f00000008c0)=""/55, 0x37}], 0x2, &(0x7f00000025c0)=""/157, 0x9d}, 0x9}, {{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002680)=""/238, 0xee}, {&(0x7f0000002780)=""/37, 0x25}, {&(0x7f00000027c0)=""/240, 0xf0}, {&(0x7f00000028c0)=""/10, 0xa}, {&(0x7f0000002900)=""/202, 0xca}, {&(0x7f0000002a00)=""/247, 0xf7}, {0x0}], 0x7, &(0x7f0000002c80)=""/184, 0xb8}, 0x7}, {{&(0x7f0000002d40)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f0000003040)=[{&(0x7f0000002dc0)=""/18, 0x12}, {&(0x7f0000002e00)=""/213, 0xd5}, {&(0x7f0000002f00)=""/62, 0x3e}, {0x0}, {&(0x7f0000002fc0)=""/31, 0x1f}, {&(0x7f0000003000)}], 0x6, &(0x7f00000030c0)=""/191, 0xbf}, 0x3}, {{&(0x7f0000003180)=@vsock, 0x80, &(0x7f0000004400)=[{&(0x7f0000007f40)=""/215, 0xd7}, {&(0x7f0000004300)=""/34, 0x22}, {&(0x7f0000004340)=""/28, 0x1c}, {&(0x7f0000004380)=""/108, 0x6c}], 0x4, &(0x7f0000004480)=""/222, 0xde}, 0x6}, {{&(0x7f0000004580)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000004a80)=[{&(0x7f0000004600)=""/120, 0x78}, {&(0x7f0000004700)=""/167, 0xa7}, {&(0x7f0000004800)=""/131, 0x83}, {0x0}, {&(0x7f0000004980)=""/212, 0xd4}], 0x5}, 0x8c2}, {{&(0x7f0000004b00)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000006cc0)=""/4096, 0x1000}, 0x52}], 0x8, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) write$UHID_DESTROY(r5, &(0x7f00000001c0), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x10001, 0xffff}, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x1) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000900)="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", 0x223, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 17:07:32 executing program 1: socket$packet(0x11, 0x1000000000000002, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x280080, 0x0) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000100)) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x15, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, 0x0, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000007cc0)=[{{&(0x7f00000002c0)=@caif=@dbg, 0x80, &(0x7f0000000840)=[{&(0x7f0000000340)=""/251, 0xfb}, {&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000007ec0)=""/108, 0x6c}, {&(0x7f0000000600)=""/241, 0xf1}, {0x0}], 0x5, &(0x7f0000000b40)=""/234, 0xea}, 0xd9b9}, {{&(0x7f0000000c40)=@pppol2tpv3, 0x80, &(0x7f0000002340)=[{&(0x7f0000000cc0)=""/63, 0x3f}, {&(0x7f0000000d40)=""/232, 0xe8}, {&(0x7f0000000e40)=""/77, 0x4d}, {&(0x7f0000000ec0)=""/150, 0x96}, {0x0}, {&(0x7f0000001000)=""/212, 0xd4}, {0x0}, {&(0x7f00000012c0)=""/4096, 0x1000}, {0x0}], 0x9, &(0x7f00000000c0)=""/40, 0x28}, 0x7f}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000002480)=""/199, 0xc7}, {&(0x7f00000008c0)=""/55, 0x37}], 0x2, &(0x7f00000025c0)=""/157, 0x9d}, 0x9}, {{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002680)=""/238, 0xee}, {&(0x7f0000002780)=""/37, 0x25}, {&(0x7f00000027c0)=""/240, 0xf0}, {&(0x7f00000028c0)=""/10, 0xa}, {&(0x7f0000002900)=""/202, 0xca}, {&(0x7f0000002a00)=""/247, 0xf7}, {0x0}], 0x7, &(0x7f0000002c80)=""/184, 0xb8}, 0x7}, {{&(0x7f0000002d40)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f0000003040)=[{&(0x7f0000002dc0)=""/18, 0x12}, {&(0x7f0000002e00)=""/213, 0xd5}, {&(0x7f0000002f00)=""/62, 0x3e}, {0x0}, {0x0}, {&(0x7f0000002fc0)=""/31, 0x1f}, {&(0x7f0000003000)}], 0x7, &(0x7f00000030c0)=""/191, 0xbf}, 0x3}, {{&(0x7f0000003180)=@vsock, 0x80, &(0x7f0000004400)=[{&(0x7f0000007f40)=""/215, 0xd7}, {&(0x7f0000004300)=""/34, 0x22}, {&(0x7f0000004340)=""/28, 0x1c}, {&(0x7f0000004380)=""/108, 0x6c}], 0x4, &(0x7f0000004480)=""/222, 0xde}, 0x6}, {{&(0x7f0000004580)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000004a80)=[{&(0x7f0000004600)=""/120, 0x78}, {&(0x7f0000004700)=""/167, 0xa7}, {&(0x7f0000004800)=""/131, 0x83}, {0x0}, {&(0x7f0000004980)=""/212, 0xd4}], 0x5}, 0x8c2}, {{&(0x7f0000004b00)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000006cc0)=""/4096, 0x1000}, 0x52}], 0x8, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) write$UHID_DESTROY(r5, &(0x7f00000001c0), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x10001, 0xffff}, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x1) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000900)="585ccbc4ed83b836c1a6474914dc5500b66147b3c7218a91690000000042e3d35228897501f93191b076ac446ff0022b8753a1fa748c569f435fb3bae96efb74b50ec93c2db8eae3198a29e5c0cfc60000ce0637cef580b4ec61221adf59be045b70e48884ca000018cea71fcfed06fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff33c1e8e036e5031949762d009d308bd73f477252d0000000000004000000000000000000000000000000000195e23fb4430a9a4c2850b6380a743d6ea0c3b121f66c716d746aa81c301621b7662c06aae720b872d4b7828e3b48522c673aa6cb366d4201e2aee3261eb52f14533b7a54203cf9a4fa587c0385cdba539e9bd34717b0dfab09db7b064fbe2ecf9f40fa3a4015d0d0db3f9d562686fcdc3342c88c6f1b6f11449f8aeabf54c5533ec6acc2270d41713ae1538256af3719a07f55223a6eaa7c1eae5d6efa12fe95e2b0f1c500b28c5c76e731d5250e395526d04063718f448e62d4dd7cefeed6b72b31b894093aa37337784c00d68a4185f349e41455f12d31aa2d0ff79a4d69d97421a0042f0c7a664a8c4945104b25dc49be950c5af7405b86482d7314fcc3a0ad5eb24268ccd24a2996019f7c006a0b3c39c7b98c5a5406a2e4ff6d9c0ce12c4251756a667b4731c4b0eb5dc7d4381fecf196c4404b54c3c11c48f09734d9a6842f52d3307a688208b7a4681b101e1abe5fecfca1f464c03e933cbd15ab589ccd3c559542355190522a712b8f5128a6a00", 0x223, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 17:07:32 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr="ff3e6808e92b7abafc47d822996f60e4"}, 0x1c) sendmmsg$inet(r0, &(0x7f0000003e40)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000002740)={0x2, 0x4e23}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_retopts={{0x18, 0x0, 0x7, {[@ssrr={0x89, 0x10b, 0x4, [@broadcast]}]}}}], 0x18}}], 0x2, 0x0) 17:07:32 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x413e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x2a4, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000003a00fd0300000000001000000af00000"], 0x14}}, 0x0) r0 = socket(0x10, 0x800000000080003, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0xd2efff7f00000000, &(0x7f0000000100), 0x0, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x1, 0x0) 17:07:32 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr="ff3e6808e92b7abafc47d822996f60e4"}, 0x1c) sendmmsg$inet(r0, &(0x7f0000003e40)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000002740)={0x2, 0x4e23}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_retopts={{0x18, 0x0, 0x7, {[@ssrr={0x89, 0x10b, 0x4, [@broadcast]}]}}}], 0x18}}], 0x2, 0x0) [ 522.839203] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=23427 comm=syz-executor.0 17:07:32 executing program 3: socket$packet(0x11, 0x1000000000000002, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x280080, 0x0) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000100)) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x15, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000003200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x680, 0x478, 0x210, 0x478, 0x0, 0x340, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x6, &(0x7f0000000580), {[{{@uncond, 0x0, 0xc8, 0x108}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "3c745d713ded54eb04d1bcfe4ec5e3722f760ca03b47ed1d735abcf07e43"}}, {{@uncond, 0x0, 0xc8, 0x108}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3, 0x38000, @ipv6=@rand_addr="f65360ce35d79792c798d9967e3df2d3", 0x4e21}}}, {{@ipv6={@empty, @mcast1, [0xffffff00, 0xffffff00, 0xff, 0xff000000], [0xff, 0x0, 0x17fffff01, 0xffffffff], 'rose0\x00', 'ipddp0\x00', {}, {}, 0x67, 0x9, 0x4, 0x1}, 0x0, 0xf0, 0x130, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0xe}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x5, 0x5, @ipv6=@ipv4={[], [], @empty}, 0x4e21}}}, {{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@ipv6header={0x28, 'ipv6header\x00', 0x0, {0x40, 0x20, 0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@multicast2, @ipv6=@empty, 0x2e, 0x26, 0x9}}}, {{@ipv6={@mcast1, @remote, [0xffffffff, 0xff000000, 0x7f000080, 0xff000000], [0xffffff00, 0xffffff00], 'ip6tnl0\x00', 'ip6tnl0\x00', {}, {}, 0xff, 0x1, 0x0, 0x63}, 0x0, 0xf0, 0x138, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@empty, @ipv4=@local, 0x37, 0x3b, 0x1}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6e0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000007cc0)=[{{&(0x7f00000002c0)=@caif=@dbg, 0x80, &(0x7f0000000840)=[{&(0x7f0000000340)=""/251, 0xfb}, {&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000007ec0)=""/108, 0x6c}, {&(0x7f0000000600)=""/241, 0xf1}, {0x0}], 0x5, &(0x7f0000000b40)=""/234, 0xea}, 0xd9b9}, {{&(0x7f0000000c40)=@pppol2tpv3, 0x80, &(0x7f0000002340)=[{&(0x7f0000000cc0)=""/63, 0x3f}, {&(0x7f0000000d40)=""/232, 0xe8}, {&(0x7f0000000e40)=""/77, 0x4d}, {&(0x7f0000000ec0)=""/150, 0x96}, {&(0x7f0000000f80)=""/116, 0x74}, {&(0x7f0000001000)=""/212, 0xd4}, {0x0}, {&(0x7f00000012c0)=""/4096, 0x1000}, {0x0}], 0x9, &(0x7f00000000c0)=""/40, 0x28}, 0x7f}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000002480)=""/199, 0xc7}, {&(0x7f00000008c0)=""/55, 0x37}], 0x2, &(0x7f00000025c0)=""/157, 0x9d}, 0x9}, {{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002680)=""/238, 0xee}, {&(0x7f0000002780)=""/37, 0x25}, {&(0x7f00000027c0)=""/240, 0xf0}, {&(0x7f00000028c0)=""/10, 0xa}, {&(0x7f0000002900)=""/202, 0xca}, {&(0x7f0000002a00)=""/247, 0xf7}, {0x0}], 0x7, &(0x7f0000002c80)=""/184, 0xb8}, 0x7}, {{&(0x7f0000002d40)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f0000003040)=[{&(0x7f0000002dc0)=""/18, 0x12}, {&(0x7f0000002f00)=""/62, 0x3e}, {0x0}, {0x0}, {&(0x7f0000002fc0)=""/31, 0x1f}, {&(0x7f0000003000)}], 0x6, &(0x7f00000030c0)=""/191, 0xbf}, 0x3}, {{&(0x7f0000003180)=@vsock, 0x80, &(0x7f0000004400)=[{&(0x7f0000007f40)=""/215, 0xd7}, {&(0x7f0000004300)=""/34, 0x22}, {&(0x7f0000004340)=""/28, 0x1c}, {&(0x7f0000004380)=""/108, 0x6c}], 0x4, &(0x7f0000004480)=""/222, 0xde}, 0x6}, {{&(0x7f0000004580)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000004a80)=[{&(0x7f0000004600)=""/120, 0x78}, {&(0x7f0000004700)=""/167, 0xa7}, {&(0x7f0000004800)=""/131, 0x83}, {0x0}, {&(0x7f0000004980)=""/212, 0xd4}], 0x5}, 0x8c2}, {{&(0x7f0000004b00)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000006cc0)=""/4096, 0x1000}, 0x52}], 0x8, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) write$UHID_DESTROY(r5, &(0x7f00000001c0), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x10001, 0xffff}, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x1) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000900)="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", 0x223, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 17:07:32 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x413e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x2a4, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000003a00fd0300000000001000000af00000"], 0x14}}, 0x0) r0 = socket(0x10, 0x800000000080003, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0xd2efff7f00000000, &(0x7f0000000100), 0x0, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x1, 0x0) [ 523.051135] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=23427 comm=syz-executor.0 17:07:32 executing program 4: [ 523.109844] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=23427 comm=syz-executor.0 [ 523.158672] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=23427 comm=syz-executor.0 [ 523.194677] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=23427 comm=syz-executor.0 [ 523.212144] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=23427 comm=syz-executor.0 [ 523.228460] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=23427 comm=syz-executor.0 [ 523.241398] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=23427 comm=syz-executor.0 [ 523.257213] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=23427 comm=syz-executor.0 [ 523.269937] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=23427 comm=syz-executor.0 17:07:32 executing program 0: 17:07:32 executing program 1: socket$packet(0x11, 0x1000000000000002, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x280080, 0x0) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000100)) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x15, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, 0x0, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000007cc0)=[{{&(0x7f00000002c0)=@caif=@dbg, 0x80, &(0x7f0000000840)=[{&(0x7f0000000340)=""/251, 0xfb}, {&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000007ec0)=""/108, 0x6c}, {&(0x7f0000000600)=""/241, 0xf1}, {0x0}], 0x5, &(0x7f0000000b40)=""/234, 0xea}, 0xd9b9}, {{&(0x7f0000000c40)=@pppol2tpv3, 0x80, &(0x7f0000002340)=[{&(0x7f0000000cc0)=""/63, 0x3f}, {&(0x7f0000000d40)=""/232, 0xe8}, {&(0x7f0000000e40)=""/77, 0x4d}, {&(0x7f0000000ec0)=""/150, 0x96}, {0x0}, {&(0x7f0000001000)=""/212, 0xd4}, {0x0}, {&(0x7f00000012c0)=""/4096, 0x1000}, {0x0}], 0x9, &(0x7f00000000c0)=""/40, 0x28}, 0x7f}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000002480)=""/199, 0xc7}, {&(0x7f00000008c0)=""/55, 0x37}], 0x2, &(0x7f00000025c0)=""/157, 0x9d}, 0x9}, {{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002680)=""/238, 0xee}, {&(0x7f0000002780)=""/37, 0x25}, {&(0x7f00000027c0)=""/240, 0xf0}, {&(0x7f00000028c0)=""/10, 0xa}, {&(0x7f0000002900)=""/202, 0xca}, {&(0x7f0000002a00)=""/247, 0xf7}, {0x0}], 0x7, &(0x7f0000002c80)=""/184, 0xb8}, 0x7}, {{&(0x7f0000002d40)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f0000003040)=[{&(0x7f0000002dc0)=""/18, 0x12}, {&(0x7f0000002e00)=""/213, 0xd5}, {&(0x7f0000002f00)=""/62, 0x3e}, {0x0}, {0x0}, {&(0x7f0000002fc0)=""/31, 0x1f}, {&(0x7f0000003000)}], 0x7, &(0x7f00000030c0)=""/191, 0xbf}, 0x3}, {{&(0x7f0000003180)=@vsock, 0x80, &(0x7f0000004400)=[{&(0x7f0000007f40)=""/215, 0xd7}, {&(0x7f0000004300)=""/34, 0x22}, {&(0x7f0000004340)=""/28, 0x1c}, {&(0x7f0000004380)=""/108, 0x6c}], 0x4, &(0x7f0000004480)=""/222, 0xde}, 0x6}, {{&(0x7f0000004580)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000004a80)=[{&(0x7f0000004600)=""/120, 0x78}, {&(0x7f0000004700)=""/167, 0xa7}, {&(0x7f0000004800)=""/131, 0x83}, {0x0}, {&(0x7f0000004980)=""/212, 0xd4}], 0x5}, 0x8c2}, {{&(0x7f0000004b00)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000006cc0)=""/4096, 0x1000}, 0x52}], 0x8, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) write$UHID_DESTROY(r5, &(0x7f00000001c0), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x10001, 0xffff}, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x1) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000900)="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", 0x223, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 17:07:32 executing program 2: socket$packet(0x11, 0x1000000000000002, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x280080, 0x0) ioctl$RTC_VL_READ(r0, 0x80047013, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x15, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000003200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x680, 0x478, 0x210, 0x478, 0x0, 0x340, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x6, 0x0, {[{{@uncond, 0x0, 0xc8, 0x108}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "3c745d713ded54eb04d1bcfe4ec5e3722f760ca03b47ed1d735abcf07e43"}}, {{@uncond, 0x0, 0xc8, 0x108}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3, 0x38000, @ipv6=@rand_addr="f65360ce35d79792c798d9967e3df2d3", 0x4e21}}}, {{@ipv6={@empty, @mcast1, [0xffffff00, 0xffffff00, 0xff, 0xff000000], [0xff, 0x0, 0x17fffff01, 0xffffffff], 'rose0\x00', 'ipddp0\x00', {}, {}, 0x67, 0x9, 0x4, 0x1}, 0x0, 0xf0, 0x130, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0xe}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x5, 0x5, @ipv6=@ipv4={[], [], @empty}, 0x4e21}}}, {{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@ipv6header={0x28, 'ipv6header\x00', 0x0, {0x40, 0x20, 0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@multicast2, @ipv6=@empty, 0x2e, 0x26, 0x9}}}, {{@ipv6={@mcast1, @remote, [0xffffffff, 0xff000000, 0x7f000080, 0xff000000], [0xffffff00, 0xffffff00], 'ip6tnl0\x00', 'ip6tnl0\x00', {}, {}, 0xff, 0x1, 0x0, 0x63}, 0x0, 0xf0, 0x138, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@empty, @ipv4=@local, 0x37, 0x3b, 0x1}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6e0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000007cc0)=[{{&(0x7f00000002c0)=@caif=@dbg, 0x80, &(0x7f0000000840)=[{&(0x7f0000000340)=""/251, 0xfb}, {&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000007ec0)=""/108, 0x6c}, {&(0x7f0000000600)=""/241, 0xf1}, {0x0}], 0x5, &(0x7f0000000b40)=""/234, 0xea}, 0xd9b9}, {{&(0x7f0000000c40)=@pppol2tpv3, 0x80, &(0x7f0000002340)=[{&(0x7f0000000cc0)=""/63, 0x3f}, {&(0x7f0000000d40)=""/232, 0xe8}, {&(0x7f0000000e40)=""/77, 0x4d}, {&(0x7f0000000ec0)=""/150, 0x96}, {&(0x7f0000000f80)=""/116, 0x74}, {&(0x7f0000001000)=""/212, 0xd4}, {0x0}, {&(0x7f00000012c0)=""/4096, 0x1000}, {0x0}], 0x9, &(0x7f00000000c0)=""/40, 0x28}, 0x7f}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000002480)=""/199, 0xc7}, {&(0x7f00000008c0)=""/55, 0x37}], 0x2, &(0x7f00000025c0)=""/157, 0x9d}, 0x9}, {{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002680)=""/238, 0xee}, {&(0x7f0000002780)=""/37, 0x25}, {&(0x7f00000027c0)=""/240, 0xf0}, {&(0x7f00000028c0)=""/10, 0xa}, {&(0x7f0000002900)=""/202, 0xca}, {&(0x7f0000002a00)=""/247, 0xf7}, {0x0}], 0x7, &(0x7f0000002c80)=""/184, 0xb8}, 0x7}, {{&(0x7f0000002d40)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f0000003040)=[{&(0x7f0000002dc0)=""/18, 0x12}, {&(0x7f0000002e00)=""/213, 0xd5}, {&(0x7f0000002f00)=""/62, 0x3e}, {0x0}, {&(0x7f0000002fc0)=""/31, 0x1f}, {&(0x7f0000003000)}], 0x6, &(0x7f00000030c0)=""/191, 0xbf}, 0x3}, {{&(0x7f0000003180)=@vsock, 0x80, &(0x7f0000004400)=[{&(0x7f0000007f40)=""/215, 0xd7}, {&(0x7f0000004300)=""/34, 0x22}, {&(0x7f0000004340)=""/28, 0x1c}, {&(0x7f0000004380)=""/108, 0x6c}], 0x4, &(0x7f0000004480)=""/222, 0xde}, 0x6}, {{&(0x7f0000004580)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000004a80)=[{&(0x7f0000004600)=""/120, 0x78}, {&(0x7f0000004700)=""/167, 0xa7}, {&(0x7f0000004800)=""/131, 0x83}, {0x0}, {&(0x7f0000004980)=""/212, 0xd4}], 0x5}, 0x8c2}, {{&(0x7f0000004b00)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000006cc0)=""/4096, 0x1000}, 0x52}], 0x8, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) write$UHID_DESTROY(r5, &(0x7f00000001c0), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x10001, 0xffff}, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x1) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000900)="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", 0x223, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 17:07:32 executing program 4: 17:07:32 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x413e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x2a4, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000003a00fd0300000000001000000af00000"], 0x14}}, 0x0) r0 = socket(0x10, 0x800000000080003, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0xd2efff7f00000000, &(0x7f0000000100), 0x0, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x1, 0x0) 17:07:32 executing program 3: socket$packet(0x11, 0x1000000000000002, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x280080, 0x0) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000100)) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x15, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000003200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x680, 0x478, 0x210, 0x478, 0x0, 0x340, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x6, &(0x7f0000000580), {[{{@uncond, 0x0, 0xc8, 0x108}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "3c745d713ded54eb04d1bcfe4ec5e3722f760ca03b47ed1d735abcf07e43"}}, {{@uncond, 0x0, 0xc8, 0x108}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3, 0x38000, @ipv6=@rand_addr="f65360ce35d79792c798d9967e3df2d3", 0x4e21}}}, {{@ipv6={@empty, @mcast1, [0xffffff00, 0xffffff00, 0xff, 0xff000000], [0xff, 0x0, 0x17fffff01, 0xffffffff], 'rose0\x00', 'ipddp0\x00', {}, {}, 0x67, 0x9, 0x4, 0x1}, 0x0, 0xf0, 0x130, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0xe}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x5, 0x5, @ipv6=@ipv4={[], [], @empty}, 0x4e21}}}, {{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@ipv6header={0x28, 'ipv6header\x00', 0x0, {0x40, 0x20, 0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@multicast2, @ipv6=@empty, 0x2e, 0x26, 0x9}}}, {{@ipv6={@mcast1, @remote, [0xffffffff, 0xff000000, 0x7f000080, 0xff000000], [0xffffff00, 0xffffff00], 'ip6tnl0\x00', 'ip6tnl0\x00', {}, {}, 0xff, 0x1, 0x0, 0x63}, 0x0, 0xf0, 0x138, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@empty, @ipv4=@local, 0x37, 0x3b, 0x1}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6e0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000007cc0)=[{{&(0x7f00000002c0)=@caif=@dbg, 0x80, &(0x7f0000000840)=[{&(0x7f0000000340)=""/251, 0xfb}, {&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000007ec0)=""/108, 0x6c}, {&(0x7f0000000600)=""/241, 0xf1}, {0x0}], 0x5, &(0x7f0000000b40)=""/234, 0xea}, 0xd9b9}, {{&(0x7f0000000c40)=@pppol2tpv3, 0x80, &(0x7f0000002340)=[{&(0x7f0000000cc0)=""/63, 0x3f}, {&(0x7f0000000d40)=""/232, 0xe8}, {&(0x7f0000000e40)=""/77, 0x4d}, {&(0x7f0000000ec0)=""/150, 0x96}, {&(0x7f0000000f80)=""/116, 0x74}, {&(0x7f0000001000)=""/212, 0xd4}, {0x0}, {&(0x7f00000012c0)=""/4096, 0x1000}, {0x0}], 0x9, &(0x7f00000000c0)=""/40, 0x28}, 0x7f}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000002480)=""/199, 0xc7}, {&(0x7f00000008c0)=""/55, 0x37}], 0x2, &(0x7f00000025c0)=""/157, 0x9d}, 0x9}, {{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002680)=""/238, 0xee}, {&(0x7f0000002780)=""/37, 0x25}, {&(0x7f00000027c0)=""/240, 0xf0}, {&(0x7f00000028c0)=""/10, 0xa}, {&(0x7f0000002900)=""/202, 0xca}, {&(0x7f0000002a00)=""/247, 0xf7}, {0x0}], 0x7, &(0x7f0000002c80)=""/184, 0xb8}, 0x7}, {{&(0x7f0000002d40)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f0000003040)=[{&(0x7f0000002dc0)=""/18, 0x12}, {&(0x7f0000002f00)=""/62, 0x3e}, {0x0}, {0x0}, {&(0x7f0000002fc0)=""/31, 0x1f}, {&(0x7f0000003000)}], 0x6, &(0x7f00000030c0)=""/191, 0xbf}, 0x3}, {{&(0x7f0000003180)=@vsock, 0x80, &(0x7f0000004400)=[{&(0x7f0000007f40)=""/215, 0xd7}, {&(0x7f0000004300)=""/34, 0x22}, {&(0x7f0000004340)=""/28, 0x1c}, {&(0x7f0000004380)=""/108, 0x6c}], 0x4, &(0x7f0000004480)=""/222, 0xde}, 0x6}, {{&(0x7f0000004580)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000004a80)=[{&(0x7f0000004600)=""/120, 0x78}, {&(0x7f0000004700)=""/167, 0xa7}, {&(0x7f0000004800)=""/131, 0x83}, {0x0}, {&(0x7f0000004980)=""/212, 0xd4}], 0x5}, 0x8c2}, {{&(0x7f0000004b00)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000006cc0)=""/4096, 0x1000}, 0x52}], 0x8, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) write$UHID_DESTROY(r5, &(0x7f00000001c0), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x10001, 0xffff}, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x1) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000900)="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", 0x223, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 17:07:32 executing program 4: 17:07:32 executing program 0: 17:07:33 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x413e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x2a4, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000003a00fd0300000000001000000af00000"], 0x14}}, 0x0) r0 = socket(0x10, 0x800000000080003, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0xd2efff7f00000000, &(0x7f0000000100), 0x0, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x1, 0x0) 17:07:33 executing program 0: 17:07:33 executing program 4: 17:07:33 executing program 2: socket$packet(0x11, 0x1000000000000002, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x280080, 0x0) ioctl$RTC_VL_READ(r0, 0x80047013, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x15, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000003200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x680, 0x478, 0x210, 0x478, 0x0, 0x340, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x6, 0x0, {[{{@uncond, 0x0, 0xc8, 0x108}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "3c745d713ded54eb04d1bcfe4ec5e3722f760ca03b47ed1d735abcf07e43"}}, {{@uncond, 0x0, 0xc8, 0x108}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3, 0x38000, @ipv6=@rand_addr="f65360ce35d79792c798d9967e3df2d3", 0x4e21}}}, {{@ipv6={@empty, @mcast1, [0xffffff00, 0xffffff00, 0xff, 0xff000000], [0xff, 0x0, 0x17fffff01, 0xffffffff], 'rose0\x00', 'ipddp0\x00', {}, {}, 0x67, 0x9, 0x4, 0x1}, 0x0, 0xf0, 0x130, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0xe}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x5, 0x5, @ipv6=@ipv4={[], [], @empty}, 0x4e21}}}, {{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@ipv6header={0x28, 'ipv6header\x00', 0x0, {0x40, 0x20, 0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@multicast2, @ipv6=@empty, 0x2e, 0x26, 0x9}}}, {{@ipv6={@mcast1, @remote, [0xffffffff, 0xff000000, 0x7f000080, 0xff000000], [0xffffff00, 0xffffff00], 'ip6tnl0\x00', 'ip6tnl0\x00', {}, {}, 0xff, 0x1, 0x0, 0x63}, 0x0, 0xf0, 0x138, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@empty, @ipv4=@local, 0x37, 0x3b, 0x1}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6e0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000007cc0)=[{{&(0x7f00000002c0)=@caif=@dbg, 0x80, &(0x7f0000000840)=[{&(0x7f0000000340)=""/251, 0xfb}, {&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000007ec0)=""/108, 0x6c}, {&(0x7f0000000600)=""/241, 0xf1}, {0x0}], 0x5, &(0x7f0000000b40)=""/234, 0xea}, 0xd9b9}, {{&(0x7f0000000c40)=@pppol2tpv3, 0x80, &(0x7f0000002340)=[{&(0x7f0000000cc0)=""/63, 0x3f}, {&(0x7f0000000d40)=""/232, 0xe8}, {&(0x7f0000000e40)=""/77, 0x4d}, {&(0x7f0000000ec0)=""/150, 0x96}, {&(0x7f0000000f80)=""/116, 0x74}, {&(0x7f0000001000)=""/212, 0xd4}, {0x0}, {&(0x7f00000012c0)=""/4096, 0x1000}, {0x0}], 0x9, &(0x7f00000000c0)=""/40, 0x28}, 0x7f}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000002480)=""/199, 0xc7}, {&(0x7f00000008c0)=""/55, 0x37}], 0x2, &(0x7f00000025c0)=""/157, 0x9d}, 0x9}, {{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002680)=""/238, 0xee}, {&(0x7f0000002780)=""/37, 0x25}, {&(0x7f00000027c0)=""/240, 0xf0}, {&(0x7f00000028c0)=""/10, 0xa}, {&(0x7f0000002900)=""/202, 0xca}, {&(0x7f0000002a00)=""/247, 0xf7}, {0x0}], 0x7, &(0x7f0000002c80)=""/184, 0xb8}, 0x7}, {{&(0x7f0000002d40)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f0000003040)=[{&(0x7f0000002dc0)=""/18, 0x12}, {&(0x7f0000002e00)=""/213, 0xd5}, {0x0}, {0x0}, {&(0x7f0000002fc0)=""/31, 0x1f}, {&(0x7f0000003000)}], 0x6, &(0x7f00000030c0)=""/191, 0xbf}, 0x3}, {{&(0x7f0000003180)=@vsock, 0x80, &(0x7f0000004400)=[{&(0x7f0000007f40)=""/215, 0xd7}, {&(0x7f0000004300)=""/34, 0x22}, {&(0x7f0000004340)=""/28, 0x1c}, {&(0x7f0000004380)=""/108, 0x6c}], 0x4, &(0x7f0000004480)=""/222, 0xde}, 0x6}, {{&(0x7f0000004580)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000004a80)=[{&(0x7f0000004600)=""/120, 0x78}, {&(0x7f0000004700)=""/167, 0xa7}, {&(0x7f0000004800)=""/131, 0x83}, {0x0}, {&(0x7f0000004980)=""/212, 0xd4}], 0x5}, 0x8c2}, {{&(0x7f0000004b00)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000006cc0)=""/4096, 0x1000}, 0x52}], 0x8, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) write$UHID_DESTROY(r5, &(0x7f00000001c0), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x10001, 0xffff}, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x1) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000900)="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", 0x223, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 17:07:33 executing program 3: socket$packet(0x11, 0x1000000000000002, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x280080, 0x0) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000100)) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x15, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000003200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x680, 0x478, 0x210, 0x478, 0x0, 0x340, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x6, &(0x7f0000000580), {[{{@uncond, 0x0, 0xc8, 0x108}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "3c745d713ded54eb04d1bcfe4ec5e3722f760ca03b47ed1d735abcf07e43"}}, {{@uncond, 0x0, 0xc8, 0x108}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3, 0x38000, @ipv6=@rand_addr="f65360ce35d79792c798d9967e3df2d3", 0x4e21}}}, {{@ipv6={@empty, @mcast1, [0xffffff00, 0xffffff00, 0xff, 0xff000000], [0xff, 0x0, 0x17fffff01, 0xffffffff], 'rose0\x00', 'ipddp0\x00', {}, {}, 0x67, 0x9, 0x4, 0x1}, 0x0, 0xf0, 0x130, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0xe}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x5, 0x5, @ipv6=@ipv4={[], [], @empty}, 0x4e21}}}, {{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@ipv6header={0x28, 'ipv6header\x00', 0x0, {0x40, 0x20, 0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@multicast2, @ipv6=@empty, 0x2e, 0x26, 0x9}}}, {{@ipv6={@mcast1, @remote, [0xffffffff, 0xff000000, 0x7f000080, 0xff000000], [0xffffff00, 0xffffff00], 'ip6tnl0\x00', 'ip6tnl0\x00', {}, {}, 0xff, 0x1, 0x0, 0x63}, 0x0, 0xf0, 0x138, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@empty, @ipv4=@local, 0x37, 0x3b, 0x1}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6e0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000007cc0)=[{{&(0x7f00000002c0)=@caif=@dbg, 0x80, &(0x7f0000000840)=[{&(0x7f0000000340)=""/251, 0xfb}, {&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000007ec0)=""/108, 0x6c}, {&(0x7f0000000600)=""/241, 0xf1}, {0x0}], 0x5, &(0x7f0000000b40)=""/234, 0xea}, 0xd9b9}, {{&(0x7f0000000c40)=@pppol2tpv3, 0x80, &(0x7f0000002340)=[{&(0x7f0000000cc0)=""/63, 0x3f}, {&(0x7f0000000d40)=""/232, 0xe8}, {&(0x7f0000000e40)=""/77, 0x4d}, {&(0x7f0000000ec0)=""/150, 0x96}, {&(0x7f0000000f80)=""/116, 0x74}, {&(0x7f0000001000)=""/212, 0xd4}, {0x0}, {&(0x7f00000012c0)=""/4096, 0x1000}, {0x0}], 0x9, &(0x7f00000000c0)=""/40, 0x28}, 0x7f}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000002480)=""/199, 0xc7}, {&(0x7f00000008c0)=""/55, 0x37}], 0x2, &(0x7f00000025c0)=""/157, 0x9d}, 0x9}, {{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002680)=""/238, 0xee}, {&(0x7f0000002780)=""/37, 0x25}, {&(0x7f00000027c0)=""/240, 0xf0}, {&(0x7f00000028c0)=""/10, 0xa}, {&(0x7f0000002900)=""/202, 0xca}, {&(0x7f0000002a00)=""/247, 0xf7}, {0x0}], 0x7, &(0x7f0000002c80)=""/184, 0xb8}, 0x7}, {{&(0x7f0000002d40)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f0000003040)=[{&(0x7f0000002dc0)=""/18, 0x12}, {&(0x7f0000002f00)=""/62, 0x3e}, {0x0}, {0x0}, {&(0x7f0000002fc0)=""/31, 0x1f}, {&(0x7f0000003000)}], 0x6, &(0x7f00000030c0)=""/191, 0xbf}, 0x3}, {{&(0x7f0000003180)=@vsock, 0x80, &(0x7f0000004400)=[{&(0x7f0000007f40)=""/215, 0xd7}, {&(0x7f0000004300)=""/34, 0x22}, {&(0x7f0000004340)=""/28, 0x1c}, {&(0x7f0000004380)=""/108, 0x6c}], 0x4, &(0x7f0000004480)=""/222, 0xde}, 0x6}, {{&(0x7f0000004580)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000004a80)=[{&(0x7f0000004600)=""/120, 0x78}, {&(0x7f0000004700)=""/167, 0xa7}, {&(0x7f0000004800)=""/131, 0x83}, {0x0}, {&(0x7f0000004980)=""/212, 0xd4}], 0x5}, 0x8c2}, {{&(0x7f0000004b00)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000006cc0)=""/4096, 0x1000}, 0x52}], 0x8, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) write$UHID_DESTROY(r5, &(0x7f00000001c0), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x10001, 0xffff}, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x1) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000900)="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", 0x223, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 17:07:33 executing program 1: socket$packet(0x11, 0x1000000000000002, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x280080, 0x0) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000100)) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x15, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, 0x0, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000007cc0)=[{{&(0x7f00000002c0)=@caif=@dbg, 0x80, &(0x7f0000000840)=[{&(0x7f0000000340)=""/251, 0xfb}, {&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000007ec0)=""/108, 0x6c}, {&(0x7f0000000600)=""/241, 0xf1}, {0x0}], 0x5, &(0x7f0000000b40)=""/234, 0xea}, 0xd9b9}, {{&(0x7f0000000c40)=@pppol2tpv3, 0x80, &(0x7f0000002340)=[{&(0x7f0000000cc0)=""/63, 0x3f}, {&(0x7f0000000d40)=""/232, 0xe8}, {&(0x7f0000000e40)=""/77, 0x4d}, {&(0x7f0000000ec0)=""/150, 0x96}, {0x0}, {&(0x7f0000001000)=""/212, 0xd4}, {0x0}, {&(0x7f00000012c0)=""/4096, 0x1000}, {0x0}], 0x9, &(0x7f00000000c0)=""/40, 0x28}, 0x7f}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000002480)=""/199, 0xc7}, {&(0x7f00000008c0)=""/55, 0x37}], 0x2, &(0x7f00000025c0)=""/157, 0x9d}, 0x9}, {{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002680)=""/238, 0xee}, {&(0x7f0000002780)=""/37, 0x25}, {&(0x7f00000027c0)=""/240, 0xf0}, {&(0x7f00000028c0)=""/10, 0xa}, {&(0x7f0000002900)=""/202, 0xca}, {&(0x7f0000002a00)=""/247, 0xf7}, {0x0}], 0x7, &(0x7f0000002c80)=""/184, 0xb8}, 0x7}, {{&(0x7f0000002d40)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f0000003040)=[{&(0x7f0000002dc0)=""/18, 0x12}, {&(0x7f0000002e00)=""/213, 0xd5}, {&(0x7f0000002f00)=""/62, 0x3e}, {0x0}, {0x0}, {&(0x7f0000002fc0)=""/31, 0x1f}, {&(0x7f0000003000)}], 0x7, &(0x7f00000030c0)=""/191, 0xbf}, 0x3}, {{&(0x7f0000003180)=@vsock, 0x80, &(0x7f0000004400)=[{&(0x7f0000007f40)=""/215, 0xd7}, {&(0x7f0000004300)=""/34, 0x22}, {&(0x7f0000004340)=""/28, 0x1c}, {&(0x7f0000004380)=""/108, 0x6c}], 0x4, &(0x7f0000004480)=""/222, 0xde}, 0x6}, {{&(0x7f0000004580)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000004a80)=[{&(0x7f0000004600)=""/120, 0x78}, {&(0x7f0000004700)=""/167, 0xa7}, {&(0x7f0000004800)=""/131, 0x83}, {0x0}, {&(0x7f0000004980)=""/212, 0xd4}], 0x5}, 0x8c2}, {{&(0x7f0000004b00)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000006cc0)=""/4096, 0x1000}, 0x52}], 0x8, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) write$UHID_DESTROY(r5, &(0x7f00000001c0), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x10001, 0xffff}, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x1) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000900)="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", 0x223, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 17:07:33 executing program 5: 17:07:33 executing program 0: 17:07:33 executing program 4: 17:07:33 executing program 5: 17:07:33 executing program 0: 17:07:33 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(des3_ede)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendto$unix(r1, &(0x7f0000000080)="65bdb1d1b3d2b85a9ea933a236d6d3c7654f300015abc4581f693a2731c510b3eeb24514247597fd23adbcacce769335af9407d9d00cb65cbe61d6664a230f", 0x10114, 0x0, 0x0, 0x0) recvfrom(r1, &(0x7f0000000140)=""/102, 0x66, 0x0, 0x0, 0x0) recvfrom(r1, &(0x7f0000000900)=""/4096, 0xffffffffffffff78, 0x0, 0x0, 0x1c4) 17:07:33 executing program 5: 17:07:33 executing program 0: 17:07:33 executing program 1: socket$packet(0x11, 0x1000000000000002, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x280080, 0x0) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000100)) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x15, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, 0x0, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000007cc0)=[{{&(0x7f00000002c0)=@caif=@dbg, 0x80, &(0x7f0000000840)=[{&(0x7f0000000340)=""/251, 0xfb}, {&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000007ec0)=""/108, 0x6c}, {&(0x7f0000000600)=""/241, 0xf1}, {0x0}], 0x5, &(0x7f0000000b40)=""/234, 0xea}, 0xd9b9}, {{&(0x7f0000000c40)=@pppol2tpv3, 0x80, &(0x7f0000002340)=[{&(0x7f0000000cc0)=""/63, 0x3f}, {&(0x7f0000000d40)=""/232, 0xe8}, {&(0x7f0000000e40)=""/77, 0x4d}, {&(0x7f0000000f80)=""/116, 0x74}, {&(0x7f0000001000)=""/212, 0xd4}, {0x0}, {&(0x7f00000012c0)=""/4096, 0x1000}, {0x0}], 0x8, &(0x7f00000000c0)=""/40, 0x28}, 0x7f}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000002480)=""/199, 0xc7}, {&(0x7f00000008c0)=""/55, 0x37}], 0x2, &(0x7f00000025c0)=""/157, 0x9d}, 0x9}, {{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002680)=""/238, 0xee}, {&(0x7f0000002780)=""/37, 0x25}, {&(0x7f00000027c0)=""/240, 0xf0}, {&(0x7f00000028c0)=""/10, 0xa}, {&(0x7f0000002900)=""/202, 0xca}, {&(0x7f0000002a00)=""/247, 0xf7}, {0x0}], 0x7, &(0x7f0000002c80)=""/184, 0xb8}, 0x7}, {{&(0x7f0000002d40)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f0000003040)=[{&(0x7f0000002dc0)=""/18, 0x12}, {&(0x7f0000002e00)=""/213, 0xd5}, {&(0x7f0000002f00)=""/62, 0x3e}, {0x0}, {0x0}, {&(0x7f0000002fc0)=""/31, 0x1f}, {&(0x7f0000003000)}], 0x7, &(0x7f00000030c0)=""/191, 0xbf}, 0x3}, {{&(0x7f0000003180)=@vsock, 0x80, &(0x7f0000004400)=[{&(0x7f0000007f40)=""/215, 0xd7}, {&(0x7f0000004300)=""/34, 0x22}, {&(0x7f0000004340)=""/28, 0x1c}, {&(0x7f0000004380)=""/108, 0x6c}], 0x4, &(0x7f0000004480)=""/222, 0xde}, 0x6}, {{&(0x7f0000004580)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000004a80)=[{&(0x7f0000004600)=""/120, 0x78}, {&(0x7f0000004700)=""/167, 0xa7}, {&(0x7f0000004800)=""/131, 0x83}, {0x0}, {&(0x7f0000004980)=""/212, 0xd4}], 0x5}, 0x8c2}, {{&(0x7f0000004b00)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000006cc0)=""/4096, 0x1000}, 0x52}], 0x8, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) write$UHID_DESTROY(r5, &(0x7f00000001c0), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x10001, 0xffff}, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x1) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000900)="585ccbc4ed83b836c1a6474914dc5500b66147b3c7218a91690000000042e3d35228897501f93191b076ac446ff0022b8753a1fa748c569f435fb3bae96efb74b50ec93c2db8eae3198a29e5c0cfc60000ce0637cef580b4ec61221adf59be045b70e48884ca000018cea71fcfed06fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff33c1e8e036e5031949762d009d308bd73f477252d0000000000004000000000000000000000000000000000195e23fb4430a9a4c2850b6380a743d6ea0c3b121f66c716d746aa81c301621b7662c06aae720b872d4b7828e3b48522c673aa6cb366d4201e2aee3261eb52f14533b7a54203cf9a4fa587c0385cdba539e9bd34717b0dfab09db7b064fbe2ecf9f40fa3a4015d0d0db3f9d562686fcdc3342c88c6f1b6f11449f8aeabf54c5533ec6acc2270d41713ae1538256af3719a07f55223a6eaa7c1eae5d6efa12fe95e2b0f1c500b28c5c76e731d5250e395526d04063718f448e62d4dd7cefeed6b72b31b894093aa37337784c00d68a4185f349e41455f12d31aa2d0ff79a4d69d97421a0042f0c7a664a8c4945104b25dc49be950c5af7405b86482d7314fcc3a0ad5eb24268ccd24a2996019f7c006a0b3c39c7b98c5a5406a2e4ff6d9c0ce12c4251756a667b4731c4b0eb5dc7d4381fecf196c4404b54c3c11c48f09734d9a6842f52d3307a688208b7a4681b101e1abe5fecfca1f464c03e933cbd15ab589ccd3c559542355190522a712b8f5128a6a00", 0x223, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 17:07:33 executing program 2: socket$packet(0x11, 0x1000000000000002, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x280080, 0x0) ioctl$RTC_VL_READ(r0, 0x80047013, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x15, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000003200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x680, 0x478, 0x210, 0x478, 0x0, 0x340, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x6, 0x0, {[{{@uncond, 0x0, 0xc8, 0x108}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "3c745d713ded54eb04d1bcfe4ec5e3722f760ca03b47ed1d735abcf07e43"}}, {{@uncond, 0x0, 0xc8, 0x108}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3, 0x38000, @ipv6=@rand_addr="f65360ce35d79792c798d9967e3df2d3", 0x4e21}}}, {{@ipv6={@empty, @mcast1, [0xffffff00, 0xffffff00, 0xff, 0xff000000], [0xff, 0x0, 0x17fffff01, 0xffffffff], 'rose0\x00', 'ipddp0\x00', {}, {}, 0x67, 0x9, 0x4, 0x1}, 0x0, 0xf0, 0x130, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0xe}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x5, 0x5, @ipv6=@ipv4={[], [], @empty}, 0x4e21}}}, {{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@ipv6header={0x28, 'ipv6header\x00', 0x0, {0x40, 0x20, 0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@multicast2, @ipv6=@empty, 0x2e, 0x26, 0x9}}}, {{@ipv6={@mcast1, @remote, [0xffffffff, 0xff000000, 0x7f000080, 0xff000000], [0xffffff00, 0xffffff00], 'ip6tnl0\x00', 'ip6tnl0\x00', {}, {}, 0xff, 0x1, 0x0, 0x63}, 0x0, 0xf0, 0x138, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@empty, @ipv4=@local, 0x37, 0x3b, 0x1}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6e0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000007cc0)=[{{&(0x7f00000002c0)=@caif=@dbg, 0x80, &(0x7f0000000840)=[{&(0x7f0000000340)=""/251, 0xfb}, {&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000007ec0)=""/108, 0x6c}, {&(0x7f0000000600)=""/241, 0xf1}, {0x0}], 0x5, &(0x7f0000000b40)=""/234, 0xea}, 0xd9b9}, {{&(0x7f0000000c40)=@pppol2tpv3, 0x80, &(0x7f0000002340)=[{&(0x7f0000000cc0)=""/63, 0x3f}, {&(0x7f0000000d40)=""/232, 0xe8}, {&(0x7f0000000e40)=""/77, 0x4d}, {&(0x7f0000000ec0)=""/150, 0x96}, {&(0x7f0000000f80)=""/116, 0x74}, {&(0x7f0000001000)=""/212, 0xd4}, {0x0}, {&(0x7f00000012c0)=""/4096, 0x1000}, {0x0}], 0x9, &(0x7f00000000c0)=""/40, 0x28}, 0x7f}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000002480)=""/199, 0xc7}, {&(0x7f00000008c0)=""/55, 0x37}], 0x2, &(0x7f00000025c0)=""/157, 0x9d}, 0x9}, {{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002680)=""/238, 0xee}, {&(0x7f0000002780)=""/37, 0x25}, {&(0x7f00000027c0)=""/240, 0xf0}, {&(0x7f00000028c0)=""/10, 0xa}, {&(0x7f0000002900)=""/202, 0xca}, {&(0x7f0000002a00)=""/247, 0xf7}, {0x0}], 0x7, &(0x7f0000002c80)=""/184, 0xb8}, 0x7}, {{&(0x7f0000002d40)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f0000003040)=[{&(0x7f0000002dc0)=""/18, 0x12}, {&(0x7f0000002e00)=""/213, 0xd5}, {0x0}, {0x0}, {&(0x7f0000002fc0)=""/31, 0x1f}, {&(0x7f0000003000)}], 0x6, &(0x7f00000030c0)=""/191, 0xbf}, 0x3}, {{&(0x7f0000003180)=@vsock, 0x80, &(0x7f0000004400)=[{&(0x7f0000007f40)=""/215, 0xd7}, {&(0x7f0000004300)=""/34, 0x22}, {&(0x7f0000004340)=""/28, 0x1c}, {&(0x7f0000004380)=""/108, 0x6c}], 0x4, &(0x7f0000004480)=""/222, 0xde}, 0x6}, {{&(0x7f0000004580)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000004a80)=[{&(0x7f0000004600)=""/120, 0x78}, {&(0x7f0000004700)=""/167, 0xa7}, {&(0x7f0000004800)=""/131, 0x83}, {0x0}, {&(0x7f0000004980)=""/212, 0xd4}], 0x5}, 0x8c2}, {{&(0x7f0000004b00)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000006cc0)=""/4096, 0x1000}, 0x52}], 0x8, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) write$UHID_DESTROY(r5, &(0x7f00000001c0), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x10001, 0xffff}, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x1) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000900)="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", 0x223, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 17:07:33 executing program 3: socket$packet(0x11, 0x1000000000000002, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x280080, 0x0) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000100)) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x15, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000003200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x680, 0x478, 0x210, 0x478, 0x0, 0x340, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x6, &(0x7f0000000580), {[{{@uncond, 0x0, 0xc8, 0x108}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "3c745d713ded54eb04d1bcfe4ec5e3722f760ca03b47ed1d735abcf07e43"}}, {{@uncond, 0x0, 0xc8, 0x108}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3, 0x38000, @ipv6=@rand_addr="f65360ce35d79792c798d9967e3df2d3", 0x4e21}}}, {{@ipv6={@empty, @mcast1, [0xffffff00, 0xffffff00, 0xff, 0xff000000], [0xff, 0x0, 0x17fffff01, 0xffffffff], 'rose0\x00', 'ipddp0\x00', {}, {}, 0x67, 0x9, 0x4, 0x1}, 0x0, 0xf0, 0x130, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0xe}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x5, 0x5, @ipv6=@ipv4={[], [], @empty}, 0x4e21}}}, {{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@ipv6header={0x28, 'ipv6header\x00', 0x0, {0x40, 0x20, 0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@multicast2, @ipv6=@empty, 0x2e, 0x26, 0x9}}}, {{@ipv6={@mcast1, @remote, [0xffffffff, 0xff000000, 0x7f000080, 0xff000000], [0xffffff00, 0xffffff00], 'ip6tnl0\x00', 'ip6tnl0\x00', {}, {}, 0xff, 0x1, 0x0, 0x63}, 0x0, 0xf0, 0x138, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@empty, @ipv4=@local, 0x37, 0x3b, 0x1}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6e0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000007cc0)=[{{&(0x7f00000002c0)=@caif=@dbg, 0x80, &(0x7f0000000840)=[{&(0x7f0000000340)=""/251, 0xfb}, {&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000007ec0)=""/108, 0x6c}, {&(0x7f0000000600)=""/241, 0xf1}, {0x0}], 0x5, &(0x7f0000000b40)=""/234, 0xea}, 0xd9b9}, {{&(0x7f0000000c40)=@pppol2tpv3, 0x80, &(0x7f0000002340)=[{&(0x7f0000000cc0)=""/63, 0x3f}, {&(0x7f0000000d40)=""/232, 0xe8}, {&(0x7f0000000e40)=""/77, 0x4d}, {&(0x7f0000000ec0)=""/150, 0x96}, {&(0x7f0000000f80)=""/116, 0x74}, {&(0x7f0000001000)=""/212, 0xd4}, {0x0}, {&(0x7f00000012c0)=""/4096, 0x1000}, {0x0}], 0x9, &(0x7f00000000c0)=""/40, 0x28}, 0x7f}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000002480)=""/199, 0xc7}, {&(0x7f00000008c0)=""/55, 0x37}], 0x2, &(0x7f00000025c0)=""/157, 0x9d}, 0x9}, {{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002680)=""/238, 0xee}, {&(0x7f0000002780)=""/37, 0x25}, {&(0x7f00000027c0)=""/240, 0xf0}, {&(0x7f00000028c0)=""/10, 0xa}, {&(0x7f0000002900)=""/202, 0xca}, {&(0x7f0000002a00)=""/247, 0xf7}, {0x0}], 0x7, &(0x7f0000002c80)=""/184, 0xb8}, 0x7}, {{&(0x7f0000002d40)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f0000003040)=[{&(0x7f0000002dc0)=""/18, 0x12}, {0x0}, {&(0x7f0000002f00)=""/62, 0x3e}, {0x0}, {0x0}, {&(0x7f0000002fc0)=""/31, 0x1f}, {&(0x7f0000003000)}], 0x7, &(0x7f00000030c0)=""/191, 0xbf}, 0x3}, {{&(0x7f0000003180)=@vsock, 0x80, &(0x7f0000004400)=[{&(0x7f0000007f40)=""/215, 0xd7}, {&(0x7f0000004300)=""/34, 0x22}, {&(0x7f0000004340)=""/28, 0x1c}, {&(0x7f0000004380)=""/108, 0x6c}], 0x4, &(0x7f0000004480)=""/222, 0xde}, 0x6}, {{&(0x7f0000004580)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000004a80)=[{&(0x7f0000004600)=""/120, 0x78}, {&(0x7f0000004700)=""/167, 0xa7}, {&(0x7f0000004800)=""/131, 0x83}, {0x0}, {&(0x7f0000004980)=""/212, 0xd4}], 0x5}, 0x8c2}, {{&(0x7f0000004b00)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000006cc0)=""/4096, 0x1000}, 0x52}], 0x8, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) write$UHID_DESTROY(r5, &(0x7f00000001c0), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x10001, 0xffff}, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x1) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000900)="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", 0x223, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 17:07:33 executing program 5: 17:07:33 executing program 0: 17:07:33 executing program 4: 17:07:33 executing program 5: 17:07:33 executing program 4: 17:07:33 executing program 0: 17:07:34 executing program 4: 17:07:34 executing program 3: socket$packet(0x11, 0x1000000000000002, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x280080, 0x0) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000100)) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x15, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000003200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x680, 0x478, 0x210, 0x478, 0x0, 0x340, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x6, &(0x7f0000000580), {[{{@uncond, 0x0, 0xc8, 0x108}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "3c745d713ded54eb04d1bcfe4ec5e3722f760ca03b47ed1d735abcf07e43"}}, {{@uncond, 0x0, 0xc8, 0x108}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3, 0x38000, @ipv6=@rand_addr="f65360ce35d79792c798d9967e3df2d3", 0x4e21}}}, {{@ipv6={@empty, @mcast1, [0xffffff00, 0xffffff00, 0xff, 0xff000000], [0xff, 0x0, 0x17fffff01, 0xffffffff], 'rose0\x00', 'ipddp0\x00', {}, {}, 0x67, 0x9, 0x4, 0x1}, 0x0, 0xf0, 0x130, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0xe}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x5, 0x5, @ipv6=@ipv4={[], [], @empty}, 0x4e21}}}, {{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@ipv6header={0x28, 'ipv6header\x00', 0x0, {0x40, 0x20, 0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@multicast2, @ipv6=@empty, 0x2e, 0x26, 0x9}}}, {{@ipv6={@mcast1, @remote, [0xffffffff, 0xff000000, 0x7f000080, 0xff000000], [0xffffff00, 0xffffff00], 'ip6tnl0\x00', 'ip6tnl0\x00', {}, {}, 0xff, 0x1, 0x0, 0x63}, 0x0, 0xf0, 0x138, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@empty, @ipv4=@local, 0x37, 0x3b, 0x1}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6e0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000007cc0)=[{{&(0x7f00000002c0)=@caif=@dbg, 0x80, &(0x7f0000000840)=[{&(0x7f0000000340)=""/251, 0xfb}, {&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000007ec0)=""/108, 0x6c}, {&(0x7f0000000600)=""/241, 0xf1}, {0x0}], 0x5, &(0x7f0000000b40)=""/234, 0xea}, 0xd9b9}, {{&(0x7f0000000c40)=@pppol2tpv3, 0x80, &(0x7f0000002340)=[{&(0x7f0000000cc0)=""/63, 0x3f}, {&(0x7f0000000d40)=""/232, 0xe8}, {&(0x7f0000000e40)=""/77, 0x4d}, {&(0x7f0000000ec0)=""/150, 0x96}, {&(0x7f0000000f80)=""/116, 0x74}, {&(0x7f0000001000)=""/212, 0xd4}, {0x0}, {&(0x7f00000012c0)=""/4096, 0x1000}, {0x0}], 0x9, &(0x7f00000000c0)=""/40, 0x28}, 0x7f}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000002480)=""/199, 0xc7}, {&(0x7f00000008c0)=""/55, 0x37}], 0x2, &(0x7f00000025c0)=""/157, 0x9d}, 0x9}, {{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002680)=""/238, 0xee}, {&(0x7f0000002780)=""/37, 0x25}, {&(0x7f00000027c0)=""/240, 0xf0}, {&(0x7f00000028c0)=""/10, 0xa}, {&(0x7f0000002900)=""/202, 0xca}, {&(0x7f0000002a00)=""/247, 0xf7}, {0x0}], 0x7, &(0x7f0000002c80)=""/184, 0xb8}, 0x7}, {{&(0x7f0000002d40)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f0000003040)=[{&(0x7f0000002dc0)=""/18, 0x12}, {0x0}, {&(0x7f0000002f00)=""/62, 0x3e}, {0x0}, {0x0}, {&(0x7f0000002fc0)=""/31, 0x1f}, {&(0x7f0000003000)}], 0x7, &(0x7f00000030c0)=""/191, 0xbf}, 0x3}, {{&(0x7f0000003180)=@vsock, 0x80, &(0x7f0000004400)=[{&(0x7f0000007f40)=""/215, 0xd7}, {&(0x7f0000004300)=""/34, 0x22}, {&(0x7f0000004340)=""/28, 0x1c}, {&(0x7f0000004380)=""/108, 0x6c}], 0x4, &(0x7f0000004480)=""/222, 0xde}, 0x6}, {{&(0x7f0000004580)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000004a80)=[{&(0x7f0000004600)=""/120, 0x78}, {&(0x7f0000004700)=""/167, 0xa7}, {&(0x7f0000004800)=""/131, 0x83}, {0x0}, {&(0x7f0000004980)=""/212, 0xd4}], 0x5}, 0x8c2}, {{&(0x7f0000004b00)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000006cc0)=""/4096, 0x1000}, 0x52}], 0x8, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) write$UHID_DESTROY(r5, &(0x7f00000001c0), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x10001, 0xffff}, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x1) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000900)="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", 0x223, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 17:07:34 executing program 5: 17:07:34 executing program 1: socket$packet(0x11, 0x1000000000000002, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x280080, 0x0) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000100)) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x15, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, 0x0, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000007cc0)=[{{&(0x7f00000002c0)=@caif=@dbg, 0x80, &(0x7f0000000840)=[{&(0x7f0000000340)=""/251, 0xfb}, {&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000007ec0)=""/108, 0x6c}, {&(0x7f0000000600)=""/241, 0xf1}, {0x0}], 0x5, &(0x7f0000000b40)=""/234, 0xea}, 0xd9b9}, {{&(0x7f0000000c40)=@pppol2tpv3, 0x80, &(0x7f0000002340)=[{&(0x7f0000000cc0)=""/63, 0x3f}, {&(0x7f0000000d40)=""/232, 0xe8}, {&(0x7f0000000e40)=""/77, 0x4d}, {&(0x7f0000000f80)=""/116, 0x74}, {&(0x7f0000001000)=""/212, 0xd4}, {0x0}, {&(0x7f00000012c0)=""/4096, 0x1000}, {0x0}], 0x8, &(0x7f00000000c0)=""/40, 0x28}, 0x7f}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000002480)=""/199, 0xc7}, {&(0x7f00000008c0)=""/55, 0x37}], 0x2, &(0x7f00000025c0)=""/157, 0x9d}, 0x9}, {{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002680)=""/238, 0xee}, {&(0x7f0000002780)=""/37, 0x25}, {&(0x7f00000027c0)=""/240, 0xf0}, {&(0x7f00000028c0)=""/10, 0xa}, {&(0x7f0000002900)=""/202, 0xca}, {&(0x7f0000002a00)=""/247, 0xf7}, {0x0}], 0x7, &(0x7f0000002c80)=""/184, 0xb8}, 0x7}, {{&(0x7f0000002d40)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f0000003040)=[{&(0x7f0000002dc0)=""/18, 0x12}, {&(0x7f0000002e00)=""/213, 0xd5}, {&(0x7f0000002f00)=""/62, 0x3e}, {0x0}, {0x0}, {&(0x7f0000002fc0)=""/31, 0x1f}, {&(0x7f0000003000)}], 0x7, &(0x7f00000030c0)=""/191, 0xbf}, 0x3}, {{&(0x7f0000003180)=@vsock, 0x80, &(0x7f0000004400)=[{&(0x7f0000007f40)=""/215, 0xd7}, {&(0x7f0000004300)=""/34, 0x22}, {&(0x7f0000004340)=""/28, 0x1c}, {&(0x7f0000004380)=""/108, 0x6c}], 0x4, &(0x7f0000004480)=""/222, 0xde}, 0x6}, {{&(0x7f0000004580)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000004a80)=[{&(0x7f0000004600)=""/120, 0x78}, {&(0x7f0000004700)=""/167, 0xa7}, {&(0x7f0000004800)=""/131, 0x83}, {0x0}, {&(0x7f0000004980)=""/212, 0xd4}], 0x5}, 0x8c2}, {{&(0x7f0000004b00)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000006cc0)=""/4096, 0x1000}, 0x52}], 0x8, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) write$UHID_DESTROY(r5, &(0x7f00000001c0), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x10001, 0xffff}, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x1) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000900)="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", 0x223, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 17:07:34 executing program 2: socket$packet(0x11, 0x1000000000000002, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x280080, 0x0) ioctl$RTC_VL_READ(r0, 0x80047013, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x15, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000003200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x680, 0x478, 0x210, 0x478, 0x0, 0x340, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x6, 0x0, {[{{@uncond, 0x0, 0xc8, 0x108}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "3c745d713ded54eb04d1bcfe4ec5e3722f760ca03b47ed1d735abcf07e43"}}, {{@uncond, 0x0, 0xc8, 0x108}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3, 0x38000, @ipv6=@rand_addr="f65360ce35d79792c798d9967e3df2d3", 0x4e21}}}, {{@ipv6={@empty, @mcast1, [0xffffff00, 0xffffff00, 0xff, 0xff000000], [0xff, 0x0, 0x17fffff01, 0xffffffff], 'rose0\x00', 'ipddp0\x00', {}, {}, 0x67, 0x9, 0x4, 0x1}, 0x0, 0xf0, 0x130, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0xe}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x5, 0x5, @ipv6=@ipv4={[], [], @empty}, 0x4e21}}}, {{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@ipv6header={0x28, 'ipv6header\x00', 0x0, {0x40, 0x20, 0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@multicast2, @ipv6=@empty, 0x2e, 0x26, 0x9}}}, {{@ipv6={@mcast1, @remote, [0xffffffff, 0xff000000, 0x7f000080, 0xff000000], [0xffffff00, 0xffffff00], 'ip6tnl0\x00', 'ip6tnl0\x00', {}, {}, 0xff, 0x1, 0x0, 0x63}, 0x0, 0xf0, 0x138, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@empty, @ipv4=@local, 0x37, 0x3b, 0x1}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6e0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000007cc0)=[{{&(0x7f00000002c0)=@caif=@dbg, 0x80, &(0x7f0000000840)=[{&(0x7f0000000340)=""/251, 0xfb}, {&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000007ec0)=""/108, 0x6c}, {&(0x7f0000000600)=""/241, 0xf1}, {0x0}], 0x5, &(0x7f0000000b40)=""/234, 0xea}, 0xd9b9}, {{&(0x7f0000000c40)=@pppol2tpv3, 0x80, &(0x7f0000002340)=[{&(0x7f0000000cc0)=""/63, 0x3f}, {&(0x7f0000000d40)=""/232, 0xe8}, {&(0x7f0000000e40)=""/77, 0x4d}, {&(0x7f0000000ec0)=""/150, 0x96}, {&(0x7f0000000f80)=""/116, 0x74}, {&(0x7f0000001000)=""/212, 0xd4}, {0x0}, {&(0x7f00000012c0)=""/4096, 0x1000}, {0x0}], 0x9, &(0x7f00000000c0)=""/40, 0x28}, 0x7f}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000002480)=""/199, 0xc7}, {&(0x7f00000008c0)=""/55, 0x37}], 0x2, &(0x7f00000025c0)=""/157, 0x9d}, 0x9}, {{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002680)=""/238, 0xee}, {&(0x7f0000002780)=""/37, 0x25}, {&(0x7f00000027c0)=""/240, 0xf0}, {&(0x7f00000028c0)=""/10, 0xa}, {&(0x7f0000002900)=""/202, 0xca}, {&(0x7f0000002a00)=""/247, 0xf7}, {0x0}], 0x7, &(0x7f0000002c80)=""/184, 0xb8}, 0x7}, {{&(0x7f0000002d40)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f0000003040)=[{&(0x7f0000002dc0)=""/18, 0x12}, {&(0x7f0000002e00)=""/213, 0xd5}, {0x0}, {0x0}, {&(0x7f0000002fc0)=""/31, 0x1f}, {&(0x7f0000003000)}], 0x6, &(0x7f00000030c0)=""/191, 0xbf}, 0x3}, {{&(0x7f0000003180)=@vsock, 0x80, &(0x7f0000004400)=[{&(0x7f0000007f40)=""/215, 0xd7}, {&(0x7f0000004300)=""/34, 0x22}, {&(0x7f0000004340)=""/28, 0x1c}, {&(0x7f0000004380)=""/108, 0x6c}], 0x4, &(0x7f0000004480)=""/222, 0xde}, 0x6}, {{&(0x7f0000004580)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000004a80)=[{&(0x7f0000004600)=""/120, 0x78}, {&(0x7f0000004700)=""/167, 0xa7}, {&(0x7f0000004800)=""/131, 0x83}, {0x0}, {&(0x7f0000004980)=""/212, 0xd4}], 0x5}, 0x8c2}, {{&(0x7f0000004b00)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000006cc0)=""/4096, 0x1000}, 0x52}], 0x8, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) write$UHID_DESTROY(r5, &(0x7f00000001c0), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x10001, 0xffff}, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x1) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000900)="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", 0x223, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 17:07:34 executing program 4: 17:07:34 executing program 0: 17:07:34 executing program 4: 17:07:34 executing program 3: socket$packet(0x11, 0x1000000000000002, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x280080, 0x0) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000100)) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x15, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000003200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x680, 0x478, 0x210, 0x478, 0x0, 0x340, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x6, &(0x7f0000000580), {[{{@uncond, 0x0, 0xc8, 0x108}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "3c745d713ded54eb04d1bcfe4ec5e3722f760ca03b47ed1d735abcf07e43"}}, {{@uncond, 0x0, 0xc8, 0x108}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3, 0x38000, @ipv6=@rand_addr="f65360ce35d79792c798d9967e3df2d3", 0x4e21}}}, {{@ipv6={@empty, @mcast1, [0xffffff00, 0xffffff00, 0xff, 0xff000000], [0xff, 0x0, 0x17fffff01, 0xffffffff], 'rose0\x00', 'ipddp0\x00', {}, {}, 0x67, 0x9, 0x4, 0x1}, 0x0, 0xf0, 0x130, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0xe}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x5, 0x5, @ipv6=@ipv4={[], [], @empty}, 0x4e21}}}, {{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@ipv6header={0x28, 'ipv6header\x00', 0x0, {0x40, 0x20, 0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@multicast2, @ipv6=@empty, 0x2e, 0x26, 0x9}}}, {{@ipv6={@mcast1, @remote, [0xffffffff, 0xff000000, 0x7f000080, 0xff000000], [0xffffff00, 0xffffff00], 'ip6tnl0\x00', 'ip6tnl0\x00', {}, {}, 0xff, 0x1, 0x0, 0x63}, 0x0, 0xf0, 0x138, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@empty, @ipv4=@local, 0x37, 0x3b, 0x1}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6e0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000007cc0)=[{{&(0x7f00000002c0)=@caif=@dbg, 0x80, &(0x7f0000000840)=[{&(0x7f0000000340)=""/251, 0xfb}, {&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000007ec0)=""/108, 0x6c}, {&(0x7f0000000600)=""/241, 0xf1}, {0x0}], 0x5, &(0x7f0000000b40)=""/234, 0xea}, 0xd9b9}, {{&(0x7f0000000c40)=@pppol2tpv3, 0x80, &(0x7f0000002340)=[{&(0x7f0000000cc0)=""/63, 0x3f}, {&(0x7f0000000d40)=""/232, 0xe8}, {&(0x7f0000000e40)=""/77, 0x4d}, {&(0x7f0000000ec0)=""/150, 0x96}, {&(0x7f0000000f80)=""/116, 0x74}, {&(0x7f0000001000)=""/212, 0xd4}, {0x0}, {&(0x7f00000012c0)=""/4096, 0x1000}, {0x0}], 0x9, &(0x7f00000000c0)=""/40, 0x28}, 0x7f}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000002480)=""/199, 0xc7}, {&(0x7f00000008c0)=""/55, 0x37}], 0x2, &(0x7f00000025c0)=""/157, 0x9d}, 0x9}, {{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002680)=""/238, 0xee}, {&(0x7f0000002780)=""/37, 0x25}, {&(0x7f00000027c0)=""/240, 0xf0}, {&(0x7f00000028c0)=""/10, 0xa}, {&(0x7f0000002900)=""/202, 0xca}, {&(0x7f0000002a00)=""/247, 0xf7}, {0x0}], 0x7, &(0x7f0000002c80)=""/184, 0xb8}, 0x7}, {{&(0x7f0000002d40)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f0000003040)=[{&(0x7f0000002dc0)=""/18, 0x12}, {0x0}, {&(0x7f0000002f00)=""/62, 0x3e}, {0x0}, {0x0}, {&(0x7f0000002fc0)=""/31, 0x1f}, {&(0x7f0000003000)}], 0x7, &(0x7f00000030c0)=""/191, 0xbf}, 0x3}, {{&(0x7f0000003180)=@vsock, 0x80, &(0x7f0000004400)=[{&(0x7f0000007f40)=""/215, 0xd7}, {&(0x7f0000004300)=""/34, 0x22}, {&(0x7f0000004340)=""/28, 0x1c}, {&(0x7f0000004380)=""/108, 0x6c}], 0x4, &(0x7f0000004480)=""/222, 0xde}, 0x6}, {{&(0x7f0000004580)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000004a80)=[{&(0x7f0000004600)=""/120, 0x78}, {&(0x7f0000004700)=""/167, 0xa7}, {&(0x7f0000004800)=""/131, 0x83}, {0x0}, {&(0x7f0000004980)=""/212, 0xd4}], 0x5}, 0x8c2}, {{&(0x7f0000004b00)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000006cc0)=""/4096, 0x1000}, 0x52}], 0x8, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) write$UHID_DESTROY(r5, &(0x7f00000001c0), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x10001, 0xffff}, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x1) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000900)="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", 0x223, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 17:07:34 executing program 5: 17:07:34 executing program 0: 17:07:34 executing program 1: socket$packet(0x11, 0x1000000000000002, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x280080, 0x0) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000100)) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x15, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, 0x0, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000007cc0)=[{{&(0x7f00000002c0)=@caif=@dbg, 0x80, &(0x7f0000000840)=[{&(0x7f0000000340)=""/251, 0xfb}, {&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000007ec0)=""/108, 0x6c}, {&(0x7f0000000600)=""/241, 0xf1}, {0x0}], 0x5, &(0x7f0000000b40)=""/234, 0xea}, 0xd9b9}, {{&(0x7f0000000c40)=@pppol2tpv3, 0x80, &(0x7f0000002340)=[{&(0x7f0000000cc0)=""/63, 0x3f}, {&(0x7f0000000d40)=""/232, 0xe8}, {&(0x7f0000000e40)=""/77, 0x4d}, {&(0x7f0000000f80)=""/116, 0x74}, {&(0x7f0000001000)=""/212, 0xd4}, {0x0}, {&(0x7f00000012c0)=""/4096, 0x1000}, {0x0}], 0x8, &(0x7f00000000c0)=""/40, 0x28}, 0x7f}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000002480)=""/199, 0xc7}, {&(0x7f00000008c0)=""/55, 0x37}], 0x2, &(0x7f00000025c0)=""/157, 0x9d}, 0x9}, {{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002680)=""/238, 0xee}, {&(0x7f0000002780)=""/37, 0x25}, {&(0x7f00000027c0)=""/240, 0xf0}, {&(0x7f00000028c0)=""/10, 0xa}, {&(0x7f0000002900)=""/202, 0xca}, {&(0x7f0000002a00)=""/247, 0xf7}, {0x0}], 0x7, &(0x7f0000002c80)=""/184, 0xb8}, 0x7}, {{&(0x7f0000002d40)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f0000003040)=[{&(0x7f0000002dc0)=""/18, 0x12}, {&(0x7f0000002e00)=""/213, 0xd5}, {&(0x7f0000002f00)=""/62, 0x3e}, {0x0}, {0x0}, {&(0x7f0000002fc0)=""/31, 0x1f}, {&(0x7f0000003000)}], 0x7, &(0x7f00000030c0)=""/191, 0xbf}, 0x3}, {{&(0x7f0000003180)=@vsock, 0x80, &(0x7f0000004400)=[{&(0x7f0000007f40)=""/215, 0xd7}, {&(0x7f0000004300)=""/34, 0x22}, {&(0x7f0000004340)=""/28, 0x1c}, {&(0x7f0000004380)=""/108, 0x6c}], 0x4, &(0x7f0000004480)=""/222, 0xde}, 0x6}, {{&(0x7f0000004580)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000004a80)=[{&(0x7f0000004600)=""/120, 0x78}, {&(0x7f0000004700)=""/167, 0xa7}, {&(0x7f0000004800)=""/131, 0x83}, {0x0}, {&(0x7f0000004980)=""/212, 0xd4}], 0x5}, 0x8c2}, {{&(0x7f0000004b00)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000006cc0)=""/4096, 0x1000}, 0x52}], 0x8, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) write$UHID_DESTROY(r5, &(0x7f00000001c0), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x10001, 0xffff}, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x1) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000900)="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", 0x223, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 17:07:34 executing program 5: 17:07:34 executing program 2: socket$packet(0x11, 0x1000000000000002, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x280080, 0x0) ioctl$RTC_VL_READ(r0, 0x80047013, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x15, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000003200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x680, 0x478, 0x210, 0x478, 0x0, 0x340, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x6, 0x0, {[{{@uncond, 0x0, 0xc8, 0x108}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "3c745d713ded54eb04d1bcfe4ec5e3722f760ca03b47ed1d735abcf07e43"}}, {{@uncond, 0x0, 0xc8, 0x108}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3, 0x38000, @ipv6=@rand_addr="f65360ce35d79792c798d9967e3df2d3", 0x4e21}}}, {{@ipv6={@empty, @mcast1, [0xffffff00, 0xffffff00, 0xff, 0xff000000], [0xff, 0x0, 0x17fffff01, 0xffffffff], 'rose0\x00', 'ipddp0\x00', {}, {}, 0x67, 0x9, 0x4, 0x1}, 0x0, 0xf0, 0x130, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0xe}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x5, 0x5, @ipv6=@ipv4={[], [], @empty}, 0x4e21}}}, {{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@ipv6header={0x28, 'ipv6header\x00', 0x0, {0x40, 0x20, 0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@multicast2, @ipv6=@empty, 0x2e, 0x26, 0x9}}}, {{@ipv6={@mcast1, @remote, [0xffffffff, 0xff000000, 0x7f000080, 0xff000000], [0xffffff00, 0xffffff00], 'ip6tnl0\x00', 'ip6tnl0\x00', {}, {}, 0xff, 0x1, 0x0, 0x63}, 0x0, 0xf0, 0x138, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@empty, @ipv4=@local, 0x37, 0x3b, 0x1}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6e0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000007cc0)=[{{&(0x7f00000002c0)=@caif=@dbg, 0x80, &(0x7f0000000840)=[{&(0x7f0000000340)=""/251, 0xfb}, {&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000007ec0)=""/108, 0x6c}, {&(0x7f0000000600)=""/241, 0xf1}, {0x0}], 0x5, &(0x7f0000000b40)=""/234, 0xea}, 0xd9b9}, {{&(0x7f0000000c40)=@pppol2tpv3, 0x80, &(0x7f0000002340)=[{&(0x7f0000000cc0)=""/63, 0x3f}, {&(0x7f0000000d40)=""/232, 0xe8}, {&(0x7f0000000e40)=""/77, 0x4d}, {&(0x7f0000000ec0)=""/150, 0x96}, {&(0x7f0000000f80)=""/116, 0x74}, {&(0x7f0000001000)=""/212, 0xd4}, {0x0}, {&(0x7f00000012c0)=""/4096, 0x1000}, {0x0}], 0x9, &(0x7f00000000c0)=""/40, 0x28}, 0x7f}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000002480)=""/199, 0xc7}, {&(0x7f00000008c0)=""/55, 0x37}], 0x2, &(0x7f00000025c0)=""/157, 0x9d}, 0x9}, {{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002680)=""/238, 0xee}, {&(0x7f0000002780)=""/37, 0x25}, {&(0x7f00000027c0)=""/240, 0xf0}, {&(0x7f00000028c0)=""/10, 0xa}, {&(0x7f0000002900)=""/202, 0xca}, {&(0x7f0000002a00)=""/247, 0xf7}, {0x0}], 0x7, &(0x7f0000002c80)=""/184, 0xb8}, 0x7}, {{&(0x7f0000002d40)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f0000003040)=[{&(0x7f0000002dc0)=""/18, 0x12}, {&(0x7f0000002e00)=""/213, 0xd5}, {0x0}, {0x0}, {0x0}, {&(0x7f0000002fc0)=""/31, 0x1f}, {&(0x7f0000003000)}], 0x7, &(0x7f00000030c0)=""/191, 0xbf}, 0x3}, {{&(0x7f0000003180)=@vsock, 0x80, &(0x7f0000004400)=[{&(0x7f0000007f40)=""/215, 0xd7}, {&(0x7f0000004300)=""/34, 0x22}, {&(0x7f0000004340)=""/28, 0x1c}, {&(0x7f0000004380)=""/108, 0x6c}], 0x4, &(0x7f0000004480)=""/222, 0xde}, 0x6}, {{&(0x7f0000004580)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000004a80)=[{&(0x7f0000004600)=""/120, 0x78}, {&(0x7f0000004700)=""/167, 0xa7}, {&(0x7f0000004800)=""/131, 0x83}, {0x0}, {&(0x7f0000004980)=""/212, 0xd4}], 0x5}, 0x8c2}, {{&(0x7f0000004b00)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000006cc0)=""/4096, 0x1000}, 0x52}], 0x8, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) write$UHID_DESTROY(r5, &(0x7f00000001c0), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x10001, 0xffff}, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x1) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000900)="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", 0x223, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 17:07:34 executing program 0: 17:07:34 executing program 4: r0 = socket(0x10, 0x3, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x5, 0x0, &(0x7f0000000140)) 17:07:34 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f00000003c0)={@empty, @empty, @mcast2}) 17:07:34 executing program 4: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x800, 0x0) 17:07:34 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0xc72f, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, 0x200000000001d, 0x0, 0x0, 0x0, 0x0, {0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, "77100b6a1cc076a15ad9f0552d5b12bfc338e5269b12ac2a4ee4202c64122b0a"}}) add_key$keyring(0x0, &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0) 17:07:34 executing program 1: socket$packet(0x11, 0x1000000000000002, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x280080, 0x0) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000100)) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x15, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, 0x0, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000007cc0)=[{{&(0x7f00000002c0)=@caif=@dbg, 0x80, &(0x7f0000000840)=[{&(0x7f0000000340)=""/251, 0xfb}, {&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000007ec0)=""/108, 0x6c}, {&(0x7f0000000600)=""/241, 0xf1}, {0x0}], 0x5, &(0x7f0000000b40)=""/234, 0xea}, 0xd9b9}, {{&(0x7f0000000c40)=@pppol2tpv3, 0x80, &(0x7f0000002340)=[{&(0x7f0000000cc0)=""/63, 0x3f}, {&(0x7f0000000d40)=""/232, 0xe8}, {&(0x7f0000000e40)=""/77, 0x4d}, {0x0}, {&(0x7f0000000f80)=""/116, 0x74}, {&(0x7f0000001000)=""/212, 0xd4}, {0x0}, {&(0x7f00000012c0)=""/4096, 0x1000}, {0x0}], 0x9, &(0x7f00000000c0)=""/40, 0x28}, 0x7f}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000002480)=""/199, 0xc7}, {&(0x7f00000008c0)=""/55, 0x37}], 0x2, &(0x7f00000025c0)=""/157, 0x9d}, 0x9}, {{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002680)=""/238, 0xee}, {&(0x7f0000002780)=""/37, 0x25}, {&(0x7f00000027c0)=""/240, 0xf0}, {&(0x7f00000028c0)=""/10, 0xa}, {&(0x7f0000002900)=""/202, 0xca}, {&(0x7f0000002a00)=""/247, 0xf7}, {0x0}], 0x7, &(0x7f0000002c80)=""/184, 0xb8}, 0x7}, {{&(0x7f0000002d40)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f0000003040)=[{&(0x7f0000002dc0)=""/18, 0x12}, {&(0x7f0000002e00)=""/213, 0xd5}, {&(0x7f0000002f00)=""/62, 0x3e}, {0x0}, {0x0}, {&(0x7f0000002fc0)=""/31, 0x1f}, {&(0x7f0000003000)}], 0x7, &(0x7f00000030c0)=""/191, 0xbf}, 0x3}, {{&(0x7f0000003180)=@vsock, 0x80, &(0x7f0000004400)=[{&(0x7f0000007f40)=""/215, 0xd7}, {&(0x7f0000004300)=""/34, 0x22}, {&(0x7f0000004340)=""/28, 0x1c}, {&(0x7f0000004380)=""/108, 0x6c}], 0x4, &(0x7f0000004480)=""/222, 0xde}, 0x6}, {{&(0x7f0000004580)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000004a80)=[{&(0x7f0000004600)=""/120, 0x78}, {&(0x7f0000004700)=""/167, 0xa7}, {&(0x7f0000004800)=""/131, 0x83}, {0x0}, {&(0x7f0000004980)=""/212, 0xd4}], 0x5}, 0x8c2}, {{&(0x7f0000004b00)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000006cc0)=""/4096, 0x1000}, 0x52}], 0x8, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) write$UHID_DESTROY(r5, &(0x7f00000001c0), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x10001, 0xffff}, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x1) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000900)="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", 0x223, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 17:07:34 executing program 3: socket$packet(0x11, 0x1000000000000002, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x280080, 0x0) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000100)) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x15, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000003200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x680, 0x478, 0x210, 0x478, 0x0, 0x340, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x6, &(0x7f0000000580), {[{{@uncond, 0x0, 0xc8, 0x108}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "3c745d713ded54eb04d1bcfe4ec5e3722f760ca03b47ed1d735abcf07e43"}}, {{@uncond, 0x0, 0xc8, 0x108}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3, 0x38000, @ipv6=@rand_addr="f65360ce35d79792c798d9967e3df2d3", 0x4e21}}}, {{@ipv6={@empty, @mcast1, [0xffffff00, 0xffffff00, 0xff, 0xff000000], [0xff, 0x0, 0x17fffff01, 0xffffffff], 'rose0\x00', 'ipddp0\x00', {}, {}, 0x67, 0x9, 0x4, 0x1}, 0x0, 0xf0, 0x130, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0xe}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x5, 0x5, @ipv6=@ipv4={[], [], @empty}, 0x4e21}}}, {{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@ipv6header={0x28, 'ipv6header\x00', 0x0, {0x40, 0x20, 0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@multicast2, @ipv6=@empty, 0x2e, 0x26, 0x9}}}, {{@ipv6={@mcast1, @remote, [0xffffffff, 0xff000000, 0x7f000080, 0xff000000], [0xffffff00, 0xffffff00], 'ip6tnl0\x00', 'ip6tnl0\x00', {}, {}, 0xff, 0x1, 0x0, 0x63}, 0x0, 0xf0, 0x138, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@empty, @ipv4=@local, 0x37, 0x3b, 0x1}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6e0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000007cc0)=[{{&(0x7f00000002c0)=@caif=@dbg, 0x80, &(0x7f0000000840)=[{&(0x7f0000000340)=""/251, 0xfb}, {&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000007ec0)=""/108, 0x6c}, {&(0x7f0000000600)=""/241, 0xf1}, {0x0}], 0x5, &(0x7f0000000b40)=""/234, 0xea}, 0xd9b9}, {{&(0x7f0000000c40)=@pppol2tpv3, 0x80, &(0x7f0000002340)=[{&(0x7f0000000cc0)=""/63, 0x3f}, {&(0x7f0000000d40)=""/232, 0xe8}, {&(0x7f0000000e40)=""/77, 0x4d}, {&(0x7f0000000ec0)=""/150, 0x96}, {&(0x7f0000000f80)=""/116, 0x74}, {&(0x7f0000001000)=""/212, 0xd4}, {0x0}, {&(0x7f00000012c0)=""/4096, 0x1000}, {0x0}], 0x9, &(0x7f00000000c0)=""/40, 0x28}, 0x7f}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000002480)=""/199, 0xc7}, {&(0x7f00000008c0)=""/55, 0x37}], 0x2, &(0x7f00000025c0)=""/157, 0x9d}, 0x9}, {{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002680)=""/238, 0xee}, {&(0x7f0000002780)=""/37, 0x25}, {&(0x7f00000027c0)=""/240, 0xf0}, {&(0x7f00000028c0)=""/10, 0xa}, {&(0x7f0000002900)=""/202, 0xca}, {&(0x7f0000002a00)=""/247, 0xf7}, {0x0}], 0x7, &(0x7f0000002c80)=""/184, 0xb8}, 0x7}, {{&(0x7f0000002d40)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f0000003040)=[{&(0x7f0000002e00)=""/213, 0xd5}, {&(0x7f0000002f00)=""/62, 0x3e}, {0x0}, {0x0}, {&(0x7f0000002fc0)=""/31, 0x1f}, {&(0x7f0000003000)}], 0x6, &(0x7f00000030c0)=""/191, 0xbf}, 0x3}, {{&(0x7f0000003180)=@vsock, 0x80, &(0x7f0000004400)=[{&(0x7f0000007f40)=""/215, 0xd7}, {&(0x7f0000004300)=""/34, 0x22}, {&(0x7f0000004340)=""/28, 0x1c}, {&(0x7f0000004380)=""/108, 0x6c}], 0x4, &(0x7f0000004480)=""/222, 0xde}, 0x6}, {{&(0x7f0000004580)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000004a80)=[{&(0x7f0000004600)=""/120, 0x78}, {&(0x7f0000004700)=""/167, 0xa7}, {&(0x7f0000004800)=""/131, 0x83}, {0x0}, {&(0x7f0000004980)=""/212, 0xd4}], 0x5}, 0x8c2}, {{&(0x7f0000004b00)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000006cc0)=""/4096, 0x1000}, 0x52}], 0x8, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) write$UHID_DESTROY(r5, &(0x7f00000001c0), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x10001, 0xffff}, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x1) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000900)="585ccbc4ed83b836c1a6474914dc5500b66147b3c7218a91690000000042e3d35228897501f93191b076ac446ff0022b8753a1fa748c569f435fb3bae96efb74b50ec93c2db8eae3198a29e5c0cfc60000ce0637cef580b4ec61221adf59be045b70e48884ca000018cea71fcfed06fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff33c1e8e036e5031949762d009d308bd73f477252d0000000000004000000000000000000000000000000000195e23fb4430a9a4c2850b6380a743d6ea0c3b121f66c716d746aa81c301621b7662c06aae720b872d4b7828e3b48522c673aa6cb366d4201e2aee3261eb52f14533b7a54203cf9a4fa587c0385cdba539e9bd34717b0dfab09db7b064fbe2ecf9f40fa3a4015d0d0db3f9d562686fcdc3342c88c6f1b6f11449f8aeabf54c5533ec6acc2270d41713ae1538256af3719a07f55223a6eaa7c1eae5d6efa12fe95e2b0f1c500b28c5c76e731d5250e395526d04063718f448e62d4dd7cefeed6b72b31b894093aa37337784c00d68a4185f349e41455f12d31aa2d0ff79a4d69d97421a0042f0c7a664a8c4945104b25dc49be950c5af7405b86482d7314fcc3a0ad5eb24268ccd24a2996019f7c006a0b3c39c7b98c5a5406a2e4ff6d9c0ce12c4251756a667b4731c4b0eb5dc7d4381fecf196c4404b54c3c11c48f09734d9a6842f52d3307a688208b7a4681b101e1abe5fecfca1f464c03e933cbd15ab589ccd3c559542355190522a712b8f5128a6a00", 0x223, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 17:07:34 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c47, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4\x02\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r0, &(0x7f0000000080), 0x297ef) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) add_key$user(0x0, &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) 17:07:34 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000500)='/dev/loop#\x00', 0x0, 0x100082) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$NBD_SET_BLKSIZE(0xffffffffffffffff, 0xab01, 0xff) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) socket(0x100000000011, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x1000f4) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000fffffffe) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_GET_MAX_PORTS(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x288008}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r3, 0x800, 0x70bd26, 0x25dfdbfe}, 0x1c}}, 0x10) socket$packet(0x11, 0x3, 0x300) r4 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x1000f4) r5 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x8000fffffffe) ioctl$EVIOCGKEYCODE_V2(r5, 0x80284504, 0x0) ioctl$TIOCMBIS(0xffffffffffffffff, 0x5416, &(0x7f0000000240)=0xfff) close(0xffffffffffffffff) sendfile(r0, r0, 0x0, 0x40fdf) 17:07:35 executing program 2: socket$packet(0x11, 0x1000000000000002, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x280080, 0x0) ioctl$RTC_VL_READ(r0, 0x80047013, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x15, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000003200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x680, 0x478, 0x210, 0x478, 0x0, 0x340, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x6, 0x0, {[{{@uncond, 0x0, 0xc8, 0x108}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "3c745d713ded54eb04d1bcfe4ec5e3722f760ca03b47ed1d735abcf07e43"}}, {{@uncond, 0x0, 0xc8, 0x108}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3, 0x38000, @ipv6=@rand_addr="f65360ce35d79792c798d9967e3df2d3", 0x4e21}}}, {{@ipv6={@empty, @mcast1, [0xffffff00, 0xffffff00, 0xff, 0xff000000], [0xff, 0x0, 0x17fffff01, 0xffffffff], 'rose0\x00', 'ipddp0\x00', {}, {}, 0x67, 0x9, 0x4, 0x1}, 0x0, 0xf0, 0x130, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0xe}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x5, 0x5, @ipv6=@ipv4={[], [], @empty}, 0x4e21}}}, {{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@ipv6header={0x28, 'ipv6header\x00', 0x0, {0x40, 0x20, 0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@multicast2, @ipv6=@empty, 0x2e, 0x26, 0x9}}}, {{@ipv6={@mcast1, @remote, [0xffffffff, 0xff000000, 0x7f000080, 0xff000000], [0xffffff00, 0xffffff00], 'ip6tnl0\x00', 'ip6tnl0\x00', {}, {}, 0xff, 0x1, 0x0, 0x63}, 0x0, 0xf0, 0x138, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@empty, @ipv4=@local, 0x37, 0x3b, 0x1}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6e0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000007cc0)=[{{&(0x7f00000002c0)=@caif=@dbg, 0x80, &(0x7f0000000840)=[{&(0x7f0000000340)=""/251, 0xfb}, {&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000007ec0)=""/108, 0x6c}, {&(0x7f0000000600)=""/241, 0xf1}, {0x0}], 0x5, &(0x7f0000000b40)=""/234, 0xea}, 0xd9b9}, {{&(0x7f0000000c40)=@pppol2tpv3, 0x80, &(0x7f0000002340)=[{&(0x7f0000000cc0)=""/63, 0x3f}, {&(0x7f0000000d40)=""/232, 0xe8}, {&(0x7f0000000e40)=""/77, 0x4d}, {&(0x7f0000000ec0)=""/150, 0x96}, {&(0x7f0000000f80)=""/116, 0x74}, {&(0x7f0000001000)=""/212, 0xd4}, {0x0}, {&(0x7f00000012c0)=""/4096, 0x1000}, {0x0}], 0x9, &(0x7f00000000c0)=""/40, 0x28}, 0x7f}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000002480)=""/199, 0xc7}, {&(0x7f00000008c0)=""/55, 0x37}], 0x2, &(0x7f00000025c0)=""/157, 0x9d}, 0x9}, {{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002680)=""/238, 0xee}, {&(0x7f0000002780)=""/37, 0x25}, {&(0x7f00000027c0)=""/240, 0xf0}, {&(0x7f00000028c0)=""/10, 0xa}, {&(0x7f0000002900)=""/202, 0xca}, {&(0x7f0000002a00)=""/247, 0xf7}, {0x0}], 0x7, &(0x7f0000002c80)=""/184, 0xb8}, 0x7}, {{&(0x7f0000002d40)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f0000003040)=[{&(0x7f0000002dc0)=""/18, 0x12}, {&(0x7f0000002e00)=""/213, 0xd5}, {0x0}, {0x0}, {0x0}, {&(0x7f0000002fc0)=""/31, 0x1f}, {&(0x7f0000003000)}], 0x7, &(0x7f00000030c0)=""/191, 0xbf}, 0x3}, {{&(0x7f0000003180)=@vsock, 0x80, &(0x7f0000004400)=[{&(0x7f0000007f40)=""/215, 0xd7}, {&(0x7f0000004300)=""/34, 0x22}, {&(0x7f0000004340)=""/28, 0x1c}, {&(0x7f0000004380)=""/108, 0x6c}], 0x4, &(0x7f0000004480)=""/222, 0xde}, 0x6}, {{&(0x7f0000004580)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000004a80)=[{&(0x7f0000004600)=""/120, 0x78}, {&(0x7f0000004700)=""/167, 0xa7}, {&(0x7f0000004800)=""/131, 0x83}, {0x0}, {&(0x7f0000004980)=""/212, 0xd4}], 0x5}, 0x8c2}, {{&(0x7f0000004b00)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000006cc0)=""/4096, 0x1000}, 0x52}], 0x8, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) write$UHID_DESTROY(r5, &(0x7f00000001c0), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x10001, 0xffff}, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x1) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000900)="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", 0x223, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 17:07:35 executing program 0: r0 = socket(0x10, 0x3, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x2, 0x0, &(0x7f0000000140)) [ 525.686811] audit: type=1804 audit(1576602455.022:115): pid=23656 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir209839217/syzkaller.Zydzrp/420/bus" dev="sda1" ino=17633 res=1 17:07:35 executing program 0: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000080), 0x297ef) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0xc72f, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, 0x200000000001d, 0x0, 0x0, 0x0, 0x0, {0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, "77100b6a1cc076a15ad9f0552d5b12bfc338e5269b12ac2a4ee4202c64122b0a"}}) add_key$keyring(0x0, &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYRESHEX], 0x12) [ 525.896213] audit: type=1804 audit(1576602455.232:116): pid=23656 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.4" name="/root/syzkaller-testdir209839217/syzkaller.Zydzrp/420/bus" dev="sda1" ino=17633 res=1 [ 525.930149] net_ratelimit: 16 callbacks suppressed [ 525.930155] protocol 88fb is buggy, dev hsr_slave_0 [ 525.940229] protocol 88fb is buggy, dev hsr_slave_1 17:07:35 executing program 3: socket$packet(0x11, 0x1000000000000002, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x280080, 0x0) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000100)) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x15, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000003200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x680, 0x478, 0x210, 0x478, 0x0, 0x340, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x6, &(0x7f0000000580), {[{{@uncond, 0x0, 0xc8, 0x108}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "3c745d713ded54eb04d1bcfe4ec5e3722f760ca03b47ed1d735abcf07e43"}}, {{@uncond, 0x0, 0xc8, 0x108}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3, 0x38000, @ipv6=@rand_addr="f65360ce35d79792c798d9967e3df2d3", 0x4e21}}}, {{@ipv6={@empty, @mcast1, [0xffffff00, 0xffffff00, 0xff, 0xff000000], [0xff, 0x0, 0x17fffff01, 0xffffffff], 'rose0\x00', 'ipddp0\x00', {}, {}, 0x67, 0x9, 0x4, 0x1}, 0x0, 0xf0, 0x130, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0xe}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x5, 0x5, @ipv6=@ipv4={[], [], @empty}, 0x4e21}}}, {{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@ipv6header={0x28, 'ipv6header\x00', 0x0, {0x40, 0x20, 0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@multicast2, @ipv6=@empty, 0x2e, 0x26, 0x9}}}, {{@ipv6={@mcast1, @remote, [0xffffffff, 0xff000000, 0x7f000080, 0xff000000], [0xffffff00, 0xffffff00], 'ip6tnl0\x00', 'ip6tnl0\x00', {}, {}, 0xff, 0x1, 0x0, 0x63}, 0x0, 0xf0, 0x138, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@empty, @ipv4=@local, 0x37, 0x3b, 0x1}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6e0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000007cc0)=[{{&(0x7f00000002c0)=@caif=@dbg, 0x80, &(0x7f0000000840)=[{&(0x7f0000000340)=""/251, 0xfb}, {&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000007ec0)=""/108, 0x6c}, {&(0x7f0000000600)=""/241, 0xf1}, {0x0}], 0x5, &(0x7f0000000b40)=""/234, 0xea}, 0xd9b9}, {{&(0x7f0000000c40)=@pppol2tpv3, 0x80, &(0x7f0000002340)=[{&(0x7f0000000cc0)=""/63, 0x3f}, {&(0x7f0000000d40)=""/232, 0xe8}, {&(0x7f0000000e40)=""/77, 0x4d}, {&(0x7f0000000ec0)=""/150, 0x96}, {&(0x7f0000000f80)=""/116, 0x74}, {&(0x7f0000001000)=""/212, 0xd4}, {0x0}, {&(0x7f00000012c0)=""/4096, 0x1000}, {0x0}], 0x9, &(0x7f00000000c0)=""/40, 0x28}, 0x7f}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000002480)=""/199, 0xc7}, {&(0x7f00000008c0)=""/55, 0x37}], 0x2, &(0x7f00000025c0)=""/157, 0x9d}, 0x9}, {{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002680)=""/238, 0xee}, {&(0x7f0000002780)=""/37, 0x25}, {&(0x7f00000027c0)=""/240, 0xf0}, {&(0x7f00000028c0)=""/10, 0xa}, {&(0x7f0000002900)=""/202, 0xca}, {&(0x7f0000002a00)=""/247, 0xf7}, {0x0}], 0x7, &(0x7f0000002c80)=""/184, 0xb8}, 0x7}, {{&(0x7f0000002d40)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f0000003040)=[{&(0x7f0000002e00)=""/213, 0xd5}, {&(0x7f0000002f00)=""/62, 0x3e}, {0x0}, {0x0}, {&(0x7f0000002fc0)=""/31, 0x1f}, {&(0x7f0000003000)}], 0x6, &(0x7f00000030c0)=""/191, 0xbf}, 0x3}, {{&(0x7f0000003180)=@vsock, 0x80, &(0x7f0000004400)=[{&(0x7f0000007f40)=""/215, 0xd7}, {&(0x7f0000004300)=""/34, 0x22}, {&(0x7f0000004340)=""/28, 0x1c}, {&(0x7f0000004380)=""/108, 0x6c}], 0x4, &(0x7f0000004480)=""/222, 0xde}, 0x6}, {{&(0x7f0000004580)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000004a80)=[{&(0x7f0000004600)=""/120, 0x78}, {&(0x7f0000004700)=""/167, 0xa7}, {&(0x7f0000004800)=""/131, 0x83}, {0x0}, {&(0x7f0000004980)=""/212, 0xd4}], 0x5}, 0x8c2}, {{&(0x7f0000004b00)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000006cc0)=""/4096, 0x1000}, 0x52}], 0x8, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) write$UHID_DESTROY(r5, &(0x7f00000001c0), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x10001, 0xffff}, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x1) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000900)="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", 0x223, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 17:07:35 executing program 1: socket$packet(0x11, 0x1000000000000002, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x280080, 0x0) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000100)) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x15, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, 0x0, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000007cc0)=[{{&(0x7f00000002c0)=@caif=@dbg, 0x80, &(0x7f0000000840)=[{&(0x7f0000000340)=""/251, 0xfb}, {&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000007ec0)=""/108, 0x6c}, {&(0x7f0000000600)=""/241, 0xf1}, {0x0}], 0x5, &(0x7f0000000b40)=""/234, 0xea}, 0xd9b9}, {{&(0x7f0000000c40)=@pppol2tpv3, 0x80, &(0x7f0000002340)=[{&(0x7f0000000cc0)=""/63, 0x3f}, {&(0x7f0000000d40)=""/232, 0xe8}, {&(0x7f0000000e40)=""/77, 0x4d}, {0x0}, {&(0x7f0000000f80)=""/116, 0x74}, {&(0x7f0000001000)=""/212, 0xd4}, {0x0}, {&(0x7f00000012c0)=""/4096, 0x1000}, {0x0}], 0x9, &(0x7f00000000c0)=""/40, 0x28}, 0x7f}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000002480)=""/199, 0xc7}, {&(0x7f00000008c0)=""/55, 0x37}], 0x2, &(0x7f00000025c0)=""/157, 0x9d}, 0x9}, {{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002680)=""/238, 0xee}, {&(0x7f0000002780)=""/37, 0x25}, {&(0x7f00000027c0)=""/240, 0xf0}, {&(0x7f00000028c0)=""/10, 0xa}, {&(0x7f0000002900)=""/202, 0xca}, {&(0x7f0000002a00)=""/247, 0xf7}, {0x0}], 0x7, &(0x7f0000002c80)=""/184, 0xb8}, 0x7}, {{&(0x7f0000002d40)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f0000003040)=[{&(0x7f0000002dc0)=""/18, 0x12}, {&(0x7f0000002e00)=""/213, 0xd5}, {&(0x7f0000002f00)=""/62, 0x3e}, {0x0}, {0x0}, {&(0x7f0000002fc0)=""/31, 0x1f}, {&(0x7f0000003000)}], 0x7, &(0x7f00000030c0)=""/191, 0xbf}, 0x3}, {{&(0x7f0000003180)=@vsock, 0x80, &(0x7f0000004400)=[{&(0x7f0000007f40)=""/215, 0xd7}, {&(0x7f0000004300)=""/34, 0x22}, {&(0x7f0000004340)=""/28, 0x1c}, {&(0x7f0000004380)=""/108, 0x6c}], 0x4, &(0x7f0000004480)=""/222, 0xde}, 0x6}, {{&(0x7f0000004580)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000004a80)=[{&(0x7f0000004600)=""/120, 0x78}, {&(0x7f0000004700)=""/167, 0xa7}, {&(0x7f0000004800)=""/131, 0x83}, {0x0}, {&(0x7f0000004980)=""/212, 0xd4}], 0x5}, 0x8c2}, {{&(0x7f0000004b00)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000006cc0)=""/4096, 0x1000}, 0x52}], 0x8, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) write$UHID_DESTROY(r5, &(0x7f00000001c0), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x10001, 0xffff}, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x1) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000900)="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", 0x223, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 17:07:35 executing program 2: socket$packet(0x11, 0x1000000000000002, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x280080, 0x0) ioctl$RTC_VL_READ(r0, 0x80047013, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x15, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000003200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x680, 0x478, 0x210, 0x478, 0x0, 0x340, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x6, 0x0, {[{{@uncond, 0x0, 0xc8, 0x108}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "3c745d713ded54eb04d1bcfe4ec5e3722f760ca03b47ed1d735abcf07e43"}}, {{@uncond, 0x0, 0xc8, 0x108}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3, 0x38000, @ipv6=@rand_addr="f65360ce35d79792c798d9967e3df2d3", 0x4e21}}}, {{@ipv6={@empty, @mcast1, [0xffffff00, 0xffffff00, 0xff, 0xff000000], [0xff, 0x0, 0x17fffff01, 0xffffffff], 'rose0\x00', 'ipddp0\x00', {}, {}, 0x67, 0x9, 0x4, 0x1}, 0x0, 0xf0, 0x130, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0xe}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x5, 0x5, @ipv6=@ipv4={[], [], @empty}, 0x4e21}}}, {{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@ipv6header={0x28, 'ipv6header\x00', 0x0, {0x40, 0x20, 0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@multicast2, @ipv6=@empty, 0x2e, 0x26, 0x9}}}, {{@ipv6={@mcast1, @remote, [0xffffffff, 0xff000000, 0x7f000080, 0xff000000], [0xffffff00, 0xffffff00], 'ip6tnl0\x00', 'ip6tnl0\x00', {}, {}, 0xff, 0x1, 0x0, 0x63}, 0x0, 0xf0, 0x138, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@empty, @ipv4=@local, 0x37, 0x3b, 0x1}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6e0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000007cc0)=[{{&(0x7f00000002c0)=@caif=@dbg, 0x80, &(0x7f0000000840)=[{&(0x7f0000000340)=""/251, 0xfb}, {&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000007ec0)=""/108, 0x6c}, {&(0x7f0000000600)=""/241, 0xf1}, {0x0}], 0x5, &(0x7f0000000b40)=""/234, 0xea}, 0xd9b9}, {{&(0x7f0000000c40)=@pppol2tpv3, 0x80, &(0x7f0000002340)=[{&(0x7f0000000cc0)=""/63, 0x3f}, {&(0x7f0000000d40)=""/232, 0xe8}, {&(0x7f0000000e40)=""/77, 0x4d}, {&(0x7f0000000ec0)=""/150, 0x96}, {&(0x7f0000000f80)=""/116, 0x74}, {&(0x7f0000001000)=""/212, 0xd4}, {0x0}, {&(0x7f00000012c0)=""/4096, 0x1000}, {0x0}], 0x9, &(0x7f00000000c0)=""/40, 0x28}, 0x7f}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000002480)=""/199, 0xc7}, {&(0x7f00000008c0)=""/55, 0x37}], 0x2, &(0x7f00000025c0)=""/157, 0x9d}, 0x9}, {{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002680)=""/238, 0xee}, {&(0x7f0000002780)=""/37, 0x25}, {&(0x7f00000027c0)=""/240, 0xf0}, {&(0x7f00000028c0)=""/10, 0xa}, {&(0x7f0000002900)=""/202, 0xca}, {&(0x7f0000002a00)=""/247, 0xf7}, {0x0}], 0x7, &(0x7f0000002c80)=""/184, 0xb8}, 0x7}, {{&(0x7f0000002d40)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f0000003040)=[{&(0x7f0000002dc0)=""/18, 0x12}, {&(0x7f0000002e00)=""/213, 0xd5}, {0x0}, {0x0}, {0x0}, {&(0x7f0000002fc0)=""/31, 0x1f}, {&(0x7f0000003000)}], 0x7, &(0x7f00000030c0)=""/191, 0xbf}, 0x3}, {{&(0x7f0000003180)=@vsock, 0x80, &(0x7f0000004400)=[{&(0x7f0000007f40)=""/215, 0xd7}, {&(0x7f0000004300)=""/34, 0x22}, {&(0x7f0000004340)=""/28, 0x1c}, {&(0x7f0000004380)=""/108, 0x6c}], 0x4, &(0x7f0000004480)=""/222, 0xde}, 0x6}, {{&(0x7f0000004580)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000004a80)=[{&(0x7f0000004600)=""/120, 0x78}, {&(0x7f0000004700)=""/167, 0xa7}, {&(0x7f0000004800)=""/131, 0x83}, {0x0}, {&(0x7f0000004980)=""/212, 0xd4}], 0x5}, 0x8c2}, {{&(0x7f0000004b00)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000006cc0)=""/4096, 0x1000}, 0x52}], 0x8, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) write$UHID_DESTROY(r5, &(0x7f00000001c0), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x10001, 0xffff}, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x1) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000900)="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", 0x223, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 17:07:35 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c47, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4\x02\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r0, &(0x7f0000000080), 0x297ef) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) add_key$user(0x0, &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) 17:07:35 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000740)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80) connect(r0, &(0x7f0000000080)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha512\x00'}, 0x80) [ 526.089647] audit: type=1804 audit(1576602455.272:117): pid=23656 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir209839217/syzkaller.Zydzrp/420/bus" dev="sda1" ino=17633 res=1 17:07:35 executing program 0: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c47, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, 0x0) add_key$user(0x0, &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0xc72f, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, 0x200000000001d, 0x0, 0x0, 0x0, 0x0, {0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, "77100b6a1cc076a15ad9f0552d5b12bfc338e5269b12ac2a4ee4202c64122b0a"}}) 17:07:35 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c47, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4\x02\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r0, &(0x7f0000000080), 0x297ef) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086602, 0x400007) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f00000003c0)='user\x00', 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYPTR64], 0xff39) 17:07:35 executing program 2: socket$packet(0x11, 0x1000000000000002, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x280080, 0x0) ioctl$RTC_VL_READ(r0, 0x80047013, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x15, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000003200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x680, 0x478, 0x210, 0x478, 0x0, 0x340, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x6, 0x0, {[{{@uncond, 0x0, 0xc8, 0x108}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "3c745d713ded54eb04d1bcfe4ec5e3722f760ca03b47ed1d735abcf07e43"}}, {{@uncond, 0x0, 0xc8, 0x108}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3, 0x38000, @ipv6=@rand_addr="f65360ce35d79792c798d9967e3df2d3", 0x4e21}}}, {{@ipv6={@empty, @mcast1, [0xffffff00, 0xffffff00, 0xff, 0xff000000], [0xff, 0x0, 0x17fffff01, 0xffffffff], 'rose0\x00', 'ipddp0\x00', {}, {}, 0x67, 0x9, 0x4, 0x1}, 0x0, 0xf0, 0x130, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0xe}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x5, 0x5, @ipv6=@ipv4={[], [], @empty}, 0x4e21}}}, {{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@ipv6header={0x28, 'ipv6header\x00', 0x0, {0x40, 0x20, 0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@multicast2, @ipv6=@empty, 0x2e, 0x26, 0x9}}}, {{@ipv6={@mcast1, @remote, [0xffffffff, 0xff000000, 0x7f000080, 0xff000000], [0xffffff00, 0xffffff00], 'ip6tnl0\x00', 'ip6tnl0\x00', {}, {}, 0xff, 0x1, 0x0, 0x63}, 0x0, 0xf0, 0x138, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@empty, @ipv4=@local, 0x37, 0x3b, 0x1}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6e0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000007cc0)=[{{&(0x7f00000002c0)=@caif=@dbg, 0x80, &(0x7f0000000840)=[{&(0x7f0000000340)=""/251, 0xfb}, {&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000007ec0)=""/108, 0x6c}, {&(0x7f0000000600)=""/241, 0xf1}, {0x0}], 0x5, &(0x7f0000000b40)=""/234, 0xea}, 0xd9b9}, {{&(0x7f0000000c40)=@pppol2tpv3, 0x80, &(0x7f0000002340)=[{&(0x7f0000000cc0)=""/63, 0x3f}, {&(0x7f0000000d40)=""/232, 0xe8}, {&(0x7f0000000e40)=""/77, 0x4d}, {&(0x7f0000000ec0)=""/150, 0x96}, {&(0x7f0000000f80)=""/116, 0x74}, {&(0x7f0000001000)=""/212, 0xd4}, {0x0}, {&(0x7f00000012c0)=""/4096, 0x1000}, {0x0}], 0x9, &(0x7f00000000c0)=""/40, 0x28}, 0x7f}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000002480)=""/199, 0xc7}, {&(0x7f00000008c0)=""/55, 0x37}], 0x2, &(0x7f00000025c0)=""/157, 0x9d}, 0x9}, {{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002680)=""/238, 0xee}, {&(0x7f0000002780)=""/37, 0x25}, {&(0x7f00000027c0)=""/240, 0xf0}, {&(0x7f00000028c0)=""/10, 0xa}, {&(0x7f0000002900)=""/202, 0xca}, {&(0x7f0000002a00)=""/247, 0xf7}, {0x0}], 0x7, &(0x7f0000002c80)=""/184, 0xb8}, 0x7}, {{&(0x7f0000002d40)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f0000003040)=[{&(0x7f0000002dc0)=""/18, 0x12}, {&(0x7f0000002f00)=""/62, 0x3e}, {0x0}, {0x0}, {&(0x7f0000002fc0)=""/31, 0x1f}, {&(0x7f0000003000)}], 0x6, &(0x7f00000030c0)=""/191, 0xbf}, 0x3}, {{&(0x7f0000003180)=@vsock, 0x80, &(0x7f0000004400)=[{&(0x7f0000007f40)=""/215, 0xd7}, {&(0x7f0000004300)=""/34, 0x22}, {&(0x7f0000004340)=""/28, 0x1c}, {&(0x7f0000004380)=""/108, 0x6c}], 0x4, &(0x7f0000004480)=""/222, 0xde}, 0x6}, {{&(0x7f0000004580)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000004a80)=[{&(0x7f0000004600)=""/120, 0x78}, {&(0x7f0000004700)=""/167, 0xa7}, {&(0x7f0000004800)=""/131, 0x83}, {0x0}, {&(0x7f0000004980)=""/212, 0xd4}], 0x5}, 0x8c2}, {{&(0x7f0000004b00)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000006cc0)=""/4096, 0x1000}, 0x52}], 0x8, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) write$UHID_DESTROY(r5, &(0x7f00000001c0), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x10001, 0xffff}, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x1) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000900)="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", 0x223, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) [ 526.449099] audit: type=1804 audit(1576602455.722:118): pid=23656 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir209839217/syzkaller.Zydzrp/420/bus" dev="sda1" ino=17633 res=1 [ 526.480104] protocol 88fb is buggy, dev hsr_slave_0 [ 526.485199] protocol 88fb is buggy, dev hsr_slave_1 [ 526.497293] audit: type=1804 audit(1576602455.722:119): pid=23711 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir209839217/syzkaller.Zydzrp/420/bus" dev="sda1" ino=17633 res=1 17:07:35 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000500)='/dev/loop#\x00', 0x0, 0x100082) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$NBD_SET_BLKSIZE(0xffffffffffffffff, 0xab01, 0xff) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) socket(0x100000000011, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x1000f4) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000fffffffe) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_GET_MAX_PORTS(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x288008}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r3, 0x800, 0x70bd26, 0x25dfdbfe}, 0x1c}}, 0x10) socket$packet(0x11, 0x3, 0x300) r4 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x1000f4) r5 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x8000fffffffe) ioctl$EVIOCGKEYCODE_V2(r5, 0x80284504, 0x0) ioctl$TIOCMBIS(0xffffffffffffffff, 0x5416, &(0x7f0000000240)=0xfff) close(0xffffffffffffffff) sendfile(r0, r0, 0x0, 0x40fdf) 17:07:35 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f00000000c0)=0xfe10) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000280)={r1, 0x5f}, &(0x7f0000000300)=0x8) 17:07:35 executing program 1: socket$packet(0x11, 0x1000000000000002, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x280080, 0x0) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000100)) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x15, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, 0x0, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000007cc0)=[{{&(0x7f00000002c0)=@caif=@dbg, 0x80, &(0x7f0000000840)=[{&(0x7f0000000340)=""/251, 0xfb}, {&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000007ec0)=""/108, 0x6c}, {&(0x7f0000000600)=""/241, 0xf1}, {0x0}], 0x5, &(0x7f0000000b40)=""/234, 0xea}, 0xd9b9}, {{&(0x7f0000000c40)=@pppol2tpv3, 0x80, &(0x7f0000002340)=[{&(0x7f0000000cc0)=""/63, 0x3f}, {&(0x7f0000000d40)=""/232, 0xe8}, {&(0x7f0000000e40)=""/77, 0x4d}, {0x0}, {&(0x7f0000000f80)=""/116, 0x74}, {&(0x7f0000001000)=""/212, 0xd4}, {0x0}, {&(0x7f00000012c0)=""/4096, 0x1000}, {0x0}], 0x9, &(0x7f00000000c0)=""/40, 0x28}, 0x7f}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000002480)=""/199, 0xc7}, {&(0x7f00000008c0)=""/55, 0x37}], 0x2, &(0x7f00000025c0)=""/157, 0x9d}, 0x9}, {{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002680)=""/238, 0xee}, {&(0x7f0000002780)=""/37, 0x25}, {&(0x7f00000027c0)=""/240, 0xf0}, {&(0x7f00000028c0)=""/10, 0xa}, {&(0x7f0000002900)=""/202, 0xca}, {&(0x7f0000002a00)=""/247, 0xf7}, {0x0}], 0x7, &(0x7f0000002c80)=""/184, 0xb8}, 0x7}, {{&(0x7f0000002d40)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f0000003040)=[{&(0x7f0000002dc0)=""/18, 0x12}, {&(0x7f0000002e00)=""/213, 0xd5}, {&(0x7f0000002f00)=""/62, 0x3e}, {0x0}, {0x0}, {&(0x7f0000002fc0)=""/31, 0x1f}, {&(0x7f0000003000)}], 0x7, &(0x7f00000030c0)=""/191, 0xbf}, 0x3}, {{&(0x7f0000003180)=@vsock, 0x80, &(0x7f0000004400)=[{&(0x7f0000007f40)=""/215, 0xd7}, {&(0x7f0000004300)=""/34, 0x22}, {&(0x7f0000004340)=""/28, 0x1c}, {&(0x7f0000004380)=""/108, 0x6c}], 0x4, &(0x7f0000004480)=""/222, 0xde}, 0x6}, {{&(0x7f0000004580)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000004a80)=[{&(0x7f0000004600)=""/120, 0x78}, {&(0x7f0000004700)=""/167, 0xa7}, {&(0x7f0000004800)=""/131, 0x83}, {0x0}, {&(0x7f0000004980)=""/212, 0xd4}], 0x5}, 0x8c2}, {{&(0x7f0000004b00)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000006cc0)=""/4096, 0x1000}, 0x52}], 0x8, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) write$UHID_DESTROY(r5, &(0x7f00000001c0), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x10001, 0xffff}, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x1) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000900)="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", 0x223, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 17:07:35 executing program 3: socket$packet(0x11, 0x1000000000000002, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x280080, 0x0) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000100)) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x15, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000003200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x680, 0x478, 0x210, 0x478, 0x0, 0x340, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x6, &(0x7f0000000580), {[{{@uncond, 0x0, 0xc8, 0x108}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "3c745d713ded54eb04d1bcfe4ec5e3722f760ca03b47ed1d735abcf07e43"}}, {{@uncond, 0x0, 0xc8, 0x108}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3, 0x38000, @ipv6=@rand_addr="f65360ce35d79792c798d9967e3df2d3", 0x4e21}}}, {{@ipv6={@empty, @mcast1, [0xffffff00, 0xffffff00, 0xff, 0xff000000], [0xff, 0x0, 0x17fffff01, 0xffffffff], 'rose0\x00', 'ipddp0\x00', {}, {}, 0x67, 0x9, 0x4, 0x1}, 0x0, 0xf0, 0x130, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0xe}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x5, 0x5, @ipv6=@ipv4={[], [], @empty}, 0x4e21}}}, {{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@ipv6header={0x28, 'ipv6header\x00', 0x0, {0x40, 0x20, 0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@multicast2, @ipv6=@empty, 0x2e, 0x26, 0x9}}}, {{@ipv6={@mcast1, @remote, [0xffffffff, 0xff000000, 0x7f000080, 0xff000000], [0xffffff00, 0xffffff00], 'ip6tnl0\x00', 'ip6tnl0\x00', {}, {}, 0xff, 0x1, 0x0, 0x63}, 0x0, 0xf0, 0x138, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@empty, @ipv4=@local, 0x37, 0x3b, 0x1}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6e0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000007cc0)=[{{&(0x7f00000002c0)=@caif=@dbg, 0x80, &(0x7f0000000840)=[{&(0x7f0000000340)=""/251, 0xfb}, {&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000007ec0)=""/108, 0x6c}, {&(0x7f0000000600)=""/241, 0xf1}, {0x0}], 0x5, &(0x7f0000000b40)=""/234, 0xea}, 0xd9b9}, {{&(0x7f0000000c40)=@pppol2tpv3, 0x80, &(0x7f0000002340)=[{&(0x7f0000000cc0)=""/63, 0x3f}, {&(0x7f0000000d40)=""/232, 0xe8}, {&(0x7f0000000e40)=""/77, 0x4d}, {&(0x7f0000000ec0)=""/150, 0x96}, {&(0x7f0000000f80)=""/116, 0x74}, {&(0x7f0000001000)=""/212, 0xd4}, {0x0}, {&(0x7f00000012c0)=""/4096, 0x1000}, {0x0}], 0x9, &(0x7f00000000c0)=""/40, 0x28}, 0x7f}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000002480)=""/199, 0xc7}, {&(0x7f00000008c0)=""/55, 0x37}], 0x2, &(0x7f00000025c0)=""/157, 0x9d}, 0x9}, {{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002680)=""/238, 0xee}, {&(0x7f0000002780)=""/37, 0x25}, {&(0x7f00000027c0)=""/240, 0xf0}, {&(0x7f00000028c0)=""/10, 0xa}, {&(0x7f0000002900)=""/202, 0xca}, {&(0x7f0000002a00)=""/247, 0xf7}, {0x0}], 0x7, &(0x7f0000002c80)=""/184, 0xb8}, 0x7}, {{&(0x7f0000002d40)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f0000003040)=[{&(0x7f0000002e00)=""/213, 0xd5}, {&(0x7f0000002f00)=""/62, 0x3e}, {0x0}, {0x0}, {&(0x7f0000002fc0)=""/31, 0x1f}, {&(0x7f0000003000)}], 0x6, &(0x7f00000030c0)=""/191, 0xbf}, 0x3}, {{&(0x7f0000003180)=@vsock, 0x80, &(0x7f0000004400)=[{&(0x7f0000007f40)=""/215, 0xd7}, {&(0x7f0000004300)=""/34, 0x22}, {&(0x7f0000004340)=""/28, 0x1c}, {&(0x7f0000004380)=""/108, 0x6c}], 0x4, &(0x7f0000004480)=""/222, 0xde}, 0x6}, {{&(0x7f0000004580)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000004a80)=[{&(0x7f0000004600)=""/120, 0x78}, {&(0x7f0000004700)=""/167, 0xa7}, {&(0x7f0000004800)=""/131, 0x83}, {0x0}, {&(0x7f0000004980)=""/212, 0xd4}], 0x5}, 0x8c2}, {{&(0x7f0000004b00)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000006cc0)=""/4096, 0x1000}, 0x52}], 0x8, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) write$UHID_DESTROY(r5, &(0x7f00000001c0), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x10001, 0xffff}, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x1) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000900)="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", 0x223, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 17:07:35 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c47, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4\x02\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r0, &(0x7f0000000080), 0x297ef) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086602, 0x400007) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f00000003c0)='user\x00', 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYPTR64], 0xff39) 17:07:36 executing program 2: socket$packet(0x11, 0x1000000000000002, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x280080, 0x0) ioctl$RTC_VL_READ(r0, 0x80047013, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x15, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000003200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x680, 0x478, 0x210, 0x478, 0x0, 0x340, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x6, 0x0, {[{{@uncond, 0x0, 0xc8, 0x108}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "3c745d713ded54eb04d1bcfe4ec5e3722f760ca03b47ed1d735abcf07e43"}}, {{@uncond, 0x0, 0xc8, 0x108}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3, 0x38000, @ipv6=@rand_addr="f65360ce35d79792c798d9967e3df2d3", 0x4e21}}}, {{@ipv6={@empty, @mcast1, [0xffffff00, 0xffffff00, 0xff, 0xff000000], [0xff, 0x0, 0x17fffff01, 0xffffffff], 'rose0\x00', 'ipddp0\x00', {}, {}, 0x67, 0x9, 0x4, 0x1}, 0x0, 0xf0, 0x130, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0xe}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x5, 0x5, @ipv6=@ipv4={[], [], @empty}, 0x4e21}}}, {{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@ipv6header={0x28, 'ipv6header\x00', 0x0, {0x40, 0x20, 0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@multicast2, @ipv6=@empty, 0x2e, 0x26, 0x9}}}, {{@ipv6={@mcast1, @remote, [0xffffffff, 0xff000000, 0x7f000080, 0xff000000], [0xffffff00, 0xffffff00], 'ip6tnl0\x00', 'ip6tnl0\x00', {}, {}, 0xff, 0x1, 0x0, 0x63}, 0x0, 0xf0, 0x138, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@empty, @ipv4=@local, 0x37, 0x3b, 0x1}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6e0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000007cc0)=[{{&(0x7f00000002c0)=@caif=@dbg, 0x80, &(0x7f0000000840)=[{&(0x7f0000000340)=""/251, 0xfb}, {&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000007ec0)=""/108, 0x6c}, {&(0x7f0000000600)=""/241, 0xf1}, {0x0}], 0x5, &(0x7f0000000b40)=""/234, 0xea}, 0xd9b9}, {{&(0x7f0000000c40)=@pppol2tpv3, 0x80, &(0x7f0000002340)=[{&(0x7f0000000cc0)=""/63, 0x3f}, {&(0x7f0000000d40)=""/232, 0xe8}, {&(0x7f0000000e40)=""/77, 0x4d}, {&(0x7f0000000ec0)=""/150, 0x96}, {&(0x7f0000000f80)=""/116, 0x74}, {&(0x7f0000001000)=""/212, 0xd4}, {0x0}, {&(0x7f00000012c0)=""/4096, 0x1000}, {0x0}], 0x9, &(0x7f00000000c0)=""/40, 0x28}, 0x7f}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000002480)=""/199, 0xc7}, {&(0x7f00000008c0)=""/55, 0x37}], 0x2, &(0x7f00000025c0)=""/157, 0x9d}, 0x9}, {{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002680)=""/238, 0xee}, {&(0x7f0000002780)=""/37, 0x25}, {&(0x7f00000027c0)=""/240, 0xf0}, {&(0x7f00000028c0)=""/10, 0xa}, {&(0x7f0000002900)=""/202, 0xca}, {&(0x7f0000002a00)=""/247, 0xf7}, {0x0}], 0x7, &(0x7f0000002c80)=""/184, 0xb8}, 0x7}, {{&(0x7f0000002d40)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f0000003040)=[{&(0x7f0000002dc0)=""/18, 0x12}, {&(0x7f0000002f00)=""/62, 0x3e}, {0x0}, {0x0}, {&(0x7f0000002fc0)=""/31, 0x1f}, {&(0x7f0000003000)}], 0x6, &(0x7f00000030c0)=""/191, 0xbf}, 0x3}, {{&(0x7f0000003180)=@vsock, 0x80, &(0x7f0000004400)=[{&(0x7f0000007f40)=""/215, 0xd7}, {&(0x7f0000004300)=""/34, 0x22}, {&(0x7f0000004340)=""/28, 0x1c}, {&(0x7f0000004380)=""/108, 0x6c}], 0x4, &(0x7f0000004480)=""/222, 0xde}, 0x6}, {{&(0x7f0000004580)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000004a80)=[{&(0x7f0000004600)=""/120, 0x78}, {&(0x7f0000004700)=""/167, 0xa7}, {&(0x7f0000004800)=""/131, 0x83}, {0x0}, {&(0x7f0000004980)=""/212, 0xd4}], 0x5}, 0x8c2}, {{&(0x7f0000004b00)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000006cc0)=""/4096, 0x1000}, 0x52}], 0x8, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) write$UHID_DESTROY(r5, &(0x7f00000001c0), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x10001, 0xffff}, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x1) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000900)="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", 0x223, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) [ 526.796130] audit: type=1804 audit(1576602456.132:120): pid=23744 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir209839217/syzkaller.Zydzrp/421/bus" dev="sda1" ino=17777 res=1 [ 526.880129] protocol 88fb is buggy, dev hsr_slave_0 [ 526.885285] protocol 88fb is buggy, dev hsr_slave_1 [ 526.960131] protocol 88fb is buggy, dev hsr_slave_0 [ 526.965244] protocol 88fb is buggy, dev hsr_slave_1 17:07:36 executing program 3: socket$packet(0x11, 0x1000000000000002, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x280080, 0x0) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000100)) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x15, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000003200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x680, 0x478, 0x210, 0x478, 0x0, 0x340, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x6, &(0x7f0000000580), {[{{@uncond, 0x0, 0xc8, 0x108}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "3c745d713ded54eb04d1bcfe4ec5e3722f760ca03b47ed1d735abcf07e43"}}, {{@uncond, 0x0, 0xc8, 0x108}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3, 0x38000, @ipv6=@rand_addr="f65360ce35d79792c798d9967e3df2d3", 0x4e21}}}, {{@ipv6={@empty, @mcast1, [0xffffff00, 0xffffff00, 0xff, 0xff000000], [0xff, 0x0, 0x17fffff01, 0xffffffff], 'rose0\x00', 'ipddp0\x00', {}, {}, 0x67, 0x9, 0x4, 0x1}, 0x0, 0xf0, 0x130, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0xe}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x5, 0x5, @ipv6=@ipv4={[], [], @empty}, 0x4e21}}}, {{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@ipv6header={0x28, 'ipv6header\x00', 0x0, {0x40, 0x20, 0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@multicast2, @ipv6=@empty, 0x2e, 0x26, 0x9}}}, {{@ipv6={@mcast1, @remote, [0xffffffff, 0xff000000, 0x7f000080, 0xff000000], [0xffffff00, 0xffffff00], 'ip6tnl0\x00', 'ip6tnl0\x00', {}, {}, 0xff, 0x1, 0x0, 0x63}, 0x0, 0xf0, 0x138, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@empty, @ipv4=@local, 0x37, 0x3b, 0x1}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6e0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000007cc0)=[{{&(0x7f00000002c0)=@caif=@dbg, 0x80, &(0x7f0000000840)=[{&(0x7f0000000340)=""/251, 0xfb}, {&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000007ec0)=""/108, 0x6c}, {&(0x7f0000000600)=""/241, 0xf1}, {0x0}], 0x5, &(0x7f0000000b40)=""/234, 0xea}, 0xd9b9}, {{&(0x7f0000000c40)=@pppol2tpv3, 0x80, &(0x7f0000002340)=[{&(0x7f0000000cc0)=""/63, 0x3f}, {&(0x7f0000000d40)=""/232, 0xe8}, {&(0x7f0000000e40)=""/77, 0x4d}, {&(0x7f0000000ec0)=""/150, 0x96}, {&(0x7f0000000f80)=""/116, 0x74}, {&(0x7f0000001000)=""/212, 0xd4}, {0x0}, {&(0x7f00000012c0)=""/4096, 0x1000}, {0x0}], 0x9, &(0x7f00000000c0)=""/40, 0x28}, 0x7f}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000002480)=""/199, 0xc7}, {&(0x7f00000008c0)=""/55, 0x37}], 0x2, &(0x7f00000025c0)=""/157, 0x9d}, 0x9}, {{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002680)=""/238, 0xee}, {&(0x7f0000002780)=""/37, 0x25}, {&(0x7f00000027c0)=""/240, 0xf0}, {&(0x7f00000028c0)=""/10, 0xa}, {&(0x7f0000002900)=""/202, 0xca}, {&(0x7f0000002a00)=""/247, 0xf7}, {0x0}], 0x7, &(0x7f0000002c80)=""/184, 0xb8}, 0x7}, {{&(0x7f0000002d40)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f0000003040)=[{0x0}, {&(0x7f0000002e00)=""/213, 0xd5}, {&(0x7f0000002f00)=""/62, 0x3e}, {0x0}, {0x0}, {&(0x7f0000002fc0)=""/31, 0x1f}, {&(0x7f0000003000)}], 0x7, &(0x7f00000030c0)=""/191, 0xbf}, 0x3}, {{&(0x7f0000003180)=@vsock, 0x80, &(0x7f0000004400)=[{&(0x7f0000007f40)=""/215, 0xd7}, {&(0x7f0000004300)=""/34, 0x22}, {&(0x7f0000004340)=""/28, 0x1c}, {&(0x7f0000004380)=""/108, 0x6c}], 0x4, &(0x7f0000004480)=""/222, 0xde}, 0x6}, {{&(0x7f0000004580)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000004a80)=[{&(0x7f0000004600)=""/120, 0x78}, {&(0x7f0000004700)=""/167, 0xa7}, {&(0x7f0000004800)=""/131, 0x83}, {0x0}, {&(0x7f0000004980)=""/212, 0xd4}], 0x5}, 0x8c2}, {{&(0x7f0000004b00)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000006cc0)=""/4096, 0x1000}, 0x52}], 0x8, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) write$UHID_DESTROY(r5, &(0x7f00000001c0), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x10001, 0xffff}, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x1) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000900)="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", 0x223, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 17:07:36 executing program 1: socket$packet(0x11, 0x1000000000000002, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x280080, 0x0) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000100)) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x15, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, 0x0, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000007cc0)=[{{&(0x7f00000002c0)=@caif=@dbg, 0x80, &(0x7f0000000840)=[{&(0x7f0000000340)=""/251, 0xfb}, {&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000007ec0)=""/108, 0x6c}, {&(0x7f0000000600)=""/241, 0xf1}, {0x0}], 0x5, &(0x7f0000000b40)=""/234, 0xea}, 0xd9b9}, {{&(0x7f0000000c40)=@pppol2tpv3, 0x80, &(0x7f0000002340)=[{&(0x7f0000000cc0)=""/63, 0x3f}, {&(0x7f0000000d40)=""/232, 0xe8}, {&(0x7f0000000ec0)=""/150, 0x96}, {&(0x7f0000000f80)=""/116, 0x74}, {&(0x7f0000001000)=""/212, 0xd4}, {0x0}, {&(0x7f00000012c0)=""/4096, 0x1000}, {0x0}], 0x8, &(0x7f00000000c0)=""/40, 0x28}, 0x7f}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000002480)=""/199, 0xc7}, {&(0x7f00000008c0)=""/55, 0x37}], 0x2, &(0x7f00000025c0)=""/157, 0x9d}, 0x9}, {{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002680)=""/238, 0xee}, {&(0x7f0000002780)=""/37, 0x25}, {&(0x7f00000027c0)=""/240, 0xf0}, {&(0x7f00000028c0)=""/10, 0xa}, {&(0x7f0000002900)=""/202, 0xca}, {&(0x7f0000002a00)=""/247, 0xf7}, {0x0}], 0x7, &(0x7f0000002c80)=""/184, 0xb8}, 0x7}, {{&(0x7f0000002d40)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f0000003040)=[{&(0x7f0000002dc0)=""/18, 0x12}, {&(0x7f0000002e00)=""/213, 0xd5}, {&(0x7f0000002f00)=""/62, 0x3e}, {0x0}, {0x0}, {&(0x7f0000002fc0)=""/31, 0x1f}, {&(0x7f0000003000)}], 0x7, &(0x7f00000030c0)=""/191, 0xbf}, 0x3}, {{&(0x7f0000003180)=@vsock, 0x80, &(0x7f0000004400)=[{&(0x7f0000007f40)=""/215, 0xd7}, {&(0x7f0000004300)=""/34, 0x22}, {&(0x7f0000004340)=""/28, 0x1c}, {&(0x7f0000004380)=""/108, 0x6c}], 0x4, &(0x7f0000004480)=""/222, 0xde}, 0x6}, {{&(0x7f0000004580)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000004a80)=[{&(0x7f0000004600)=""/120, 0x78}, {&(0x7f0000004700)=""/167, 0xa7}, {&(0x7f0000004800)=""/131, 0x83}, {0x0}, {&(0x7f0000004980)=""/212, 0xd4}], 0x5}, 0x8c2}, {{&(0x7f0000004b00)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000006cc0)=""/4096, 0x1000}, 0x52}], 0x8, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) write$UHID_DESTROY(r5, &(0x7f00000001c0), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x10001, 0xffff}, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x1) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000900)="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", 0x223, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 17:07:36 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c47, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4\x02\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r0, &(0x7f0000000080), 0x297ef) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086602, 0x400007) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f00000003c0)='user\x00', 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYPTR64], 0xff39) [ 527.040149] protocol 88fb is buggy, dev hsr_slave_0 [ 527.045327] protocol 88fb is buggy, dev hsr_slave_1 17:07:36 executing program 3: socket$packet(0x11, 0x1000000000000002, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x280080, 0x0) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000100)) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x15, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000003200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x680, 0x478, 0x210, 0x478, 0x0, 0x340, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x6, &(0x7f0000000580), {[{{@uncond, 0x0, 0xc8, 0x108}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "3c745d713ded54eb04d1bcfe4ec5e3722f760ca03b47ed1d735abcf07e43"}}, {{@uncond, 0x0, 0xc8, 0x108}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3, 0x38000, @ipv6=@rand_addr="f65360ce35d79792c798d9967e3df2d3", 0x4e21}}}, {{@ipv6={@empty, @mcast1, [0xffffff00, 0xffffff00, 0xff, 0xff000000], [0xff, 0x0, 0x17fffff01, 0xffffffff], 'rose0\x00', 'ipddp0\x00', {}, {}, 0x67, 0x9, 0x4, 0x1}, 0x0, 0xf0, 0x130, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0xe}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x5, 0x5, @ipv6=@ipv4={[], [], @empty}, 0x4e21}}}, {{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@ipv6header={0x28, 'ipv6header\x00', 0x0, {0x40, 0x20, 0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@multicast2, @ipv6=@empty, 0x2e, 0x26, 0x9}}}, {{@ipv6={@mcast1, @remote, [0xffffffff, 0xff000000, 0x7f000080, 0xff000000], [0xffffff00, 0xffffff00], 'ip6tnl0\x00', 'ip6tnl0\x00', {}, {}, 0xff, 0x1, 0x0, 0x63}, 0x0, 0xf0, 0x138, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@empty, @ipv4=@local, 0x37, 0x3b, 0x1}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6e0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000007cc0)=[{{&(0x7f00000002c0)=@caif=@dbg, 0x80, &(0x7f0000000840)=[{&(0x7f0000000340)=""/251, 0xfb}, {&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000007ec0)=""/108, 0x6c}, {&(0x7f0000000600)=""/241, 0xf1}, {0x0}], 0x5, &(0x7f0000000b40)=""/234, 0xea}, 0xd9b9}, {{&(0x7f0000000c40)=@pppol2tpv3, 0x80, &(0x7f0000002340)=[{&(0x7f0000000cc0)=""/63, 0x3f}, {&(0x7f0000000d40)=""/232, 0xe8}, {&(0x7f0000000e40)=""/77, 0x4d}, {&(0x7f0000000ec0)=""/150, 0x96}, {&(0x7f0000000f80)=""/116, 0x74}, {&(0x7f0000001000)=""/212, 0xd4}, {0x0}, {&(0x7f00000012c0)=""/4096, 0x1000}, {0x0}], 0x9, &(0x7f00000000c0)=""/40, 0x28}, 0x7f}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000002480)=""/199, 0xc7}, {&(0x7f00000008c0)=""/55, 0x37}], 0x2, &(0x7f00000025c0)=""/157, 0x9d}, 0x9}, {{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002680)=""/238, 0xee}, {&(0x7f0000002780)=""/37, 0x25}, {&(0x7f00000027c0)=""/240, 0xf0}, {&(0x7f00000028c0)=""/10, 0xa}, {&(0x7f0000002900)=""/202, 0xca}, {&(0x7f0000002a00)=""/247, 0xf7}, {0x0}], 0x7, &(0x7f0000002c80)=""/184, 0xb8}, 0x7}, {{&(0x7f0000002d40)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f0000003040)=[{0x0}, {&(0x7f0000002e00)=""/213, 0xd5}, {&(0x7f0000002f00)=""/62, 0x3e}, {0x0}, {0x0}, {&(0x7f0000002fc0)=""/31, 0x1f}, {&(0x7f0000003000)}], 0x7, &(0x7f00000030c0)=""/191, 0xbf}, 0x3}, {{&(0x7f0000003180)=@vsock, 0x80, &(0x7f0000004400)=[{&(0x7f0000007f40)=""/215, 0xd7}, {&(0x7f0000004300)=""/34, 0x22}, {&(0x7f0000004340)=""/28, 0x1c}, {&(0x7f0000004380)=""/108, 0x6c}], 0x4, &(0x7f0000004480)=""/222, 0xde}, 0x6}, {{&(0x7f0000004580)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000004a80)=[{&(0x7f0000004600)=""/120, 0x78}, {&(0x7f0000004700)=""/167, 0xa7}, {&(0x7f0000004800)=""/131, 0x83}, {0x0}, {&(0x7f0000004980)=""/212, 0xd4}], 0x5}, 0x8c2}, {{&(0x7f0000004b00)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000006cc0)=""/4096, 0x1000}, 0x52}], 0x8, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) write$UHID_DESTROY(r5, &(0x7f00000001c0), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x10001, 0xffff}, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x1) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000900)="585ccbc4ed83b836c1a6474914dc5500b66147b3c7218a91690000000042e3d35228897501f93191b076ac446ff0022b8753a1fa748c569f435fb3bae96efb74b50ec93c2db8eae3198a29e5c0cfc60000ce0637cef580b4ec61221adf59be045b70e48884ca000018cea71fcfed06fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff33c1e8e036e5031949762d009d308bd73f477252d0000000000004000000000000000000000000000000000195e23fb4430a9a4c2850b6380a743d6ea0c3b121f66c716d746aa81c301621b7662c06aae720b872d4b7828e3b48522c673aa6cb366d4201e2aee3261eb52f14533b7a54203cf9a4fa587c0385cdba539e9bd34717b0dfab09db7b064fbe2ecf9f40fa3a4015d0d0db3f9d562686fcdc3342c88c6f1b6f11449f8aeabf54c5533ec6acc2270d41713ae1538256af3719a07f55223a6eaa7c1eae5d6efa12fe95e2b0f1c500b28c5c76e731d5250e395526d04063718f448e62d4dd7cefeed6b72b31b894093aa37337784c00d68a4185f349e41455f12d31aa2d0ff79a4d69d97421a0042f0c7a664a8c4945104b25dc49be950c5af7405b86482d7314fcc3a0ad5eb24268ccd24a2996019f7c006a0b3c39c7b98c5a5406a2e4ff6d9c0ce12c4251756a667b4731c4b0eb5dc7d4381fecf196c4404b54c3c11c48f09734d9a6842f52d3307a688208b7a4681b101e1abe5fecfca1f464c03e933cbd15ab589ccd3c559542355190522a712b8f5128a6a00", 0x223, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 17:07:36 executing program 2: socket$packet(0x11, 0x1000000000000002, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x280080, 0x0) ioctl$RTC_VL_READ(r0, 0x80047013, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x15, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000003200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x680, 0x478, 0x210, 0x478, 0x0, 0x340, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x6, 0x0, {[{{@uncond, 0x0, 0xc8, 0x108}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "3c745d713ded54eb04d1bcfe4ec5e3722f760ca03b47ed1d735abcf07e43"}}, {{@uncond, 0x0, 0xc8, 0x108}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3, 0x38000, @ipv6=@rand_addr="f65360ce35d79792c798d9967e3df2d3", 0x4e21}}}, {{@ipv6={@empty, @mcast1, [0xffffff00, 0xffffff00, 0xff, 0xff000000], [0xff, 0x0, 0x17fffff01, 0xffffffff], 'rose0\x00', 'ipddp0\x00', {}, {}, 0x67, 0x9, 0x4, 0x1}, 0x0, 0xf0, 0x130, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0xe}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x5, 0x5, @ipv6=@ipv4={[], [], @empty}, 0x4e21}}}, {{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@ipv6header={0x28, 'ipv6header\x00', 0x0, {0x40, 0x20, 0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@multicast2, @ipv6=@empty, 0x2e, 0x26, 0x9}}}, {{@ipv6={@mcast1, @remote, [0xffffffff, 0xff000000, 0x7f000080, 0xff000000], [0xffffff00, 0xffffff00], 'ip6tnl0\x00', 'ip6tnl0\x00', {}, {}, 0xff, 0x1, 0x0, 0x63}, 0x0, 0xf0, 0x138, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@empty, @ipv4=@local, 0x37, 0x3b, 0x1}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6e0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000007cc0)=[{{&(0x7f00000002c0)=@caif=@dbg, 0x80, &(0x7f0000000840)=[{&(0x7f0000000340)=""/251, 0xfb}, {&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000007ec0)=""/108, 0x6c}, {&(0x7f0000000600)=""/241, 0xf1}, {0x0}], 0x5, &(0x7f0000000b40)=""/234, 0xea}, 0xd9b9}, {{&(0x7f0000000c40)=@pppol2tpv3, 0x80, &(0x7f0000002340)=[{&(0x7f0000000cc0)=""/63, 0x3f}, {&(0x7f0000000d40)=""/232, 0xe8}, {&(0x7f0000000e40)=""/77, 0x4d}, {&(0x7f0000000ec0)=""/150, 0x96}, {&(0x7f0000000f80)=""/116, 0x74}, {&(0x7f0000001000)=""/212, 0xd4}, {0x0}, {&(0x7f00000012c0)=""/4096, 0x1000}, {0x0}], 0x9, &(0x7f00000000c0)=""/40, 0x28}, 0x7f}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000002480)=""/199, 0xc7}, {&(0x7f00000008c0)=""/55, 0x37}], 0x2, &(0x7f00000025c0)=""/157, 0x9d}, 0x9}, {{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002680)=""/238, 0xee}, {&(0x7f0000002780)=""/37, 0x25}, {&(0x7f00000027c0)=""/240, 0xf0}, {&(0x7f00000028c0)=""/10, 0xa}, {&(0x7f0000002900)=""/202, 0xca}, {&(0x7f0000002a00)=""/247, 0xf7}, {0x0}], 0x7, &(0x7f0000002c80)=""/184, 0xb8}, 0x7}, {{&(0x7f0000002d40)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f0000003040)=[{&(0x7f0000002dc0)=""/18, 0x12}, {&(0x7f0000002f00)=""/62, 0x3e}, {0x0}, {0x0}, {&(0x7f0000002fc0)=""/31, 0x1f}, {&(0x7f0000003000)}], 0x6, &(0x7f00000030c0)=""/191, 0xbf}, 0x3}, {{&(0x7f0000003180)=@vsock, 0x80, &(0x7f0000004400)=[{&(0x7f0000007f40)=""/215, 0xd7}, {&(0x7f0000004300)=""/34, 0x22}, {&(0x7f0000004340)=""/28, 0x1c}, {&(0x7f0000004380)=""/108, 0x6c}], 0x4, &(0x7f0000004480)=""/222, 0xde}, 0x6}, {{&(0x7f0000004580)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000004a80)=[{&(0x7f0000004600)=""/120, 0x78}, {&(0x7f0000004700)=""/167, 0xa7}, {&(0x7f0000004800)=""/131, 0x83}, {0x0}, {&(0x7f0000004980)=""/212, 0xd4}], 0x5}, 0x8c2}, {{&(0x7f0000004b00)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000006cc0)=""/4096, 0x1000}, 0x52}], 0x8, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) write$UHID_DESTROY(r5, &(0x7f00000001c0), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x10001, 0xffff}, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x1) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000900)="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", 0x223, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 17:07:36 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000500)='/dev/loop#\x00', 0x0, 0x100082) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$NBD_SET_BLKSIZE(0xffffffffffffffff, 0xab01, 0xff) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) socket(0x100000000011, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x1000f4) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000fffffffe) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_GET_MAX_PORTS(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x288008}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r3, 0x800, 0x70bd26, 0x25dfdbfe}, 0x1c}}, 0x10) socket$packet(0x11, 0x3, 0x300) r4 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x1000f4) r5 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x8000fffffffe) ioctl$EVIOCGKEYCODE_V2(r5, 0x80284504, 0x0) ioctl$TIOCMBIS(0xffffffffffffffff, 0x5416, &(0x7f0000000240)=0xfff) close(0xffffffffffffffff) sendfile(r0, r0, 0x0, 0x40fdf) 17:07:36 executing program 5: r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f00000000c0)="8d", 0x1, r0) r2 = socket$alg(0x26, 0x5, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000001600)={0x0, 0x0, 0x0}, &(0x7f0000000300)=0xc) keyctl$chown(0x4, r1, 0x0, r3) 17:07:36 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f00000000c0)=0xfe10) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000280)={r1, 0x5f}, &(0x7f0000000300)=0x8) 17:07:36 executing program 1: socket$packet(0x11, 0x1000000000000002, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x280080, 0x0) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000100)) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x15, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, 0x0, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000007cc0)=[{{&(0x7f00000002c0)=@caif=@dbg, 0x80, &(0x7f0000000840)=[{&(0x7f0000000340)=""/251, 0xfb}, {&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000007ec0)=""/108, 0x6c}, {&(0x7f0000000600)=""/241, 0xf1}, {0x0}], 0x5, &(0x7f0000000b40)=""/234, 0xea}, 0xd9b9}, {{&(0x7f0000000c40)=@pppol2tpv3, 0x80, &(0x7f0000002340)=[{&(0x7f0000000cc0)=""/63, 0x3f}, {&(0x7f0000000d40)=""/232, 0xe8}, {&(0x7f0000000ec0)=""/150, 0x96}, {&(0x7f0000000f80)=""/116, 0x74}, {&(0x7f0000001000)=""/212, 0xd4}, {0x0}, {&(0x7f00000012c0)=""/4096, 0x1000}, {0x0}], 0x8, &(0x7f00000000c0)=""/40, 0x28}, 0x7f}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000002480)=""/199, 0xc7}, {&(0x7f00000008c0)=""/55, 0x37}], 0x2, &(0x7f00000025c0)=""/157, 0x9d}, 0x9}, {{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002680)=""/238, 0xee}, {&(0x7f0000002780)=""/37, 0x25}, {&(0x7f00000027c0)=""/240, 0xf0}, {&(0x7f00000028c0)=""/10, 0xa}, {&(0x7f0000002900)=""/202, 0xca}, {&(0x7f0000002a00)=""/247, 0xf7}, {0x0}], 0x7, &(0x7f0000002c80)=""/184, 0xb8}, 0x7}, {{&(0x7f0000002d40)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f0000003040)=[{&(0x7f0000002dc0)=""/18, 0x12}, {&(0x7f0000002e00)=""/213, 0xd5}, {&(0x7f0000002f00)=""/62, 0x3e}, {0x0}, {0x0}, {&(0x7f0000002fc0)=""/31, 0x1f}, {&(0x7f0000003000)}], 0x7, &(0x7f00000030c0)=""/191, 0xbf}, 0x3}, {{&(0x7f0000003180)=@vsock, 0x80, &(0x7f0000004400)=[{&(0x7f0000007f40)=""/215, 0xd7}, {&(0x7f0000004300)=""/34, 0x22}, {&(0x7f0000004340)=""/28, 0x1c}, {&(0x7f0000004380)=""/108, 0x6c}], 0x4, &(0x7f0000004480)=""/222, 0xde}, 0x6}, {{&(0x7f0000004580)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000004a80)=[{&(0x7f0000004600)=""/120, 0x78}, {&(0x7f0000004700)=""/167, 0xa7}, {&(0x7f0000004800)=""/131, 0x83}, {0x0}, {&(0x7f0000004980)=""/212, 0xd4}], 0x5}, 0x8c2}, {{&(0x7f0000004b00)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000006cc0)=""/4096, 0x1000}, 0x52}], 0x8, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) write$UHID_DESTROY(r5, &(0x7f00000001c0), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x10001, 0xffff}, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x1) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000900)="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", 0x223, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 17:07:36 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pause() [ 527.493269] kauditd_printk_skb: 2 callbacks suppressed [ 527.493277] audit: type=1804 audit(1576602456.832:123): pid=23794 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir209839217/syzkaller.Zydzrp/422/bus" dev="sda1" ino=16584 res=1 17:07:37 executing program 2: socket$packet(0x11, 0x1000000000000002, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x280080, 0x0) ioctl$RTC_VL_READ(r0, 0x80047013, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x15, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000003200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x680, 0x478, 0x210, 0x478, 0x0, 0x340, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x6, 0x0, {[{{@uncond, 0x0, 0xc8, 0x108}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "3c745d713ded54eb04d1bcfe4ec5e3722f760ca03b47ed1d735abcf07e43"}}, {{@uncond, 0x0, 0xc8, 0x108}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3, 0x38000, @ipv6=@rand_addr="f65360ce35d79792c798d9967e3df2d3", 0x4e21}}}, {{@ipv6={@empty, @mcast1, [0xffffff00, 0xffffff00, 0xff, 0xff000000], [0xff, 0x0, 0x17fffff01, 0xffffffff], 'rose0\x00', 'ipddp0\x00', {}, {}, 0x67, 0x9, 0x4, 0x1}, 0x0, 0xf0, 0x130, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0xe}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x5, 0x5, @ipv6=@ipv4={[], [], @empty}, 0x4e21}}}, {{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@ipv6header={0x28, 'ipv6header\x00', 0x0, {0x40, 0x20, 0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@multicast2, @ipv6=@empty, 0x2e, 0x26, 0x9}}}, {{@ipv6={@mcast1, @remote, [0xffffffff, 0xff000000, 0x7f000080, 0xff000000], [0xffffff00, 0xffffff00], 'ip6tnl0\x00', 'ip6tnl0\x00', {}, {}, 0xff, 0x1, 0x0, 0x63}, 0x0, 0xf0, 0x138, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@empty, @ipv4=@local, 0x37, 0x3b, 0x1}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6e0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000007cc0)=[{{&(0x7f00000002c0)=@caif=@dbg, 0x80, &(0x7f0000000840)=[{&(0x7f0000000340)=""/251, 0xfb}, {&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000007ec0)=""/108, 0x6c}, {&(0x7f0000000600)=""/241, 0xf1}, {0x0}], 0x5, &(0x7f0000000b40)=""/234, 0xea}, 0xd9b9}, {{&(0x7f0000000c40)=@pppol2tpv3, 0x80, &(0x7f0000002340)=[{&(0x7f0000000cc0)=""/63, 0x3f}, {&(0x7f0000000d40)=""/232, 0xe8}, {&(0x7f0000000e40)=""/77, 0x4d}, {&(0x7f0000000ec0)=""/150, 0x96}, {&(0x7f0000000f80)=""/116, 0x74}, {&(0x7f0000001000)=""/212, 0xd4}, {0x0}, {&(0x7f00000012c0)=""/4096, 0x1000}, {0x0}], 0x9, &(0x7f00000000c0)=""/40, 0x28}, 0x7f}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000002480)=""/199, 0xc7}, {&(0x7f00000008c0)=""/55, 0x37}], 0x2, &(0x7f00000025c0)=""/157, 0x9d}, 0x9}, {{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002680)=""/238, 0xee}, {&(0x7f0000002780)=""/37, 0x25}, {&(0x7f00000027c0)=""/240, 0xf0}, {&(0x7f00000028c0)=""/10, 0xa}, {&(0x7f0000002900)=""/202, 0xca}, {&(0x7f0000002a00)=""/247, 0xf7}, {0x0}], 0x7, &(0x7f0000002c80)=""/184, 0xb8}, 0x7}, {{&(0x7f0000002d40)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f0000003040)=[{&(0x7f0000002dc0)=""/18, 0x12}, {0x0}, {&(0x7f0000002f00)=""/62, 0x3e}, {0x0}, {0x0}, {&(0x7f0000002fc0)=""/31, 0x1f}, {&(0x7f0000003000)}], 0x7, &(0x7f00000030c0)=""/191, 0xbf}, 0x3}, {{&(0x7f0000003180)=@vsock, 0x80, &(0x7f0000004400)=[{&(0x7f0000007f40)=""/215, 0xd7}, {&(0x7f0000004300)=""/34, 0x22}, {&(0x7f0000004340)=""/28, 0x1c}, {&(0x7f0000004380)=""/108, 0x6c}], 0x4, &(0x7f0000004480)=""/222, 0xde}, 0x6}, {{&(0x7f0000004580)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000004a80)=[{&(0x7f0000004600)=""/120, 0x78}, {&(0x7f0000004700)=""/167, 0xa7}, {&(0x7f0000004800)=""/131, 0x83}, {0x0}, {&(0x7f0000004980)=""/212, 0xd4}], 0x5}, 0x8c2}, {{&(0x7f0000004b00)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000006cc0)=""/4096, 0x1000}, 0x52}], 0x8, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) write$UHID_DESTROY(r5, &(0x7f00000001c0), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x10001, 0xffff}, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x1) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000900)="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", 0x223, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 17:07:37 executing program 3: socket$packet(0x11, 0x1000000000000002, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x280080, 0x0) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000100)) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x15, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000003200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x680, 0x478, 0x210, 0x478, 0x0, 0x340, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x6, &(0x7f0000000580), {[{{@uncond, 0x0, 0xc8, 0x108}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "3c745d713ded54eb04d1bcfe4ec5e3722f760ca03b47ed1d735abcf07e43"}}, {{@uncond, 0x0, 0xc8, 0x108}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3, 0x38000, @ipv6=@rand_addr="f65360ce35d79792c798d9967e3df2d3", 0x4e21}}}, {{@ipv6={@empty, @mcast1, [0xffffff00, 0xffffff00, 0xff, 0xff000000], [0xff, 0x0, 0x17fffff01, 0xffffffff], 'rose0\x00', 'ipddp0\x00', {}, {}, 0x67, 0x9, 0x4, 0x1}, 0x0, 0xf0, 0x130, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0xe}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x5, 0x5, @ipv6=@ipv4={[], [], @empty}, 0x4e21}}}, {{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@ipv6header={0x28, 'ipv6header\x00', 0x0, {0x40, 0x20, 0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@multicast2, @ipv6=@empty, 0x2e, 0x26, 0x9}}}, {{@ipv6={@mcast1, @remote, [0xffffffff, 0xff000000, 0x7f000080, 0xff000000], [0xffffff00, 0xffffff00], 'ip6tnl0\x00', 'ip6tnl0\x00', {}, {}, 0xff, 0x1, 0x0, 0x63}, 0x0, 0xf0, 0x138, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@empty, @ipv4=@local, 0x37, 0x3b, 0x1}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6e0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000007cc0)=[{{&(0x7f00000002c0)=@caif=@dbg, 0x80, &(0x7f0000000840)=[{&(0x7f0000000340)=""/251, 0xfb}, {&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000007ec0)=""/108, 0x6c}, {&(0x7f0000000600)=""/241, 0xf1}, {0x0}], 0x5, &(0x7f0000000b40)=""/234, 0xea}, 0xd9b9}, {{&(0x7f0000000c40)=@pppol2tpv3, 0x80, &(0x7f0000002340)=[{&(0x7f0000000cc0)=""/63, 0x3f}, {&(0x7f0000000d40)=""/232, 0xe8}, {&(0x7f0000000e40)=""/77, 0x4d}, {&(0x7f0000000ec0)=""/150, 0x96}, {&(0x7f0000000f80)=""/116, 0x74}, {&(0x7f0000001000)=""/212, 0xd4}, {0x0}, {&(0x7f00000012c0)=""/4096, 0x1000}, {0x0}], 0x9, &(0x7f00000000c0)=""/40, 0x28}, 0x7f}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000002480)=""/199, 0xc7}, {&(0x7f00000008c0)=""/55, 0x37}], 0x2, &(0x7f00000025c0)=""/157, 0x9d}, 0x9}, {{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002680)=""/238, 0xee}, {&(0x7f0000002780)=""/37, 0x25}, {&(0x7f00000027c0)=""/240, 0xf0}, {&(0x7f00000028c0)=""/10, 0xa}, {&(0x7f0000002900)=""/202, 0xca}, {&(0x7f0000002a00)=""/247, 0xf7}, {0x0}], 0x7, &(0x7f0000002c80)=""/184, 0xb8}, 0x7}, {{&(0x7f0000002d40)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f0000003040)=[{0x0}, {&(0x7f0000002e00)=""/213, 0xd5}, {&(0x7f0000002f00)=""/62, 0x3e}, {0x0}, {0x0}, {&(0x7f0000002fc0)=""/31, 0x1f}, {&(0x7f0000003000)}], 0x7, &(0x7f00000030c0)=""/191, 0xbf}, 0x3}, {{&(0x7f0000003180)=@vsock, 0x80, &(0x7f0000004400)=[{&(0x7f0000007f40)=""/215, 0xd7}, {&(0x7f0000004300)=""/34, 0x22}, {&(0x7f0000004340)=""/28, 0x1c}, {&(0x7f0000004380)=""/108, 0x6c}], 0x4, &(0x7f0000004480)=""/222, 0xde}, 0x6}, {{&(0x7f0000004580)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000004a80)=[{&(0x7f0000004600)=""/120, 0x78}, {&(0x7f0000004700)=""/167, 0xa7}, {&(0x7f0000004800)=""/131, 0x83}, {0x0}, {&(0x7f0000004980)=""/212, 0xd4}], 0x5}, 0x8c2}, {{&(0x7f0000004b00)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000006cc0)=""/4096, 0x1000}, 0x52}], 0x8, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) write$UHID_DESTROY(r5, &(0x7f00000001c0), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x10001, 0xffff}, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x1) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000900)="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", 0x223, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) [ 527.750611] audit: type=1804 audit(1576602457.052:124): pid=23794 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.4" name="/root/syzkaller-testdir209839217/syzkaller.Zydzrp/422/bus" dev="sda1" ino=16584 res=1 [ 527.829313] audit: type=1804 audit(1576602457.072:125): pid=23794 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir209839217/syzkaller.Zydzrp/422/bus" dev="sda1" ino=16584 res=1 17:07:37 executing program 4: r0 = socket(0x10, 0x3, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x14, 0x0, &(0x7f0000000140)) 17:07:37 executing program 1: socket$packet(0x11, 0x1000000000000002, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x280080, 0x0) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000100)) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x15, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, 0x0, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000007cc0)=[{{&(0x7f00000002c0)=@caif=@dbg, 0x80, &(0x7f0000000840)=[{&(0x7f0000000340)=""/251, 0xfb}, {&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000007ec0)=""/108, 0x6c}, {&(0x7f0000000600)=""/241, 0xf1}, {0x0}], 0x5, &(0x7f0000000b40)=""/234, 0xea}, 0xd9b9}, {{&(0x7f0000000c40)=@pppol2tpv3, 0x80, &(0x7f0000002340)=[{&(0x7f0000000cc0)=""/63, 0x3f}, {&(0x7f0000000d40)=""/232, 0xe8}, {&(0x7f0000000ec0)=""/150, 0x96}, {&(0x7f0000000f80)=""/116, 0x74}, {&(0x7f0000001000)=""/212, 0xd4}, {0x0}, {&(0x7f00000012c0)=""/4096, 0x1000}, {0x0}], 0x8, &(0x7f00000000c0)=""/40, 0x28}, 0x7f}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000002480)=""/199, 0xc7}, {&(0x7f00000008c0)=""/55, 0x37}], 0x2, &(0x7f00000025c0)=""/157, 0x9d}, 0x9}, {{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002680)=""/238, 0xee}, {&(0x7f0000002780)=""/37, 0x25}, {&(0x7f00000027c0)=""/240, 0xf0}, {&(0x7f00000028c0)=""/10, 0xa}, {&(0x7f0000002900)=""/202, 0xca}, {&(0x7f0000002a00)=""/247, 0xf7}, {0x0}], 0x7, &(0x7f0000002c80)=""/184, 0xb8}, 0x7}, {{&(0x7f0000002d40)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f0000003040)=[{&(0x7f0000002dc0)=""/18, 0x12}, {&(0x7f0000002e00)=""/213, 0xd5}, {&(0x7f0000002f00)=""/62, 0x3e}, {0x0}, {0x0}, {&(0x7f0000002fc0)=""/31, 0x1f}, {&(0x7f0000003000)}], 0x7, &(0x7f00000030c0)=""/191, 0xbf}, 0x3}, {{&(0x7f0000003180)=@vsock, 0x80, &(0x7f0000004400)=[{&(0x7f0000007f40)=""/215, 0xd7}, {&(0x7f0000004300)=""/34, 0x22}, {&(0x7f0000004340)=""/28, 0x1c}, {&(0x7f0000004380)=""/108, 0x6c}], 0x4, &(0x7f0000004480)=""/222, 0xde}, 0x6}, {{&(0x7f0000004580)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000004a80)=[{&(0x7f0000004600)=""/120, 0x78}, {&(0x7f0000004700)=""/167, 0xa7}, {&(0x7f0000004800)=""/131, 0x83}, {0x0}, {&(0x7f0000004980)=""/212, 0xd4}], 0x5}, 0x8c2}, {{&(0x7f0000004b00)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000006cc0)=""/4096, 0x1000}, 0x52}], 0x8, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) write$UHID_DESTROY(r5, &(0x7f00000001c0), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x10001, 0xffff}, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x1) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000900)="585ccbc4ed83b836c1a6474914dc5500b66147b3c7218a91690000000042e3d35228897501f93191b076ac446ff0022b8753a1fa748c569f435fb3bae96efb74b50ec93c2db8eae3198a29e5c0cfc60000ce0637cef580b4ec61221adf59be045b70e48884ca000018cea71fcfed06fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff33c1e8e036e5031949762d009d308bd73f477252d0000000000004000000000000000000000000000000000195e23fb4430a9a4c2850b6380a743d6ea0c3b121f66c716d746aa81c301621b7662c06aae720b872d4b7828e3b48522c673aa6cb366d4201e2aee3261eb52f14533b7a54203cf9a4fa587c0385cdba539e9bd34717b0dfab09db7b064fbe2ecf9f40fa3a4015d0d0db3f9d562686fcdc3342c88c6f1b6f11449f8aeabf54c5533ec6acc2270d41713ae1538256af3719a07f55223a6eaa7c1eae5d6efa12fe95e2b0f1c500b28c5c76e731d5250e395526d04063718f448e62d4dd7cefeed6b72b31b894093aa37337784c00d68a4185f349e41455f12d31aa2d0ff79a4d69d97421a0042f0c7a664a8c4945104b25dc49be950c5af7405b86482d7314fcc3a0ad5eb24268ccd24a2996019f7c006a0b3c39c7b98c5a5406a2e4ff6d9c0ce12c4251756a667b4731c4b0eb5dc7d4381fecf196c4404b54c3c11c48f09734d9a6842f52d3307a688208b7a4681b101e1abe5fecfca1f464c03e933cbd15ab589ccd3c559542355190522a712b8f5128a6a00", 0x223, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 17:07:37 executing program 2: socket$packet(0x11, 0x1000000000000002, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x280080, 0x0) ioctl$RTC_VL_READ(r0, 0x80047013, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x15, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000003200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x680, 0x478, 0x210, 0x478, 0x0, 0x340, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x6, 0x0, {[{{@uncond, 0x0, 0xc8, 0x108}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "3c745d713ded54eb04d1bcfe4ec5e3722f760ca03b47ed1d735abcf07e43"}}, {{@uncond, 0x0, 0xc8, 0x108}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3, 0x38000, @ipv6=@rand_addr="f65360ce35d79792c798d9967e3df2d3", 0x4e21}}}, {{@ipv6={@empty, @mcast1, [0xffffff00, 0xffffff00, 0xff, 0xff000000], [0xff, 0x0, 0x17fffff01, 0xffffffff], 'rose0\x00', 'ipddp0\x00', {}, {}, 0x67, 0x9, 0x4, 0x1}, 0x0, 0xf0, 0x130, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0xe}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x5, 0x5, @ipv6=@ipv4={[], [], @empty}, 0x4e21}}}, {{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@ipv6header={0x28, 'ipv6header\x00', 0x0, {0x40, 0x20, 0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@multicast2, @ipv6=@empty, 0x2e, 0x26, 0x9}}}, {{@ipv6={@mcast1, @remote, [0xffffffff, 0xff000000, 0x7f000080, 0xff000000], [0xffffff00, 0xffffff00], 'ip6tnl0\x00', 'ip6tnl0\x00', {}, {}, 0xff, 0x1, 0x0, 0x63}, 0x0, 0xf0, 0x138, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@empty, @ipv4=@local, 0x37, 0x3b, 0x1}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6e0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000007cc0)=[{{&(0x7f00000002c0)=@caif=@dbg, 0x80, &(0x7f0000000840)=[{&(0x7f0000000340)=""/251, 0xfb}, {&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000007ec0)=""/108, 0x6c}, {&(0x7f0000000600)=""/241, 0xf1}, {0x0}], 0x5, &(0x7f0000000b40)=""/234, 0xea}, 0xd9b9}, {{&(0x7f0000000c40)=@pppol2tpv3, 0x80, &(0x7f0000002340)=[{&(0x7f0000000cc0)=""/63, 0x3f}, {&(0x7f0000000d40)=""/232, 0xe8}, {&(0x7f0000000e40)=""/77, 0x4d}, {&(0x7f0000000ec0)=""/150, 0x96}, {&(0x7f0000000f80)=""/116, 0x74}, {&(0x7f0000001000)=""/212, 0xd4}, {0x0}, {&(0x7f00000012c0)=""/4096, 0x1000}, {0x0}], 0x9, &(0x7f00000000c0)=""/40, 0x28}, 0x7f}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000002480)=""/199, 0xc7}, {&(0x7f00000008c0)=""/55, 0x37}], 0x2, &(0x7f00000025c0)=""/157, 0x9d}, 0x9}, {{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002680)=""/238, 0xee}, {&(0x7f0000002780)=""/37, 0x25}, {&(0x7f00000027c0)=""/240, 0xf0}, {&(0x7f00000028c0)=""/10, 0xa}, {&(0x7f0000002900)=""/202, 0xca}, {&(0x7f0000002a00)=""/247, 0xf7}, {0x0}], 0x7, &(0x7f0000002c80)=""/184, 0xb8}, 0x7}, {{&(0x7f0000002d40)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f0000003040)=[{&(0x7f0000002dc0)=""/18, 0x12}, {0x0}, {&(0x7f0000002f00)=""/62, 0x3e}, {0x0}, {0x0}, {&(0x7f0000002fc0)=""/31, 0x1f}, {&(0x7f0000003000)}], 0x7, &(0x7f00000030c0)=""/191, 0xbf}, 0x3}, {{&(0x7f0000003180)=@vsock, 0x80, &(0x7f0000004400)=[{&(0x7f0000007f40)=""/215, 0xd7}, {&(0x7f0000004300)=""/34, 0x22}, {&(0x7f0000004340)=""/28, 0x1c}, {&(0x7f0000004380)=""/108, 0x6c}], 0x4, &(0x7f0000004480)=""/222, 0xde}, 0x6}, {{&(0x7f0000004580)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000004a80)=[{&(0x7f0000004600)=""/120, 0x78}, {&(0x7f0000004700)=""/167, 0xa7}, {&(0x7f0000004800)=""/131, 0x83}, {0x0}, {&(0x7f0000004980)=""/212, 0xd4}], 0x5}, 0x8c2}, {{&(0x7f0000004b00)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000006cc0)=""/4096, 0x1000}, 0x52}], 0x8, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) write$UHID_DESTROY(r5, &(0x7f00000001c0), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x10001, 0xffff}, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x1) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000900)="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", 0x223, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 17:07:37 executing program 3: socket$packet(0x11, 0x1000000000000002, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x280080, 0x0) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000100)) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x15, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000003200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x680, 0x478, 0x210, 0x478, 0x0, 0x340, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x6, &(0x7f0000000580), {[{{@uncond, 0x0, 0xc8, 0x108}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "3c745d713ded54eb04d1bcfe4ec5e3722f760ca03b47ed1d735abcf07e43"}}, {{@uncond, 0x0, 0xc8, 0x108}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3, 0x38000, @ipv6=@rand_addr="f65360ce35d79792c798d9967e3df2d3", 0x4e21}}}, {{@ipv6={@empty, @mcast1, [0xffffff00, 0xffffff00, 0xff, 0xff000000], [0xff, 0x0, 0x17fffff01, 0xffffffff], 'rose0\x00', 'ipddp0\x00', {}, {}, 0x67, 0x9, 0x4, 0x1}, 0x0, 0xf0, 0x130, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0xe}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x5, 0x5, @ipv6=@ipv4={[], [], @empty}, 0x4e21}}}, {{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@ipv6header={0x28, 'ipv6header\x00', 0x0, {0x40, 0x20, 0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@multicast2, @ipv6=@empty, 0x2e, 0x26, 0x9}}}, {{@ipv6={@mcast1, @remote, [0xffffffff, 0xff000000, 0x7f000080, 0xff000000], [0xffffff00, 0xffffff00], 'ip6tnl0\x00', 'ip6tnl0\x00', {}, {}, 0xff, 0x1, 0x0, 0x63}, 0x0, 0xf0, 0x138, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@empty, @ipv4=@local, 0x37, 0x3b, 0x1}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6e0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000007cc0)=[{{&(0x7f00000002c0)=@caif=@dbg, 0x80, &(0x7f0000000840)=[{&(0x7f0000000340)=""/251, 0xfb}, {&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000007ec0)=""/108, 0x6c}, {&(0x7f0000000600)=""/241, 0xf1}, {0x0}], 0x5, &(0x7f0000000b40)=""/234, 0xea}, 0xd9b9}, {{&(0x7f0000000c40)=@pppol2tpv3, 0x80, &(0x7f0000002340)=[{&(0x7f0000000cc0)=""/63, 0x3f}, {&(0x7f0000000d40)=""/232, 0xe8}, {&(0x7f0000000e40)=""/77, 0x4d}, {&(0x7f0000000ec0)=""/150, 0x96}, {&(0x7f0000000f80)=""/116, 0x74}, {&(0x7f0000001000)=""/212, 0xd4}, {0x0}, {&(0x7f00000012c0)=""/4096, 0x1000}, {0x0}], 0x9, &(0x7f00000000c0)=""/40, 0x28}, 0x7f}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000002480)=""/199, 0xc7}, {&(0x7f00000008c0)=""/55, 0x37}], 0x2, &(0x7f00000025c0)=""/157, 0x9d}, 0x9}, {{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002680)=""/238, 0xee}, {&(0x7f0000002780)=""/37, 0x25}, {&(0x7f00000027c0)=""/240, 0xf0}, {&(0x7f00000028c0)=""/10, 0xa}, {&(0x7f0000002900)=""/202, 0xca}, {&(0x7f0000002a00)=""/247, 0xf7}, {0x0}], 0x7, &(0x7f0000002c80)=""/184, 0xb8}, 0x7}, {{&(0x7f0000002d40)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f0000003040)=[{&(0x7f0000002dc0)=""/18, 0x12}, {&(0x7f0000002e00)=""/213, 0xd5}, {&(0x7f0000002f00)=""/62, 0x3e}, {0x0}, {0x0}, {&(0x7f0000002fc0)=""/31, 0x1f}, {&(0x7f0000003000)}], 0x7}, 0x3}, {{&(0x7f0000003180)=@vsock, 0x80, &(0x7f0000004400)=[{&(0x7f0000007f40)=""/215, 0xd7}, {&(0x7f0000004300)=""/34, 0x22}, {&(0x7f0000004340)=""/28, 0x1c}, {&(0x7f0000004380)=""/108, 0x6c}], 0x4, &(0x7f0000004480)=""/222, 0xde}, 0x6}, {{&(0x7f0000004580)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000004a80)=[{&(0x7f0000004600)=""/120, 0x78}, {&(0x7f0000004700)=""/167, 0xa7}, {&(0x7f0000004800)=""/131, 0x83}, {0x0}, {&(0x7f0000004980)=""/212, 0xd4}], 0x5}, 0x8c2}, {{&(0x7f0000004b00)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000006cc0)=""/4096, 0x1000}, 0x52}], 0x8, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) write$UHID_DESTROY(r5, &(0x7f00000001c0), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x10001, 0xffff}, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x1) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000900)="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", 0x223, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 17:07:37 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$netlink(r0, &(0x7f0000000240)={&(0x7f0000000040)=@proc={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)=[{&(0x7f00000004c0)={0xec4, 0x0, 0x0, 0x0, 0x0, "", [@typed={0x14, 0x0, @ipv6=@ipv4={[], [], @empty}}, @nested={0xdc, 0x0, [@generic="7201f39b486f915e549f7316cc29a94d8c89c9660609fc81d6ed918ef3cb8a053793bcefd5b8760bb76873ce858a3687dd8b81a3443d5cb8d61a750f3299f80929b14f15db382f5f03f8173214d66e32e15aeab67391476ff5fa765d318b28a1fc210be501c7254d10d690f602d2cfc84694d3fb14dfda1b5a616c7175e3cfaa03bf0611ddc5350b5ceb428247d183e561c015e52ee8f51315d3d110eab9f55dedb46b422a42c1ec22ad7f654703e0dc34fb83bfa6e83731c2f9ca9d42f1c15792", @typed={0x14, 0x0, @ipv6=@ipv4={[], [], @dev}}]}, @typed={0x8, 0x0, @fd}, @nested={0x11c, 0x0, [@typed={0x8, 0x0, @pid}, @generic="0ad6efa608383e7a8e48ad5f8c3f6c09bd0b9b3d1fbd921ec651d9eda39066b99e1b42adf1d5ceb39b0c763fbc76259aeaf327345736888f31520d9bfa65ab0216de33f933c9fb510f2ca868fddbd8ecc6e876e12d832493aff86dec2fffe49de9d0cfd673f8b90283c65966538a775f88fc669384a22a64c4c3183fe9ec091f1aeca2625b6e0f2baa283f1bd6f97fd6212acc040709dc37d76ef32a49774e85dfd52e54d51dadd3b088afa56532a25c7647ba2b87a301f1b614a90ff75a3a42e87bc78a26fa5f84911feff2d904b2b9541039c3bfca9d2401bcc779d1f502386f7465fca84fd4810b81375e1fd1e3d0a5551c825c616dd912", @typed={0x14, 0x0, @ipv6=@ipv4={[], [], @local}}]}, @nested={0xca0, 0x0, [@generic="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"]}]}, 0xec4}], 0x1}, 0x0) 17:07:37 executing program 4: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) mount$9p_xen(0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000100)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x30, r1, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x1}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xd97}]}, 0x9a}, 0x1, 0x6c}, 0x0) [ 528.230874] selinux_nlmsg_perm: 69 callbacks suppressed [ 528.230884] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pig=23854 comm=syz-executor.4 17:07:37 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4\x02\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0xc72f, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, 0x200000000001d, 0x0, 0x0, 0x0, 0x0, {0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, "77100b6a1cc076a15ad9f0552d5b12bfc338e5269b12ac2a4ee4202c64122b0a"}}) add_key$keyring(0x0, &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYRESHEX, @ANYRESOCT], 0x29) 17:07:37 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r2, 0x4b48, 0x715000) 17:07:37 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x200201, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup2(r1, r0) 17:07:37 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='bbr2', 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000040)={0x0, 0xfffffffffffffd96, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[], 0xfffffead}}, 0xff2f) recvmsg(r0, &(0x7f0000000880)={0x0, 0x36d, &(0x7f0000000540)=[{&(0x7f0000000380)=""/167, 0xffffff2f}, {&(0x7f0000000180)=""/75}, {&(0x7f0000000440)=""/225}, {&(0x7f0000000080)=""/12}, {&(0x7f0000000240)=""/22}], 0x1}, 0x0) 17:07:37 executing program 3: socket$packet(0x11, 0x1000000000000002, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x280080, 0x0) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000100)) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x15, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000003200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x680, 0x478, 0x210, 0x478, 0x0, 0x340, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x6, &(0x7f0000000580), {[{{@uncond, 0x0, 0xc8, 0x108}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "3c745d713ded54eb04d1bcfe4ec5e3722f760ca03b47ed1d735abcf07e43"}}, {{@uncond, 0x0, 0xc8, 0x108}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3, 0x38000, @ipv6=@rand_addr="f65360ce35d79792c798d9967e3df2d3", 0x4e21}}}, {{@ipv6={@empty, @mcast1, [0xffffff00, 0xffffff00, 0xff, 0xff000000], [0xff, 0x0, 0x17fffff01, 0xffffffff], 'rose0\x00', 'ipddp0\x00', {}, {}, 0x67, 0x9, 0x4, 0x1}, 0x0, 0xf0, 0x130, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0xe}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x5, 0x5, @ipv6=@ipv4={[], [], @empty}, 0x4e21}}}, {{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@ipv6header={0x28, 'ipv6header\x00', 0x0, {0x40, 0x20, 0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@multicast2, @ipv6=@empty, 0x2e, 0x26, 0x9}}}, {{@ipv6={@mcast1, @remote, [0xffffffff, 0xff000000, 0x7f000080, 0xff000000], [0xffffff00, 0xffffff00], 'ip6tnl0\x00', 'ip6tnl0\x00', {}, {}, 0xff, 0x1, 0x0, 0x63}, 0x0, 0xf0, 0x138, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@empty, @ipv4=@local, 0x37, 0x3b, 0x1}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6e0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000007cc0)=[{{&(0x7f00000002c0)=@caif=@dbg, 0x80, &(0x7f0000000840)=[{&(0x7f0000000340)=""/251, 0xfb}, {&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000007ec0)=""/108, 0x6c}, {&(0x7f0000000600)=""/241, 0xf1}, {0x0}], 0x5, &(0x7f0000000b40)=""/234, 0xea}, 0xd9b9}, {{&(0x7f0000000c40)=@pppol2tpv3, 0x80, &(0x7f0000002340)=[{&(0x7f0000000cc0)=""/63, 0x3f}, {&(0x7f0000000d40)=""/232, 0xe8}, {&(0x7f0000000e40)=""/77, 0x4d}, {&(0x7f0000000ec0)=""/150, 0x96}, {&(0x7f0000000f80)=""/116, 0x74}, {&(0x7f0000001000)=""/212, 0xd4}, {0x0}, {&(0x7f00000012c0)=""/4096, 0x1000}, {0x0}], 0x9, &(0x7f00000000c0)=""/40, 0x28}, 0x7f}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000002480)=""/199, 0xc7}, {&(0x7f00000008c0)=""/55, 0x37}], 0x2, &(0x7f00000025c0)=""/157, 0x9d}, 0x9}, {{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002680)=""/238, 0xee}, {&(0x7f0000002780)=""/37, 0x25}, {&(0x7f00000027c0)=""/240, 0xf0}, {&(0x7f00000028c0)=""/10, 0xa}, {&(0x7f0000002900)=""/202, 0xca}, {&(0x7f0000002a00)=""/247, 0xf7}, {0x0}], 0x7, &(0x7f0000002c80)=""/184, 0xb8}, 0x7}, {{&(0x7f0000002d40)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f0000003040)=[{&(0x7f0000002dc0)=""/18, 0x12}, {&(0x7f0000002e00)=""/213, 0xd5}, {&(0x7f0000002f00)=""/62, 0x3e}, {0x0}, {0x0}, {&(0x7f0000002fc0)=""/31, 0x1f}, {&(0x7f0000003000)}], 0x7}, 0x3}, {{&(0x7f0000003180)=@vsock, 0x80, &(0x7f0000004400)=[{&(0x7f0000007f40)=""/215, 0xd7}, {&(0x7f0000004300)=""/34, 0x22}, {&(0x7f0000004340)=""/28, 0x1c}, {&(0x7f0000004380)=""/108, 0x6c}], 0x4, &(0x7f0000004480)=""/222, 0xde}, 0x6}, {{&(0x7f0000004580)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000004a80)=[{&(0x7f0000004600)=""/120, 0x78}, {&(0x7f0000004700)=""/167, 0xa7}, {&(0x7f0000004800)=""/131, 0x83}, {0x0}, {&(0x7f0000004980)=""/212, 0xd4}], 0x5}, 0x8c2}, {{&(0x7f0000004b00)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000006cc0)=""/4096, 0x1000}, 0x52}], 0x8, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) write$UHID_DESTROY(r5, &(0x7f00000001c0), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x10001, 0xffff}, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x1) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000900)="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", 0x223, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 17:07:37 executing program 1: socket$packet(0x11, 0x1000000000000002, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x280080, 0x0) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000100)) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x15, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, 0x0, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000007cc0)=[{{&(0x7f00000002c0)=@caif=@dbg, 0x80, &(0x7f0000000840)=[{&(0x7f0000000340)=""/251, 0xfb}, {&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000007ec0)=""/108, 0x6c}, {&(0x7f0000000600)=""/241, 0xf1}, {0x0}], 0x5, &(0x7f0000000b40)=""/234, 0xea}, 0xd9b9}, {{&(0x7f0000000c40)=@pppol2tpv3, 0x80, &(0x7f0000002340)=[{&(0x7f0000000cc0)=""/63, 0x3f}, {&(0x7f0000000d40)=""/232, 0xe8}, {0x0}, {&(0x7f0000000ec0)=""/150, 0x96}, {&(0x7f0000000f80)=""/116, 0x74}, {&(0x7f0000001000)=""/212, 0xd4}, {0x0}, {&(0x7f00000012c0)=""/4096, 0x1000}, {0x0}], 0x9, &(0x7f00000000c0)=""/40, 0x28}, 0x7f}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000002480)=""/199, 0xc7}, {&(0x7f00000008c0)=""/55, 0x37}], 0x2, &(0x7f00000025c0)=""/157, 0x9d}, 0x9}, {{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002680)=""/238, 0xee}, {&(0x7f0000002780)=""/37, 0x25}, {&(0x7f00000027c0)=""/240, 0xf0}, {&(0x7f00000028c0)=""/10, 0xa}, {&(0x7f0000002900)=""/202, 0xca}, {&(0x7f0000002a00)=""/247, 0xf7}, {0x0}], 0x7, &(0x7f0000002c80)=""/184, 0xb8}, 0x7}, {{&(0x7f0000002d40)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f0000003040)=[{&(0x7f0000002dc0)=""/18, 0x12}, {&(0x7f0000002e00)=""/213, 0xd5}, {&(0x7f0000002f00)=""/62, 0x3e}, {0x0}, {0x0}, {&(0x7f0000002fc0)=""/31, 0x1f}, {&(0x7f0000003000)}], 0x7, &(0x7f00000030c0)=""/191, 0xbf}, 0x3}, {{&(0x7f0000003180)=@vsock, 0x80, &(0x7f0000004400)=[{&(0x7f0000007f40)=""/215, 0xd7}, {&(0x7f0000004300)=""/34, 0x22}, {&(0x7f0000004340)=""/28, 0x1c}, {&(0x7f0000004380)=""/108, 0x6c}], 0x4, &(0x7f0000004480)=""/222, 0xde}, 0x6}, {{&(0x7f0000004580)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000004a80)=[{&(0x7f0000004600)=""/120, 0x78}, {&(0x7f0000004700)=""/167, 0xa7}, {&(0x7f0000004800)=""/131, 0x83}, {0x0}, {&(0x7f0000004980)=""/212, 0xd4}], 0x5}, 0x8c2}, {{&(0x7f0000004b00)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000006cc0)=""/4096, 0x1000}, 0x52}], 0x8, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) write$UHID_DESTROY(r5, &(0x7f00000001c0), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x10001, 0xffff}, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x1) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000900)="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", 0x223, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 17:07:37 executing program 2: socket$packet(0x11, 0x1000000000000002, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x280080, 0x0) ioctl$RTC_VL_READ(r0, 0x80047013, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x15, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000003200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x680, 0x478, 0x210, 0x478, 0x0, 0x340, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x6, 0x0, {[{{@uncond, 0x0, 0xc8, 0x108}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "3c745d713ded54eb04d1bcfe4ec5e3722f760ca03b47ed1d735abcf07e43"}}, {{@uncond, 0x0, 0xc8, 0x108}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3, 0x38000, @ipv6=@rand_addr="f65360ce35d79792c798d9967e3df2d3", 0x4e21}}}, {{@ipv6={@empty, @mcast1, [0xffffff00, 0xffffff00, 0xff, 0xff000000], [0xff, 0x0, 0x17fffff01, 0xffffffff], 'rose0\x00', 'ipddp0\x00', {}, {}, 0x67, 0x9, 0x4, 0x1}, 0x0, 0xf0, 0x130, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0xe}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x5, 0x5, @ipv6=@ipv4={[], [], @empty}, 0x4e21}}}, {{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@ipv6header={0x28, 'ipv6header\x00', 0x0, {0x40, 0x20, 0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@multicast2, @ipv6=@empty, 0x2e, 0x26, 0x9}}}, {{@ipv6={@mcast1, @remote, [0xffffffff, 0xff000000, 0x7f000080, 0xff000000], [0xffffff00, 0xffffff00], 'ip6tnl0\x00', 'ip6tnl0\x00', {}, {}, 0xff, 0x1, 0x0, 0x63}, 0x0, 0xf0, 0x138, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@empty, @ipv4=@local, 0x37, 0x3b, 0x1}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6e0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000007cc0)=[{{&(0x7f00000002c0)=@caif=@dbg, 0x80, &(0x7f0000000840)=[{&(0x7f0000000340)=""/251, 0xfb}, {&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000007ec0)=""/108, 0x6c}, {&(0x7f0000000600)=""/241, 0xf1}, {0x0}], 0x5, &(0x7f0000000b40)=""/234, 0xea}, 0xd9b9}, {{&(0x7f0000000c40)=@pppol2tpv3, 0x80, &(0x7f0000002340)=[{&(0x7f0000000cc0)=""/63, 0x3f}, {&(0x7f0000000d40)=""/232, 0xe8}, {&(0x7f0000000e40)=""/77, 0x4d}, {&(0x7f0000000ec0)=""/150, 0x96}, {&(0x7f0000000f80)=""/116, 0x74}, {&(0x7f0000001000)=""/212, 0xd4}, {0x0}, {&(0x7f00000012c0)=""/4096, 0x1000}, {0x0}], 0x9, &(0x7f00000000c0)=""/40, 0x28}, 0x7f}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000002480)=""/199, 0xc7}, {&(0x7f00000008c0)=""/55, 0x37}], 0x2, &(0x7f00000025c0)=""/157, 0x9d}, 0x9}, {{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002680)=""/238, 0xee}, {&(0x7f0000002780)=""/37, 0x25}, {&(0x7f00000027c0)=""/240, 0xf0}, {&(0x7f00000028c0)=""/10, 0xa}, {&(0x7f0000002900)=""/202, 0xca}, {&(0x7f0000002a00)=""/247, 0xf7}, {0x0}], 0x7, &(0x7f0000002c80)=""/184, 0xb8}, 0x7}, {{&(0x7f0000002d40)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f0000003040)=[{&(0x7f0000002dc0)=""/18, 0x12}, {0x0}, {&(0x7f0000002f00)=""/62, 0x3e}, {0x0}, {0x0}, {&(0x7f0000002fc0)=""/31, 0x1f}, {&(0x7f0000003000)}], 0x7, &(0x7f00000030c0)=""/191, 0xbf}, 0x3}, {{&(0x7f0000003180)=@vsock, 0x80, &(0x7f0000004400)=[{&(0x7f0000007f40)=""/215, 0xd7}, {&(0x7f0000004300)=""/34, 0x22}, {&(0x7f0000004340)=""/28, 0x1c}, {&(0x7f0000004380)=""/108, 0x6c}], 0x4, &(0x7f0000004480)=""/222, 0xde}, 0x6}, {{&(0x7f0000004580)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000004a80)=[{&(0x7f0000004600)=""/120, 0x78}, {&(0x7f0000004700)=""/167, 0xa7}, {&(0x7f0000004800)=""/131, 0x83}, {0x0}, {&(0x7f0000004980)=""/212, 0xd4}], 0x5}, 0x8c2}, {{&(0x7f0000004b00)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000006cc0)=""/4096, 0x1000}, 0x52}], 0x8, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) write$UHID_DESTROY(r5, &(0x7f00000001c0), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x10001, 0xffff}, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x1) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000900)="585ccbc4ed83b836c1a6474914dc5500b66147b3c7218a91690000000042e3d35228897501f93191b076ac446ff0022b8753a1fa748c569f435fb3bae96efb74b50ec93c2db8eae3198a29e5c0cfc60000ce0637cef580b4ec61221adf59be045b70e48884ca000018cea71fcfed06fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff33c1e8e036e5031949762d009d308bd73f477252d0000000000004000000000000000000000000000000000195e23fb4430a9a4c2850b6380a743d6ea0c3b121f66c716d746aa81c301621b7662c06aae720b872d4b7828e3b48522c673aa6cb366d4201e2aee3261eb52f14533b7a54203cf9a4fa587c0385cdba539e9bd34717b0dfab09db7b064fbe2ecf9f40fa3a4015d0d0db3f9d562686fcdc3342c88c6f1b6f11449f8aeabf54c5533ec6acc2270d41713ae1538256af3719a07f55223a6eaa7c1eae5d6efa12fe95e2b0f1c500b28c5c76e731d5250e395526d04063718f448e62d4dd7cefeed6b72b31b894093aa37337784c00d68a4185f349e41455f12d31aa2d0ff79a4d69d97421a0042f0c7a664a8c4945104b25dc49be950c5af7405b86482d7314fcc3a0ad5eb24268ccd24a2996019f7c006a0b3c39c7b98c5a5406a2e4ff6d9c0ce12c4251756a667b4731c4b0eb5dc7d4381fecf196c4404b54c3c11c48f09734d9a6842f52d3307a688208b7a4681b101e1abe5fecfca1f464c03e933cbd15ab589ccd3c559542355190522a712b8f5128a6a00", 0x223, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 17:07:37 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r2, 0x28, 0x6, &(0x7f0000000240)={0x77359400}, 0x10) 17:07:37 executing program 0: socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RWSTAT(r2, &(0x7f00000000c0)={0xa863b37d6292c0fb}, 0x7) write(r1, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000280)) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r2) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r4, 0x541c, &(0x7f0000000080)) 17:07:38 executing program 4: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)="240000005a001f00ff03f4f9002304000a04f511080001", 0x17) close(r2) socket(0x10, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x7fff, 0x0) [ 528.753667] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 528.896852] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=23915 comm=syz-executor.4 [ 528.913507] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=23915 comm=syz-executor.4 17:07:38 executing program 2: socket$packet(0x11, 0x1000000000000002, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x280080, 0x0) ioctl$RTC_VL_READ(r0, 0x80047013, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x15, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000003200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x680, 0x478, 0x210, 0x478, 0x0, 0x340, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x6, 0x0, {[{{@uncond, 0x0, 0xc8, 0x108}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "3c745d713ded54eb04d1bcfe4ec5e3722f760ca03b47ed1d735abcf07e43"}}, {{@uncond, 0x0, 0xc8, 0x108}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3, 0x38000, @ipv6=@rand_addr="f65360ce35d79792c798d9967e3df2d3", 0x4e21}}}, {{@ipv6={@empty, @mcast1, [0xffffff00, 0xffffff00, 0xff, 0xff000000], [0xff, 0x0, 0x17fffff01, 0xffffffff], 'rose0\x00', 'ipddp0\x00', {}, {}, 0x67, 0x9, 0x4, 0x1}, 0x0, 0xf0, 0x130, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0xe}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x5, 0x5, @ipv6=@ipv4={[], [], @empty}, 0x4e21}}}, {{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@ipv6header={0x28, 'ipv6header\x00', 0x0, {0x40, 0x20, 0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@multicast2, @ipv6=@empty, 0x2e, 0x26, 0x9}}}, {{@ipv6={@mcast1, @remote, [0xffffffff, 0xff000000, 0x7f000080, 0xff000000], [0xffffff00, 0xffffff00], 'ip6tnl0\x00', 'ip6tnl0\x00', {}, {}, 0xff, 0x1, 0x0, 0x63}, 0x0, 0xf0, 0x138, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@empty, @ipv4=@local, 0x37, 0x3b, 0x1}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6e0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000007cc0)=[{{&(0x7f00000002c0)=@caif=@dbg, 0x80, &(0x7f0000000840)=[{&(0x7f0000000340)=""/251, 0xfb}, {&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000007ec0)=""/108, 0x6c}, {&(0x7f0000000600)=""/241, 0xf1}, {0x0}], 0x5, &(0x7f0000000b40)=""/234, 0xea}, 0xd9b9}, {{&(0x7f0000000c40)=@pppol2tpv3, 0x80, &(0x7f0000002340)=[{&(0x7f0000000cc0)=""/63, 0x3f}, {&(0x7f0000000d40)=""/232, 0xe8}, {&(0x7f0000000e40)=""/77, 0x4d}, {&(0x7f0000000ec0)=""/150, 0x96}, {&(0x7f0000000f80)=""/116, 0x74}, {&(0x7f0000001000)=""/212, 0xd4}, {0x0}, {&(0x7f00000012c0)=""/4096, 0x1000}, {0x0}], 0x9, &(0x7f00000000c0)=""/40, 0x28}, 0x7f}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000002480)=""/199, 0xc7}, {&(0x7f00000008c0)=""/55, 0x37}], 0x2, &(0x7f00000025c0)=""/157, 0x9d}, 0x9}, {{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002680)=""/238, 0xee}, {&(0x7f0000002780)=""/37, 0x25}, {&(0x7f00000027c0)=""/240, 0xf0}, {&(0x7f00000028c0)=""/10, 0xa}, {&(0x7f0000002900)=""/202, 0xca}, {&(0x7f0000002a00)=""/247, 0xf7}, {0x0}], 0x7, &(0x7f0000002c80)=""/184, 0xb8}, 0x7}, {{&(0x7f0000002d40)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f0000003040)=[{&(0x7f0000002e00)=""/213, 0xd5}, {&(0x7f0000002f00)=""/62, 0x3e}, {0x0}, {0x0}, {&(0x7f0000002fc0)=""/31, 0x1f}, {&(0x7f0000003000)}], 0x6, &(0x7f00000030c0)=""/191, 0xbf}, 0x3}, {{&(0x7f0000003180)=@vsock, 0x80, &(0x7f0000004400)=[{&(0x7f0000007f40)=""/215, 0xd7}, {&(0x7f0000004300)=""/34, 0x22}, {&(0x7f0000004340)=""/28, 0x1c}, {&(0x7f0000004380)=""/108, 0x6c}], 0x4, &(0x7f0000004480)=""/222, 0xde}, 0x6}, {{&(0x7f0000004580)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000004a80)=[{&(0x7f0000004600)=""/120, 0x78}, {&(0x7f0000004700)=""/167, 0xa7}, {&(0x7f0000004800)=""/131, 0x83}, {0x0}, {&(0x7f0000004980)=""/212, 0xd4}], 0x5}, 0x8c2}, {{&(0x7f0000004b00)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000006cc0)=""/4096, 0x1000}, 0x52}], 0x8, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) write$UHID_DESTROY(r5, &(0x7f00000001c0), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x10001, 0xffff}, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x1) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000900)="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", 0x223, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 17:07:38 executing program 3: socket$packet(0x11, 0x1000000000000002, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x280080, 0x0) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000100)) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x15, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000003200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x680, 0x478, 0x210, 0x478, 0x0, 0x340, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x6, &(0x7f0000000580), {[{{@uncond, 0x0, 0xc8, 0x108}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "3c745d713ded54eb04d1bcfe4ec5e3722f760ca03b47ed1d735abcf07e43"}}, {{@uncond, 0x0, 0xc8, 0x108}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3, 0x38000, @ipv6=@rand_addr="f65360ce35d79792c798d9967e3df2d3", 0x4e21}}}, {{@ipv6={@empty, @mcast1, [0xffffff00, 0xffffff00, 0xff, 0xff000000], [0xff, 0x0, 0x17fffff01, 0xffffffff], 'rose0\x00', 'ipddp0\x00', {}, {}, 0x67, 0x9, 0x4, 0x1}, 0x0, 0xf0, 0x130, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0xe}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x5, 0x5, @ipv6=@ipv4={[], [], @empty}, 0x4e21}}}, {{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@ipv6header={0x28, 'ipv6header\x00', 0x0, {0x40, 0x20, 0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@multicast2, @ipv6=@empty, 0x2e, 0x26, 0x9}}}, {{@ipv6={@mcast1, @remote, [0xffffffff, 0xff000000, 0x7f000080, 0xff000000], [0xffffff00, 0xffffff00], 'ip6tnl0\x00', 'ip6tnl0\x00', {}, {}, 0xff, 0x1, 0x0, 0x63}, 0x0, 0xf0, 0x138, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@empty, @ipv4=@local, 0x37, 0x3b, 0x1}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6e0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000007cc0)=[{{&(0x7f00000002c0)=@caif=@dbg, 0x80, &(0x7f0000000840)=[{&(0x7f0000000340)=""/251, 0xfb}, {&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000007ec0)=""/108, 0x6c}, {&(0x7f0000000600)=""/241, 0xf1}, {0x0}], 0x5, &(0x7f0000000b40)=""/234, 0xea}, 0xd9b9}, {{&(0x7f0000000c40)=@pppol2tpv3, 0x80, &(0x7f0000002340)=[{&(0x7f0000000cc0)=""/63, 0x3f}, {&(0x7f0000000d40)=""/232, 0xe8}, {&(0x7f0000000e40)=""/77, 0x4d}, {&(0x7f0000000ec0)=""/150, 0x96}, {&(0x7f0000000f80)=""/116, 0x74}, {&(0x7f0000001000)=""/212, 0xd4}, {0x0}, {&(0x7f00000012c0)=""/4096, 0x1000}, {0x0}], 0x9, &(0x7f00000000c0)=""/40, 0x28}, 0x7f}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000002480)=""/199, 0xc7}, {&(0x7f00000008c0)=""/55, 0x37}], 0x2, &(0x7f00000025c0)=""/157, 0x9d}, 0x9}, {{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002680)=""/238, 0xee}, {&(0x7f0000002780)=""/37, 0x25}, {&(0x7f00000027c0)=""/240, 0xf0}, {&(0x7f00000028c0)=""/10, 0xa}, {&(0x7f0000002900)=""/202, 0xca}, {&(0x7f0000002a00)=""/247, 0xf7}, {0x0}], 0x7, &(0x7f0000002c80)=""/184, 0xb8}, 0x7}, {{&(0x7f0000002d40)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f0000003040)=[{&(0x7f0000002dc0)=""/18, 0x12}, {&(0x7f0000002e00)=""/213, 0xd5}, {&(0x7f0000002f00)=""/62, 0x3e}, {0x0}, {0x0}, {&(0x7f0000002fc0)=""/31, 0x1f}, {&(0x7f0000003000)}], 0x7}, 0x3}, {{&(0x7f0000003180)=@vsock, 0x80, &(0x7f0000004400)=[{&(0x7f0000007f40)=""/215, 0xd7}, {&(0x7f0000004300)=""/34, 0x22}, {&(0x7f0000004340)=""/28, 0x1c}, {&(0x7f0000004380)=""/108, 0x6c}], 0x4, &(0x7f0000004480)=""/222, 0xde}, 0x6}, {{&(0x7f0000004580)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000004a80)=[{&(0x7f0000004600)=""/120, 0x78}, {&(0x7f0000004700)=""/167, 0xa7}, {&(0x7f0000004800)=""/131, 0x83}, {0x0}, {&(0x7f0000004980)=""/212, 0xd4}], 0x5}, 0x8c2}, {{&(0x7f0000004b00)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000006cc0)=""/4096, 0x1000}, 0x52}], 0x8, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) write$UHID_DESTROY(r5, &(0x7f00000001c0), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x10001, 0xffff}, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x1) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000900)="585ccbc4ed83b836c1a6474914dc5500b66147b3c7218a91690000000042e3d35228897501f93191b076ac446ff0022b8753a1fa748c569f435fb3bae96efb74b50ec93c2db8eae3198a29e5c0cfc60000ce0637cef580b4ec61221adf59be045b70e48884ca000018cea71fcfed06fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff33c1e8e036e5031949762d009d308bd73f477252d0000000000004000000000000000000000000000000000195e23fb4430a9a4c2850b6380a743d6ea0c3b121f66c716d746aa81c301621b7662c06aae720b872d4b7828e3b48522c673aa6cb366d4201e2aee3261eb52f14533b7a54203cf9a4fa587c0385cdba539e9bd34717b0dfab09db7b064fbe2ecf9f40fa3a4015d0d0db3f9d562686fcdc3342c88c6f1b6f11449f8aeabf54c5533ec6acc2270d41713ae1538256af3719a07f55223a6eaa7c1eae5d6efa12fe95e2b0f1c500b28c5c76e731d5250e395526d04063718f448e62d4dd7cefeed6b72b31b894093aa37337784c00d68a4185f349e41455f12d31aa2d0ff79a4d69d97421a0042f0c7a664a8c4945104b25dc49be950c5af7405b86482d7314fcc3a0ad5eb24268ccd24a2996019f7c006a0b3c39c7b98c5a5406a2e4ff6d9c0ce12c4251756a667b4731c4b0eb5dc7d4381fecf196c4404b54c3c11c48f09734d9a6842f52d3307a688208b7a4681b101e1abe5fecfca1f464c03e933cbd15ab589ccd3c559542355190522a712b8f5128a6a00", 0x223, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 17:07:38 executing program 1: socket$packet(0x11, 0x1000000000000002, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x280080, 0x0) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000100)) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x15, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, 0x0, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000007cc0)=[{{&(0x7f00000002c0)=@caif=@dbg, 0x80, &(0x7f0000000840)=[{&(0x7f0000000340)=""/251, 0xfb}, {&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000007ec0)=""/108, 0x6c}, {&(0x7f0000000600)=""/241, 0xf1}, {0x0}], 0x5, &(0x7f0000000b40)=""/234, 0xea}, 0xd9b9}, {{&(0x7f0000000c40)=@pppol2tpv3, 0x80, &(0x7f0000002340)=[{&(0x7f0000000cc0)=""/63, 0x3f}, {&(0x7f0000000d40)=""/232, 0xe8}, {0x0}, {&(0x7f0000000ec0)=""/150, 0x96}, {&(0x7f0000000f80)=""/116, 0x74}, {&(0x7f0000001000)=""/212, 0xd4}, {0x0}, {&(0x7f00000012c0)=""/4096, 0x1000}, {0x0}], 0x9, &(0x7f00000000c0)=""/40, 0x28}, 0x7f}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000002480)=""/199, 0xc7}, {&(0x7f00000008c0)=""/55, 0x37}], 0x2, &(0x7f00000025c0)=""/157, 0x9d}, 0x9}, {{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002680)=""/238, 0xee}, {&(0x7f0000002780)=""/37, 0x25}, {&(0x7f00000027c0)=""/240, 0xf0}, {&(0x7f00000028c0)=""/10, 0xa}, {&(0x7f0000002900)=""/202, 0xca}, {&(0x7f0000002a00)=""/247, 0xf7}, {0x0}], 0x7, &(0x7f0000002c80)=""/184, 0xb8}, 0x7}, {{&(0x7f0000002d40)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f0000003040)=[{&(0x7f0000002dc0)=""/18, 0x12}, {&(0x7f0000002e00)=""/213, 0xd5}, {&(0x7f0000002f00)=""/62, 0x3e}, {0x0}, {0x0}, {&(0x7f0000002fc0)=""/31, 0x1f}, {&(0x7f0000003000)}], 0x7, &(0x7f00000030c0)=""/191, 0xbf}, 0x3}, {{&(0x7f0000003180)=@vsock, 0x80, &(0x7f0000004400)=[{&(0x7f0000007f40)=""/215, 0xd7}, {&(0x7f0000004300)=""/34, 0x22}, {&(0x7f0000004340)=""/28, 0x1c}, {&(0x7f0000004380)=""/108, 0x6c}], 0x4, &(0x7f0000004480)=""/222, 0xde}, 0x6}, {{&(0x7f0000004580)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000004a80)=[{&(0x7f0000004600)=""/120, 0x78}, {&(0x7f0000004700)=""/167, 0xa7}, {&(0x7f0000004800)=""/131, 0x83}, {0x0}, {&(0x7f0000004980)=""/212, 0xd4}], 0x5}, 0x8c2}, {{&(0x7f0000004b00)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000006cc0)=""/4096, 0x1000}, 0x52}], 0x8, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) write$UHID_DESTROY(r5, &(0x7f00000001c0), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x10001, 0xffff}, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x1) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000900)="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", 0x223, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) [ 528.937470] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=23915 comm=syz-executor.4 [ 528.954081] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=23915 comm=syz-executor.4 [ 529.022220] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=23915 comm=syz-executor.4 [ 529.025992] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=23915 comm=syz-executor.4 [ 529.026301] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=23915 comm=syz-executor.4 17:07:38 executing program 2: socket$packet(0x11, 0x1000000000000002, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x280080, 0x0) ioctl$RTC_VL_READ(r0, 0x80047013, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x15, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000003200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x680, 0x478, 0x210, 0x478, 0x0, 0x340, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x6, 0x0, {[{{@uncond, 0x0, 0xc8, 0x108}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "3c745d713ded54eb04d1bcfe4ec5e3722f760ca03b47ed1d735abcf07e43"}}, {{@uncond, 0x0, 0xc8, 0x108}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3, 0x38000, @ipv6=@rand_addr="f65360ce35d79792c798d9967e3df2d3", 0x4e21}}}, {{@ipv6={@empty, @mcast1, [0xffffff00, 0xffffff00, 0xff, 0xff000000], [0xff, 0x0, 0x17fffff01, 0xffffffff], 'rose0\x00', 'ipddp0\x00', {}, {}, 0x67, 0x9, 0x4, 0x1}, 0x0, 0xf0, 0x130, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0xe}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x5, 0x5, @ipv6=@ipv4={[], [], @empty}, 0x4e21}}}, {{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@ipv6header={0x28, 'ipv6header\x00', 0x0, {0x40, 0x20, 0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@multicast2, @ipv6=@empty, 0x2e, 0x26, 0x9}}}, {{@ipv6={@mcast1, @remote, [0xffffffff, 0xff000000, 0x7f000080, 0xff000000], [0xffffff00, 0xffffff00], 'ip6tnl0\x00', 'ip6tnl0\x00', {}, {}, 0xff, 0x1, 0x0, 0x63}, 0x0, 0xf0, 0x138, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@empty, @ipv4=@local, 0x37, 0x3b, 0x1}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6e0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000007cc0)=[{{&(0x7f00000002c0)=@caif=@dbg, 0x80, &(0x7f0000000840)=[{&(0x7f0000000340)=""/251, 0xfb}, {&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000007ec0)=""/108, 0x6c}, {&(0x7f0000000600)=""/241, 0xf1}, {0x0}], 0x5, &(0x7f0000000b40)=""/234, 0xea}, 0xd9b9}, {{&(0x7f0000000c40)=@pppol2tpv3, 0x80, &(0x7f0000002340)=[{&(0x7f0000000cc0)=""/63, 0x3f}, {&(0x7f0000000d40)=""/232, 0xe8}, {&(0x7f0000000e40)=""/77, 0x4d}, {&(0x7f0000000ec0)=""/150, 0x96}, {&(0x7f0000000f80)=""/116, 0x74}, {&(0x7f0000001000)=""/212, 0xd4}, {0x0}, {&(0x7f00000012c0)=""/4096, 0x1000}, {0x0}], 0x9, &(0x7f00000000c0)=""/40, 0x28}, 0x7f}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000002480)=""/199, 0xc7}, {&(0x7f00000008c0)=""/55, 0x37}], 0x2, &(0x7f00000025c0)=""/157, 0x9d}, 0x9}, {{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002680)=""/238, 0xee}, {&(0x7f0000002780)=""/37, 0x25}, {&(0x7f00000027c0)=""/240, 0xf0}, {&(0x7f00000028c0)=""/10, 0xa}, {&(0x7f0000002900)=""/202, 0xca}, {&(0x7f0000002a00)=""/247, 0xf7}, {0x0}], 0x7, &(0x7f0000002c80)=""/184, 0xb8}, 0x7}, {{&(0x7f0000002d40)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f0000003040)=[{&(0x7f0000002e00)=""/213, 0xd5}, {&(0x7f0000002f00)=""/62, 0x3e}, {0x0}, {0x0}, {&(0x7f0000002fc0)=""/31, 0x1f}, {&(0x7f0000003000)}], 0x6, &(0x7f00000030c0)=""/191, 0xbf}, 0x3}, {{&(0x7f0000003180)=@vsock, 0x80, &(0x7f0000004400)=[{&(0x7f0000007f40)=""/215, 0xd7}, {&(0x7f0000004300)=""/34, 0x22}, {&(0x7f0000004340)=""/28, 0x1c}, {&(0x7f0000004380)=""/108, 0x6c}], 0x4, &(0x7f0000004480)=""/222, 0xde}, 0x6}, {{&(0x7f0000004580)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000004a80)=[{&(0x7f0000004600)=""/120, 0x78}, {&(0x7f0000004700)=""/167, 0xa7}, {&(0x7f0000004800)=""/131, 0x83}, {0x0}, {&(0x7f0000004980)=""/212, 0xd4}], 0x5}, 0x8c2}, {{&(0x7f0000004b00)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000006cc0)=""/4096, 0x1000}, 0x52}], 0x8, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) write$UHID_DESTROY(r5, &(0x7f00000001c0), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x10001, 0xffff}, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x1) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000900)="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", 0x223, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 17:07:38 executing program 3: socket$packet(0x11, 0x1000000000000002, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x280080, 0x0) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000100)) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x15, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000003200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x680, 0x478, 0x210, 0x478, 0x0, 0x340, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x6, &(0x7f0000000580), {[{{@uncond, 0x0, 0xc8, 0x108}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "3c745d713ded54eb04d1bcfe4ec5e3722f760ca03b47ed1d735abcf07e43"}}, {{@uncond, 0x0, 0xc8, 0x108}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3, 0x38000, @ipv6=@rand_addr="f65360ce35d79792c798d9967e3df2d3", 0x4e21}}}, {{@ipv6={@empty, @mcast1, [0xffffff00, 0xffffff00, 0xff, 0xff000000], [0xff, 0x0, 0x17fffff01, 0xffffffff], 'rose0\x00', 'ipddp0\x00', {}, {}, 0x67, 0x9, 0x4, 0x1}, 0x0, 0xf0, 0x130, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0xe}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x5, 0x5, @ipv6=@ipv4={[], [], @empty}, 0x4e21}}}, {{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@ipv6header={0x28, 'ipv6header\x00', 0x0, {0x40, 0x20, 0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@multicast2, @ipv6=@empty, 0x2e, 0x26, 0x9}}}, {{@ipv6={@mcast1, @remote, [0xffffffff, 0xff000000, 0x7f000080, 0xff000000], [0xffffff00, 0xffffff00], 'ip6tnl0\x00', 'ip6tnl0\x00', {}, {}, 0xff, 0x1, 0x0, 0x63}, 0x0, 0xf0, 0x138, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@empty, @ipv4=@local, 0x37, 0x3b, 0x1}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6e0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000007cc0)=[{{&(0x7f00000002c0)=@caif=@dbg, 0x80, &(0x7f0000000840)=[{&(0x7f0000000340)=""/251, 0xfb}, {&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000007ec0)=""/108, 0x6c}, {&(0x7f0000000600)=""/241, 0xf1}, {0x0}], 0x5, &(0x7f0000000b40)=""/234, 0xea}, 0xd9b9}, {{&(0x7f0000000c40)=@pppol2tpv3, 0x80, &(0x7f0000002340)=[{&(0x7f0000000cc0)=""/63, 0x3f}, {&(0x7f0000000d40)=""/232, 0xe8}, {&(0x7f0000000e40)=""/77, 0x4d}, {&(0x7f0000000ec0)=""/150, 0x96}, {&(0x7f0000000f80)=""/116, 0x74}, {&(0x7f0000001000)=""/212, 0xd4}, {0x0}, {&(0x7f00000012c0)=""/4096, 0x1000}, {0x0}], 0x9, &(0x7f00000000c0)=""/40, 0x28}, 0x7f}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000002480)=""/199, 0xc7}, {&(0x7f00000008c0)=""/55, 0x37}], 0x2, &(0x7f00000025c0)=""/157, 0x9d}, 0x9}, {{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002680)=""/238, 0xee}, {&(0x7f0000002780)=""/37, 0x25}, {&(0x7f00000027c0)=""/240, 0xf0}, {&(0x7f00000028c0)=""/10, 0xa}, {&(0x7f0000002900)=""/202, 0xca}, {&(0x7f0000002a00)=""/247, 0xf7}, {0x0}], 0x7, &(0x7f0000002c80)=""/184, 0xb8}, 0x7}, {{&(0x7f0000002d40)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f0000003040)=[{&(0x7f0000002dc0)=""/18, 0x12}, {&(0x7f0000002e00)=""/213, 0xd5}, {&(0x7f0000002f00)=""/62, 0x3e}, {0x0}, {0x0}, {&(0x7f0000002fc0)=""/31, 0x1f}, {&(0x7f0000003000)}], 0x7, &(0x7f00000030c0)=""/191, 0xbf}}, {{&(0x7f0000003180)=@vsock, 0x80, &(0x7f0000004400)=[{&(0x7f0000007f40)=""/215, 0xd7}, {&(0x7f0000004300)=""/34, 0x22}, {&(0x7f0000004340)=""/28, 0x1c}, {&(0x7f0000004380)=""/108, 0x6c}], 0x4, &(0x7f0000004480)=""/222, 0xde}, 0x6}, {{&(0x7f0000004580)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000004a80)=[{&(0x7f0000004600)=""/120, 0x78}, {&(0x7f0000004700)=""/167, 0xa7}, {&(0x7f0000004800)=""/131, 0x83}, {0x0}, {&(0x7f0000004980)=""/212, 0xd4}], 0x5}, 0x8c2}, {{&(0x7f0000004b00)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000006cc0)=""/4096, 0x1000}, 0x52}], 0x8, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) write$UHID_DESTROY(r5, &(0x7f00000001c0), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x10001, 0xffff}, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x1) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000900)="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", 0x223, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 17:07:38 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='bbr2', 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000040)={0x0, 0xfffffffffffffd96, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[], 0xfffffead}}, 0xff2f) recvmsg(r0, &(0x7f0000000880)={0x0, 0x36d, &(0x7f0000000540)=[{&(0x7f0000000380)=""/167, 0xffffff2f}, {&(0x7f0000000180)=""/75}, {&(0x7f0000000440)=""/225}, {&(0x7f0000000080)=""/12}, {&(0x7f0000000240)=""/22}], 0x1}, 0x0) 17:07:38 executing program 1: socket$packet(0x11, 0x1000000000000002, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x280080, 0x0) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000100)) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x15, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, 0x0, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000007cc0)=[{{&(0x7f00000002c0)=@caif=@dbg, 0x80, &(0x7f0000000840)=[{&(0x7f0000000340)=""/251, 0xfb}, {&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000007ec0)=""/108, 0x6c}, {&(0x7f0000000600)=""/241, 0xf1}, {0x0}], 0x5, &(0x7f0000000b40)=""/234, 0xea}, 0xd9b9}, {{&(0x7f0000000c40)=@pppol2tpv3, 0x80, &(0x7f0000002340)=[{&(0x7f0000000cc0)=""/63, 0x3f}, {&(0x7f0000000d40)=""/232, 0xe8}, {0x0}, {&(0x7f0000000ec0)=""/150, 0x96}, {&(0x7f0000000f80)=""/116, 0x74}, {&(0x7f0000001000)=""/212, 0xd4}, {0x0}, {&(0x7f00000012c0)=""/4096, 0x1000}, {0x0}], 0x9, &(0x7f00000000c0)=""/40, 0x28}, 0x7f}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000002480)=""/199, 0xc7}, {&(0x7f00000008c0)=""/55, 0x37}], 0x2, &(0x7f00000025c0)=""/157, 0x9d}, 0x9}, {{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002680)=""/238, 0xee}, {&(0x7f0000002780)=""/37, 0x25}, {&(0x7f00000027c0)=""/240, 0xf0}, {&(0x7f00000028c0)=""/10, 0xa}, {&(0x7f0000002900)=""/202, 0xca}, {&(0x7f0000002a00)=""/247, 0xf7}, {0x0}], 0x7, &(0x7f0000002c80)=""/184, 0xb8}, 0x7}, {{&(0x7f0000002d40)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f0000003040)=[{&(0x7f0000002dc0)=""/18, 0x12}, {&(0x7f0000002e00)=""/213, 0xd5}, {&(0x7f0000002f00)=""/62, 0x3e}, {0x0}, {0x0}, {&(0x7f0000002fc0)=""/31, 0x1f}, {&(0x7f0000003000)}], 0x7, &(0x7f00000030c0)=""/191, 0xbf}, 0x3}, {{&(0x7f0000003180)=@vsock, 0x80, &(0x7f0000004400)=[{&(0x7f0000007f40)=""/215, 0xd7}, {&(0x7f0000004300)=""/34, 0x22}, {&(0x7f0000004340)=""/28, 0x1c}, {&(0x7f0000004380)=""/108, 0x6c}], 0x4, &(0x7f0000004480)=""/222, 0xde}, 0x6}, {{&(0x7f0000004580)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000004a80)=[{&(0x7f0000004600)=""/120, 0x78}, {&(0x7f0000004700)=""/167, 0xa7}, {&(0x7f0000004800)=""/131, 0x83}, {0x0}, {&(0x7f0000004980)=""/212, 0xd4}], 0x5}, 0x8c2}, {{&(0x7f0000004b00)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000006cc0)=""/4096, 0x1000}, 0x52}], 0x8, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) write$UHID_DESTROY(r5, &(0x7f00000001c0), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x10001, 0xffff}, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x1) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000900)="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", 0x223, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 17:07:38 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) sendmmsg(r0, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x300}], 0x1}}], 0x7, 0x0) 17:07:38 executing program 0: socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RWSTAT(r2, &(0x7f00000000c0)={0xa863b37d6292c0fb}, 0x7) write(r1, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000280)) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r2) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r4, 0x541c, &(0x7f0000000080)) 17:07:38 executing program 2: socket$packet(0x11, 0x1000000000000002, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x280080, 0x0) ioctl$RTC_VL_READ(r0, 0x80047013, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x15, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000003200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x680, 0x478, 0x210, 0x478, 0x0, 0x340, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x6, 0x0, {[{{@uncond, 0x0, 0xc8, 0x108}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "3c745d713ded54eb04d1bcfe4ec5e3722f760ca03b47ed1d735abcf07e43"}}, {{@uncond, 0x0, 0xc8, 0x108}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3, 0x38000, @ipv6=@rand_addr="f65360ce35d79792c798d9967e3df2d3", 0x4e21}}}, {{@ipv6={@empty, @mcast1, [0xffffff00, 0xffffff00, 0xff, 0xff000000], [0xff, 0x0, 0x17fffff01, 0xffffffff], 'rose0\x00', 'ipddp0\x00', {}, {}, 0x67, 0x9, 0x4, 0x1}, 0x0, 0xf0, 0x130, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0xe}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x5, 0x5, @ipv6=@ipv4={[], [], @empty}, 0x4e21}}}, {{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@ipv6header={0x28, 'ipv6header\x00', 0x0, {0x40, 0x20, 0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@multicast2, @ipv6=@empty, 0x2e, 0x26, 0x9}}}, {{@ipv6={@mcast1, @remote, [0xffffffff, 0xff000000, 0x7f000080, 0xff000000], [0xffffff00, 0xffffff00], 'ip6tnl0\x00', 'ip6tnl0\x00', {}, {}, 0xff, 0x1, 0x0, 0x63}, 0x0, 0xf0, 0x138, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@empty, @ipv4=@local, 0x37, 0x3b, 0x1}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6e0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000007cc0)=[{{&(0x7f00000002c0)=@caif=@dbg, 0x80, &(0x7f0000000840)=[{&(0x7f0000000340)=""/251, 0xfb}, {&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000007ec0)=""/108, 0x6c}, {&(0x7f0000000600)=""/241, 0xf1}, {0x0}], 0x5, &(0x7f0000000b40)=""/234, 0xea}, 0xd9b9}, {{&(0x7f0000000c40)=@pppol2tpv3, 0x80, &(0x7f0000002340)=[{&(0x7f0000000cc0)=""/63, 0x3f}, {&(0x7f0000000d40)=""/232, 0xe8}, {&(0x7f0000000e40)=""/77, 0x4d}, {&(0x7f0000000ec0)=""/150, 0x96}, {&(0x7f0000000f80)=""/116, 0x74}, {&(0x7f0000001000)=""/212, 0xd4}, {0x0}, {&(0x7f00000012c0)=""/4096, 0x1000}, {0x0}], 0x9, &(0x7f00000000c0)=""/40, 0x28}, 0x7f}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000002480)=""/199, 0xc7}, {&(0x7f00000008c0)=""/55, 0x37}], 0x2, &(0x7f00000025c0)=""/157, 0x9d}, 0x9}, {{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002680)=""/238, 0xee}, {&(0x7f0000002780)=""/37, 0x25}, {&(0x7f00000027c0)=""/240, 0xf0}, {&(0x7f00000028c0)=""/10, 0xa}, {&(0x7f0000002900)=""/202, 0xca}, {&(0x7f0000002a00)=""/247, 0xf7}, {0x0}], 0x7, &(0x7f0000002c80)=""/184, 0xb8}, 0x7}, {{&(0x7f0000002d40)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f0000003040)=[{&(0x7f0000002e00)=""/213, 0xd5}, {&(0x7f0000002f00)=""/62, 0x3e}, {0x0}, {0x0}, {&(0x7f0000002fc0)=""/31, 0x1f}, {&(0x7f0000003000)}], 0x6, &(0x7f00000030c0)=""/191, 0xbf}, 0x3}, {{&(0x7f0000003180)=@vsock, 0x80, &(0x7f0000004400)=[{&(0x7f0000007f40)=""/215, 0xd7}, {&(0x7f0000004300)=""/34, 0x22}, {&(0x7f0000004340)=""/28, 0x1c}, {&(0x7f0000004380)=""/108, 0x6c}], 0x4, &(0x7f0000004480)=""/222, 0xde}, 0x6}, {{&(0x7f0000004580)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000004a80)=[{&(0x7f0000004600)=""/120, 0x78}, {&(0x7f0000004700)=""/167, 0xa7}, {&(0x7f0000004800)=""/131, 0x83}, {0x0}, {&(0x7f0000004980)=""/212, 0xd4}], 0x5}, 0x8c2}, {{&(0x7f0000004b00)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000006cc0)=""/4096, 0x1000}, 0x52}], 0x8, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) write$UHID_DESTROY(r5, &(0x7f00000001c0), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x10001, 0xffff}, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x1) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000900)="585ccbc4ed83b836c1a6474914dc5500b66147b3c7218a91690000000042e3d35228897501f93191b076ac446ff0022b8753a1fa748c569f435fb3bae96efb74b50ec93c2db8eae3198a29e5c0cfc60000ce0637cef580b4ec61221adf59be045b70e48884ca000018cea71fcfed06fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff33c1e8e036e5031949762d009d308bd73f477252d0000000000004000000000000000000000000000000000195e23fb4430a9a4c2850b6380a743d6ea0c3b121f66c716d746aa81c301621b7662c06aae720b872d4b7828e3b48522c673aa6cb366d4201e2aee3261eb52f14533b7a54203cf9a4fa587c0385cdba539e9bd34717b0dfab09db7b064fbe2ecf9f40fa3a4015d0d0db3f9d562686fcdc3342c88c6f1b6f11449f8aeabf54c5533ec6acc2270d41713ae1538256af3719a07f55223a6eaa7c1eae5d6efa12fe95e2b0f1c500b28c5c76e731d5250e395526d04063718f448e62d4dd7cefeed6b72b31b894093aa37337784c00d68a4185f349e41455f12d31aa2d0ff79a4d69d97421a0042f0c7a664a8c4945104b25dc49be950c5af7405b86482d7314fcc3a0ad5eb24268ccd24a2996019f7c006a0b3c39c7b98c5a5406a2e4ff6d9c0ce12c4251756a667b4731c4b0eb5dc7d4381fecf196c4404b54c3c11c48f09734d9a6842f52d3307a688208b7a4681b101e1abe5fecfca1f464c03e933cbd15ab589ccd3c559542355190522a712b8f5128a6a00", 0x223, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 17:07:38 executing program 3: socket$packet(0x11, 0x1000000000000002, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x280080, 0x0) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000100)) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x15, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000003200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x680, 0x478, 0x210, 0x478, 0x0, 0x340, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x6, &(0x7f0000000580), {[{{@uncond, 0x0, 0xc8, 0x108}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "3c745d713ded54eb04d1bcfe4ec5e3722f760ca03b47ed1d735abcf07e43"}}, {{@uncond, 0x0, 0xc8, 0x108}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3, 0x38000, @ipv6=@rand_addr="f65360ce35d79792c798d9967e3df2d3", 0x4e21}}}, {{@ipv6={@empty, @mcast1, [0xffffff00, 0xffffff00, 0xff, 0xff000000], [0xff, 0x0, 0x17fffff01, 0xffffffff], 'rose0\x00', 'ipddp0\x00', {}, {}, 0x67, 0x9, 0x4, 0x1}, 0x0, 0xf0, 0x130, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0xe}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x5, 0x5, @ipv6=@ipv4={[], [], @empty}, 0x4e21}}}, {{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@ipv6header={0x28, 'ipv6header\x00', 0x0, {0x40, 0x20, 0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@multicast2, @ipv6=@empty, 0x2e, 0x26, 0x9}}}, {{@ipv6={@mcast1, @remote, [0xffffffff, 0xff000000, 0x7f000080, 0xff000000], [0xffffff00, 0xffffff00], 'ip6tnl0\x00', 'ip6tnl0\x00', {}, {}, 0xff, 0x1, 0x0, 0x63}, 0x0, 0xf0, 0x138, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@empty, @ipv4=@local, 0x37, 0x3b, 0x1}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6e0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000007cc0)=[{{&(0x7f00000002c0)=@caif=@dbg, 0x80, &(0x7f0000000840)=[{&(0x7f0000000340)=""/251, 0xfb}, {&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000007ec0)=""/108, 0x6c}, {&(0x7f0000000600)=""/241, 0xf1}, {0x0}], 0x5, &(0x7f0000000b40)=""/234, 0xea}, 0xd9b9}, {{&(0x7f0000000c40)=@pppol2tpv3, 0x80, &(0x7f0000002340)=[{&(0x7f0000000cc0)=""/63, 0x3f}, {&(0x7f0000000d40)=""/232, 0xe8}, {&(0x7f0000000e40)=""/77, 0x4d}, {&(0x7f0000000ec0)=""/150, 0x96}, {&(0x7f0000000f80)=""/116, 0x74}, {&(0x7f0000001000)=""/212, 0xd4}, {0x0}, {&(0x7f00000012c0)=""/4096, 0x1000}, {0x0}], 0x9, &(0x7f00000000c0)=""/40, 0x28}, 0x7f}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000002480)=""/199, 0xc7}, {&(0x7f00000008c0)=""/55, 0x37}], 0x2, &(0x7f00000025c0)=""/157, 0x9d}, 0x9}, {{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002680)=""/238, 0xee}, {&(0x7f0000002780)=""/37, 0x25}, {&(0x7f00000027c0)=""/240, 0xf0}, {&(0x7f00000028c0)=""/10, 0xa}, {&(0x7f0000002900)=""/202, 0xca}, {&(0x7f0000002a00)=""/247, 0xf7}, {0x0}], 0x7, &(0x7f0000002c80)=""/184, 0xb8}, 0x7}, {{&(0x7f0000002d40)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f0000003040)=[{&(0x7f0000002dc0)=""/18, 0x12}, {&(0x7f0000002e00)=""/213, 0xd5}, {&(0x7f0000002f00)=""/62, 0x3e}, {0x0}, {0x0}, {&(0x7f0000002fc0)=""/31, 0x1f}, {&(0x7f0000003000)}], 0x7, &(0x7f00000030c0)=""/191, 0xbf}}, {{&(0x7f0000003180)=@vsock, 0x80, &(0x7f0000004400)=[{&(0x7f0000007f40)=""/215, 0xd7}, {&(0x7f0000004300)=""/34, 0x22}, {&(0x7f0000004340)=""/28, 0x1c}, {&(0x7f0000004380)=""/108, 0x6c}], 0x4, &(0x7f0000004480)=""/222, 0xde}, 0x6}, {{&(0x7f0000004580)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000004a80)=[{&(0x7f0000004600)=""/120, 0x78}, {&(0x7f0000004700)=""/167, 0xa7}, {&(0x7f0000004800)=""/131, 0x83}, {0x0}, {&(0x7f0000004980)=""/212, 0xd4}], 0x5}, 0x8c2}, {{&(0x7f0000004b00)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000006cc0)=""/4096, 0x1000}, 0x52}], 0x8, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) write$UHID_DESTROY(r5, &(0x7f00000001c0), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x10001, 0xffff}, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x1) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000900)="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", 0x223, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 17:07:39 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xdc}, [@ldst={0x7}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x3}, 0x48) 17:07:39 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xdc}, [@ldst={0x7}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x3}, 0x48) 17:07:39 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xdc}, [@ldst={0x7}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x3}, 0x48) 17:07:39 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xdc}, [@ldst={0x7}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x3}, 0x48) 17:07:39 executing program 2: socket$packet(0x11, 0x1000000000000002, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x280080, 0x0) ioctl$RTC_VL_READ(r0, 0x80047013, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x15, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000003200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x680, 0x478, 0x210, 0x478, 0x0, 0x340, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x6, 0x0, {[{{@uncond, 0x0, 0xc8, 0x108}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "3c745d713ded54eb04d1bcfe4ec5e3722f760ca03b47ed1d735abcf07e43"}}, {{@uncond, 0x0, 0xc8, 0x108}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3, 0x38000, @ipv6=@rand_addr="f65360ce35d79792c798d9967e3df2d3", 0x4e21}}}, {{@ipv6={@empty, @mcast1, [0xffffff00, 0xffffff00, 0xff, 0xff000000], [0xff, 0x0, 0x17fffff01, 0xffffffff], 'rose0\x00', 'ipddp0\x00', {}, {}, 0x67, 0x9, 0x4, 0x1}, 0x0, 0xf0, 0x130, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0xe}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x5, 0x5, @ipv6=@ipv4={[], [], @empty}, 0x4e21}}}, {{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@ipv6header={0x28, 'ipv6header\x00', 0x0, {0x40, 0x20, 0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@multicast2, @ipv6=@empty, 0x2e, 0x26, 0x9}}}, {{@ipv6={@mcast1, @remote, [0xffffffff, 0xff000000, 0x7f000080, 0xff000000], [0xffffff00, 0xffffff00], 'ip6tnl0\x00', 'ip6tnl0\x00', {}, {}, 0xff, 0x1, 0x0, 0x63}, 0x0, 0xf0, 0x138, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@empty, @ipv4=@local, 0x37, 0x3b, 0x1}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6e0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000007cc0)=[{{&(0x7f00000002c0)=@caif=@dbg, 0x80, &(0x7f0000000840)=[{&(0x7f0000000340)=""/251, 0xfb}, {&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000007ec0)=""/108, 0x6c}, {&(0x7f0000000600)=""/241, 0xf1}, {0x0}], 0x5, &(0x7f0000000b40)=""/234, 0xea}, 0xd9b9}, {{&(0x7f0000000c40)=@pppol2tpv3, 0x80, &(0x7f0000002340)=[{&(0x7f0000000cc0)=""/63, 0x3f}, {&(0x7f0000000d40)=""/232, 0xe8}, {&(0x7f0000000e40)=""/77, 0x4d}, {&(0x7f0000000ec0)=""/150, 0x96}, {&(0x7f0000000f80)=""/116, 0x74}, {&(0x7f0000001000)=""/212, 0xd4}, {0x0}, {&(0x7f00000012c0)=""/4096, 0x1000}, {0x0}], 0x9, &(0x7f00000000c0)=""/40, 0x28}, 0x7f}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000002480)=""/199, 0xc7}, {&(0x7f00000008c0)=""/55, 0x37}], 0x2, &(0x7f00000025c0)=""/157, 0x9d}, 0x9}, {{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002680)=""/238, 0xee}, {&(0x7f0000002780)=""/37, 0x25}, {&(0x7f00000027c0)=""/240, 0xf0}, {&(0x7f00000028c0)=""/10, 0xa}, {&(0x7f0000002900)=""/202, 0xca}, {&(0x7f0000002a00)=""/247, 0xf7}, {0x0}], 0x7, &(0x7f0000002c80)=""/184, 0xb8}, 0x7}, {{&(0x7f0000002d40)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f0000003040)=[{0x0}, {&(0x7f0000002e00)=""/213, 0xd5}, {&(0x7f0000002f00)=""/62, 0x3e}, {0x0}, {0x0}, {&(0x7f0000002fc0)=""/31, 0x1f}, {&(0x7f0000003000)}], 0x7, &(0x7f00000030c0)=""/191, 0xbf}, 0x3}, {{&(0x7f0000003180)=@vsock, 0x80, &(0x7f0000004400)=[{&(0x7f0000007f40)=""/215, 0xd7}, {&(0x7f0000004300)=""/34, 0x22}, {&(0x7f0000004340)=""/28, 0x1c}, {&(0x7f0000004380)=""/108, 0x6c}], 0x4, &(0x7f0000004480)=""/222, 0xde}, 0x6}, {{&(0x7f0000004580)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000004a80)=[{&(0x7f0000004600)=""/120, 0x78}, {&(0x7f0000004700)=""/167, 0xa7}, {&(0x7f0000004800)=""/131, 0x83}, {0x0}, {&(0x7f0000004980)=""/212, 0xd4}], 0x5}, 0x8c2}, {{&(0x7f0000004b00)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000006cc0)=""/4096, 0x1000}, 0x52}], 0x8, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) write$UHID_DESTROY(r5, &(0x7f00000001c0), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x10001, 0xffff}, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x1) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000900)="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", 0x223, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 17:07:39 executing program 3: socket$packet(0x11, 0x1000000000000002, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x280080, 0x0) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000100)) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x15, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000003200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x680, 0x478, 0x210, 0x478, 0x0, 0x340, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x6, &(0x7f0000000580), {[{{@uncond, 0x0, 0xc8, 0x108}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "3c745d713ded54eb04d1bcfe4ec5e3722f760ca03b47ed1d735abcf07e43"}}, {{@uncond, 0x0, 0xc8, 0x108}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3, 0x38000, @ipv6=@rand_addr="f65360ce35d79792c798d9967e3df2d3", 0x4e21}}}, {{@ipv6={@empty, @mcast1, [0xffffff00, 0xffffff00, 0xff, 0xff000000], [0xff, 0x0, 0x17fffff01, 0xffffffff], 'rose0\x00', 'ipddp0\x00', {}, {}, 0x67, 0x9, 0x4, 0x1}, 0x0, 0xf0, 0x130, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0xe}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x5, 0x5, @ipv6=@ipv4={[], [], @empty}, 0x4e21}}}, {{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@ipv6header={0x28, 'ipv6header\x00', 0x0, {0x40, 0x20, 0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@multicast2, @ipv6=@empty, 0x2e, 0x26, 0x9}}}, {{@ipv6={@mcast1, @remote, [0xffffffff, 0xff000000, 0x7f000080, 0xff000000], [0xffffff00, 0xffffff00], 'ip6tnl0\x00', 'ip6tnl0\x00', {}, {}, 0xff, 0x1, 0x0, 0x63}, 0x0, 0xf0, 0x138, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@empty, @ipv4=@local, 0x37, 0x3b, 0x1}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6e0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000007cc0)=[{{&(0x7f00000002c0)=@caif=@dbg, 0x80, &(0x7f0000000840)=[{&(0x7f0000000340)=""/251, 0xfb}, {&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000007ec0)=""/108, 0x6c}, {&(0x7f0000000600)=""/241, 0xf1}, {0x0}], 0x5, &(0x7f0000000b40)=""/234, 0xea}, 0xd9b9}, {{&(0x7f0000000c40)=@pppol2tpv3, 0x80, &(0x7f0000002340)=[{&(0x7f0000000cc0)=""/63, 0x3f}, {&(0x7f0000000d40)=""/232, 0xe8}, {&(0x7f0000000e40)=""/77, 0x4d}, {&(0x7f0000000ec0)=""/150, 0x96}, {&(0x7f0000000f80)=""/116, 0x74}, {&(0x7f0000001000)=""/212, 0xd4}, {0x0}, {&(0x7f00000012c0)=""/4096, 0x1000}, {0x0}], 0x9, &(0x7f00000000c0)=""/40, 0x28}, 0x7f}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000002480)=""/199, 0xc7}, {&(0x7f00000008c0)=""/55, 0x37}], 0x2, &(0x7f00000025c0)=""/157, 0x9d}, 0x9}, {{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002680)=""/238, 0xee}, {&(0x7f0000002780)=""/37, 0x25}, {&(0x7f00000027c0)=""/240, 0xf0}, {&(0x7f00000028c0)=""/10, 0xa}, {&(0x7f0000002900)=""/202, 0xca}, {&(0x7f0000002a00)=""/247, 0xf7}, {0x0}], 0x7, &(0x7f0000002c80)=""/184, 0xb8}, 0x7}, {{&(0x7f0000002d40)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f0000003040)=[{&(0x7f0000002dc0)=""/18, 0x12}, {&(0x7f0000002e00)=""/213, 0xd5}, {&(0x7f0000002f00)=""/62, 0x3e}, {0x0}, {0x0}, {&(0x7f0000002fc0)=""/31, 0x1f}, {&(0x7f0000003000)}], 0x7, &(0x7f00000030c0)=""/191, 0xbf}}, {{&(0x7f0000003180)=@vsock, 0x80, &(0x7f0000004400)=[{&(0x7f0000007f40)=""/215, 0xd7}, {&(0x7f0000004300)=""/34, 0x22}, {&(0x7f0000004340)=""/28, 0x1c}, {&(0x7f0000004380)=""/108, 0x6c}], 0x4, &(0x7f0000004480)=""/222, 0xde}, 0x6}, {{&(0x7f0000004580)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000004a80)=[{&(0x7f0000004600)=""/120, 0x78}, {&(0x7f0000004700)=""/167, 0xa7}, {&(0x7f0000004800)=""/131, 0x83}, {0x0}, {&(0x7f0000004980)=""/212, 0xd4}], 0x5}, 0x8c2}, {{&(0x7f0000004b00)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000006cc0)=""/4096, 0x1000}, 0x52}], 0x8, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) write$UHID_DESTROY(r5, &(0x7f00000001c0), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x10001, 0xffff}, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x1) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000900)="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", 0x223, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 17:07:39 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='bbr2', 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000040)={0x0, 0xfffffffffffffd96, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[], 0xfffffead}}, 0xff2f) recvmsg(r0, &(0x7f0000000880)={0x0, 0x36d, &(0x7f0000000540)=[{&(0x7f0000000380)=""/167, 0xffffff2f}, {&(0x7f0000000180)=""/75}, {&(0x7f0000000440)=""/225}, {&(0x7f0000000080)=""/12}, {&(0x7f0000000240)=""/22}], 0x1}, 0x0) 17:07:39 executing program 1: socket$packet(0x11, 0x1000000000000002, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x280080, 0x0) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000100)) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x15, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, 0x0, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000007cc0)=[{{&(0x7f00000002c0)=@caif=@dbg, 0x80, &(0x7f0000000840)=[{&(0x7f0000000340)=""/251, 0xfb}, {&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000007ec0)=""/108, 0x6c}, {&(0x7f0000000600)=""/241, 0xf1}, {0x0}], 0x5, &(0x7f0000000b40)=""/234, 0xea}, 0xd9b9}, {{&(0x7f0000000c40)=@pppol2tpv3, 0x80, &(0x7f0000002340)=[{&(0x7f0000000cc0)=""/63, 0x3f}, {&(0x7f0000000e40)=""/77, 0x4d}, {&(0x7f0000000ec0)=""/150, 0x96}, {&(0x7f0000000f80)=""/116, 0x74}, {&(0x7f0000001000)=""/212, 0xd4}, {0x0}, {&(0x7f00000012c0)=""/4096, 0x1000}, {0x0}], 0x8, &(0x7f00000000c0)=""/40, 0x28}, 0x7f}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000002480)=""/199, 0xc7}, {&(0x7f00000008c0)=""/55, 0x37}], 0x2, &(0x7f00000025c0)=""/157, 0x9d}, 0x9}, {{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002680)=""/238, 0xee}, {&(0x7f0000002780)=""/37, 0x25}, {&(0x7f00000027c0)=""/240, 0xf0}, {&(0x7f00000028c0)=""/10, 0xa}, {&(0x7f0000002900)=""/202, 0xca}, {&(0x7f0000002a00)=""/247, 0xf7}, {0x0}], 0x7, &(0x7f0000002c80)=""/184, 0xb8}, 0x7}, {{&(0x7f0000002d40)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f0000003040)=[{&(0x7f0000002dc0)=""/18, 0x12}, {&(0x7f0000002e00)=""/213, 0xd5}, {&(0x7f0000002f00)=""/62, 0x3e}, {0x0}, {0x0}, {&(0x7f0000002fc0)=""/31, 0x1f}, {&(0x7f0000003000)}], 0x7, &(0x7f00000030c0)=""/191, 0xbf}, 0x3}, {{&(0x7f0000003180)=@vsock, 0x80, &(0x7f0000004400)=[{&(0x7f0000007f40)=""/215, 0xd7}, {&(0x7f0000004300)=""/34, 0x22}, {&(0x7f0000004340)=""/28, 0x1c}, {&(0x7f0000004380)=""/108, 0x6c}], 0x4, &(0x7f0000004480)=""/222, 0xde}, 0x6}, {{&(0x7f0000004580)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000004a80)=[{&(0x7f0000004600)=""/120, 0x78}, {&(0x7f0000004700)=""/167, 0xa7}, {&(0x7f0000004800)=""/131, 0x83}, {0x0}, {&(0x7f0000004980)=""/212, 0xd4}], 0x5}, 0x8c2}, {{&(0x7f0000004b00)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000006cc0)=""/4096, 0x1000}, 0x52}], 0x8, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) write$UHID_DESTROY(r5, &(0x7f00000001c0), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x10001, 0xffff}, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x1) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000900)="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", 0x223, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 17:07:39 executing program 4: bpf$PROG_LOAD(0x5, 0x0, 0x0) 17:07:39 executing program 0: socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RWSTAT(r2, &(0x7f00000000c0)={0xa863b37d6292c0fb}, 0x7) write(r1, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000280)) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r2) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r4, 0x541c, &(0x7f0000000080)) 17:07:39 executing program 2: socket$packet(0x11, 0x1000000000000002, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x280080, 0x0) ioctl$RTC_VL_READ(r0, 0x80047013, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x15, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000003200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x680, 0x478, 0x210, 0x478, 0x0, 0x340, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x6, 0x0, {[{{@uncond, 0x0, 0xc8, 0x108}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "3c745d713ded54eb04d1bcfe4ec5e3722f760ca03b47ed1d735abcf07e43"}}, {{@uncond, 0x0, 0xc8, 0x108}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3, 0x38000, @ipv6=@rand_addr="f65360ce35d79792c798d9967e3df2d3", 0x4e21}}}, {{@ipv6={@empty, @mcast1, [0xffffff00, 0xffffff00, 0xff, 0xff000000], [0xff, 0x0, 0x17fffff01, 0xffffffff], 'rose0\x00', 'ipddp0\x00', {}, {}, 0x67, 0x9, 0x4, 0x1}, 0x0, 0xf0, 0x130, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0xe}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x5, 0x5, @ipv6=@ipv4={[], [], @empty}, 0x4e21}}}, {{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@ipv6header={0x28, 'ipv6header\x00', 0x0, {0x40, 0x20, 0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@multicast2, @ipv6=@empty, 0x2e, 0x26, 0x9}}}, {{@ipv6={@mcast1, @remote, [0xffffffff, 0xff000000, 0x7f000080, 0xff000000], [0xffffff00, 0xffffff00], 'ip6tnl0\x00', 'ip6tnl0\x00', {}, {}, 0xff, 0x1, 0x0, 0x63}, 0x0, 0xf0, 0x138, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@empty, @ipv4=@local, 0x37, 0x3b, 0x1}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6e0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000007cc0)=[{{&(0x7f00000002c0)=@caif=@dbg, 0x80, &(0x7f0000000840)=[{&(0x7f0000000340)=""/251, 0xfb}, {&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000007ec0)=""/108, 0x6c}, {&(0x7f0000000600)=""/241, 0xf1}, {0x0}], 0x5, &(0x7f0000000b40)=""/234, 0xea}, 0xd9b9}, {{&(0x7f0000000c40)=@pppol2tpv3, 0x80, &(0x7f0000002340)=[{&(0x7f0000000cc0)=""/63, 0x3f}, {&(0x7f0000000d40)=""/232, 0xe8}, {&(0x7f0000000e40)=""/77, 0x4d}, {&(0x7f0000000ec0)=""/150, 0x96}, {&(0x7f0000000f80)=""/116, 0x74}, {&(0x7f0000001000)=""/212, 0xd4}, {0x0}, {&(0x7f00000012c0)=""/4096, 0x1000}, {0x0}], 0x9, &(0x7f00000000c0)=""/40, 0x28}, 0x7f}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000002480)=""/199, 0xc7}, {&(0x7f00000008c0)=""/55, 0x37}], 0x2, &(0x7f00000025c0)=""/157, 0x9d}, 0x9}, {{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002680)=""/238, 0xee}, {&(0x7f0000002780)=""/37, 0x25}, {&(0x7f00000027c0)=""/240, 0xf0}, {&(0x7f00000028c0)=""/10, 0xa}, {&(0x7f0000002900)=""/202, 0xca}, {&(0x7f0000002a00)=""/247, 0xf7}, {0x0}], 0x7, &(0x7f0000002c80)=""/184, 0xb8}, 0x7}, {{&(0x7f0000002d40)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f0000003040)=[{0x0}, {&(0x7f0000002e00)=""/213, 0xd5}, {&(0x7f0000002f00)=""/62, 0x3e}, {0x0}, {0x0}, {&(0x7f0000002fc0)=""/31, 0x1f}, {&(0x7f0000003000)}], 0x7, &(0x7f00000030c0)=""/191, 0xbf}, 0x3}, {{&(0x7f0000003180)=@vsock, 0x80, &(0x7f0000004400)=[{&(0x7f0000007f40)=""/215, 0xd7}, {&(0x7f0000004300)=""/34, 0x22}, {&(0x7f0000004340)=""/28, 0x1c}, {&(0x7f0000004380)=""/108, 0x6c}], 0x4, &(0x7f0000004480)=""/222, 0xde}, 0x6}, {{&(0x7f0000004580)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000004a80)=[{&(0x7f0000004600)=""/120, 0x78}, {&(0x7f0000004700)=""/167, 0xa7}, {&(0x7f0000004800)=""/131, 0x83}, {0x0}, {&(0x7f0000004980)=""/212, 0xd4}], 0x5}, 0x8c2}, {{&(0x7f0000004b00)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000006cc0)=""/4096, 0x1000}, 0x52}], 0x8, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) write$UHID_DESTROY(r5, &(0x7f00000001c0), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x10001, 0xffff}, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x1) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000900)="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", 0x223, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 17:07:39 executing program 3: socket$packet(0x11, 0x1000000000000002, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x280080, 0x0) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000100)) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x15, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000003200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x680, 0x478, 0x210, 0x478, 0x0, 0x340, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x6, &(0x7f0000000580), {[{{@uncond, 0x0, 0xc8, 0x108}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "3c745d713ded54eb04d1bcfe4ec5e3722f760ca03b47ed1d735abcf07e43"}}, {{@uncond, 0x0, 0xc8, 0x108}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3, 0x38000, @ipv6=@rand_addr="f65360ce35d79792c798d9967e3df2d3", 0x4e21}}}, {{@ipv6={@empty, @mcast1, [0xffffff00, 0xffffff00, 0xff, 0xff000000], [0xff, 0x0, 0x17fffff01, 0xffffffff], 'rose0\x00', 'ipddp0\x00', {}, {}, 0x67, 0x9, 0x4, 0x1}, 0x0, 0xf0, 0x130, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0xe}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x5, 0x5, @ipv6=@ipv4={[], [], @empty}, 0x4e21}}}, {{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@ipv6header={0x28, 'ipv6header\x00', 0x0, {0x40, 0x20, 0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@multicast2, @ipv6=@empty, 0x2e, 0x26, 0x9}}}, {{@ipv6={@mcast1, @remote, [0xffffffff, 0xff000000, 0x7f000080, 0xff000000], [0xffffff00, 0xffffff00], 'ip6tnl0\x00', 'ip6tnl0\x00', {}, {}, 0xff, 0x1, 0x0, 0x63}, 0x0, 0xf0, 0x138, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@empty, @ipv4=@local, 0x37, 0x3b, 0x1}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6e0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000007cc0)=[{{&(0x7f00000002c0)=@caif=@dbg, 0x80, &(0x7f0000000840)=[{&(0x7f0000000340)=""/251, 0xfb}, {&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000007ec0)=""/108, 0x6c}, {&(0x7f0000000600)=""/241, 0xf1}, {0x0}], 0x5, &(0x7f0000000b40)=""/234, 0xea}, 0xd9b9}, {{&(0x7f0000000c40)=@pppol2tpv3, 0x80, &(0x7f0000002340)=[{&(0x7f0000000cc0)=""/63, 0x3f}, {&(0x7f0000000d40)=""/232, 0xe8}, {&(0x7f0000000e40)=""/77, 0x4d}, {&(0x7f0000000ec0)=""/150, 0x96}, {&(0x7f0000000f80)=""/116, 0x74}, {&(0x7f0000001000)=""/212, 0xd4}, {0x0}, {&(0x7f00000012c0)=""/4096, 0x1000}, {0x0}], 0x9, &(0x7f00000000c0)=""/40, 0x28}, 0x7f}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000002480)=""/199, 0xc7}, {&(0x7f00000008c0)=""/55, 0x37}], 0x2, &(0x7f00000025c0)=""/157, 0x9d}, 0x9}, {{&(0x7f0000002d40)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f0000003040)=[{&(0x7f0000002dc0)=""/18, 0x12}, {&(0x7f0000002e00)=""/213, 0xd5}, {&(0x7f0000002f00)=""/62, 0x3e}, {0x0}, {0x0}, {&(0x7f0000002fc0)=""/31, 0x1f}, {&(0x7f0000003000)}], 0x7, &(0x7f00000030c0)=""/191, 0xbf}, 0x3}, {{&(0x7f0000003180)=@vsock, 0x80, &(0x7f0000004400)=[{&(0x7f0000007f40)=""/215, 0xd7}, {&(0x7f0000004300)=""/34, 0x22}, {&(0x7f0000004340)=""/28, 0x1c}, {&(0x7f0000004380)=""/108, 0x6c}], 0x4, &(0x7f0000004480)=""/222, 0xde}, 0x6}, {{&(0x7f0000004580)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000004a80)=[{&(0x7f0000004600)=""/120, 0x78}, {&(0x7f0000004700)=""/167, 0xa7}, {&(0x7f0000004800)=""/131, 0x83}, {0x0}, {&(0x7f0000004980)=""/212, 0xd4}], 0x5}, 0x8c2}, {{&(0x7f0000004b00)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000006cc0)=""/4096, 0x1000}, 0x52}], 0x7, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) write$UHID_DESTROY(r5, &(0x7f00000001c0), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x10001, 0xffff}, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x1) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000900)="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", 0x223, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 17:07:39 executing program 4: bpf$PROG_LOAD(0x5, 0x0, 0x0) 17:07:39 executing program 4: bpf$PROG_LOAD(0x5, 0x0, 0x0) 17:07:39 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xdc}, [@ldst={0x7}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x3}, 0x48) 17:07:40 executing program 3: socket$packet(0x11, 0x1000000000000002, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x280080, 0x0) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000100)) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x15, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000003200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x680, 0x478, 0x210, 0x478, 0x0, 0x340, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x6, &(0x7f0000000580), {[{{@uncond, 0x0, 0xc8, 0x108}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "3c745d713ded54eb04d1bcfe4ec5e3722f760ca03b47ed1d735abcf07e43"}}, {{@uncond, 0x0, 0xc8, 0x108}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3, 0x38000, @ipv6=@rand_addr="f65360ce35d79792c798d9967e3df2d3", 0x4e21}}}, {{@ipv6={@empty, @mcast1, [0xffffff00, 0xffffff00, 0xff, 0xff000000], [0xff, 0x0, 0x17fffff01, 0xffffffff], 'rose0\x00', 'ipddp0\x00', {}, {}, 0x67, 0x9, 0x4, 0x1}, 0x0, 0xf0, 0x130, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0xe}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x5, 0x5, @ipv6=@ipv4={[], [], @empty}, 0x4e21}}}, {{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@ipv6header={0x28, 'ipv6header\x00', 0x0, {0x40, 0x20, 0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@multicast2, @ipv6=@empty, 0x2e, 0x26, 0x9}}}, {{@ipv6={@mcast1, @remote, [0xffffffff, 0xff000000, 0x7f000080, 0xff000000], [0xffffff00, 0xffffff00], 'ip6tnl0\x00', 'ip6tnl0\x00', {}, {}, 0xff, 0x1, 0x0, 0x63}, 0x0, 0xf0, 0x138, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@empty, @ipv4=@local, 0x37, 0x3b, 0x1}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6e0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000007cc0)=[{{&(0x7f00000002c0)=@caif=@dbg, 0x80, &(0x7f0000000840)=[{&(0x7f0000000340)=""/251, 0xfb}, {&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000007ec0)=""/108, 0x6c}, {&(0x7f0000000600)=""/241, 0xf1}, {0x0}], 0x5, &(0x7f0000000b40)=""/234, 0xea}, 0xd9b9}, {{&(0x7f0000000c40)=@pppol2tpv3, 0x80, &(0x7f0000002340)=[{&(0x7f0000000cc0)=""/63, 0x3f}, {&(0x7f0000000d40)=""/232, 0xe8}, {&(0x7f0000000e40)=""/77, 0x4d}, {&(0x7f0000000ec0)=""/150, 0x96}, {&(0x7f0000000f80)=""/116, 0x74}, {&(0x7f0000001000)=""/212, 0xd4}, {0x0}, {&(0x7f00000012c0)=""/4096, 0x1000}, {0x0}], 0x9, &(0x7f00000000c0)=""/40, 0x28}, 0x7f}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000002480)=""/199, 0xc7}, {&(0x7f00000008c0)=""/55, 0x37}], 0x2, &(0x7f00000025c0)=""/157, 0x9d}, 0x9}, {{&(0x7f0000002d40)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f0000003040)=[{&(0x7f0000002dc0)=""/18, 0x12}, {&(0x7f0000002e00)=""/213, 0xd5}, {&(0x7f0000002f00)=""/62, 0x3e}, {0x0}, {0x0}, {&(0x7f0000002fc0)=""/31, 0x1f}, {&(0x7f0000003000)}], 0x7, &(0x7f00000030c0)=""/191, 0xbf}, 0x3}, {{&(0x7f0000003180)=@vsock, 0x80, &(0x7f0000004400)=[{&(0x7f0000007f40)=""/215, 0xd7}, {&(0x7f0000004300)=""/34, 0x22}, {&(0x7f0000004340)=""/28, 0x1c}, {&(0x7f0000004380)=""/108, 0x6c}], 0x4, &(0x7f0000004480)=""/222, 0xde}, 0x6}, {{&(0x7f0000004580)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000004a80)=[{&(0x7f0000004600)=""/120, 0x78}, {&(0x7f0000004700)=""/167, 0xa7}, {&(0x7f0000004800)=""/131, 0x83}, {0x0}, {&(0x7f0000004980)=""/212, 0xd4}], 0x5}, 0x8c2}, {{&(0x7f0000004b00)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000006cc0)=""/4096, 0x1000}, 0x52}], 0x7, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) write$UHID_DESTROY(r5, &(0x7f00000001c0), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x10001, 0xffff}, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x1) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000900)="585ccbc4ed83b836c1a6474914dc5500b66147b3c7218a91690000000042e3d35228897501f93191b076ac446ff0022b8753a1fa748c569f435fb3bae96efb74b50ec93c2db8eae3198a29e5c0cfc60000ce0637cef580b4ec61221adf59be045b70e48884ca000018cea71fcfed06fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff33c1e8e036e5031949762d009d308bd73f477252d0000000000004000000000000000000000000000000000195e23fb4430a9a4c2850b6380a743d6ea0c3b121f66c716d746aa81c301621b7662c06aae720b872d4b7828e3b48522c673aa6cb366d4201e2aee3261eb52f14533b7a54203cf9a4fa587c0385cdba539e9bd34717b0dfab09db7b064fbe2ecf9f40fa3a4015d0d0db3f9d562686fcdc3342c88c6f1b6f11449f8aeabf54c5533ec6acc2270d41713ae1538256af3719a07f55223a6eaa7c1eae5d6efa12fe95e2b0f1c500b28c5c76e731d5250e395526d04063718f448e62d4dd7cefeed6b72b31b894093aa37337784c00d68a4185f349e41455f12d31aa2d0ff79a4d69d97421a0042f0c7a664a8c4945104b25dc49be950c5af7405b86482d7314fcc3a0ad5eb24268ccd24a2996019f7c006a0b3c39c7b98c5a5406a2e4ff6d9c0ce12c4251756a667b4731c4b0eb5dc7d4381fecf196c4404b54c3c11c48f09734d9a6842f52d3307a688208b7a4681b101e1abe5fecfca1f464c03e933cbd15ab589ccd3c559542355190522a712b8f5128a6a00", 0x223, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 17:07:40 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xdc}, [@ldst={0x7}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x3}, 0x48) 17:07:40 executing program 1: socket$packet(0x11, 0x1000000000000002, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x280080, 0x0) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000100)) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x15, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, 0x0, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000007cc0)=[{{&(0x7f00000002c0)=@caif=@dbg, 0x80, &(0x7f0000000840)=[{&(0x7f0000000340)=""/251, 0xfb}, {&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000007ec0)=""/108, 0x6c}, {&(0x7f0000000600)=""/241, 0xf1}, {0x0}], 0x5, &(0x7f0000000b40)=""/234, 0xea}, 0xd9b9}, {{&(0x7f0000000c40)=@pppol2tpv3, 0x80, &(0x7f0000002340)=[{&(0x7f0000000cc0)=""/63, 0x3f}, {&(0x7f0000000e40)=""/77, 0x4d}, {&(0x7f0000000ec0)=""/150, 0x96}, {&(0x7f0000000f80)=""/116, 0x74}, {&(0x7f0000001000)=""/212, 0xd4}, {0x0}, {&(0x7f00000012c0)=""/4096, 0x1000}, {0x0}], 0x8, &(0x7f00000000c0)=""/40, 0x28}, 0x7f}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000002480)=""/199, 0xc7}, {&(0x7f00000008c0)=""/55, 0x37}], 0x2, &(0x7f00000025c0)=""/157, 0x9d}, 0x9}, {{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002680)=""/238, 0xee}, {&(0x7f0000002780)=""/37, 0x25}, {&(0x7f00000027c0)=""/240, 0xf0}, {&(0x7f00000028c0)=""/10, 0xa}, {&(0x7f0000002900)=""/202, 0xca}, {&(0x7f0000002a00)=""/247, 0xf7}, {0x0}], 0x7, &(0x7f0000002c80)=""/184, 0xb8}, 0x7}, {{&(0x7f0000002d40)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f0000003040)=[{&(0x7f0000002dc0)=""/18, 0x12}, {&(0x7f0000002e00)=""/213, 0xd5}, {&(0x7f0000002f00)=""/62, 0x3e}, {0x0}, {0x0}, {&(0x7f0000002fc0)=""/31, 0x1f}, {&(0x7f0000003000)}], 0x7, &(0x7f00000030c0)=""/191, 0xbf}, 0x3}, {{&(0x7f0000003180)=@vsock, 0x80, &(0x7f0000004400)=[{&(0x7f0000007f40)=""/215, 0xd7}, {&(0x7f0000004300)=""/34, 0x22}, {&(0x7f0000004340)=""/28, 0x1c}, {&(0x7f0000004380)=""/108, 0x6c}], 0x4, &(0x7f0000004480)=""/222, 0xde}, 0x6}, {{&(0x7f0000004580)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000004a80)=[{&(0x7f0000004600)=""/120, 0x78}, {&(0x7f0000004700)=""/167, 0xa7}, {&(0x7f0000004800)=""/131, 0x83}, {0x0}, {&(0x7f0000004980)=""/212, 0xd4}], 0x5}, 0x8c2}, {{&(0x7f0000004b00)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000006cc0)=""/4096, 0x1000}, 0x52}], 0x8, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) write$UHID_DESTROY(r5, &(0x7f00000001c0), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x10001, 0xffff}, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x1) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000900)="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", 0x223, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) [ 531.040167] net_ratelimit: 14 callbacks suppressed [ 531.040188] protocol 88fb is buggy, dev hsr_slave_0 [ 531.040271] protocol 88fb is buggy, dev hsr_slave_1 [ 531.120122] protocol 88fb is buggy, dev hsr_slave_0 [ 531.125219] protocol 88fb is buggy, dev hsr_slave_1 [ 531.200107] protocol 88fb is buggy, dev hsr_slave_0 [ 531.205318] protocol 88fb is buggy, dev hsr_slave_1 17:07:40 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='bbr2', 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000040)={0x0, 0xfffffffffffffd96, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[], 0xfffffead}}, 0xff2f) recvmsg(r0, &(0x7f0000000880)={0x0, 0x36d, &(0x7f0000000540)=[{&(0x7f0000000380)=""/167, 0xffffff2f}, {&(0x7f0000000180)=""/75}, {&(0x7f0000000440)=""/225}, {&(0x7f0000000080)=""/12}, {&(0x7f0000000240)=""/22}], 0x1}, 0x0) 17:07:40 executing program 2: socket$packet(0x11, 0x1000000000000002, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x280080, 0x0) ioctl$RTC_VL_READ(r0, 0x80047013, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x15, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000003200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x680, 0x478, 0x210, 0x478, 0x0, 0x340, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x6, 0x0, {[{{@uncond, 0x0, 0xc8, 0x108}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "3c745d713ded54eb04d1bcfe4ec5e3722f760ca03b47ed1d735abcf07e43"}}, {{@uncond, 0x0, 0xc8, 0x108}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3, 0x38000, @ipv6=@rand_addr="f65360ce35d79792c798d9967e3df2d3", 0x4e21}}}, {{@ipv6={@empty, @mcast1, [0xffffff00, 0xffffff00, 0xff, 0xff000000], [0xff, 0x0, 0x17fffff01, 0xffffffff], 'rose0\x00', 'ipddp0\x00', {}, {}, 0x67, 0x9, 0x4, 0x1}, 0x0, 0xf0, 0x130, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0xe}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x5, 0x5, @ipv6=@ipv4={[], [], @empty}, 0x4e21}}}, {{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@ipv6header={0x28, 'ipv6header\x00', 0x0, {0x40, 0x20, 0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@multicast2, @ipv6=@empty, 0x2e, 0x26, 0x9}}}, {{@ipv6={@mcast1, @remote, [0xffffffff, 0xff000000, 0x7f000080, 0xff000000], [0xffffff00, 0xffffff00], 'ip6tnl0\x00', 'ip6tnl0\x00', {}, {}, 0xff, 0x1, 0x0, 0x63}, 0x0, 0xf0, 0x138, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@empty, @ipv4=@local, 0x37, 0x3b, 0x1}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6e0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000007cc0)=[{{&(0x7f00000002c0)=@caif=@dbg, 0x80, &(0x7f0000000840)=[{&(0x7f0000000340)=""/251, 0xfb}, {&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000007ec0)=""/108, 0x6c}, {&(0x7f0000000600)=""/241, 0xf1}, {0x0}], 0x5, &(0x7f0000000b40)=""/234, 0xea}, 0xd9b9}, {{&(0x7f0000000c40)=@pppol2tpv3, 0x80, &(0x7f0000002340)=[{&(0x7f0000000cc0)=""/63, 0x3f}, {&(0x7f0000000d40)=""/232, 0xe8}, {&(0x7f0000000e40)=""/77, 0x4d}, {&(0x7f0000000ec0)=""/150, 0x96}, {&(0x7f0000000f80)=""/116, 0x74}, {&(0x7f0000001000)=""/212, 0xd4}, {0x0}, {&(0x7f00000012c0)=""/4096, 0x1000}, {0x0}], 0x9, &(0x7f00000000c0)=""/40, 0x28}, 0x7f}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000002480)=""/199, 0xc7}, {&(0x7f00000008c0)=""/55, 0x37}], 0x2, &(0x7f00000025c0)=""/157, 0x9d}, 0x9}, {{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002680)=""/238, 0xee}, {&(0x7f0000002780)=""/37, 0x25}, {&(0x7f00000027c0)=""/240, 0xf0}, {&(0x7f00000028c0)=""/10, 0xa}, {&(0x7f0000002900)=""/202, 0xca}, {&(0x7f0000002a00)=""/247, 0xf7}, {0x0}], 0x7, &(0x7f0000002c80)=""/184, 0xb8}, 0x7}, {{&(0x7f0000002d40)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f0000003040)=[{0x0}, {&(0x7f0000002e00)=""/213, 0xd5}, {&(0x7f0000002f00)=""/62, 0x3e}, {0x0}, {0x0}, {&(0x7f0000002fc0)=""/31, 0x1f}, {&(0x7f0000003000)}], 0x7, &(0x7f00000030c0)=""/191, 0xbf}, 0x3}, {{&(0x7f0000003180)=@vsock, 0x80, &(0x7f0000004400)=[{&(0x7f0000007f40)=""/215, 0xd7}, {&(0x7f0000004300)=""/34, 0x22}, {&(0x7f0000004340)=""/28, 0x1c}, {&(0x7f0000004380)=""/108, 0x6c}], 0x4, &(0x7f0000004480)=""/222, 0xde}, 0x6}, {{&(0x7f0000004580)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000004a80)=[{&(0x7f0000004600)=""/120, 0x78}, {&(0x7f0000004700)=""/167, 0xa7}, {&(0x7f0000004800)=""/131, 0x83}, {0x0}, {&(0x7f0000004980)=""/212, 0xd4}], 0x5}, 0x8c2}, {{&(0x7f0000004b00)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000006cc0)=""/4096, 0x1000}, 0x52}], 0x8, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) write$UHID_DESTROY(r5, &(0x7f00000001c0), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x10001, 0xffff}, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x1) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000900)="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", 0x223, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 17:07:40 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xdc}, [@ldst={0x7}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x3}, 0x48) 17:07:40 executing program 1: socket$packet(0x11, 0x1000000000000002, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x280080, 0x0) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000100)) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x15, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, 0x0, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000007cc0)=[{{&(0x7f00000002c0)=@caif=@dbg, 0x80, &(0x7f0000000840)=[{&(0x7f0000000340)=""/251, 0xfb}, {&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000007ec0)=""/108, 0x6c}, {&(0x7f0000000600)=""/241, 0xf1}, {0x0}], 0x5, &(0x7f0000000b40)=""/234, 0xea}, 0xd9b9}, {{&(0x7f0000000c40)=@pppol2tpv3, 0x80, &(0x7f0000002340)=[{&(0x7f0000000cc0)=""/63, 0x3f}, {&(0x7f0000000e40)=""/77, 0x4d}, {&(0x7f0000000ec0)=""/150, 0x96}, {&(0x7f0000000f80)=""/116, 0x74}, {&(0x7f0000001000)=""/212, 0xd4}, {0x0}, {&(0x7f00000012c0)=""/4096, 0x1000}, {0x0}], 0x8, &(0x7f00000000c0)=""/40, 0x28}, 0x7f}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000002480)=""/199, 0xc7}, {&(0x7f00000008c0)=""/55, 0x37}], 0x2, &(0x7f00000025c0)=""/157, 0x9d}, 0x9}, {{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002680)=""/238, 0xee}, {&(0x7f0000002780)=""/37, 0x25}, {&(0x7f00000027c0)=""/240, 0xf0}, {&(0x7f00000028c0)=""/10, 0xa}, {&(0x7f0000002900)=""/202, 0xca}, {&(0x7f0000002a00)=""/247, 0xf7}, {0x0}], 0x7, &(0x7f0000002c80)=""/184, 0xb8}, 0x7}, {{&(0x7f0000002d40)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f0000003040)=[{&(0x7f0000002dc0)=""/18, 0x12}, {&(0x7f0000002e00)=""/213, 0xd5}, {&(0x7f0000002f00)=""/62, 0x3e}, {0x0}, {0x0}, {&(0x7f0000002fc0)=""/31, 0x1f}, {&(0x7f0000003000)}], 0x7, &(0x7f00000030c0)=""/191, 0xbf}, 0x3}, {{&(0x7f0000003180)=@vsock, 0x80, &(0x7f0000004400)=[{&(0x7f0000007f40)=""/215, 0xd7}, {&(0x7f0000004300)=""/34, 0x22}, {&(0x7f0000004340)=""/28, 0x1c}, {&(0x7f0000004380)=""/108, 0x6c}], 0x4, &(0x7f0000004480)=""/222, 0xde}, 0x6}, {{&(0x7f0000004580)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000004a80)=[{&(0x7f0000004600)=""/120, 0x78}, {&(0x7f0000004700)=""/167, 0xa7}, {&(0x7f0000004800)=""/131, 0x83}, {0x0}, {&(0x7f0000004980)=""/212, 0xd4}], 0x5}, 0x8c2}, {{&(0x7f0000004b00)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000006cc0)=""/4096, 0x1000}, 0x52}], 0x8, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) write$UHID_DESTROY(r5, &(0x7f00000001c0), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x10001, 0xffff}, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x1) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000900)="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", 0x223, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 17:07:40 executing program 3: socket$packet(0x11, 0x1000000000000002, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x280080, 0x0) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000100)) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x15, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000003200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x680, 0x478, 0x210, 0x478, 0x0, 0x340, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x6, &(0x7f0000000580), {[{{@uncond, 0x0, 0xc8, 0x108}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "3c745d713ded54eb04d1bcfe4ec5e3722f760ca03b47ed1d735abcf07e43"}}, {{@uncond, 0x0, 0xc8, 0x108}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3, 0x38000, @ipv6=@rand_addr="f65360ce35d79792c798d9967e3df2d3", 0x4e21}}}, {{@ipv6={@empty, @mcast1, [0xffffff00, 0xffffff00, 0xff, 0xff000000], [0xff, 0x0, 0x17fffff01, 0xffffffff], 'rose0\x00', 'ipddp0\x00', {}, {}, 0x67, 0x9, 0x4, 0x1}, 0x0, 0xf0, 0x130, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0xe}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x5, 0x5, @ipv6=@ipv4={[], [], @empty}, 0x4e21}}}, {{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@ipv6header={0x28, 'ipv6header\x00', 0x0, {0x40, 0x20, 0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@multicast2, @ipv6=@empty, 0x2e, 0x26, 0x9}}}, {{@ipv6={@mcast1, @remote, [0xffffffff, 0xff000000, 0x7f000080, 0xff000000], [0xffffff00, 0xffffff00], 'ip6tnl0\x00', 'ip6tnl0\x00', {}, {}, 0xff, 0x1, 0x0, 0x63}, 0x0, 0xf0, 0x138, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@empty, @ipv4=@local, 0x37, 0x3b, 0x1}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6e0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000007cc0)=[{{&(0x7f00000002c0)=@caif=@dbg, 0x80, &(0x7f0000000840)=[{&(0x7f0000000340)=""/251, 0xfb}, {&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000007ec0)=""/108, 0x6c}, {&(0x7f0000000600)=""/241, 0xf1}, {0x0}], 0x5, &(0x7f0000000b40)=""/234, 0xea}, 0xd9b9}, {{&(0x7f0000000c40)=@pppol2tpv3, 0x80, &(0x7f0000002340)=[{&(0x7f0000000cc0)=""/63, 0x3f}, {&(0x7f0000000d40)=""/232, 0xe8}, {&(0x7f0000000e40)=""/77, 0x4d}, {&(0x7f0000000ec0)=""/150, 0x96}, {&(0x7f0000000f80)=""/116, 0x74}, {&(0x7f0000001000)=""/212, 0xd4}, {0x0}, {&(0x7f00000012c0)=""/4096, 0x1000}, {0x0}], 0x9, &(0x7f00000000c0)=""/40, 0x28}, 0x7f}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000002480)=""/199, 0xc7}, {&(0x7f00000008c0)=""/55, 0x37}], 0x2, &(0x7f00000025c0)=""/157, 0x9d}, 0x9}, {{&(0x7f0000002d40)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f0000003040)=[{&(0x7f0000002dc0)=""/18, 0x12}, {&(0x7f0000002e00)=""/213, 0xd5}, {&(0x7f0000002f00)=""/62, 0x3e}, {0x0}, {0x0}, {&(0x7f0000002fc0)=""/31, 0x1f}, {&(0x7f0000003000)}], 0x7, &(0x7f00000030c0)=""/191, 0xbf}, 0x3}, {{&(0x7f0000003180)=@vsock, 0x80, &(0x7f0000004400)=[{&(0x7f0000007f40)=""/215, 0xd7}, {&(0x7f0000004300)=""/34, 0x22}, {&(0x7f0000004340)=""/28, 0x1c}, {&(0x7f0000004380)=""/108, 0x6c}], 0x4, &(0x7f0000004480)=""/222, 0xde}, 0x6}, {{&(0x7f0000004580)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000004a80)=[{&(0x7f0000004600)=""/120, 0x78}, {&(0x7f0000004700)=""/167, 0xa7}, {&(0x7f0000004800)=""/131, 0x83}, {0x0}, {&(0x7f0000004980)=""/212, 0xd4}], 0x5}, 0x8c2}, {{&(0x7f0000004b00)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000006cc0)=""/4096, 0x1000}, 0x52}], 0x7, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) write$UHID_DESTROY(r5, &(0x7f00000001c0), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x10001, 0xffff}, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x1) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000900)="585ccbc4ed83b836c1a6474914dc5500b66147b3c7218a91690000000042e3d35228897501f93191b076ac446ff0022b8753a1fa748c569f435fb3bae96efb74b50ec93c2db8eae3198a29e5c0cfc60000ce0637cef580b4ec61221adf59be045b70e48884ca000018cea71fcfed06fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff33c1e8e036e5031949762d009d308bd73f477252d0000000000004000000000000000000000000000000000195e23fb4430a9a4c2850b6380a743d6ea0c3b121f66c716d746aa81c301621b7662c06aae720b872d4b7828e3b48522c673aa6cb366d4201e2aee3261eb52f14533b7a54203cf9a4fa587c0385cdba539e9bd34717b0dfab09db7b064fbe2ecf9f40fa3a4015d0d0db3f9d562686fcdc3342c88c6f1b6f11449f8aeabf54c5533ec6acc2270d41713ae1538256af3719a07f55223a6eaa7c1eae5d6efa12fe95e2b0f1c500b28c5c76e731d5250e395526d04063718f448e62d4dd7cefeed6b72b31b894093aa37337784c00d68a4185f349e41455f12d31aa2d0ff79a4d69d97421a0042f0c7a664a8c4945104b25dc49be950c5af7405b86482d7314fcc3a0ad5eb24268ccd24a2996019f7c006a0b3c39c7b98c5a5406a2e4ff6d9c0ce12c4251756a667b4731c4b0eb5dc7d4381fecf196c4404b54c3c11c48f09734d9a6842f52d3307a688208b7a4681b101e1abe5fecfca1f464c03e933cbd15ab589ccd3c559542355190522a712b8f5128a6a00", 0x223, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 17:07:40 executing program 0: socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RWSTAT(r2, &(0x7f00000000c0)={0xa863b37d6292c0fb}, 0x7) write(r1, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000280)) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r2) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r4, 0x541c, &(0x7f0000000080)) 17:07:40 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x0, 0x0, &(0x7f0000003ff6)='G\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) 17:07:40 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x0, 0x0, &(0x7f0000003ff6)='G\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) 17:07:40 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x0, 0x0, &(0x7f0000003ff6)='G\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) 17:07:41 executing program 3: socket$packet(0x11, 0x1000000000000002, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x280080, 0x0) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000100)) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x15, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000003200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x680, 0x478, 0x210, 0x478, 0x0, 0x340, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x6, &(0x7f0000000580), {[{{@uncond, 0x0, 0xc8, 0x108}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "3c745d713ded54eb04d1bcfe4ec5e3722f760ca03b47ed1d735abcf07e43"}}, {{@uncond, 0x0, 0xc8, 0x108}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3, 0x38000, @ipv6=@rand_addr="f65360ce35d79792c798d9967e3df2d3", 0x4e21}}}, {{@ipv6={@empty, @mcast1, [0xffffff00, 0xffffff00, 0xff, 0xff000000], [0xff, 0x0, 0x17fffff01, 0xffffffff], 'rose0\x00', 'ipddp0\x00', {}, {}, 0x67, 0x9, 0x4, 0x1}, 0x0, 0xf0, 0x130, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0xe}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x5, 0x5, @ipv6=@ipv4={[], [], @empty}, 0x4e21}}}, {{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@ipv6header={0x28, 'ipv6header\x00', 0x0, {0x40, 0x20, 0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@multicast2, @ipv6=@empty, 0x2e, 0x26, 0x9}}}, {{@ipv6={@mcast1, @remote, [0xffffffff, 0xff000000, 0x7f000080, 0xff000000], [0xffffff00, 0xffffff00], 'ip6tnl0\x00', 'ip6tnl0\x00', {}, {}, 0xff, 0x1, 0x0, 0x63}, 0x0, 0xf0, 0x138, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@empty, @ipv4=@local, 0x37, 0x3b, 0x1}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6e0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000007cc0)=[{{&(0x7f00000002c0)=@caif=@dbg, 0x80, &(0x7f0000000840)=[{&(0x7f0000000340)=""/251, 0xfb}, {&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000007ec0)=""/108, 0x6c}, {&(0x7f0000000600)=""/241, 0xf1}, {0x0}], 0x5, &(0x7f0000000b40)=""/234, 0xea}, 0xd9b9}, {{&(0x7f0000000c40)=@pppol2tpv3, 0x80, &(0x7f0000002340)=[{&(0x7f0000000cc0)=""/63, 0x3f}, {&(0x7f0000000d40)=""/232, 0xe8}, {&(0x7f0000000e40)=""/77, 0x4d}, {&(0x7f0000000ec0)=""/150, 0x96}, {&(0x7f0000000f80)=""/116, 0x74}, {&(0x7f0000001000)=""/212, 0xd4}, {0x0}, {&(0x7f00000012c0)=""/4096, 0x1000}, {0x0}], 0x9, &(0x7f00000000c0)=""/40, 0x28}, 0x7f}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000002480)=""/199, 0xc7}, {&(0x7f00000008c0)=""/55, 0x37}], 0x2, &(0x7f00000025c0)=""/157, 0x9d}, 0x9}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002c80)=""/184, 0xb8}, 0x7}, {{&(0x7f0000002d40)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f0000003040)=[{&(0x7f0000002dc0)=""/18, 0x12}, {&(0x7f0000002e00)=""/213, 0xd5}, {&(0x7f0000002f00)=""/62, 0x3e}, {0x0}, {0x0}, {&(0x7f0000002fc0)=""/31, 0x1f}, {&(0x7f0000003000)}], 0x7, &(0x7f00000030c0)=""/191, 0xbf}, 0x3}, {{&(0x7f0000003180)=@vsock, 0x80, &(0x7f0000004400)=[{&(0x7f0000007f40)=""/215, 0xd7}, {&(0x7f0000004300)=""/34, 0x22}, {&(0x7f0000004340)=""/28, 0x1c}, {&(0x7f0000004380)=""/108, 0x6c}], 0x4, &(0x7f0000004480)=""/222, 0xde}, 0x6}, {{&(0x7f0000004580)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000004a80)=[{&(0x7f0000004600)=""/120, 0x78}, {&(0x7f0000004700)=""/167, 0xa7}, {&(0x7f0000004800)=""/131, 0x83}, {0x0}, {&(0x7f0000004980)=""/212, 0xd4}], 0x5}, 0x8c2}, {{&(0x7f0000004b00)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000006cc0)=""/4096, 0x1000}, 0x52}], 0x8, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) write$UHID_DESTROY(r5, &(0x7f00000001c0), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x10001, 0xffff}, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x1) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000900)="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", 0x223, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 17:07:41 executing program 2: socket$packet(0x11, 0x1000000000000002, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x280080, 0x0) ioctl$RTC_VL_READ(r0, 0x80047013, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x15, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000003200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x680, 0x478, 0x210, 0x478, 0x0, 0x340, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x6, 0x0, {[{{@uncond, 0x0, 0xc8, 0x108}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "3c745d713ded54eb04d1bcfe4ec5e3722f760ca03b47ed1d735abcf07e43"}}, {{@uncond, 0x0, 0xc8, 0x108}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3, 0x38000, @ipv6=@rand_addr="f65360ce35d79792c798d9967e3df2d3", 0x4e21}}}, {{@ipv6={@empty, @mcast1, [0xffffff00, 0xffffff00, 0xff, 0xff000000], [0xff, 0x0, 0x17fffff01, 0xffffffff], 'rose0\x00', 'ipddp0\x00', {}, {}, 0x67, 0x9, 0x4, 0x1}, 0x0, 0xf0, 0x130, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0xe}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x5, 0x5, @ipv6=@ipv4={[], [], @empty}, 0x4e21}}}, {{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@ipv6header={0x28, 'ipv6header\x00', 0x0, {0x40, 0x20, 0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@multicast2, @ipv6=@empty, 0x2e, 0x26, 0x9}}}, {{@ipv6={@mcast1, @remote, [0xffffffff, 0xff000000, 0x7f000080, 0xff000000], [0xffffff00, 0xffffff00], 'ip6tnl0\x00', 'ip6tnl0\x00', {}, {}, 0xff, 0x1, 0x0, 0x63}, 0x0, 0xf0, 0x138, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@empty, @ipv4=@local, 0x37, 0x3b, 0x1}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6e0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000007cc0)=[{{&(0x7f00000002c0)=@caif=@dbg, 0x80, &(0x7f0000000840)=[{&(0x7f0000000340)=""/251, 0xfb}, {&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000007ec0)=""/108, 0x6c}, {&(0x7f0000000600)=""/241, 0xf1}, {0x0}], 0x5, &(0x7f0000000b40)=""/234, 0xea}, 0xd9b9}, {{&(0x7f0000000c40)=@pppol2tpv3, 0x80, &(0x7f0000002340)=[{&(0x7f0000000cc0)=""/63, 0x3f}, {&(0x7f0000000d40)=""/232, 0xe8}, {&(0x7f0000000e40)=""/77, 0x4d}, {&(0x7f0000000ec0)=""/150, 0x96}, {&(0x7f0000000f80)=""/116, 0x74}, {&(0x7f0000001000)=""/212, 0xd4}, {0x0}, {&(0x7f00000012c0)=""/4096, 0x1000}, {0x0}], 0x9, &(0x7f00000000c0)=""/40, 0x28}, 0x7f}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000002480)=""/199, 0xc7}, {&(0x7f00000008c0)=""/55, 0x37}], 0x2, &(0x7f00000025c0)=""/157, 0x9d}, 0x9}, {{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002680)=""/238, 0xee}, {&(0x7f0000002780)=""/37, 0x25}, {&(0x7f00000027c0)=""/240, 0xf0}, {&(0x7f00000028c0)=""/10, 0xa}, {&(0x7f0000002900)=""/202, 0xca}, {&(0x7f0000002a00)=""/247, 0xf7}, {0x0}], 0x7, &(0x7f0000002c80)=""/184, 0xb8}, 0x7}, {{&(0x7f0000002d40)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f0000003040)=[{&(0x7f0000002dc0)=""/18, 0x12}, {&(0x7f0000002e00)=""/213, 0xd5}, {&(0x7f0000002f00)=""/62, 0x3e}, {0x0}, {0x0}, {&(0x7f0000002fc0)=""/31, 0x1f}, {&(0x7f0000003000)}], 0x7}, 0x3}, {{&(0x7f0000003180)=@vsock, 0x80, &(0x7f0000004400)=[{&(0x7f0000007f40)=""/215, 0xd7}, {&(0x7f0000004300)=""/34, 0x22}, {&(0x7f0000004340)=""/28, 0x1c}, {&(0x7f0000004380)=""/108, 0x6c}], 0x4, &(0x7f0000004480)=""/222, 0xde}, 0x6}, {{&(0x7f0000004580)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000004a80)=[{&(0x7f0000004600)=""/120, 0x78}, {&(0x7f0000004700)=""/167, 0xa7}, {&(0x7f0000004800)=""/131, 0x83}, {0x0}, {&(0x7f0000004980)=""/212, 0xd4}], 0x5}, 0x8c2}, {{&(0x7f0000004b00)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000006cc0)=""/4096, 0x1000}, 0x52}], 0x8, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) write$UHID_DESTROY(r5, &(0x7f00000001c0), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x10001, 0xffff}, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x1) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000900)="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", 0x223, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 17:07:41 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x3, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xdc}}, &(0x7f0000003ff6)='G\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) 17:07:41 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='bbr2', 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) recvmsg(r0, &(0x7f0000000880)={0x0, 0x36d, &(0x7f0000000540)=[{&(0x7f0000000380)=""/167, 0xffffff2f}, {&(0x7f0000000180)=""/75}, {&(0x7f0000000440)=""/225}, {&(0x7f0000000080)=""/12}, {&(0x7f0000000240)=""/22}], 0x1}, 0x0) 17:07:41 executing program 1: socket$packet(0x11, 0x1000000000000002, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x280080, 0x0) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000100)) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x15, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, 0x0, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000007cc0)=[{{&(0x7f00000002c0)=@caif=@dbg, 0x80, &(0x7f0000000840)=[{&(0x7f0000000340)=""/251, 0xfb}, {&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000007ec0)=""/108, 0x6c}, {&(0x7f0000000600)=""/241, 0xf1}, {0x0}], 0x5, &(0x7f0000000b40)=""/234, 0xea}, 0xd9b9}, {{&(0x7f0000000c40)=@pppol2tpv3, 0x80, &(0x7f0000002340)=[{&(0x7f0000000cc0)=""/63, 0x3f}, {0x0}, {&(0x7f0000000e40)=""/77, 0x4d}, {&(0x7f0000000ec0)=""/150, 0x96}, {&(0x7f0000000f80)=""/116, 0x74}, {&(0x7f0000001000)=""/212, 0xd4}, {0x0}, {&(0x7f00000012c0)=""/4096, 0x1000}, {0x0}], 0x9, &(0x7f00000000c0)=""/40, 0x28}, 0x7f}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000002480)=""/199, 0xc7}, {&(0x7f00000008c0)=""/55, 0x37}], 0x2, &(0x7f00000025c0)=""/157, 0x9d}, 0x9}, {{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002680)=""/238, 0xee}, {&(0x7f0000002780)=""/37, 0x25}, {&(0x7f00000027c0)=""/240, 0xf0}, {&(0x7f00000028c0)=""/10, 0xa}, {&(0x7f0000002900)=""/202, 0xca}, {&(0x7f0000002a00)=""/247, 0xf7}, {0x0}], 0x7, &(0x7f0000002c80)=""/184, 0xb8}, 0x7}, {{&(0x7f0000002d40)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f0000003040)=[{&(0x7f0000002dc0)=""/18, 0x12}, {&(0x7f0000002e00)=""/213, 0xd5}, {&(0x7f0000002f00)=""/62, 0x3e}, {0x0}, {0x0}, {&(0x7f0000002fc0)=""/31, 0x1f}, {&(0x7f0000003000)}], 0x7, &(0x7f00000030c0)=""/191, 0xbf}, 0x3}, {{&(0x7f0000003180)=@vsock, 0x80, &(0x7f0000004400)=[{&(0x7f0000007f40)=""/215, 0xd7}, {&(0x7f0000004300)=""/34, 0x22}, {&(0x7f0000004340)=""/28, 0x1c}, {&(0x7f0000004380)=""/108, 0x6c}], 0x4, &(0x7f0000004480)=""/222, 0xde}, 0x6}, {{&(0x7f0000004580)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000004a80)=[{&(0x7f0000004600)=""/120, 0x78}, {&(0x7f0000004700)=""/167, 0xa7}, {&(0x7f0000004800)=""/131, 0x83}, {0x0}, {&(0x7f0000004980)=""/212, 0xd4}], 0x5}, 0x8c2}, {{&(0x7f0000004b00)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000006cc0)=""/4096, 0x1000}, 0x52}], 0x8, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) write$UHID_DESTROY(r5, &(0x7f00000001c0), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x10001, 0xffff}, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x1) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000900)="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", 0x223, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 17:07:41 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x3, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xdc}}, &(0x7f0000003ff6)='G\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) 17:07:41 executing program 3: socket$packet(0x11, 0x1000000000000002, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x280080, 0x0) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000100)) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x15, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000003200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x680, 0x478, 0x210, 0x478, 0x0, 0x340, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x6, &(0x7f0000000580), {[{{@uncond, 0x0, 0xc8, 0x108}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "3c745d713ded54eb04d1bcfe4ec5e3722f760ca03b47ed1d735abcf07e43"}}, {{@uncond, 0x0, 0xc8, 0x108}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3, 0x38000, @ipv6=@rand_addr="f65360ce35d79792c798d9967e3df2d3", 0x4e21}}}, {{@ipv6={@empty, @mcast1, [0xffffff00, 0xffffff00, 0xff, 0xff000000], [0xff, 0x0, 0x17fffff01, 0xffffffff], 'rose0\x00', 'ipddp0\x00', {}, {}, 0x67, 0x9, 0x4, 0x1}, 0x0, 0xf0, 0x130, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0xe}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x5, 0x5, @ipv6=@ipv4={[], [], @empty}, 0x4e21}}}, {{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@ipv6header={0x28, 'ipv6header\x00', 0x0, {0x40, 0x20, 0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@multicast2, @ipv6=@empty, 0x2e, 0x26, 0x9}}}, {{@ipv6={@mcast1, @remote, [0xffffffff, 0xff000000, 0x7f000080, 0xff000000], [0xffffff00, 0xffffff00], 'ip6tnl0\x00', 'ip6tnl0\x00', {}, {}, 0xff, 0x1, 0x0, 0x63}, 0x0, 0xf0, 0x138, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@empty, @ipv4=@local, 0x37, 0x3b, 0x1}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6e0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000007cc0)=[{{&(0x7f00000002c0)=@caif=@dbg, 0x80, &(0x7f0000000840)=[{&(0x7f0000000340)=""/251, 0xfb}, {&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000007ec0)=""/108, 0x6c}, {&(0x7f0000000600)=""/241, 0xf1}, {0x0}], 0x5, &(0x7f0000000b40)=""/234, 0xea}, 0xd9b9}, {{&(0x7f0000000c40)=@pppol2tpv3, 0x80, &(0x7f0000002340)=[{&(0x7f0000000cc0)=""/63, 0x3f}, {&(0x7f0000000d40)=""/232, 0xe8}, {&(0x7f0000000e40)=""/77, 0x4d}, {&(0x7f0000000ec0)=""/150, 0x96}, {&(0x7f0000000f80)=""/116, 0x74}, {&(0x7f0000001000)=""/212, 0xd4}, {0x0}, {&(0x7f00000012c0)=""/4096, 0x1000}, {0x0}], 0x9, &(0x7f00000000c0)=""/40, 0x28}, 0x7f}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000002480)=""/199, 0xc7}, {&(0x7f00000008c0)=""/55, 0x37}], 0x2, &(0x7f00000025c0)=""/157, 0x9d}, 0x9}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002c80)=""/184, 0xb8}, 0x7}, {{&(0x7f0000002d40)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f0000003040)=[{&(0x7f0000002dc0)=""/18, 0x12}, {&(0x7f0000002e00)=""/213, 0xd5}, {&(0x7f0000002f00)=""/62, 0x3e}, {0x0}, {0x0}, {&(0x7f0000002fc0)=""/31, 0x1f}, {&(0x7f0000003000)}], 0x7, &(0x7f00000030c0)=""/191, 0xbf}, 0x3}, {{&(0x7f0000003180)=@vsock, 0x80, &(0x7f0000004400)=[{&(0x7f0000007f40)=""/215, 0xd7}, {&(0x7f0000004300)=""/34, 0x22}, {&(0x7f0000004340)=""/28, 0x1c}, {&(0x7f0000004380)=""/108, 0x6c}], 0x4, &(0x7f0000004480)=""/222, 0xde}, 0x6}, {{&(0x7f0000004580)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000004a80)=[{&(0x7f0000004600)=""/120, 0x78}, {&(0x7f0000004700)=""/167, 0xa7}, {&(0x7f0000004800)=""/131, 0x83}, {0x0}, {&(0x7f0000004980)=""/212, 0xd4}], 0x5}, 0x8c2}, {{&(0x7f0000004b00)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000006cc0)=""/4096, 0x1000}, 0x52}], 0x8, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) write$UHID_DESTROY(r5, &(0x7f00000001c0), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x10001, 0xffff}, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x1) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000900)="585ccbc4ed83b836c1a6474914dc5500b66147b3c7218a91690000000042e3d35228897501f93191b076ac446ff0022b8753a1fa748c569f435fb3bae96efb74b50ec93c2db8eae3198a29e5c0cfc60000ce0637cef580b4ec61221adf59be045b70e48884ca000018cea71fcfed06fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff33c1e8e036e5031949762d009d308bd73f477252d0000000000004000000000000000000000000000000000195e23fb4430a9a4c2850b6380a743d6ea0c3b121f66c716d746aa81c301621b7662c06aae720b872d4b7828e3b48522c673aa6cb366d4201e2aee3261eb52f14533b7a54203cf9a4fa587c0385cdba539e9bd34717b0dfab09db7b064fbe2ecf9f40fa3a4015d0d0db3f9d562686fcdc3342c88c6f1b6f11449f8aeabf54c5533ec6acc2270d41713ae1538256af3719a07f55223a6eaa7c1eae5d6efa12fe95e2b0f1c500b28c5c76e731d5250e395526d04063718f448e62d4dd7cefeed6b72b31b894093aa37337784c00d68a4185f349e41455f12d31aa2d0ff79a4d69d97421a0042f0c7a664a8c4945104b25dc49be950c5af7405b86482d7314fcc3a0ad5eb24268ccd24a2996019f7c006a0b3c39c7b98c5a5406a2e4ff6d9c0ce12c4251756a667b4731c4b0eb5dc7d4381fecf196c4404b54c3c11c48f09734d9a6842f52d3307a688208b7a4681b101e1abe5fecfca1f464c03e933cbd15ab589ccd3c559542355190522a712b8f5128a6a00", 0x223, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 17:07:41 executing program 2: socket$packet(0x11, 0x1000000000000002, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x280080, 0x0) ioctl$RTC_VL_READ(r0, 0x80047013, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x15, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000003200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x680, 0x478, 0x210, 0x478, 0x0, 0x340, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x6, 0x0, {[{{@uncond, 0x0, 0xc8, 0x108}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "3c745d713ded54eb04d1bcfe4ec5e3722f760ca03b47ed1d735abcf07e43"}}, {{@uncond, 0x0, 0xc8, 0x108}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3, 0x38000, @ipv6=@rand_addr="f65360ce35d79792c798d9967e3df2d3", 0x4e21}}}, {{@ipv6={@empty, @mcast1, [0xffffff00, 0xffffff00, 0xff, 0xff000000], [0xff, 0x0, 0x17fffff01, 0xffffffff], 'rose0\x00', 'ipddp0\x00', {}, {}, 0x67, 0x9, 0x4, 0x1}, 0x0, 0xf0, 0x130, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0xe}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x5, 0x5, @ipv6=@ipv4={[], [], @empty}, 0x4e21}}}, {{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@ipv6header={0x28, 'ipv6header\x00', 0x0, {0x40, 0x20, 0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@multicast2, @ipv6=@empty, 0x2e, 0x26, 0x9}}}, {{@ipv6={@mcast1, @remote, [0xffffffff, 0xff000000, 0x7f000080, 0xff000000], [0xffffff00, 0xffffff00], 'ip6tnl0\x00', 'ip6tnl0\x00', {}, {}, 0xff, 0x1, 0x0, 0x63}, 0x0, 0xf0, 0x138, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@empty, @ipv4=@local, 0x37, 0x3b, 0x1}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6e0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000007cc0)=[{{&(0x7f00000002c0)=@caif=@dbg, 0x80, &(0x7f0000000840)=[{&(0x7f0000000340)=""/251, 0xfb}, {&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000007ec0)=""/108, 0x6c}, {&(0x7f0000000600)=""/241, 0xf1}, {0x0}], 0x5, &(0x7f0000000b40)=""/234, 0xea}, 0xd9b9}, {{&(0x7f0000000c40)=@pppol2tpv3, 0x80, &(0x7f0000002340)=[{&(0x7f0000000cc0)=""/63, 0x3f}, {&(0x7f0000000d40)=""/232, 0xe8}, {&(0x7f0000000e40)=""/77, 0x4d}, {&(0x7f0000000ec0)=""/150, 0x96}, {&(0x7f0000000f80)=""/116, 0x74}, {&(0x7f0000001000)=""/212, 0xd4}, {0x0}, {&(0x7f00000012c0)=""/4096, 0x1000}, {0x0}], 0x9, &(0x7f00000000c0)=""/40, 0x28}, 0x7f}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000002480)=""/199, 0xc7}, {&(0x7f00000008c0)=""/55, 0x37}], 0x2, &(0x7f00000025c0)=""/157, 0x9d}, 0x9}, {{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002680)=""/238, 0xee}, {&(0x7f0000002780)=""/37, 0x25}, {&(0x7f00000027c0)=""/240, 0xf0}, {&(0x7f00000028c0)=""/10, 0xa}, {&(0x7f0000002900)=""/202, 0xca}, {&(0x7f0000002a00)=""/247, 0xf7}, {0x0}], 0x7, &(0x7f0000002c80)=""/184, 0xb8}, 0x7}, {{&(0x7f0000002d40)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f0000003040)=[{&(0x7f0000002dc0)=""/18, 0x12}, {&(0x7f0000002e00)=""/213, 0xd5}, {&(0x7f0000002f00)=""/62, 0x3e}, {0x0}, {0x0}, {&(0x7f0000002fc0)=""/31, 0x1f}, {&(0x7f0000003000)}], 0x7}, 0x3}, {{&(0x7f0000003180)=@vsock, 0x80, &(0x7f0000004400)=[{&(0x7f0000007f40)=""/215, 0xd7}, {&(0x7f0000004300)=""/34, 0x22}, {&(0x7f0000004340)=""/28, 0x1c}, {&(0x7f0000004380)=""/108, 0x6c}], 0x4, &(0x7f0000004480)=""/222, 0xde}, 0x6}, {{&(0x7f0000004580)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000004a80)=[{&(0x7f0000004600)=""/120, 0x78}, {&(0x7f0000004700)=""/167, 0xa7}, {&(0x7f0000004800)=""/131, 0x83}, {0x0}, {&(0x7f0000004980)=""/212, 0xd4}], 0x5}, 0x8c2}, {{&(0x7f0000004b00)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000006cc0)=""/4096, 0x1000}, 0x52}], 0x8, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) write$UHID_DESTROY(r5, &(0x7f00000001c0), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x10001, 0xffff}, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x1) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000900)="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", 0x223, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 17:07:41 executing program 0: socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RWSTAT(r2, &(0x7f00000000c0)={0xa863b37d6292c0fb}, 0x7) write(r1, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000280)) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r2) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) [ 532.160143] protocol 88fb is buggy, dev hsr_slave_0 [ 532.165357] protocol 88fb is buggy, dev hsr_slave_1 17:07:41 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x3, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xdc}}, &(0x7f0000003ff6)='G\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) 17:07:41 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xdc}, [@ldst]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x3}, 0x48) 17:07:41 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xdc}, [@ldst]}, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) 17:07:41 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xdc}, [@ldst]}, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) 17:07:41 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xdc}, [@ldst]}, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) 17:07:41 executing program 2: socket$packet(0x11, 0x1000000000000002, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x280080, 0x0) ioctl$RTC_VL_READ(r0, 0x80047013, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x15, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000003200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x680, 0x478, 0x210, 0x478, 0x0, 0x340, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x6, 0x0, {[{{@uncond, 0x0, 0xc8, 0x108}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "3c745d713ded54eb04d1bcfe4ec5e3722f760ca03b47ed1d735abcf07e43"}}, {{@uncond, 0x0, 0xc8, 0x108}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3, 0x38000, @ipv6=@rand_addr="f65360ce35d79792c798d9967e3df2d3", 0x4e21}}}, {{@ipv6={@empty, @mcast1, [0xffffff00, 0xffffff00, 0xff, 0xff000000], [0xff, 0x0, 0x17fffff01, 0xffffffff], 'rose0\x00', 'ipddp0\x00', {}, {}, 0x67, 0x9, 0x4, 0x1}, 0x0, 0xf0, 0x130, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0xe}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x5, 0x5, @ipv6=@ipv4={[], [], @empty}, 0x4e21}}}, {{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@ipv6header={0x28, 'ipv6header\x00', 0x0, {0x40, 0x20, 0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@multicast2, @ipv6=@empty, 0x2e, 0x26, 0x9}}}, {{@ipv6={@mcast1, @remote, [0xffffffff, 0xff000000, 0x7f000080, 0xff000000], [0xffffff00, 0xffffff00], 'ip6tnl0\x00', 'ip6tnl0\x00', {}, {}, 0xff, 0x1, 0x0, 0x63}, 0x0, 0xf0, 0x138, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@empty, @ipv4=@local, 0x37, 0x3b, 0x1}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6e0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000007cc0)=[{{&(0x7f00000002c0)=@caif=@dbg, 0x80, &(0x7f0000000840)=[{&(0x7f0000000340)=""/251, 0xfb}, {&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000007ec0)=""/108, 0x6c}, {&(0x7f0000000600)=""/241, 0xf1}, {0x0}], 0x5, &(0x7f0000000b40)=""/234, 0xea}, 0xd9b9}, {{&(0x7f0000000c40)=@pppol2tpv3, 0x80, &(0x7f0000002340)=[{&(0x7f0000000cc0)=""/63, 0x3f}, {&(0x7f0000000d40)=""/232, 0xe8}, {&(0x7f0000000e40)=""/77, 0x4d}, {&(0x7f0000000ec0)=""/150, 0x96}, {&(0x7f0000000f80)=""/116, 0x74}, {&(0x7f0000001000)=""/212, 0xd4}, {0x0}, {&(0x7f00000012c0)=""/4096, 0x1000}, {0x0}], 0x9, &(0x7f00000000c0)=""/40, 0x28}, 0x7f}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000002480)=""/199, 0xc7}, {&(0x7f00000008c0)=""/55, 0x37}], 0x2, &(0x7f00000025c0)=""/157, 0x9d}, 0x9}, {{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002680)=""/238, 0xee}, {&(0x7f0000002780)=""/37, 0x25}, {&(0x7f00000027c0)=""/240, 0xf0}, {&(0x7f00000028c0)=""/10, 0xa}, {&(0x7f0000002900)=""/202, 0xca}, {&(0x7f0000002a00)=""/247, 0xf7}, {0x0}], 0x7, &(0x7f0000002c80)=""/184, 0xb8}, 0x7}, {{&(0x7f0000002d40)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f0000003040)=[{&(0x7f0000002dc0)=""/18, 0x12}, {&(0x7f0000002e00)=""/213, 0xd5}, {&(0x7f0000002f00)=""/62, 0x3e}, {0x0}, {0x0}, {&(0x7f0000002fc0)=""/31, 0x1f}, {&(0x7f0000003000)}], 0x7}, 0x3}, {{&(0x7f0000003180)=@vsock, 0x80, &(0x7f0000004400)=[{&(0x7f0000007f40)=""/215, 0xd7}, {&(0x7f0000004300)=""/34, 0x22}, {&(0x7f0000004340)=""/28, 0x1c}, {&(0x7f0000004380)=""/108, 0x6c}], 0x4, &(0x7f0000004480)=""/222, 0xde}, 0x6}, {{&(0x7f0000004580)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000004a80)=[{&(0x7f0000004600)=""/120, 0x78}, {&(0x7f0000004700)=""/167, 0xa7}, {&(0x7f0000004800)=""/131, 0x83}, {0x0}, {&(0x7f0000004980)=""/212, 0xd4}], 0x5}, 0x8c2}, {{&(0x7f0000004b00)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000006cc0)=""/4096, 0x1000}, 0x52}], 0x8, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) write$UHID_DESTROY(r5, &(0x7f00000001c0), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x10001, 0xffff}, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x1) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000900)="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", 0x223, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) [ 532.720109] protocol 88fb is buggy, dev hsr_slave_0 [ 532.725211] protocol 88fb is buggy, dev hsr_slave_1 17:07:42 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='bbr2', 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) recvmsg(r0, &(0x7f0000000880)={0x0, 0x36d, &(0x7f0000000540)=[{&(0x7f0000000380)=""/167, 0xffffff2f}, {&(0x7f0000000180)=""/75}, {&(0x7f0000000440)=""/225}, {&(0x7f0000000080)=""/12}, {&(0x7f0000000240)=""/22}], 0x1}, 0x0) 17:07:42 executing program 3: socket$packet(0x11, 0x1000000000000002, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x280080, 0x0) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000100)) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x15, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000003200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x680, 0x478, 0x210, 0x478, 0x0, 0x340, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x6, &(0x7f0000000580), {[{{@uncond, 0x0, 0xc8, 0x108}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "3c745d713ded54eb04d1bcfe4ec5e3722f760ca03b47ed1d735abcf07e43"}}, {{@uncond, 0x0, 0xc8, 0x108}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3, 0x38000, @ipv6=@rand_addr="f65360ce35d79792c798d9967e3df2d3", 0x4e21}}}, {{@ipv6={@empty, @mcast1, [0xffffff00, 0xffffff00, 0xff, 0xff000000], [0xff, 0x0, 0x17fffff01, 0xffffffff], 'rose0\x00', 'ipddp0\x00', {}, {}, 0x67, 0x9, 0x4, 0x1}, 0x0, 0xf0, 0x130, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0xe}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x5, 0x5, @ipv6=@ipv4={[], [], @empty}, 0x4e21}}}, {{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@ipv6header={0x28, 'ipv6header\x00', 0x0, {0x40, 0x20, 0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@multicast2, @ipv6=@empty, 0x2e, 0x26, 0x9}}}, {{@ipv6={@mcast1, @remote, [0xffffffff, 0xff000000, 0x7f000080, 0xff000000], [0xffffff00, 0xffffff00], 'ip6tnl0\x00', 'ip6tnl0\x00', {}, {}, 0xff, 0x1, 0x0, 0x63}, 0x0, 0xf0, 0x138, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@empty, @ipv4=@local, 0x37, 0x3b, 0x1}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6e0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000007cc0)=[{{&(0x7f00000002c0)=@caif=@dbg, 0x80, &(0x7f0000000840)=[{&(0x7f0000000340)=""/251, 0xfb}, {&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000007ec0)=""/108, 0x6c}, {&(0x7f0000000600)=""/241, 0xf1}, {0x0}], 0x5, &(0x7f0000000b40)=""/234, 0xea}, 0xd9b9}, {{&(0x7f0000000c40)=@pppol2tpv3, 0x80, &(0x7f0000002340)=[{&(0x7f0000000cc0)=""/63, 0x3f}, {&(0x7f0000000d40)=""/232, 0xe8}, {&(0x7f0000000e40)=""/77, 0x4d}, {&(0x7f0000000ec0)=""/150, 0x96}, {&(0x7f0000000f80)=""/116, 0x74}, {&(0x7f0000001000)=""/212, 0xd4}, {0x0}, {&(0x7f00000012c0)=""/4096, 0x1000}, {0x0}], 0x9, &(0x7f00000000c0)=""/40, 0x28}, 0x7f}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000002480)=""/199, 0xc7}, {&(0x7f00000008c0)=""/55, 0x37}], 0x2, &(0x7f00000025c0)=""/157, 0x9d}, 0x9}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002c80)=""/184, 0xb8}, 0x7}, {{&(0x7f0000002d40)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f0000003040)=[{&(0x7f0000002dc0)=""/18, 0x12}, {&(0x7f0000002e00)=""/213, 0xd5}, {&(0x7f0000002f00)=""/62, 0x3e}, {0x0}, {0x0}, {&(0x7f0000002fc0)=""/31, 0x1f}, {&(0x7f0000003000)}], 0x7, &(0x7f00000030c0)=""/191, 0xbf}, 0x3}, {{&(0x7f0000003180)=@vsock, 0x80, &(0x7f0000004400)=[{&(0x7f0000007f40)=""/215, 0xd7}, {&(0x7f0000004300)=""/34, 0x22}, {&(0x7f0000004340)=""/28, 0x1c}, {&(0x7f0000004380)=""/108, 0x6c}], 0x4, &(0x7f0000004480)=""/222, 0xde}, 0x6}, {{&(0x7f0000004580)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000004a80)=[{&(0x7f0000004600)=""/120, 0x78}, {&(0x7f0000004700)=""/167, 0xa7}, {&(0x7f0000004800)=""/131, 0x83}, {0x0}, {&(0x7f0000004980)=""/212, 0xd4}], 0x5}, 0x8c2}, {{&(0x7f0000004b00)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000006cc0)=""/4096, 0x1000}, 0x52}], 0x8, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) write$UHID_DESTROY(r5, &(0x7f00000001c0), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x10001, 0xffff}, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x1) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000900)="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", 0x223, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 17:07:42 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xdc}, [@ldst]}, &(0x7f0000003ff6)='G\x00', 0x0, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x3}, 0x48) 17:07:42 executing program 1: socket$packet(0x11, 0x1000000000000002, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x280080, 0x0) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000100)) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x15, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, 0x0, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000007cc0)=[{{&(0x7f00000002c0)=@caif=@dbg, 0x80, &(0x7f0000000840)=[{&(0x7f0000000340)=""/251, 0xfb}, {&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000007ec0)=""/108, 0x6c}, {&(0x7f0000000600)=""/241, 0xf1}, {0x0}], 0x5, &(0x7f0000000b40)=""/234, 0xea}, 0xd9b9}, {{&(0x7f0000000c40)=@pppol2tpv3, 0x80, &(0x7f0000002340)=[{&(0x7f0000000cc0)=""/63, 0x3f}, {0x0}, {&(0x7f0000000e40)=""/77, 0x4d}, {&(0x7f0000000ec0)=""/150, 0x96}, {&(0x7f0000000f80)=""/116, 0x74}, {&(0x7f0000001000)=""/212, 0xd4}, {0x0}, {&(0x7f00000012c0)=""/4096, 0x1000}, {0x0}], 0x9, &(0x7f00000000c0)=""/40, 0x28}, 0x7f}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000002480)=""/199, 0xc7}, {&(0x7f00000008c0)=""/55, 0x37}], 0x2, &(0x7f00000025c0)=""/157, 0x9d}, 0x9}, {{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002680)=""/238, 0xee}, {&(0x7f0000002780)=""/37, 0x25}, {&(0x7f00000027c0)=""/240, 0xf0}, {&(0x7f00000028c0)=""/10, 0xa}, {&(0x7f0000002900)=""/202, 0xca}, {&(0x7f0000002a00)=""/247, 0xf7}, {0x0}], 0x7, &(0x7f0000002c80)=""/184, 0xb8}, 0x7}, {{&(0x7f0000002d40)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f0000003040)=[{&(0x7f0000002dc0)=""/18, 0x12}, {&(0x7f0000002e00)=""/213, 0xd5}, {&(0x7f0000002f00)=""/62, 0x3e}, {0x0}, {0x0}, {&(0x7f0000002fc0)=""/31, 0x1f}, {&(0x7f0000003000)}], 0x7, &(0x7f00000030c0)=""/191, 0xbf}, 0x3}, {{&(0x7f0000003180)=@vsock, 0x80, &(0x7f0000004400)=[{&(0x7f0000007f40)=""/215, 0xd7}, {&(0x7f0000004300)=""/34, 0x22}, {&(0x7f0000004340)=""/28, 0x1c}, {&(0x7f0000004380)=""/108, 0x6c}], 0x4, &(0x7f0000004480)=""/222, 0xde}, 0x6}, {{&(0x7f0000004580)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000004a80)=[{&(0x7f0000004600)=""/120, 0x78}, {&(0x7f0000004700)=""/167, 0xa7}, {&(0x7f0000004800)=""/131, 0x83}, {0x0}, {&(0x7f0000004980)=""/212, 0xd4}], 0x5}, 0x8c2}, {{&(0x7f0000004b00)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000006cc0)=""/4096, 0x1000}, 0x52}], 0x8, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) write$UHID_DESTROY(r5, &(0x7f00000001c0), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x10001, 0xffff}, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x1) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000900)="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", 0x223, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 17:07:42 executing program 2: socket$packet(0x11, 0x1000000000000002, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x280080, 0x0) ioctl$RTC_VL_READ(r0, 0x80047013, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x15, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000003200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x680, 0x478, 0x210, 0x478, 0x0, 0x340, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x6, 0x0, {[{{@uncond, 0x0, 0xc8, 0x108}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "3c745d713ded54eb04d1bcfe4ec5e3722f760ca03b47ed1d735abcf07e43"}}, {{@uncond, 0x0, 0xc8, 0x108}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3, 0x38000, @ipv6=@rand_addr="f65360ce35d79792c798d9967e3df2d3", 0x4e21}}}, {{@ipv6={@empty, @mcast1, [0xffffff00, 0xffffff00, 0xff, 0xff000000], [0xff, 0x0, 0x17fffff01, 0xffffffff], 'rose0\x00', 'ipddp0\x00', {}, {}, 0x67, 0x9, 0x4, 0x1}, 0x0, 0xf0, 0x130, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0xe}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x5, 0x5, @ipv6=@ipv4={[], [], @empty}, 0x4e21}}}, {{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@ipv6header={0x28, 'ipv6header\x00', 0x0, {0x40, 0x20, 0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@multicast2, @ipv6=@empty, 0x2e, 0x26, 0x9}}}, {{@ipv6={@mcast1, @remote, [0xffffffff, 0xff000000, 0x7f000080, 0xff000000], [0xffffff00, 0xffffff00], 'ip6tnl0\x00', 'ip6tnl0\x00', {}, {}, 0xff, 0x1, 0x0, 0x63}, 0x0, 0xf0, 0x138, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@empty, @ipv4=@local, 0x37, 0x3b, 0x1}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6e0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000007cc0)=[{{&(0x7f00000002c0)=@caif=@dbg, 0x80, &(0x7f0000000840)=[{&(0x7f0000000340)=""/251, 0xfb}, {&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000007ec0)=""/108, 0x6c}, {&(0x7f0000000600)=""/241, 0xf1}, {0x0}], 0x5, &(0x7f0000000b40)=""/234, 0xea}, 0xd9b9}, {{&(0x7f0000000c40)=@pppol2tpv3, 0x80, &(0x7f0000002340)=[{&(0x7f0000000cc0)=""/63, 0x3f}, {&(0x7f0000000d40)=""/232, 0xe8}, {&(0x7f0000000e40)=""/77, 0x4d}, {&(0x7f0000000ec0)=""/150, 0x96}, {&(0x7f0000000f80)=""/116, 0x74}, {&(0x7f0000001000)=""/212, 0xd4}, {0x0}, {&(0x7f00000012c0)=""/4096, 0x1000}, {0x0}], 0x9, &(0x7f00000000c0)=""/40, 0x28}, 0x7f}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000002480)=""/199, 0xc7}, {&(0x7f00000008c0)=""/55, 0x37}], 0x2, &(0x7f00000025c0)=""/157, 0x9d}, 0x9}, {{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002680)=""/238, 0xee}, {&(0x7f0000002780)=""/37, 0x25}, {&(0x7f00000027c0)=""/240, 0xf0}, {&(0x7f00000028c0)=""/10, 0xa}, {&(0x7f0000002900)=""/202, 0xca}, {&(0x7f0000002a00)=""/247, 0xf7}, {0x0}], 0x7, &(0x7f0000002c80)=""/184, 0xb8}, 0x7}, {{&(0x7f0000002d40)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f0000003040)=[{&(0x7f0000002dc0)=""/18, 0x12}, {&(0x7f0000002e00)=""/213, 0xd5}, {&(0x7f0000002f00)=""/62, 0x3e}, {0x0}, {0x0}, {&(0x7f0000002fc0)=""/31, 0x1f}, {&(0x7f0000003000)}], 0x7, &(0x7f00000030c0)=""/191, 0xbf}}, {{&(0x7f0000003180)=@vsock, 0x80, &(0x7f0000004400)=[{&(0x7f0000007f40)=""/215, 0xd7}, {&(0x7f0000004300)=""/34, 0x22}, {&(0x7f0000004340)=""/28, 0x1c}, {&(0x7f0000004380)=""/108, 0x6c}], 0x4, &(0x7f0000004480)=""/222, 0xde}, 0x6}, {{&(0x7f0000004580)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000004a80)=[{&(0x7f0000004600)=""/120, 0x78}, {&(0x7f0000004700)=""/167, 0xa7}, {&(0x7f0000004800)=""/131, 0x83}, {0x0}, {&(0x7f0000004980)=""/212, 0xd4}], 0x5}, 0x8c2}, {{&(0x7f0000004b00)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000006cc0)=""/4096, 0x1000}, 0x52}], 0x8, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) write$UHID_DESTROY(r5, &(0x7f00000001c0), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x10001, 0xffff}, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x1) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000900)="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", 0x223, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 17:07:42 executing program 0: socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RWSTAT(r2, &(0x7f00000000c0)={0xa863b37d6292c0fb}, 0x7) write(r1, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000280)) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r2) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) 17:07:42 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xdc}, [@ldst]}, &(0x7f0000003ff6)='G\x00', 0x0, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x3}, 0x48) 17:07:42 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xdc}, [@ldst]}, &(0x7f0000003ff6)='G\x00', 0x0, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x3}, 0x48) 17:07:42 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xdc}, [@ldst]}, &(0x7f0000003ff6)='G\x00', 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) 17:07:42 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xdc}, [@ldst]}, &(0x7f0000003ff6)='G\x00', 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) 17:07:42 executing program 3: socket$packet(0x11, 0x1000000000000002, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x280080, 0x0) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000100)) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x15, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000003200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x680, 0x478, 0x210, 0x478, 0x0, 0x340, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x6, &(0x7f0000000580), {[{{@uncond, 0x0, 0xc8, 0x108}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "3c745d713ded54eb04d1bcfe4ec5e3722f760ca03b47ed1d735abcf07e43"}}, {{@uncond, 0x0, 0xc8, 0x108}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3, 0x38000, @ipv6=@rand_addr="f65360ce35d79792c798d9967e3df2d3", 0x4e21}}}, {{@ipv6={@empty, @mcast1, [0xffffff00, 0xffffff00, 0xff, 0xff000000], [0xff, 0x0, 0x17fffff01, 0xffffffff], 'rose0\x00', 'ipddp0\x00', {}, {}, 0x67, 0x9, 0x4, 0x1}, 0x0, 0xf0, 0x130, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0xe}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x5, 0x5, @ipv6=@ipv4={[], [], @empty}, 0x4e21}}}, {{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@ipv6header={0x28, 'ipv6header\x00', 0x0, {0x40, 0x20, 0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@multicast2, @ipv6=@empty, 0x2e, 0x26, 0x9}}}, {{@ipv6={@mcast1, @remote, [0xffffffff, 0xff000000, 0x7f000080, 0xff000000], [0xffffff00, 0xffffff00], 'ip6tnl0\x00', 'ip6tnl0\x00', {}, {}, 0xff, 0x1, 0x0, 0x63}, 0x0, 0xf0, 0x138, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@empty, @ipv4=@local, 0x37, 0x3b, 0x1}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6e0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000007cc0)=[{{&(0x7f00000002c0)=@caif=@dbg, 0x80, &(0x7f0000000840)=[{&(0x7f0000000340)=""/251, 0xfb}, {&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000007ec0)=""/108, 0x6c}, {&(0x7f0000000600)=""/241, 0xf1}, {0x0}], 0x5, &(0x7f0000000b40)=""/234, 0xea}, 0xd9b9}, {{&(0x7f0000000c40)=@pppol2tpv3, 0x80, &(0x7f0000002340)=[{&(0x7f0000000cc0)=""/63, 0x3f}, {&(0x7f0000000d40)=""/232, 0xe8}, {&(0x7f0000000e40)=""/77, 0x4d}, {&(0x7f0000000ec0)=""/150, 0x96}, {&(0x7f0000000f80)=""/116, 0x74}, {&(0x7f0000001000)=""/212, 0xd4}, {0x0}, {&(0x7f00000012c0)=""/4096, 0x1000}, {0x0}], 0x9, &(0x7f00000000c0)=""/40, 0x28}, 0x7f}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000002480)=""/199, 0xc7}, {&(0x7f00000008c0)=""/55, 0x37}], 0x2, &(0x7f00000025c0)=""/157, 0x9d}, 0x9}, {{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002680)=""/238, 0xee}, {&(0x7f0000002780)=""/37, 0x25}, {&(0x7f00000027c0)=""/240, 0xf0}, {&(0x7f00000028c0)=""/10, 0xa}, {&(0x7f0000002900)=""/202, 0xca}, {&(0x7f0000002a00)=""/247, 0xf7}], 0x6, &(0x7f0000002c80)=""/184, 0xb8}, 0x7}, {{&(0x7f0000002d40)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f0000003040)=[{&(0x7f0000002dc0)=""/18, 0x12}, {&(0x7f0000002e00)=""/213, 0xd5}, {&(0x7f0000002f00)=""/62, 0x3e}, {0x0}, {0x0}, {&(0x7f0000002fc0)=""/31, 0x1f}, {&(0x7f0000003000)}], 0x7, &(0x7f00000030c0)=""/191, 0xbf}, 0x3}, {{&(0x7f0000003180)=@vsock, 0x80, &(0x7f0000004400)=[{&(0x7f0000007f40)=""/215, 0xd7}, {&(0x7f0000004300)=""/34, 0x22}, {&(0x7f0000004340)=""/28, 0x1c}, {&(0x7f0000004380)=""/108, 0x6c}], 0x4, &(0x7f0000004480)=""/222, 0xde}, 0x6}, {{&(0x7f0000004580)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000004a80)=[{&(0x7f0000004600)=""/120, 0x78}, {&(0x7f0000004700)=""/167, 0xa7}, {&(0x7f0000004800)=""/131, 0x83}, {0x0}, {&(0x7f0000004980)=""/212, 0xd4}], 0x5}, 0x8c2}, {{&(0x7f0000004b00)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000006cc0)=""/4096, 0x1000}, 0x52}], 0x8, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) write$UHID_DESTROY(r5, &(0x7f00000001c0), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x10001, 0xffff}, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x1) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000900)="585ccbc4ed83b836c1a6474914dc5500b66147b3c7218a91690000000042e3d35228897501f93191b076ac446ff0022b8753a1fa748c569f435fb3bae96efb74b50ec93c2db8eae3198a29e5c0cfc60000ce0637cef580b4ec61221adf59be045b70e48884ca000018cea71fcfed06fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff33c1e8e036e5031949762d009d308bd73f477252d0000000000004000000000000000000000000000000000195e23fb4430a9a4c2850b6380a743d6ea0c3b121f66c716d746aa81c301621b7662c06aae720b872d4b7828e3b48522c673aa6cb366d4201e2aee3261eb52f14533b7a54203cf9a4fa587c0385cdba539e9bd34717b0dfab09db7b064fbe2ecf9f40fa3a4015d0d0db3f9d562686fcdc3342c88c6f1b6f11449f8aeabf54c5533ec6acc2270d41713ae1538256af3719a07f55223a6eaa7c1eae5d6efa12fe95e2b0f1c500b28c5c76e731d5250e395526d04063718f448e62d4dd7cefeed6b72b31b894093aa37337784c00d68a4185f349e41455f12d31aa2d0ff79a4d69d97421a0042f0c7a664a8c4945104b25dc49be950c5af7405b86482d7314fcc3a0ad5eb24268ccd24a2996019f7c006a0b3c39c7b98c5a5406a2e4ff6d9c0ce12c4251756a667b4731c4b0eb5dc7d4381fecf196c4404b54c3c11c48f09734d9a6842f52d3307a688208b7a4681b101e1abe5fecfca1f464c03e933cbd15ab589ccd3c559542355190522a712b8f5128a6a00", 0x223, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 17:07:42 executing program 2: socket$packet(0x11, 0x1000000000000002, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x280080, 0x0) ioctl$RTC_VL_READ(r0, 0x80047013, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x15, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000003200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x680, 0x478, 0x210, 0x478, 0x0, 0x340, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x6, 0x0, {[{{@uncond, 0x0, 0xc8, 0x108}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "3c745d713ded54eb04d1bcfe4ec5e3722f760ca03b47ed1d735abcf07e43"}}, {{@uncond, 0x0, 0xc8, 0x108}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3, 0x38000, @ipv6=@rand_addr="f65360ce35d79792c798d9967e3df2d3", 0x4e21}}}, {{@ipv6={@empty, @mcast1, [0xffffff00, 0xffffff00, 0xff, 0xff000000], [0xff, 0x0, 0x17fffff01, 0xffffffff], 'rose0\x00', 'ipddp0\x00', {}, {}, 0x67, 0x9, 0x4, 0x1}, 0x0, 0xf0, 0x130, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0xe}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x5, 0x5, @ipv6=@ipv4={[], [], @empty}, 0x4e21}}}, {{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@ipv6header={0x28, 'ipv6header\x00', 0x0, {0x40, 0x20, 0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@multicast2, @ipv6=@empty, 0x2e, 0x26, 0x9}}}, {{@ipv6={@mcast1, @remote, [0xffffffff, 0xff000000, 0x7f000080, 0xff000000], [0xffffff00, 0xffffff00], 'ip6tnl0\x00', 'ip6tnl0\x00', {}, {}, 0xff, 0x1, 0x0, 0x63}, 0x0, 0xf0, 0x138, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@empty, @ipv4=@local, 0x37, 0x3b, 0x1}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6e0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000007cc0)=[{{&(0x7f00000002c0)=@caif=@dbg, 0x80, &(0x7f0000000840)=[{&(0x7f0000000340)=""/251, 0xfb}, {&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000007ec0)=""/108, 0x6c}, {&(0x7f0000000600)=""/241, 0xf1}, {0x0}], 0x5, &(0x7f0000000b40)=""/234, 0xea}, 0xd9b9}, {{&(0x7f0000000c40)=@pppol2tpv3, 0x80, &(0x7f0000002340)=[{&(0x7f0000000cc0)=""/63, 0x3f}, {&(0x7f0000000d40)=""/232, 0xe8}, {&(0x7f0000000e40)=""/77, 0x4d}, {&(0x7f0000000ec0)=""/150, 0x96}, {&(0x7f0000000f80)=""/116, 0x74}, {&(0x7f0000001000)=""/212, 0xd4}, {0x0}, {&(0x7f00000012c0)=""/4096, 0x1000}, {0x0}], 0x9, &(0x7f00000000c0)=""/40, 0x28}, 0x7f}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000002480)=""/199, 0xc7}, {&(0x7f00000008c0)=""/55, 0x37}], 0x2, &(0x7f00000025c0)=""/157, 0x9d}, 0x9}, {{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002680)=""/238, 0xee}, {&(0x7f0000002780)=""/37, 0x25}, {&(0x7f00000027c0)=""/240, 0xf0}, {&(0x7f00000028c0)=""/10, 0xa}, {&(0x7f0000002900)=""/202, 0xca}, {&(0x7f0000002a00)=""/247, 0xf7}, {0x0}], 0x7, &(0x7f0000002c80)=""/184, 0xb8}, 0x7}, {{&(0x7f0000002d40)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f0000003040)=[{&(0x7f0000002dc0)=""/18, 0x12}, {&(0x7f0000002e00)=""/213, 0xd5}, {&(0x7f0000002f00)=""/62, 0x3e}, {0x0}, {0x0}, {&(0x7f0000002fc0)=""/31, 0x1f}, {&(0x7f0000003000)}], 0x7, &(0x7f00000030c0)=""/191, 0xbf}}, {{&(0x7f0000003180)=@vsock, 0x80, &(0x7f0000004400)=[{&(0x7f0000007f40)=""/215, 0xd7}, {&(0x7f0000004300)=""/34, 0x22}, {&(0x7f0000004340)=""/28, 0x1c}, {&(0x7f0000004380)=""/108, 0x6c}], 0x4, &(0x7f0000004480)=""/222, 0xde}, 0x6}, {{&(0x7f0000004580)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000004a80)=[{&(0x7f0000004600)=""/120, 0x78}, {&(0x7f0000004700)=""/167, 0xa7}, {&(0x7f0000004800)=""/131, 0x83}, {0x0}, {&(0x7f0000004980)=""/212, 0xd4}], 0x5}, 0x8c2}, {{&(0x7f0000004b00)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000006cc0)=""/4096, 0x1000}, 0x52}], 0x8, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) write$UHID_DESTROY(r5, &(0x7f00000001c0), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x10001, 0xffff}, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x1) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000900)="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", 0x223, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 17:07:43 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='bbr2', 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) recvmsg(r0, &(0x7f0000000880)={0x0, 0x36d, &(0x7f0000000540)=[{&(0x7f0000000380)=""/167, 0xffffff2f}, {&(0x7f0000000180)=""/75}, {&(0x7f0000000440)=""/225}, {&(0x7f0000000080)=""/12}, {&(0x7f0000000240)=""/22}], 0x1}, 0x0) 17:07:43 executing program 1: socket$packet(0x11, 0x1000000000000002, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x280080, 0x0) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000100)) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x15, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, 0x0, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000007cc0)=[{{&(0x7f00000002c0)=@caif=@dbg, 0x80, &(0x7f0000000840)=[{&(0x7f0000000340)=""/251, 0xfb}, {&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000007ec0)=""/108, 0x6c}, {&(0x7f0000000600)=""/241, 0xf1}, {0x0}], 0x5, &(0x7f0000000b40)=""/234, 0xea}, 0xd9b9}, {{&(0x7f0000000c40)=@pppol2tpv3, 0x80, &(0x7f0000002340)=[{&(0x7f0000000cc0)=""/63, 0x3f}, {0x0}, {&(0x7f0000000e40)=""/77, 0x4d}, {&(0x7f0000000ec0)=""/150, 0x96}, {&(0x7f0000000f80)=""/116, 0x74}, {&(0x7f0000001000)=""/212, 0xd4}, {0x0}, {&(0x7f00000012c0)=""/4096, 0x1000}, {0x0}], 0x9, &(0x7f00000000c0)=""/40, 0x28}, 0x7f}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000002480)=""/199, 0xc7}, {&(0x7f00000008c0)=""/55, 0x37}], 0x2, &(0x7f00000025c0)=""/157, 0x9d}, 0x9}, {{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002680)=""/238, 0xee}, {&(0x7f0000002780)=""/37, 0x25}, {&(0x7f00000027c0)=""/240, 0xf0}, {&(0x7f00000028c0)=""/10, 0xa}, {&(0x7f0000002900)=""/202, 0xca}, {&(0x7f0000002a00)=""/247, 0xf7}, {0x0}], 0x7, &(0x7f0000002c80)=""/184, 0xb8}, 0x7}, {{&(0x7f0000002d40)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f0000003040)=[{&(0x7f0000002dc0)=""/18, 0x12}, {&(0x7f0000002e00)=""/213, 0xd5}, {&(0x7f0000002f00)=""/62, 0x3e}, {0x0}, {0x0}, {&(0x7f0000002fc0)=""/31, 0x1f}, {&(0x7f0000003000)}], 0x7, &(0x7f00000030c0)=""/191, 0xbf}, 0x3}, {{&(0x7f0000003180)=@vsock, 0x80, &(0x7f0000004400)=[{&(0x7f0000007f40)=""/215, 0xd7}, {&(0x7f0000004300)=""/34, 0x22}, {&(0x7f0000004340)=""/28, 0x1c}, {&(0x7f0000004380)=""/108, 0x6c}], 0x4, &(0x7f0000004480)=""/222, 0xde}, 0x6}, {{&(0x7f0000004580)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000004a80)=[{&(0x7f0000004600)=""/120, 0x78}, {&(0x7f0000004700)=""/167, 0xa7}, {&(0x7f0000004800)=""/131, 0x83}, {0x0}, {&(0x7f0000004980)=""/212, 0xd4}], 0x5}, 0x8c2}, {{&(0x7f0000004b00)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000006cc0)=""/4096, 0x1000}, 0x52}], 0x8, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) write$UHID_DESTROY(r5, &(0x7f00000001c0), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x10001, 0xffff}, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x1) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000900)="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", 0x223, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 17:07:43 executing program 0: socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RWSTAT(r2, &(0x7f00000000c0)={0xa863b37d6292c0fb}, 0x7) write(r1, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000280)) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r2) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) 17:07:43 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xdc}, [@ldst]}, &(0x7f0000003ff6)='G\x00', 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) 17:07:43 executing program 3: socket$packet(0x11, 0x1000000000000002, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x280080, 0x0) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000100)) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x15, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000003200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x680, 0x478, 0x210, 0x478, 0x0, 0x340, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x6, &(0x7f0000000580), {[{{@uncond, 0x0, 0xc8, 0x108}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "3c745d713ded54eb04d1bcfe4ec5e3722f760ca03b47ed1d735abcf07e43"}}, {{@uncond, 0x0, 0xc8, 0x108}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3, 0x38000, @ipv6=@rand_addr="f65360ce35d79792c798d9967e3df2d3", 0x4e21}}}, {{@ipv6={@empty, @mcast1, [0xffffff00, 0xffffff00, 0xff, 0xff000000], [0xff, 0x0, 0x17fffff01, 0xffffffff], 'rose0\x00', 'ipddp0\x00', {}, {}, 0x67, 0x9, 0x4, 0x1}, 0x0, 0xf0, 0x130, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0xe}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x5, 0x5, @ipv6=@ipv4={[], [], @empty}, 0x4e21}}}, {{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@ipv6header={0x28, 'ipv6header\x00', 0x0, {0x40, 0x20, 0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@multicast2, @ipv6=@empty, 0x2e, 0x26, 0x9}}}, {{@ipv6={@mcast1, @remote, [0xffffffff, 0xff000000, 0x7f000080, 0xff000000], [0xffffff00, 0xffffff00], 'ip6tnl0\x00', 'ip6tnl0\x00', {}, {}, 0xff, 0x1, 0x0, 0x63}, 0x0, 0xf0, 0x138, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@empty, @ipv4=@local, 0x37, 0x3b, 0x1}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6e0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000007cc0)=[{{&(0x7f00000002c0)=@caif=@dbg, 0x80, &(0x7f0000000840)=[{&(0x7f0000000340)=""/251, 0xfb}, {&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000007ec0)=""/108, 0x6c}, {&(0x7f0000000600)=""/241, 0xf1}, {0x0}], 0x5, &(0x7f0000000b40)=""/234, 0xea}, 0xd9b9}, {{&(0x7f0000000c40)=@pppol2tpv3, 0x80, &(0x7f0000002340)=[{&(0x7f0000000cc0)=""/63, 0x3f}, {&(0x7f0000000d40)=""/232, 0xe8}, {&(0x7f0000000e40)=""/77, 0x4d}, {&(0x7f0000000ec0)=""/150, 0x96}, {&(0x7f0000000f80)=""/116, 0x74}, {&(0x7f0000001000)=""/212, 0xd4}, {0x0}, {&(0x7f00000012c0)=""/4096, 0x1000}, {0x0}], 0x9, &(0x7f00000000c0)=""/40, 0x28}, 0x7f}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000002480)=""/199, 0xc7}, {&(0x7f00000008c0)=""/55, 0x37}], 0x2, &(0x7f00000025c0)=""/157, 0x9d}, 0x9}, {{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002680)=""/238, 0xee}, {&(0x7f0000002780)=""/37, 0x25}, {&(0x7f00000027c0)=""/240, 0xf0}, {&(0x7f00000028c0)=""/10, 0xa}, {&(0x7f0000002900)=""/202, 0xca}, {&(0x7f0000002a00)=""/247, 0xf7}], 0x6, &(0x7f0000002c80)=""/184, 0xb8}, 0x7}, {{&(0x7f0000002d40)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f0000003040)=[{&(0x7f0000002dc0)=""/18, 0x12}, {&(0x7f0000002e00)=""/213, 0xd5}, {&(0x7f0000002f00)=""/62, 0x3e}, {0x0}, {0x0}, {&(0x7f0000002fc0)=""/31, 0x1f}, {&(0x7f0000003000)}], 0x7, &(0x7f00000030c0)=""/191, 0xbf}, 0x3}, {{&(0x7f0000003180)=@vsock, 0x80, &(0x7f0000004400)=[{&(0x7f0000007f40)=""/215, 0xd7}, {&(0x7f0000004300)=""/34, 0x22}, {&(0x7f0000004340)=""/28, 0x1c}, {&(0x7f0000004380)=""/108, 0x6c}], 0x4, &(0x7f0000004480)=""/222, 0xde}, 0x6}, {{&(0x7f0000004580)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000004a80)=[{&(0x7f0000004600)=""/120, 0x78}, {&(0x7f0000004700)=""/167, 0xa7}, {&(0x7f0000004800)=""/131, 0x83}, {0x0}, {&(0x7f0000004980)=""/212, 0xd4}], 0x5}, 0x8c2}, {{&(0x7f0000004b00)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000006cc0)=""/4096, 0x1000}, 0x52}], 0x8, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) write$UHID_DESTROY(r5, &(0x7f00000001c0), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x10001, 0xffff}, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x1) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000900)="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", 0x223, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 17:07:43 executing program 2: socket$packet(0x11, 0x1000000000000002, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x280080, 0x0) ioctl$RTC_VL_READ(r0, 0x80047013, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x15, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000003200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x680, 0x478, 0x210, 0x478, 0x0, 0x340, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x6, 0x0, {[{{@uncond, 0x0, 0xc8, 0x108}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "3c745d713ded54eb04d1bcfe4ec5e3722f760ca03b47ed1d735abcf07e43"}}, {{@uncond, 0x0, 0xc8, 0x108}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3, 0x38000, @ipv6=@rand_addr="f65360ce35d79792c798d9967e3df2d3", 0x4e21}}}, {{@ipv6={@empty, @mcast1, [0xffffff00, 0xffffff00, 0xff, 0xff000000], [0xff, 0x0, 0x17fffff01, 0xffffffff], 'rose0\x00', 'ipddp0\x00', {}, {}, 0x67, 0x9, 0x4, 0x1}, 0x0, 0xf0, 0x130, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0xe}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x5, 0x5, @ipv6=@ipv4={[], [], @empty}, 0x4e21}}}, {{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@ipv6header={0x28, 'ipv6header\x00', 0x0, {0x40, 0x20, 0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@multicast2, @ipv6=@empty, 0x2e, 0x26, 0x9}}}, {{@ipv6={@mcast1, @remote, [0xffffffff, 0xff000000, 0x7f000080, 0xff000000], [0xffffff00, 0xffffff00], 'ip6tnl0\x00', 'ip6tnl0\x00', {}, {}, 0xff, 0x1, 0x0, 0x63}, 0x0, 0xf0, 0x138, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@empty, @ipv4=@local, 0x37, 0x3b, 0x1}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6e0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000007cc0)=[{{&(0x7f00000002c0)=@caif=@dbg, 0x80, &(0x7f0000000840)=[{&(0x7f0000000340)=""/251, 0xfb}, {&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000007ec0)=""/108, 0x6c}, {&(0x7f0000000600)=""/241, 0xf1}, {0x0}], 0x5, &(0x7f0000000b40)=""/234, 0xea}, 0xd9b9}, {{&(0x7f0000000c40)=@pppol2tpv3, 0x80, &(0x7f0000002340)=[{&(0x7f0000000cc0)=""/63, 0x3f}, {&(0x7f0000000d40)=""/232, 0xe8}, {&(0x7f0000000e40)=""/77, 0x4d}, {&(0x7f0000000ec0)=""/150, 0x96}, {&(0x7f0000000f80)=""/116, 0x74}, {&(0x7f0000001000)=""/212, 0xd4}, {0x0}, {&(0x7f00000012c0)=""/4096, 0x1000}, {0x0}], 0x9, &(0x7f00000000c0)=""/40, 0x28}, 0x7f}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000002480)=""/199, 0xc7}, {&(0x7f00000008c0)=""/55, 0x37}], 0x2, &(0x7f00000025c0)=""/157, 0x9d}, 0x9}, {{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002680)=""/238, 0xee}, {&(0x7f0000002780)=""/37, 0x25}, {&(0x7f00000027c0)=""/240, 0xf0}, {&(0x7f00000028c0)=""/10, 0xa}, {&(0x7f0000002900)=""/202, 0xca}, {&(0x7f0000002a00)=""/247, 0xf7}, {0x0}], 0x7, &(0x7f0000002c80)=""/184, 0xb8}, 0x7}, {{&(0x7f0000002d40)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f0000003040)=[{&(0x7f0000002dc0)=""/18, 0x12}, {&(0x7f0000002e00)=""/213, 0xd5}, {&(0x7f0000002f00)=""/62, 0x3e}, {0x0}, {0x0}, {&(0x7f0000002fc0)=""/31, 0x1f}, {&(0x7f0000003000)}], 0x7, &(0x7f00000030c0)=""/191, 0xbf}}, {{&(0x7f0000003180)=@vsock, 0x80, &(0x7f0000004400)=[{&(0x7f0000007f40)=""/215, 0xd7}, {&(0x7f0000004300)=""/34, 0x22}, {&(0x7f0000004340)=""/28, 0x1c}, {&(0x7f0000004380)=""/108, 0x6c}], 0x4, &(0x7f0000004480)=""/222, 0xde}, 0x6}, {{&(0x7f0000004580)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000004a80)=[{&(0x7f0000004600)=""/120, 0x78}, {&(0x7f0000004700)=""/167, 0xa7}, {&(0x7f0000004800)=""/131, 0x83}, {0x0}, {&(0x7f0000004980)=""/212, 0xd4}], 0x5}, 0x8c2}, {{&(0x7f0000004b00)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000006cc0)=""/4096, 0x1000}, 0x52}], 0x8, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) write$UHID_DESTROY(r5, &(0x7f00000001c0), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x10001, 0xffff}, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x1) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000900)="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", 0x223, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 17:07:43 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xdc}, [@ldst]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x78) 17:07:43 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xdc}, [@ldst]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x78) 17:07:43 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xdc}, [@ldst]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x78) 17:07:43 executing program 1: socket$packet(0x11, 0x1000000000000002, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x280080, 0x0) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000100)) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x15, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, 0x0, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000007cc0)=[{{&(0x7f00000002c0)=@caif=@dbg, 0x80, &(0x7f0000000840)=[{&(0x7f0000000340)=""/251, 0xfb}, {&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000007ec0)=""/108, 0x6c}, {&(0x7f0000000600)=""/241, 0xf1}, {0x0}], 0x5, &(0x7f0000000b40)=""/234, 0xea}, 0xd9b9}, {{&(0x7f0000000c40)=@pppol2tpv3, 0x80, &(0x7f0000002340)=[{&(0x7f0000000d40)=""/232, 0xe8}, {&(0x7f0000000e40)=""/77, 0x4d}, {&(0x7f0000000ec0)=""/150, 0x96}, {&(0x7f0000000f80)=""/116, 0x74}, {&(0x7f0000001000)=""/212, 0xd4}, {0x0}, {&(0x7f00000012c0)=""/4096, 0x1000}, {0x0}], 0x8, &(0x7f00000000c0)=""/40, 0x28}, 0x7f}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000002480)=""/199, 0xc7}, {&(0x7f00000008c0)=""/55, 0x37}], 0x2, &(0x7f00000025c0)=""/157, 0x9d}, 0x9}, {{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002680)=""/238, 0xee}, {&(0x7f0000002780)=""/37, 0x25}, {&(0x7f00000027c0)=""/240, 0xf0}, {&(0x7f00000028c0)=""/10, 0xa}, {&(0x7f0000002900)=""/202, 0xca}, {&(0x7f0000002a00)=""/247, 0xf7}, {0x0}], 0x7, &(0x7f0000002c80)=""/184, 0xb8}, 0x7}, {{&(0x7f0000002d40)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f0000003040)=[{&(0x7f0000002dc0)=""/18, 0x12}, {&(0x7f0000002e00)=""/213, 0xd5}, {&(0x7f0000002f00)=""/62, 0x3e}, {0x0}, {0x0}, {&(0x7f0000002fc0)=""/31, 0x1f}, {&(0x7f0000003000)}], 0x7, &(0x7f00000030c0)=""/191, 0xbf}, 0x3}, {{&(0x7f0000003180)=@vsock, 0x80, &(0x7f0000004400)=[{&(0x7f0000007f40)=""/215, 0xd7}, {&(0x7f0000004300)=""/34, 0x22}, {&(0x7f0000004340)=""/28, 0x1c}, {&(0x7f0000004380)=""/108, 0x6c}], 0x4, &(0x7f0000004480)=""/222, 0xde}, 0x6}, {{&(0x7f0000004580)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000004a80)=[{&(0x7f0000004600)=""/120, 0x78}, {&(0x7f0000004700)=""/167, 0xa7}, {&(0x7f0000004800)=""/131, 0x83}, {0x0}, {&(0x7f0000004980)=""/212, 0xd4}], 0x5}, 0x8c2}, {{&(0x7f0000004b00)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000006cc0)=""/4096, 0x1000}, 0x52}], 0x8, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) write$UHID_DESTROY(r5, &(0x7f00000001c0), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x10001, 0xffff}, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x1) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000900)="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", 0x223, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 17:07:43 executing program 2: socket$packet(0x11, 0x1000000000000002, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x280080, 0x0) ioctl$RTC_VL_READ(r0, 0x80047013, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x15, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000003200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x680, 0x478, 0x210, 0x478, 0x0, 0x340, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x6, 0x0, {[{{@uncond, 0x0, 0xc8, 0x108}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "3c745d713ded54eb04d1bcfe4ec5e3722f760ca03b47ed1d735abcf07e43"}}, {{@uncond, 0x0, 0xc8, 0x108}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3, 0x38000, @ipv6=@rand_addr="f65360ce35d79792c798d9967e3df2d3", 0x4e21}}}, {{@ipv6={@empty, @mcast1, [0xffffff00, 0xffffff00, 0xff, 0xff000000], [0xff, 0x0, 0x17fffff01, 0xffffffff], 'rose0\x00', 'ipddp0\x00', {}, {}, 0x67, 0x9, 0x4, 0x1}, 0x0, 0xf0, 0x130, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0xe}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x5, 0x5, @ipv6=@ipv4={[], [], @empty}, 0x4e21}}}, {{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@ipv6header={0x28, 'ipv6header\x00', 0x0, {0x40, 0x20, 0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@multicast2, @ipv6=@empty, 0x2e, 0x26, 0x9}}}, {{@ipv6={@mcast1, @remote, [0xffffffff, 0xff000000, 0x7f000080, 0xff000000], [0xffffff00, 0xffffff00], 'ip6tnl0\x00', 'ip6tnl0\x00', {}, {}, 0xff, 0x1, 0x0, 0x63}, 0x0, 0xf0, 0x138, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@empty, @ipv4=@local, 0x37, 0x3b, 0x1}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6e0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000007cc0)=[{{&(0x7f00000002c0)=@caif=@dbg, 0x80, &(0x7f0000000840)=[{&(0x7f0000000340)=""/251, 0xfb}, {&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000007ec0)=""/108, 0x6c}, {&(0x7f0000000600)=""/241, 0xf1}, {0x0}], 0x5, &(0x7f0000000b40)=""/234, 0xea}, 0xd9b9}, {{&(0x7f0000000c40)=@pppol2tpv3, 0x80, &(0x7f0000002340)=[{&(0x7f0000000cc0)=""/63, 0x3f}, {&(0x7f0000000d40)=""/232, 0xe8}, {&(0x7f0000000e40)=""/77, 0x4d}, {&(0x7f0000000ec0)=""/150, 0x96}, {&(0x7f0000000f80)=""/116, 0x74}, {&(0x7f0000001000)=""/212, 0xd4}, {0x0}, {&(0x7f00000012c0)=""/4096, 0x1000}, {0x0}], 0x9, &(0x7f00000000c0)=""/40, 0x28}, 0x7f}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000002480)=""/199, 0xc7}, {&(0x7f00000008c0)=""/55, 0x37}], 0x2, &(0x7f00000025c0)=""/157, 0x9d}, 0x9}, {{&(0x7f0000002d40)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f0000003040)=[{&(0x7f0000002dc0)=""/18, 0x12}, {&(0x7f0000002e00)=""/213, 0xd5}, {&(0x7f0000002f00)=""/62, 0x3e}, {0x0}, {0x0}, {&(0x7f0000002fc0)=""/31, 0x1f}, {&(0x7f0000003000)}], 0x7, &(0x7f00000030c0)=""/191, 0xbf}, 0x3}, {{&(0x7f0000003180)=@vsock, 0x80, &(0x7f0000004400)=[{&(0x7f0000007f40)=""/215, 0xd7}, {&(0x7f0000004300)=""/34, 0x22}, {&(0x7f0000004340)=""/28, 0x1c}, {&(0x7f0000004380)=""/108, 0x6c}], 0x4, &(0x7f0000004480)=""/222, 0xde}, 0x6}, {{&(0x7f0000004580)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000004a80)=[{&(0x7f0000004600)=""/120, 0x78}, {&(0x7f0000004700)=""/167, 0xa7}, {&(0x7f0000004800)=""/131, 0x83}, {0x0}, {&(0x7f0000004980)=""/212, 0xd4}], 0x5}, 0x8c2}, {{&(0x7f0000004b00)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000006cc0)=""/4096, 0x1000}, 0x52}], 0x7, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) write$UHID_DESTROY(r5, &(0x7f00000001c0), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x10001, 0xffff}, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x1) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000900)="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", 0x223, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 17:07:43 executing program 3: socket$packet(0x11, 0x1000000000000002, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x280080, 0x0) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000100)) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x15, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000003200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x680, 0x478, 0x210, 0x478, 0x0, 0x340, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x6, &(0x7f0000000580), {[{{@uncond, 0x0, 0xc8, 0x108}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "3c745d713ded54eb04d1bcfe4ec5e3722f760ca03b47ed1d735abcf07e43"}}, {{@uncond, 0x0, 0xc8, 0x108}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3, 0x38000, @ipv6=@rand_addr="f65360ce35d79792c798d9967e3df2d3", 0x4e21}}}, {{@ipv6={@empty, @mcast1, [0xffffff00, 0xffffff00, 0xff, 0xff000000], [0xff, 0x0, 0x17fffff01, 0xffffffff], 'rose0\x00', 'ipddp0\x00', {}, {}, 0x67, 0x9, 0x4, 0x1}, 0x0, 0xf0, 0x130, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0xe}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x5, 0x5, @ipv6=@ipv4={[], [], @empty}, 0x4e21}}}, {{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@ipv6header={0x28, 'ipv6header\x00', 0x0, {0x40, 0x20, 0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@multicast2, @ipv6=@empty, 0x2e, 0x26, 0x9}}}, {{@ipv6={@mcast1, @remote, [0xffffffff, 0xff000000, 0x7f000080, 0xff000000], [0xffffff00, 0xffffff00], 'ip6tnl0\x00', 'ip6tnl0\x00', {}, {}, 0xff, 0x1, 0x0, 0x63}, 0x0, 0xf0, 0x138, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@empty, @ipv4=@local, 0x37, 0x3b, 0x1}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6e0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000007cc0)=[{{&(0x7f00000002c0)=@caif=@dbg, 0x80, &(0x7f0000000840)=[{&(0x7f0000000340)=""/251, 0xfb}, {&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000007ec0)=""/108, 0x6c}, {&(0x7f0000000600)=""/241, 0xf1}, {0x0}], 0x5, &(0x7f0000000b40)=""/234, 0xea}, 0xd9b9}, {{&(0x7f0000000c40)=@pppol2tpv3, 0x80, &(0x7f0000002340)=[{&(0x7f0000000cc0)=""/63, 0x3f}, {&(0x7f0000000d40)=""/232, 0xe8}, {&(0x7f0000000e40)=""/77, 0x4d}, {&(0x7f0000000ec0)=""/150, 0x96}, {&(0x7f0000000f80)=""/116, 0x74}, {&(0x7f0000001000)=""/212, 0xd4}, {0x0}, {&(0x7f00000012c0)=""/4096, 0x1000}, {0x0}], 0x9, &(0x7f00000000c0)=""/40, 0x28}, 0x7f}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000002480)=""/199, 0xc7}, {&(0x7f00000008c0)=""/55, 0x37}], 0x2, &(0x7f00000025c0)=""/157, 0x9d}, 0x9}, {{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002680)=""/238, 0xee}, {&(0x7f0000002780)=""/37, 0x25}, {&(0x7f00000027c0)=""/240, 0xf0}, {&(0x7f00000028c0)=""/10, 0xa}, {&(0x7f0000002900)=""/202, 0xca}, {&(0x7f0000002a00)=""/247, 0xf7}], 0x6, &(0x7f0000002c80)=""/184, 0xb8}, 0x7}, {{&(0x7f0000002d40)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f0000003040)=[{&(0x7f0000002dc0)=""/18, 0x12}, {&(0x7f0000002e00)=""/213, 0xd5}, {&(0x7f0000002f00)=""/62, 0x3e}, {0x0}, {0x0}, {&(0x7f0000002fc0)=""/31, 0x1f}, {&(0x7f0000003000)}], 0x7, &(0x7f00000030c0)=""/191, 0xbf}, 0x3}, {{&(0x7f0000003180)=@vsock, 0x80, &(0x7f0000004400)=[{&(0x7f0000007f40)=""/215, 0xd7}, {&(0x7f0000004300)=""/34, 0x22}, {&(0x7f0000004340)=""/28, 0x1c}, {&(0x7f0000004380)=""/108, 0x6c}], 0x4, &(0x7f0000004480)=""/222, 0xde}, 0x6}, {{&(0x7f0000004580)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000004a80)=[{&(0x7f0000004600)=""/120, 0x78}, {&(0x7f0000004700)=""/167, 0xa7}, {&(0x7f0000004800)=""/131, 0x83}, {0x0}, {&(0x7f0000004980)=""/212, 0xd4}], 0x5}, 0x8c2}, {{&(0x7f0000004b00)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000006cc0)=""/4096, 0x1000}, 0x52}], 0x8, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) write$UHID_DESTROY(r5, &(0x7f00000001c0), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x10001, 0xffff}, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x1) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000900)="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", 0x223, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 17:07:44 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='bbr2', 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000040)={0x0, 0xfffffffffffffd96, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[], 0xfffffead}}, 0xff2f) recvmsg(r0, &(0x7f0000000880)={0x0, 0x36d, &(0x7f0000000540)=[{&(0x7f0000000380)=""/167, 0xffffff2f}, {&(0x7f0000000180)=""/75}, {&(0x7f0000000440)=""/225}, {&(0x7f0000000080)=""/12}, {&(0x7f0000000240)=""/22}], 0x1}, 0x0) 17:07:44 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xdc}, [@ldst]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) 17:07:44 executing program 0: socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RWSTAT(r2, &(0x7f00000000c0)={0xa863b37d6292c0fb}, 0x7) write(r1, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000280)) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r2) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r4, 0x541c, &(0x7f0000000080)) 17:07:44 executing program 2: socket$packet(0x11, 0x1000000000000002, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x280080, 0x0) ioctl$RTC_VL_READ(r0, 0x80047013, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x15, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000003200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x680, 0x478, 0x210, 0x478, 0x0, 0x340, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x6, 0x0, {[{{@uncond, 0x0, 0xc8, 0x108}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "3c745d713ded54eb04d1bcfe4ec5e3722f760ca03b47ed1d735abcf07e43"}}, {{@uncond, 0x0, 0xc8, 0x108}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3, 0x38000, @ipv6=@rand_addr="f65360ce35d79792c798d9967e3df2d3", 0x4e21}}}, {{@ipv6={@empty, @mcast1, [0xffffff00, 0xffffff00, 0xff, 0xff000000], [0xff, 0x0, 0x17fffff01, 0xffffffff], 'rose0\x00', 'ipddp0\x00', {}, {}, 0x67, 0x9, 0x4, 0x1}, 0x0, 0xf0, 0x130, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0xe}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x5, 0x5, @ipv6=@ipv4={[], [], @empty}, 0x4e21}}}, {{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@ipv6header={0x28, 'ipv6header\x00', 0x0, {0x40, 0x20, 0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@multicast2, @ipv6=@empty, 0x2e, 0x26, 0x9}}}, {{@ipv6={@mcast1, @remote, [0xffffffff, 0xff000000, 0x7f000080, 0xff000000], [0xffffff00, 0xffffff00], 'ip6tnl0\x00', 'ip6tnl0\x00', {}, {}, 0xff, 0x1, 0x0, 0x63}, 0x0, 0xf0, 0x138, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@empty, @ipv4=@local, 0x37, 0x3b, 0x1}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6e0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000007cc0)=[{{&(0x7f00000002c0)=@caif=@dbg, 0x80, &(0x7f0000000840)=[{&(0x7f0000000340)=""/251, 0xfb}, {&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000007ec0)=""/108, 0x6c}, {&(0x7f0000000600)=""/241, 0xf1}, {0x0}], 0x5, &(0x7f0000000b40)=""/234, 0xea}, 0xd9b9}, {{&(0x7f0000000c40)=@pppol2tpv3, 0x80, &(0x7f0000002340)=[{&(0x7f0000000cc0)=""/63, 0x3f}, {&(0x7f0000000d40)=""/232, 0xe8}, {&(0x7f0000000e40)=""/77, 0x4d}, {&(0x7f0000000ec0)=""/150, 0x96}, {&(0x7f0000000f80)=""/116, 0x74}, {&(0x7f0000001000)=""/212, 0xd4}, {0x0}, {&(0x7f00000012c0)=""/4096, 0x1000}, {0x0}], 0x9, &(0x7f00000000c0)=""/40, 0x28}, 0x7f}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000002480)=""/199, 0xc7}, {&(0x7f00000008c0)=""/55, 0x37}], 0x2, &(0x7f00000025c0)=""/157, 0x9d}, 0x9}, {{&(0x7f0000002d40)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f0000003040)=[{&(0x7f0000002dc0)=""/18, 0x12}, {&(0x7f0000002e00)=""/213, 0xd5}, {&(0x7f0000002f00)=""/62, 0x3e}, {0x0}, {0x0}, {&(0x7f0000002fc0)=""/31, 0x1f}, {&(0x7f0000003000)}], 0x7, &(0x7f00000030c0)=""/191, 0xbf}, 0x3}, {{&(0x7f0000003180)=@vsock, 0x80, &(0x7f0000004400)=[{&(0x7f0000007f40)=""/215, 0xd7}, {&(0x7f0000004300)=""/34, 0x22}, {&(0x7f0000004340)=""/28, 0x1c}, {&(0x7f0000004380)=""/108, 0x6c}], 0x4, &(0x7f0000004480)=""/222, 0xde}, 0x6}, {{&(0x7f0000004580)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000004a80)=[{&(0x7f0000004600)=""/120, 0x78}, {&(0x7f0000004700)=""/167, 0xa7}, {&(0x7f0000004800)=""/131, 0x83}, {0x0}, {&(0x7f0000004980)=""/212, 0xd4}], 0x5}, 0x8c2}, {{&(0x7f0000004b00)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000006cc0)=""/4096, 0x1000}, 0x52}], 0x7, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) write$UHID_DESTROY(r5, &(0x7f00000001c0), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x10001, 0xffff}, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x1) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000900)="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", 0x223, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 17:07:44 executing program 1: socket$packet(0x11, 0x1000000000000002, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x280080, 0x0) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000100)) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x15, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, 0x0, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000007cc0)=[{{&(0x7f00000002c0)=@caif=@dbg, 0x80, &(0x7f0000000840)=[{&(0x7f0000000340)=""/251, 0xfb}, {&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000007ec0)=""/108, 0x6c}, {&(0x7f0000000600)=""/241, 0xf1}, {0x0}], 0x5, &(0x7f0000000b40)=""/234, 0xea}, 0xd9b9}, {{&(0x7f0000000c40)=@pppol2tpv3, 0x80, &(0x7f0000002340)=[{&(0x7f0000000d40)=""/232, 0xe8}, {&(0x7f0000000e40)=""/77, 0x4d}, {&(0x7f0000000ec0)=""/150, 0x96}, {&(0x7f0000000f80)=""/116, 0x74}, {&(0x7f0000001000)=""/212, 0xd4}, {0x0}, {&(0x7f00000012c0)=""/4096, 0x1000}, {0x0}], 0x8, &(0x7f00000000c0)=""/40, 0x28}, 0x7f}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000002480)=""/199, 0xc7}, {&(0x7f00000008c0)=""/55, 0x37}], 0x2, &(0x7f00000025c0)=""/157, 0x9d}, 0x9}, {{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002680)=""/238, 0xee}, {&(0x7f0000002780)=""/37, 0x25}, {&(0x7f00000027c0)=""/240, 0xf0}, {&(0x7f00000028c0)=""/10, 0xa}, {&(0x7f0000002900)=""/202, 0xca}, {&(0x7f0000002a00)=""/247, 0xf7}, {0x0}], 0x7, &(0x7f0000002c80)=""/184, 0xb8}, 0x7}, {{&(0x7f0000002d40)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f0000003040)=[{&(0x7f0000002dc0)=""/18, 0x12}, {&(0x7f0000002e00)=""/213, 0xd5}, {&(0x7f0000002f00)=""/62, 0x3e}, {0x0}, {0x0}, {&(0x7f0000002fc0)=""/31, 0x1f}, {&(0x7f0000003000)}], 0x7, &(0x7f00000030c0)=""/191, 0xbf}, 0x3}, {{&(0x7f0000003180)=@vsock, 0x80, &(0x7f0000004400)=[{&(0x7f0000007f40)=""/215, 0xd7}, {&(0x7f0000004300)=""/34, 0x22}, {&(0x7f0000004340)=""/28, 0x1c}, {&(0x7f0000004380)=""/108, 0x6c}], 0x4, &(0x7f0000004480)=""/222, 0xde}, 0x6}, {{&(0x7f0000004580)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000004a80)=[{&(0x7f0000004600)=""/120, 0x78}, {&(0x7f0000004700)=""/167, 0xa7}, {&(0x7f0000004800)=""/131, 0x83}, {0x0}, {&(0x7f0000004980)=""/212, 0xd4}], 0x5}, 0x8c2}, {{&(0x7f0000004b00)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000006cc0)=""/4096, 0x1000}, 0x52}], 0x8, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) write$UHID_DESTROY(r5, &(0x7f00000001c0), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x10001, 0xffff}, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x1) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000900)="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", 0x223, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 17:07:44 executing program 3: socket$packet(0x11, 0x1000000000000002, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x280080, 0x0) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000100)) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x15, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000003200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x680, 0x478, 0x210, 0x478, 0x0, 0x340, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x6, &(0x7f0000000580), {[{{@uncond, 0x0, 0xc8, 0x108}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "3c745d713ded54eb04d1bcfe4ec5e3722f760ca03b47ed1d735abcf07e43"}}, {{@uncond, 0x0, 0xc8, 0x108}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3, 0x38000, @ipv6=@rand_addr="f65360ce35d79792c798d9967e3df2d3", 0x4e21}}}, {{@ipv6={@empty, @mcast1, [0xffffff00, 0xffffff00, 0xff, 0xff000000], [0xff, 0x0, 0x17fffff01, 0xffffffff], 'rose0\x00', 'ipddp0\x00', {}, {}, 0x67, 0x9, 0x4, 0x1}, 0x0, 0xf0, 0x130, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0xe}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x5, 0x5, @ipv6=@ipv4={[], [], @empty}, 0x4e21}}}, {{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@ipv6header={0x28, 'ipv6header\x00', 0x0, {0x40, 0x20, 0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@multicast2, @ipv6=@empty, 0x2e, 0x26, 0x9}}}, {{@ipv6={@mcast1, @remote, [0xffffffff, 0xff000000, 0x7f000080, 0xff000000], [0xffffff00, 0xffffff00], 'ip6tnl0\x00', 'ip6tnl0\x00', {}, {}, 0xff, 0x1, 0x0, 0x63}, 0x0, 0xf0, 0x138, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@empty, @ipv4=@local, 0x37, 0x3b, 0x1}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6e0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000007cc0)=[{{&(0x7f00000002c0)=@caif=@dbg, 0x80, &(0x7f0000000840)=[{&(0x7f0000000340)=""/251, 0xfb}, {&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000007ec0)=""/108, 0x6c}, {&(0x7f0000000600)=""/241, 0xf1}, {0x0}], 0x5, &(0x7f0000000b40)=""/234, 0xea}, 0xd9b9}, {{&(0x7f0000000c40)=@pppol2tpv3, 0x80, &(0x7f0000002340)=[{&(0x7f0000000cc0)=""/63, 0x3f}, {&(0x7f0000000d40)=""/232, 0xe8}, {&(0x7f0000000e40)=""/77, 0x4d}, {&(0x7f0000000ec0)=""/150, 0x96}, {&(0x7f0000000f80)=""/116, 0x74}, {&(0x7f0000001000)=""/212, 0xd4}, {0x0}, {&(0x7f00000012c0)=""/4096, 0x1000}, {0x0}], 0x9, &(0x7f00000000c0)=""/40, 0x28}, 0x7f}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000002480)=""/199, 0xc7}, {&(0x7f00000008c0)=""/55, 0x37}], 0x2, &(0x7f00000025c0)=""/157, 0x9d}, 0x9}, {{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002680)=""/238, 0xee}, {&(0x7f0000002780)=""/37, 0x25}, {&(0x7f00000027c0)=""/240, 0xf0}, {&(0x7f00000028c0)=""/10, 0xa}, {&(0x7f0000002900)=""/202, 0xca}, {0x0}], 0x6, &(0x7f0000002c80)=""/184, 0xb8}, 0x7}, {{&(0x7f0000002d40)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f0000003040)=[{&(0x7f0000002dc0)=""/18, 0x12}, {&(0x7f0000002e00)=""/213, 0xd5}, {&(0x7f0000002f00)=""/62, 0x3e}, {0x0}, {0x0}, {&(0x7f0000002fc0)=""/31, 0x1f}, {&(0x7f0000003000)}], 0x7, &(0x7f00000030c0)=""/191, 0xbf}, 0x3}, {{&(0x7f0000003180)=@vsock, 0x80, &(0x7f0000004400)=[{&(0x7f0000007f40)=""/215, 0xd7}, {&(0x7f0000004300)=""/34, 0x22}, {&(0x7f0000004340)=""/28, 0x1c}, {&(0x7f0000004380)=""/108, 0x6c}], 0x4, &(0x7f0000004480)=""/222, 0xde}, 0x6}, {{&(0x7f0000004580)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000004a80)=[{&(0x7f0000004600)=""/120, 0x78}, {&(0x7f0000004700)=""/167, 0xa7}, {&(0x7f0000004800)=""/131, 0x83}, {0x0}, {&(0x7f0000004980)=""/212, 0xd4}], 0x5}, 0x8c2}, {{&(0x7f0000004b00)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000006cc0)=""/4096, 0x1000}, 0x52}], 0x8, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) write$UHID_DESTROY(r5, &(0x7f00000001c0), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x10001, 0xffff}, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x1) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000900)="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", 0x223, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 17:07:44 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xdc}, [@ldst]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) 17:07:44 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xdc}, [@ldst]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) 17:07:44 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='bbr2', 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000040)={0x0, 0xfffffffffffffd96, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[], 0xfffffead}}, 0xff2f) recvmsg(r0, &(0x7f0000000880)={0x0, 0x36d, &(0x7f0000000540)=[{&(0x7f0000000380)=""/167, 0xffffff2f}, {&(0x7f0000000180)=""/75}, {&(0x7f0000000440)=""/225}, {&(0x7f0000000080)=""/12}, {&(0x7f0000000240)=""/22}], 0x1}, 0x0) 17:07:44 executing program 4: sched_getscheduler(0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000400)=0x1000) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000004c0)={"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"}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:07:44 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='bbr2', 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000040)={0x0, 0xfffffffffffffd96, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[], 0xfffffead}}, 0xff2f) recvmsg(r0, &(0x7f0000000880)={0x0, 0x36d, &(0x7f0000000540)=[{&(0x7f0000000380)=""/167, 0xffffff2f}, {&(0x7f0000000180)=""/75}, {&(0x7f0000000440)=""/225}, {&(0x7f0000000080)=""/12}, {&(0x7f0000000240)=""/22}], 0x1}, 0x0) 17:07:44 executing program 1: socket$packet(0x11, 0x1000000000000002, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x280080, 0x0) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000100)) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x15, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, 0x0, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000007cc0)=[{{&(0x7f00000002c0)=@caif=@dbg, 0x80, &(0x7f0000000840)=[{&(0x7f0000000340)=""/251, 0xfb}, {&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000007ec0)=""/108, 0x6c}, {&(0x7f0000000600)=""/241, 0xf1}, {0x0}], 0x5, &(0x7f0000000b40)=""/234, 0xea}, 0xd9b9}, {{&(0x7f0000000c40)=@pppol2tpv3, 0x80, &(0x7f0000002340)=[{&(0x7f0000000d40)=""/232, 0xe8}, {&(0x7f0000000e40)=""/77, 0x4d}, {&(0x7f0000000ec0)=""/150, 0x96}, {&(0x7f0000000f80)=""/116, 0x74}, {&(0x7f0000001000)=""/212, 0xd4}, {0x0}, {&(0x7f00000012c0)=""/4096, 0x1000}, {0x0}], 0x8, &(0x7f00000000c0)=""/40, 0x28}, 0x7f}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000002480)=""/199, 0xc7}, {&(0x7f00000008c0)=""/55, 0x37}], 0x2, &(0x7f00000025c0)=""/157, 0x9d}, 0x9}, {{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002680)=""/238, 0xee}, {&(0x7f0000002780)=""/37, 0x25}, {&(0x7f00000027c0)=""/240, 0xf0}, {&(0x7f00000028c0)=""/10, 0xa}, {&(0x7f0000002900)=""/202, 0xca}, {&(0x7f0000002a00)=""/247, 0xf7}, {0x0}], 0x7, &(0x7f0000002c80)=""/184, 0xb8}, 0x7}, {{&(0x7f0000002d40)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f0000003040)=[{&(0x7f0000002dc0)=""/18, 0x12}, {&(0x7f0000002e00)=""/213, 0xd5}, {&(0x7f0000002f00)=""/62, 0x3e}, {0x0}, {0x0}, {&(0x7f0000002fc0)=""/31, 0x1f}, {&(0x7f0000003000)}], 0x7, &(0x7f00000030c0)=""/191, 0xbf}, 0x3}, {{&(0x7f0000003180)=@vsock, 0x80, &(0x7f0000004400)=[{&(0x7f0000007f40)=""/215, 0xd7}, {&(0x7f0000004300)=""/34, 0x22}, {&(0x7f0000004340)=""/28, 0x1c}, {&(0x7f0000004380)=""/108, 0x6c}], 0x4, &(0x7f0000004480)=""/222, 0xde}, 0x6}, {{&(0x7f0000004580)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000004a80)=[{&(0x7f0000004600)=""/120, 0x78}, {&(0x7f0000004700)=""/167, 0xa7}, {&(0x7f0000004800)=""/131, 0x83}, {0x0}, {&(0x7f0000004980)=""/212, 0xd4}], 0x5}, 0x8c2}, {{&(0x7f0000004b00)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000006cc0)=""/4096, 0x1000}, 0x52}], 0x8, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) write$UHID_DESTROY(r5, &(0x7f00000001c0), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x10001, 0xffff}, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x1) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000900)="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", 0x223, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 17:07:44 executing program 3: socket$packet(0x11, 0x1000000000000002, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x280080, 0x0) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000100)) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x15, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000003200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x680, 0x478, 0x210, 0x478, 0x0, 0x340, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x6, &(0x7f0000000580), {[{{@uncond, 0x0, 0xc8, 0x108}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "3c745d713ded54eb04d1bcfe4ec5e3722f760ca03b47ed1d735abcf07e43"}}, {{@uncond, 0x0, 0xc8, 0x108}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3, 0x38000, @ipv6=@rand_addr="f65360ce35d79792c798d9967e3df2d3", 0x4e21}}}, {{@ipv6={@empty, @mcast1, [0xffffff00, 0xffffff00, 0xff, 0xff000000], [0xff, 0x0, 0x17fffff01, 0xffffffff], 'rose0\x00', 'ipddp0\x00', {}, {}, 0x67, 0x9, 0x4, 0x1}, 0x0, 0xf0, 0x130, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0xe}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x5, 0x5, @ipv6=@ipv4={[], [], @empty}, 0x4e21}}}, {{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@ipv6header={0x28, 'ipv6header\x00', 0x0, {0x40, 0x20, 0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@multicast2, @ipv6=@empty, 0x2e, 0x26, 0x9}}}, {{@ipv6={@mcast1, @remote, [0xffffffff, 0xff000000, 0x7f000080, 0xff000000], [0xffffff00, 0xffffff00], 'ip6tnl0\x00', 'ip6tnl0\x00', {}, {}, 0xff, 0x1, 0x0, 0x63}, 0x0, 0xf0, 0x138, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@empty, @ipv4=@local, 0x37, 0x3b, 0x1}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6e0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000007cc0)=[{{&(0x7f00000002c0)=@caif=@dbg, 0x80, &(0x7f0000000840)=[{&(0x7f0000000340)=""/251, 0xfb}, {&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000007ec0)=""/108, 0x6c}, {&(0x7f0000000600)=""/241, 0xf1}, {0x0}], 0x5, &(0x7f0000000b40)=""/234, 0xea}, 0xd9b9}, {{&(0x7f0000000c40)=@pppol2tpv3, 0x80, &(0x7f0000002340)=[{&(0x7f0000000cc0)=""/63, 0x3f}, {&(0x7f0000000d40)=""/232, 0xe8}, {&(0x7f0000000e40)=""/77, 0x4d}, {&(0x7f0000000ec0)=""/150, 0x96}, {&(0x7f0000000f80)=""/116, 0x74}, {&(0x7f0000001000)=""/212, 0xd4}, {0x0}, {&(0x7f00000012c0)=""/4096, 0x1000}, {0x0}], 0x9, &(0x7f00000000c0)=""/40, 0x28}, 0x7f}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000002480)=""/199, 0xc7}, {&(0x7f00000008c0)=""/55, 0x37}], 0x2, &(0x7f00000025c0)=""/157, 0x9d}, 0x9}, {{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002680)=""/238, 0xee}, {&(0x7f0000002780)=""/37, 0x25}, {&(0x7f00000027c0)=""/240, 0xf0}, {&(0x7f00000028c0)=""/10, 0xa}, {&(0x7f0000002900)=""/202, 0xca}, {0x0}], 0x6, &(0x7f0000002c80)=""/184, 0xb8}, 0x7}, {{&(0x7f0000002d40)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f0000003040)=[{&(0x7f0000002dc0)=""/18, 0x12}, {&(0x7f0000002e00)=""/213, 0xd5}, {&(0x7f0000002f00)=""/62, 0x3e}, {0x0}, {0x0}, {&(0x7f0000002fc0)=""/31, 0x1f}, {&(0x7f0000003000)}], 0x7, &(0x7f00000030c0)=""/191, 0xbf}, 0x3}, {{&(0x7f0000003180)=@vsock, 0x80, &(0x7f0000004400)=[{&(0x7f0000007f40)=""/215, 0xd7}, {&(0x7f0000004300)=""/34, 0x22}, {&(0x7f0000004340)=""/28, 0x1c}, {&(0x7f0000004380)=""/108, 0x6c}], 0x4, &(0x7f0000004480)=""/222, 0xde}, 0x6}, {{&(0x7f0000004580)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000004a80)=[{&(0x7f0000004600)=""/120, 0x78}, {&(0x7f0000004700)=""/167, 0xa7}, {&(0x7f0000004800)=""/131, 0x83}, {0x0}, {&(0x7f0000004980)=""/212, 0xd4}], 0x5}, 0x8c2}, {{&(0x7f0000004b00)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000006cc0)=""/4096, 0x1000}, 0x52}], 0x8, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) write$UHID_DESTROY(r5, &(0x7f00000001c0), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x10001, 0xffff}, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x1) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000900)="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", 0x223, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 17:07:44 executing program 2: socket$packet(0x11, 0x1000000000000002, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x280080, 0x0) ioctl$RTC_VL_READ(r0, 0x80047013, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x15, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000003200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x680, 0x478, 0x210, 0x478, 0x0, 0x340, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x6, 0x0, {[{{@uncond, 0x0, 0xc8, 0x108}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "3c745d713ded54eb04d1bcfe4ec5e3722f760ca03b47ed1d735abcf07e43"}}, {{@uncond, 0x0, 0xc8, 0x108}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3, 0x38000, @ipv6=@rand_addr="f65360ce35d79792c798d9967e3df2d3", 0x4e21}}}, {{@ipv6={@empty, @mcast1, [0xffffff00, 0xffffff00, 0xff, 0xff000000], [0xff, 0x0, 0x17fffff01, 0xffffffff], 'rose0\x00', 'ipddp0\x00', {}, {}, 0x67, 0x9, 0x4, 0x1}, 0x0, 0xf0, 0x130, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0xe}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x5, 0x5, @ipv6=@ipv4={[], [], @empty}, 0x4e21}}}, {{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@ipv6header={0x28, 'ipv6header\x00', 0x0, {0x40, 0x20, 0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@multicast2, @ipv6=@empty, 0x2e, 0x26, 0x9}}}, {{@ipv6={@mcast1, @remote, [0xffffffff, 0xff000000, 0x7f000080, 0xff000000], [0xffffff00, 0xffffff00], 'ip6tnl0\x00', 'ip6tnl0\x00', {}, {}, 0xff, 0x1, 0x0, 0x63}, 0x0, 0xf0, 0x138, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@empty, @ipv4=@local, 0x37, 0x3b, 0x1}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6e0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000007cc0)=[{{&(0x7f00000002c0)=@caif=@dbg, 0x80, &(0x7f0000000840)=[{&(0x7f0000000340)=""/251, 0xfb}, {&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000007ec0)=""/108, 0x6c}, {&(0x7f0000000600)=""/241, 0xf1}, {0x0}], 0x5, &(0x7f0000000b40)=""/234, 0xea}, 0xd9b9}, {{&(0x7f0000000c40)=@pppol2tpv3, 0x80, &(0x7f0000002340)=[{&(0x7f0000000cc0)=""/63, 0x3f}, {&(0x7f0000000d40)=""/232, 0xe8}, {&(0x7f0000000e40)=""/77, 0x4d}, {&(0x7f0000000ec0)=""/150, 0x96}, {&(0x7f0000000f80)=""/116, 0x74}, {&(0x7f0000001000)=""/212, 0xd4}, {0x0}, {&(0x7f00000012c0)=""/4096, 0x1000}, {0x0}], 0x9, &(0x7f00000000c0)=""/40, 0x28}, 0x7f}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000002480)=""/199, 0xc7}, {&(0x7f00000008c0)=""/55, 0x37}], 0x2, &(0x7f00000025c0)=""/157, 0x9d}, 0x9}, {{&(0x7f0000002d40)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f0000003040)=[{&(0x7f0000002dc0)=""/18, 0x12}, {&(0x7f0000002e00)=""/213, 0xd5}, {&(0x7f0000002f00)=""/62, 0x3e}, {0x0}, {0x0}, {&(0x7f0000002fc0)=""/31, 0x1f}, {&(0x7f0000003000)}], 0x7, &(0x7f00000030c0)=""/191, 0xbf}, 0x3}, {{&(0x7f0000003180)=@vsock, 0x80, &(0x7f0000004400)=[{&(0x7f0000007f40)=""/215, 0xd7}, {&(0x7f0000004300)=""/34, 0x22}, {&(0x7f0000004340)=""/28, 0x1c}, {&(0x7f0000004380)=""/108, 0x6c}], 0x4, &(0x7f0000004480)=""/222, 0xde}, 0x6}, {{&(0x7f0000004580)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000004a80)=[{&(0x7f0000004600)=""/120, 0x78}, {&(0x7f0000004700)=""/167, 0xa7}, {&(0x7f0000004800)=""/131, 0x83}, {0x0}, {&(0x7f0000004980)=""/212, 0xd4}], 0x5}, 0x8c2}, {{&(0x7f0000004b00)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000006cc0)=""/4096, 0x1000}, 0x52}], 0x7, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) write$UHID_DESTROY(r5, &(0x7f00000001c0), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x10001, 0xffff}, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x1) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000900)="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", 0x223, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 17:07:45 executing program 0: socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RWSTAT(r2, &(0x7f00000000c0)={0xa863b37d6292c0fb}, 0x7) write(r1, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000280)) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r2) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r4, 0x541c, &(0x7f0000000080)) 17:07:45 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='bbr2', 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000040)={0x0, 0xfffffffffffffd96, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[], 0xfffffead}}, 0xff2f) recvmsg(r0, &(0x7f0000000880)={0x0, 0x36d, &(0x7f0000000540)=[{&(0x7f0000000380)=""/167, 0xffffff2f}, {&(0x7f0000000180)=""/75}, {&(0x7f0000000440)=""/225}, {&(0x7f0000000080)=""/12}, {&(0x7f0000000240)=""/22}], 0x1}, 0x0) 17:07:45 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000007a00)=[{{&(0x7f0000000240)=@ipx, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)=""/139, 0x8b}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x62, 0x0) 17:07:45 executing program 1: socket$packet(0x11, 0x1000000000000002, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x280080, 0x0) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000100)) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x15, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, 0x0, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000007cc0)=[{{&(0x7f00000002c0)=@caif=@dbg, 0x80, &(0x7f0000000840)=[{&(0x7f0000000340)=""/251, 0xfb}, {&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000007ec0)=""/108, 0x6c}, {&(0x7f0000000600)=""/241, 0xf1}, {0x0}], 0x5, &(0x7f0000000b40)=""/234, 0xea}, 0xd9b9}, {{&(0x7f0000000c40)=@pppol2tpv3, 0x80, &(0x7f0000002340)=[{0x0}, {&(0x7f0000000d40)=""/232, 0xe8}, {&(0x7f0000000e40)=""/77, 0x4d}, {&(0x7f0000000ec0)=""/150, 0x96}, {&(0x7f0000000f80)=""/116, 0x74}, {&(0x7f0000001000)=""/212, 0xd4}, {0x0}, {&(0x7f00000012c0)=""/4096, 0x1000}, {0x0}], 0x9, &(0x7f00000000c0)=""/40, 0x28}, 0x7f}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000002480)=""/199, 0xc7}, {&(0x7f00000008c0)=""/55, 0x37}], 0x2, &(0x7f00000025c0)=""/157, 0x9d}, 0x9}, {{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002680)=""/238, 0xee}, {&(0x7f0000002780)=""/37, 0x25}, {&(0x7f00000027c0)=""/240, 0xf0}, {&(0x7f00000028c0)=""/10, 0xa}, {&(0x7f0000002900)=""/202, 0xca}, {&(0x7f0000002a00)=""/247, 0xf7}, {0x0}], 0x7, &(0x7f0000002c80)=""/184, 0xb8}, 0x7}, {{&(0x7f0000002d40)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f0000003040)=[{&(0x7f0000002dc0)=""/18, 0x12}, {&(0x7f0000002e00)=""/213, 0xd5}, {&(0x7f0000002f00)=""/62, 0x3e}, {0x0}, {0x0}, {&(0x7f0000002fc0)=""/31, 0x1f}, {&(0x7f0000003000)}], 0x7, &(0x7f00000030c0)=""/191, 0xbf}, 0x3}, {{&(0x7f0000003180)=@vsock, 0x80, &(0x7f0000004400)=[{&(0x7f0000007f40)=""/215, 0xd7}, {&(0x7f0000004300)=""/34, 0x22}, {&(0x7f0000004340)=""/28, 0x1c}, {&(0x7f0000004380)=""/108, 0x6c}], 0x4, &(0x7f0000004480)=""/222, 0xde}, 0x6}, {{&(0x7f0000004580)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000004a80)=[{&(0x7f0000004600)=""/120, 0x78}, {&(0x7f0000004700)=""/167, 0xa7}, {&(0x7f0000004800)=""/131, 0x83}, {0x0}, {&(0x7f0000004980)=""/212, 0xd4}], 0x5}, 0x8c2}, {{&(0x7f0000004b00)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000006cc0)=""/4096, 0x1000}, 0x52}], 0x8, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) write$UHID_DESTROY(r5, &(0x7f00000001c0), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x10001, 0xffff}, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x1) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000900)="585ccbc4ed83b836c1a6474914dc5500b66147b3c7218a91690000000042e3d35228897501f93191b076ac446ff0022b8753a1fa748c569f435fb3bae96efb74b50ec93c2db8eae3198a29e5c0cfc60000ce0637cef580b4ec61221adf59be045b70e48884ca000018cea71fcfed06fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff33c1e8e036e5031949762d009d308bd73f477252d0000000000004000000000000000000000000000000000195e23fb4430a9a4c2850b6380a743d6ea0c3b121f66c716d746aa81c301621b7662c06aae720b872d4b7828e3b48522c673aa6cb366d4201e2aee3261eb52f14533b7a54203cf9a4fa587c0385cdba539e9bd34717b0dfab09db7b064fbe2ecf9f40fa3a4015d0d0db3f9d562686fcdc3342c88c6f1b6f11449f8aeabf54c5533ec6acc2270d41713ae1538256af3719a07f55223a6eaa7c1eae5d6efa12fe95e2b0f1c500b28c5c76e731d5250e395526d04063718f448e62d4dd7cefeed6b72b31b894093aa37337784c00d68a4185f349e41455f12d31aa2d0ff79a4d69d97421a0042f0c7a664a8c4945104b25dc49be950c5af7405b86482d7314fcc3a0ad5eb24268ccd24a2996019f7c006a0b3c39c7b98c5a5406a2e4ff6d9c0ce12c4251756a667b4731c4b0eb5dc7d4381fecf196c4404b54c3c11c48f09734d9a6842f52d3307a688208b7a4681b101e1abe5fecfca1f464c03e933cbd15ab589ccd3c559542355190522a712b8f5128a6a00", 0x223, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 17:07:45 executing program 3: socket$packet(0x11, 0x1000000000000002, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x280080, 0x0) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000100)) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x15, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000003200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x680, 0x478, 0x210, 0x478, 0x0, 0x340, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x6, &(0x7f0000000580), {[{{@uncond, 0x0, 0xc8, 0x108}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "3c745d713ded54eb04d1bcfe4ec5e3722f760ca03b47ed1d735abcf07e43"}}, {{@uncond, 0x0, 0xc8, 0x108}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3, 0x38000, @ipv6=@rand_addr="f65360ce35d79792c798d9967e3df2d3", 0x4e21}}}, {{@ipv6={@empty, @mcast1, [0xffffff00, 0xffffff00, 0xff, 0xff000000], [0xff, 0x0, 0x17fffff01, 0xffffffff], 'rose0\x00', 'ipddp0\x00', {}, {}, 0x67, 0x9, 0x4, 0x1}, 0x0, 0xf0, 0x130, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0xe}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x5, 0x5, @ipv6=@ipv4={[], [], @empty}, 0x4e21}}}, {{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@ipv6header={0x28, 'ipv6header\x00', 0x0, {0x40, 0x20, 0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@multicast2, @ipv6=@empty, 0x2e, 0x26, 0x9}}}, {{@ipv6={@mcast1, @remote, [0xffffffff, 0xff000000, 0x7f000080, 0xff000000], [0xffffff00, 0xffffff00], 'ip6tnl0\x00', 'ip6tnl0\x00', {}, {}, 0xff, 0x1, 0x0, 0x63}, 0x0, 0xf0, 0x138, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@empty, @ipv4=@local, 0x37, 0x3b, 0x1}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6e0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000007cc0)=[{{&(0x7f00000002c0)=@caif=@dbg, 0x80, &(0x7f0000000840)=[{&(0x7f0000000340)=""/251, 0xfb}, {&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000007ec0)=""/108, 0x6c}, {&(0x7f0000000600)=""/241, 0xf1}, {0x0}], 0x5, &(0x7f0000000b40)=""/234, 0xea}, 0xd9b9}, {{&(0x7f0000000c40)=@pppol2tpv3, 0x80, &(0x7f0000002340)=[{&(0x7f0000000cc0)=""/63, 0x3f}, {&(0x7f0000000d40)=""/232, 0xe8}, {&(0x7f0000000e40)=""/77, 0x4d}, {&(0x7f0000000ec0)=""/150, 0x96}, {&(0x7f0000000f80)=""/116, 0x74}, {&(0x7f0000001000)=""/212, 0xd4}, {0x0}, {&(0x7f00000012c0)=""/4096, 0x1000}, {0x0}], 0x9, &(0x7f00000000c0)=""/40, 0x28}, 0x7f}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000002480)=""/199, 0xc7}, {&(0x7f00000008c0)=""/55, 0x37}], 0x2, &(0x7f00000025c0)=""/157, 0x9d}, 0x9}, {{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002680)=""/238, 0xee}, {&(0x7f0000002780)=""/37, 0x25}, {&(0x7f00000027c0)=""/240, 0xf0}, {&(0x7f00000028c0)=""/10, 0xa}, {&(0x7f0000002900)=""/202, 0xca}, {0x0}], 0x6, &(0x7f0000002c80)=""/184, 0xb8}, 0x7}, {{&(0x7f0000002d40)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f0000003040)=[{&(0x7f0000002dc0)=""/18, 0x12}, {&(0x7f0000002e00)=""/213, 0xd5}, {&(0x7f0000002f00)=""/62, 0x3e}, {0x0}, {0x0}, {&(0x7f0000002fc0)=""/31, 0x1f}, {&(0x7f0000003000)}], 0x7, &(0x7f00000030c0)=""/191, 0xbf}, 0x3}, {{&(0x7f0000003180)=@vsock, 0x80, &(0x7f0000004400)=[{&(0x7f0000007f40)=""/215, 0xd7}, {&(0x7f0000004300)=""/34, 0x22}, {&(0x7f0000004340)=""/28, 0x1c}, {&(0x7f0000004380)=""/108, 0x6c}], 0x4, &(0x7f0000004480)=""/222, 0xde}, 0x6}, {{&(0x7f0000004580)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000004a80)=[{&(0x7f0000004600)=""/120, 0x78}, {&(0x7f0000004700)=""/167, 0xa7}, {&(0x7f0000004800)=""/131, 0x83}, {0x0}, {&(0x7f0000004980)=""/212, 0xd4}], 0x5}, 0x8c2}, {{&(0x7f0000004b00)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000006cc0)=""/4096, 0x1000}, 0x52}], 0x8, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) write$UHID_DESTROY(r5, &(0x7f00000001c0), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x10001, 0xffff}, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x1) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000900)="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", 0x223, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 17:07:45 executing program 2: socket$packet(0x11, 0x1000000000000002, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x280080, 0x0) ioctl$RTC_VL_READ(r0, 0x80047013, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x15, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000003200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x680, 0x478, 0x210, 0x478, 0x0, 0x340, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x6, 0x0, {[{{@uncond, 0x0, 0xc8, 0x108}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "3c745d713ded54eb04d1bcfe4ec5e3722f760ca03b47ed1d735abcf07e43"}}, {{@uncond, 0x0, 0xc8, 0x108}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3, 0x38000, @ipv6=@rand_addr="f65360ce35d79792c798d9967e3df2d3", 0x4e21}}}, {{@ipv6={@empty, @mcast1, [0xffffff00, 0xffffff00, 0xff, 0xff000000], [0xff, 0x0, 0x17fffff01, 0xffffffff], 'rose0\x00', 'ipddp0\x00', {}, {}, 0x67, 0x9, 0x4, 0x1}, 0x0, 0xf0, 0x130, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0xe}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x5, 0x5, @ipv6=@ipv4={[], [], @empty}, 0x4e21}}}, {{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@ipv6header={0x28, 'ipv6header\x00', 0x0, {0x40, 0x20, 0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@multicast2, @ipv6=@empty, 0x2e, 0x26, 0x9}}}, {{@ipv6={@mcast1, @remote, [0xffffffff, 0xff000000, 0x7f000080, 0xff000000], [0xffffff00, 0xffffff00], 'ip6tnl0\x00', 'ip6tnl0\x00', {}, {}, 0xff, 0x1, 0x0, 0x63}, 0x0, 0xf0, 0x138, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@empty, @ipv4=@local, 0x37, 0x3b, 0x1}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6e0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000007cc0)=[{{&(0x7f00000002c0)=@caif=@dbg, 0x80, &(0x7f0000000840)=[{&(0x7f0000000340)=""/251, 0xfb}, {&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000007ec0)=""/108, 0x6c}, {&(0x7f0000000600)=""/241, 0xf1}, {0x0}], 0x5, &(0x7f0000000b40)=""/234, 0xea}, 0xd9b9}, {{&(0x7f0000000c40)=@pppol2tpv3, 0x80, &(0x7f0000002340)=[{&(0x7f0000000cc0)=""/63, 0x3f}, {&(0x7f0000000d40)=""/232, 0xe8}, {&(0x7f0000000e40)=""/77, 0x4d}, {&(0x7f0000000ec0)=""/150, 0x96}, {&(0x7f0000000f80)=""/116, 0x74}, {&(0x7f0000001000)=""/212, 0xd4}, {0x0}, {&(0x7f00000012c0)=""/4096, 0x1000}, {0x0}], 0x9, &(0x7f00000000c0)=""/40, 0x28}, 0x7f}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000002480)=""/199, 0xc7}, {&(0x7f00000008c0)=""/55, 0x37}], 0x2, &(0x7f00000025c0)=""/157, 0x9d}, 0x9}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002c80)=""/184, 0xb8}, 0x7}, {{&(0x7f0000002d40)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f0000003040)=[{&(0x7f0000002dc0)=""/18, 0x12}, {&(0x7f0000002e00)=""/213, 0xd5}, {&(0x7f0000002f00)=""/62, 0x3e}, {0x0}, {0x0}, {&(0x7f0000002fc0)=""/31, 0x1f}, {&(0x7f0000003000)}], 0x7, &(0x7f00000030c0)=""/191, 0xbf}, 0x3}, {{&(0x7f0000003180)=@vsock, 0x80, &(0x7f0000004400)=[{&(0x7f0000007f40)=""/215, 0xd7}, {&(0x7f0000004300)=""/34, 0x22}, {&(0x7f0000004340)=""/28, 0x1c}, {&(0x7f0000004380)=""/108, 0x6c}], 0x4, &(0x7f0000004480)=""/222, 0xde}, 0x6}, {{&(0x7f0000004580)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000004a80)=[{&(0x7f0000004600)=""/120, 0x78}, {&(0x7f0000004700)=""/167, 0xa7}, {&(0x7f0000004800)=""/131, 0x83}, {0x0}, {&(0x7f0000004980)=""/212, 0xd4}], 0x5}, 0x8c2}, {{&(0x7f0000004b00)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000006cc0)=""/4096, 0x1000}, 0x52}], 0x8, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) write$UHID_DESTROY(r5, &(0x7f00000001c0), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x10001, 0xffff}, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x1) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000900)="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", 0x223, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 17:07:45 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000700)='reno\x00', 0x5) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000)=0x16c, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4091, 0xffb}], 0x1, &(0x7f0000000200)=""/20, 0x3, 0x3e8}, 0x100) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x4e23, 0x3, @loopback, 0x7}, {0xa, 0x4e23, 0xffff, @empty, 0x7}, 0x4, [0x4f, 0x30, 0x4, 0xfffffff9, 0x1, 0x227, 0x4, 0x9ff]}, 0x5c) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000002c0)='./file0/file0\x00', r2, &(0x7f0000000180)='./file0/file0\x00') ioctl$sock_inet_tcp_SIOCATMARK(r2, 0x8905, &(0x7f0000000140)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 17:07:45 executing program 1: socket$packet(0x11, 0x1000000000000002, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x280080, 0x0) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000100)) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x15, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, 0x0, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000007cc0)=[{{&(0x7f00000002c0)=@caif=@dbg, 0x80, &(0x7f0000000840)=[{&(0x7f0000000340)=""/251, 0xfb}, {&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000007ec0)=""/108, 0x6c}, {&(0x7f0000000600)=""/241, 0xf1}, {0x0}], 0x5, &(0x7f0000000b40)=""/234, 0xea}, 0xd9b9}, {{&(0x7f0000000c40)=@pppol2tpv3, 0x80, &(0x7f0000002340)=[{0x0}, {&(0x7f0000000d40)=""/232, 0xe8}, {&(0x7f0000000e40)=""/77, 0x4d}, {&(0x7f0000000ec0)=""/150, 0x96}, {&(0x7f0000000f80)=""/116, 0x74}, {&(0x7f0000001000)=""/212, 0xd4}, {0x0}, {&(0x7f00000012c0)=""/4096, 0x1000}, {0x0}], 0x9, &(0x7f00000000c0)=""/40, 0x28}, 0x7f}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000002480)=""/199, 0xc7}, {&(0x7f00000008c0)=""/55, 0x37}], 0x2, &(0x7f00000025c0)=""/157, 0x9d}, 0x9}, {{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002680)=""/238, 0xee}, {&(0x7f0000002780)=""/37, 0x25}, {&(0x7f00000027c0)=""/240, 0xf0}, {&(0x7f00000028c0)=""/10, 0xa}, {&(0x7f0000002900)=""/202, 0xca}, {&(0x7f0000002a00)=""/247, 0xf7}, {0x0}], 0x7, &(0x7f0000002c80)=""/184, 0xb8}, 0x7}, {{&(0x7f0000002d40)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f0000003040)=[{&(0x7f0000002dc0)=""/18, 0x12}, {&(0x7f0000002e00)=""/213, 0xd5}, {&(0x7f0000002f00)=""/62, 0x3e}, {0x0}, {0x0}, {&(0x7f0000002fc0)=""/31, 0x1f}, {&(0x7f0000003000)}], 0x7, &(0x7f00000030c0)=""/191, 0xbf}, 0x3}, {{&(0x7f0000003180)=@vsock, 0x80, &(0x7f0000004400)=[{&(0x7f0000007f40)=""/215, 0xd7}, {&(0x7f0000004300)=""/34, 0x22}, {&(0x7f0000004340)=""/28, 0x1c}, {&(0x7f0000004380)=""/108, 0x6c}], 0x4, &(0x7f0000004480)=""/222, 0xde}, 0x6}, {{&(0x7f0000004580)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000004a80)=[{&(0x7f0000004600)=""/120, 0x78}, {&(0x7f0000004700)=""/167, 0xa7}, {&(0x7f0000004800)=""/131, 0x83}, {0x0}, {&(0x7f0000004980)=""/212, 0xd4}], 0x5}, 0x8c2}, {{&(0x7f0000004b00)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000006cc0)=""/4096, 0x1000}, 0x52}], 0x8, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) write$UHID_DESTROY(r5, &(0x7f00000001c0), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x10001, 0xffff}, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x1) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000900)="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", 0x223, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 17:07:45 executing program 2: socket$packet(0x11, 0x1000000000000002, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x280080, 0x0) ioctl$RTC_VL_READ(r0, 0x80047013, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x15, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000003200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x680, 0x478, 0x210, 0x478, 0x0, 0x340, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x6, 0x0, {[{{@uncond, 0x0, 0xc8, 0x108}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "3c745d713ded54eb04d1bcfe4ec5e3722f760ca03b47ed1d735abcf07e43"}}, {{@uncond, 0x0, 0xc8, 0x108}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3, 0x38000, @ipv6=@rand_addr="f65360ce35d79792c798d9967e3df2d3", 0x4e21}}}, {{@ipv6={@empty, @mcast1, [0xffffff00, 0xffffff00, 0xff, 0xff000000], [0xff, 0x0, 0x17fffff01, 0xffffffff], 'rose0\x00', 'ipddp0\x00', {}, {}, 0x67, 0x9, 0x4, 0x1}, 0x0, 0xf0, 0x130, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0xe}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x5, 0x5, @ipv6=@ipv4={[], [], @empty}, 0x4e21}}}, {{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@ipv6header={0x28, 'ipv6header\x00', 0x0, {0x40, 0x20, 0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@multicast2, @ipv6=@empty, 0x2e, 0x26, 0x9}}}, {{@ipv6={@mcast1, @remote, [0xffffffff, 0xff000000, 0x7f000080, 0xff000000], [0xffffff00, 0xffffff00], 'ip6tnl0\x00', 'ip6tnl0\x00', {}, {}, 0xff, 0x1, 0x0, 0x63}, 0x0, 0xf0, 0x138, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@empty, @ipv4=@local, 0x37, 0x3b, 0x1}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6e0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000007cc0)=[{{&(0x7f00000002c0)=@caif=@dbg, 0x80, &(0x7f0000000840)=[{&(0x7f0000000340)=""/251, 0xfb}, {&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000007ec0)=""/108, 0x6c}, {&(0x7f0000000600)=""/241, 0xf1}, {0x0}], 0x5, &(0x7f0000000b40)=""/234, 0xea}, 0xd9b9}, {{&(0x7f0000000c40)=@pppol2tpv3, 0x80, &(0x7f0000002340)=[{&(0x7f0000000cc0)=""/63, 0x3f}, {&(0x7f0000000d40)=""/232, 0xe8}, {&(0x7f0000000e40)=""/77, 0x4d}, {&(0x7f0000000ec0)=""/150, 0x96}, {&(0x7f0000000f80)=""/116, 0x74}, {&(0x7f0000001000)=""/212, 0xd4}, {0x0}, {&(0x7f00000012c0)=""/4096, 0x1000}, {0x0}], 0x9, &(0x7f00000000c0)=""/40, 0x28}, 0x7f}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000002480)=""/199, 0xc7}, {&(0x7f00000008c0)=""/55, 0x37}], 0x2, &(0x7f00000025c0)=""/157, 0x9d}, 0x9}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002c80)=""/184, 0xb8}, 0x7}, {{&(0x7f0000002d40)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f0000003040)=[{&(0x7f0000002dc0)=""/18, 0x12}, {&(0x7f0000002e00)=""/213, 0xd5}, {&(0x7f0000002f00)=""/62, 0x3e}, {0x0}, {0x0}, {&(0x7f0000002fc0)=""/31, 0x1f}, {&(0x7f0000003000)}], 0x7, &(0x7f00000030c0)=""/191, 0xbf}, 0x3}, {{&(0x7f0000003180)=@vsock, 0x80, &(0x7f0000004400)=[{&(0x7f0000007f40)=""/215, 0xd7}, {&(0x7f0000004300)=""/34, 0x22}, {&(0x7f0000004340)=""/28, 0x1c}, {&(0x7f0000004380)=""/108, 0x6c}], 0x4, &(0x7f0000004480)=""/222, 0xde}, 0x6}, {{&(0x7f0000004580)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000004a80)=[{&(0x7f0000004600)=""/120, 0x78}, {&(0x7f0000004700)=""/167, 0xa7}, {&(0x7f0000004800)=""/131, 0x83}, {0x0}, {&(0x7f0000004980)=""/212, 0xd4}], 0x5}, 0x8c2}, {{&(0x7f0000004b00)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000006cc0)=""/4096, 0x1000}, 0x52}], 0x8, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) write$UHID_DESTROY(r5, &(0x7f00000001c0), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x10001, 0xffff}, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x1) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000900)="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", 0x223, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 17:07:45 executing program 3: socket$packet(0x11, 0x1000000000000002, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x280080, 0x0) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000100)) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x15, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000003200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x680, 0x478, 0x210, 0x478, 0x0, 0x340, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x6, &(0x7f0000000580), {[{{@uncond, 0x0, 0xc8, 0x108}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "3c745d713ded54eb04d1bcfe4ec5e3722f760ca03b47ed1d735abcf07e43"}}, {{@uncond, 0x0, 0xc8, 0x108}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3, 0x38000, @ipv6=@rand_addr="f65360ce35d79792c798d9967e3df2d3", 0x4e21}}}, {{@ipv6={@empty, @mcast1, [0xffffff00, 0xffffff00, 0xff, 0xff000000], [0xff, 0x0, 0x17fffff01, 0xffffffff], 'rose0\x00', 'ipddp0\x00', {}, {}, 0x67, 0x9, 0x4, 0x1}, 0x0, 0xf0, 0x130, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0xe}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x5, 0x5, @ipv6=@ipv4={[], [], @empty}, 0x4e21}}}, {{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@ipv6header={0x28, 'ipv6header\x00', 0x0, {0x40, 0x20, 0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@multicast2, @ipv6=@empty, 0x2e, 0x26, 0x9}}}, {{@ipv6={@mcast1, @remote, [0xffffffff, 0xff000000, 0x7f000080, 0xff000000], [0xffffff00, 0xffffff00], 'ip6tnl0\x00', 'ip6tnl0\x00', {}, {}, 0xff, 0x1, 0x0, 0x63}, 0x0, 0xf0, 0x138, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@empty, @ipv4=@local, 0x37, 0x3b, 0x1}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6e0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000007cc0)=[{{&(0x7f00000002c0)=@caif=@dbg, 0x80, &(0x7f0000000840)=[{&(0x7f0000000340)=""/251, 0xfb}, {&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000007ec0)=""/108, 0x6c}, {&(0x7f0000000600)=""/241, 0xf1}, {0x0}], 0x5, &(0x7f0000000b40)=""/234, 0xea}, 0xd9b9}, {{&(0x7f0000000c40)=@pppol2tpv3, 0x80, &(0x7f0000002340)=[{&(0x7f0000000cc0)=""/63, 0x3f}, {&(0x7f0000000d40)=""/232, 0xe8}, {&(0x7f0000000e40)=""/77, 0x4d}, {&(0x7f0000000ec0)=""/150, 0x96}, {&(0x7f0000000f80)=""/116, 0x74}, {&(0x7f0000001000)=""/212, 0xd4}, {0x0}, {&(0x7f00000012c0)=""/4096, 0x1000}, {0x0}], 0x9, &(0x7f00000000c0)=""/40, 0x28}, 0x7f}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000002480)=""/199, 0xc7}, {&(0x7f00000008c0)=""/55, 0x37}], 0x2, &(0x7f00000025c0)=""/157, 0x9d}, 0x9}, {{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002680)=""/238, 0xee}, {&(0x7f0000002780)=""/37, 0x25}, {&(0x7f00000027c0)=""/240, 0xf0}, {&(0x7f00000028c0)=""/10, 0xa}, {&(0x7f0000002900)=""/202, 0xca}, {0x0}, {0x0}], 0x7, &(0x7f0000002c80)=""/184, 0xb8}, 0x7}, {{&(0x7f0000002d40)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f0000003040)=[{&(0x7f0000002dc0)=""/18, 0x12}, {&(0x7f0000002e00)=""/213, 0xd5}, {&(0x7f0000002f00)=""/62, 0x3e}, {0x0}, {0x0}, {&(0x7f0000002fc0)=""/31, 0x1f}, {&(0x7f0000003000)}], 0x7, &(0x7f00000030c0)=""/191, 0xbf}, 0x3}, {{&(0x7f0000003180)=@vsock, 0x80, &(0x7f0000004400)=[{&(0x7f0000007f40)=""/215, 0xd7}, {&(0x7f0000004300)=""/34, 0x22}, {&(0x7f0000004340)=""/28, 0x1c}, {&(0x7f0000004380)=""/108, 0x6c}], 0x4, &(0x7f0000004480)=""/222, 0xde}, 0x6}, {{&(0x7f0000004580)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000004a80)=[{&(0x7f0000004600)=""/120, 0x78}, {&(0x7f0000004700)=""/167, 0xa7}, {&(0x7f0000004800)=""/131, 0x83}, {0x0}, {&(0x7f0000004980)=""/212, 0xd4}], 0x5}, 0x8c2}, {{&(0x7f0000004b00)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000006cc0)=""/4096, 0x1000}, 0x52}], 0x8, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) write$UHID_DESTROY(r5, &(0x7f00000001c0), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x10001, 0xffff}, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x1) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000900)="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", 0x223, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 17:07:45 executing program 3: socket$packet(0x11, 0x1000000000000002, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x280080, 0x0) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000100)) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x15, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000003200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x680, 0x478, 0x210, 0x478, 0x0, 0x340, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x6, &(0x7f0000000580), {[{{@uncond, 0x0, 0xc8, 0x108}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "3c745d713ded54eb04d1bcfe4ec5e3722f760ca03b47ed1d735abcf07e43"}}, {{@uncond, 0x0, 0xc8, 0x108}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3, 0x38000, @ipv6=@rand_addr="f65360ce35d79792c798d9967e3df2d3", 0x4e21}}}, {{@ipv6={@empty, @mcast1, [0xffffff00, 0xffffff00, 0xff, 0xff000000], [0xff, 0x0, 0x17fffff01, 0xffffffff], 'rose0\x00', 'ipddp0\x00', {}, {}, 0x67, 0x9, 0x4, 0x1}, 0x0, 0xf0, 0x130, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0xe}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x5, 0x5, @ipv6=@ipv4={[], [], @empty}, 0x4e21}}}, {{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@ipv6header={0x28, 'ipv6header\x00', 0x0, {0x40, 0x20, 0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@multicast2, @ipv6=@empty, 0x2e, 0x26, 0x9}}}, {{@ipv6={@mcast1, @remote, [0xffffffff, 0xff000000, 0x7f000080, 0xff000000], [0xffffff00, 0xffffff00], 'ip6tnl0\x00', 'ip6tnl0\x00', {}, {}, 0xff, 0x1, 0x0, 0x63}, 0x0, 0xf0, 0x138, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@empty, @ipv4=@local, 0x37, 0x3b, 0x1}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6e0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000007cc0)=[{{&(0x7f00000002c0)=@caif=@dbg, 0x80, &(0x7f0000000840)=[{&(0x7f0000000340)=""/251, 0xfb}, {&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000007ec0)=""/108, 0x6c}, {&(0x7f0000000600)=""/241, 0xf1}, {0x0}], 0x5, &(0x7f0000000b40)=""/234, 0xea}, 0xd9b9}, {{&(0x7f0000000c40)=@pppol2tpv3, 0x80, &(0x7f0000002340)=[{&(0x7f0000000cc0)=""/63, 0x3f}, {&(0x7f0000000d40)=""/232, 0xe8}, {&(0x7f0000000e40)=""/77, 0x4d}, {&(0x7f0000000ec0)=""/150, 0x96}, {&(0x7f0000000f80)=""/116, 0x74}, {&(0x7f0000001000)=""/212, 0xd4}, {0x0}, {&(0x7f00000012c0)=""/4096, 0x1000}, {0x0}], 0x9, &(0x7f00000000c0)=""/40, 0x28}, 0x7f}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000002480)=""/199, 0xc7}, {&(0x7f00000008c0)=""/55, 0x37}], 0x2, &(0x7f00000025c0)=""/157, 0x9d}, 0x9}, {{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002680)=""/238, 0xee}, {&(0x7f0000002780)=""/37, 0x25}, {&(0x7f00000027c0)=""/240, 0xf0}, {&(0x7f00000028c0)=""/10, 0xa}, {&(0x7f0000002900)=""/202, 0xca}, {0x0}, {0x0}], 0x7, &(0x7f0000002c80)=""/184, 0xb8}, 0x7}, {{&(0x7f0000002d40)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f0000003040)=[{&(0x7f0000002dc0)=""/18, 0x12}, {&(0x7f0000002e00)=""/213, 0xd5}, {&(0x7f0000002f00)=""/62, 0x3e}, {0x0}, {0x0}, {&(0x7f0000002fc0)=""/31, 0x1f}, {&(0x7f0000003000)}], 0x7, &(0x7f00000030c0)=""/191, 0xbf}, 0x3}, {{&(0x7f0000003180)=@vsock, 0x80, &(0x7f0000004400)=[{&(0x7f0000007f40)=""/215, 0xd7}, {&(0x7f0000004300)=""/34, 0x22}, {&(0x7f0000004340)=""/28, 0x1c}, {&(0x7f0000004380)=""/108, 0x6c}], 0x4, &(0x7f0000004480)=""/222, 0xde}, 0x6}, {{&(0x7f0000004580)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000004a80)=[{&(0x7f0000004600)=""/120, 0x78}, {&(0x7f0000004700)=""/167, 0xa7}, {&(0x7f0000004800)=""/131, 0x83}, {0x0}, {&(0x7f0000004980)=""/212, 0xd4}], 0x5}, 0x8c2}, {{&(0x7f0000004b00)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000006cc0)=""/4096, 0x1000}, 0x52}], 0x8, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) write$UHID_DESTROY(r5, &(0x7f00000001c0), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x10001, 0xffff}, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x1) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000900)="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", 0x223, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 17:07:45 executing program 2: socket$packet(0x11, 0x1000000000000002, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x280080, 0x0) ioctl$RTC_VL_READ(r0, 0x80047013, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x15, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000003200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x680, 0x478, 0x210, 0x478, 0x0, 0x340, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x6, 0x0, {[{{@uncond, 0x0, 0xc8, 0x108}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "3c745d713ded54eb04d1bcfe4ec5e3722f760ca03b47ed1d735abcf07e43"}}, {{@uncond, 0x0, 0xc8, 0x108}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3, 0x38000, @ipv6=@rand_addr="f65360ce35d79792c798d9967e3df2d3", 0x4e21}}}, {{@ipv6={@empty, @mcast1, [0xffffff00, 0xffffff00, 0xff, 0xff000000], [0xff, 0x0, 0x17fffff01, 0xffffffff], 'rose0\x00', 'ipddp0\x00', {}, {}, 0x67, 0x9, 0x4, 0x1}, 0x0, 0xf0, 0x130, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0xe}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x5, 0x5, @ipv6=@ipv4={[], [], @empty}, 0x4e21}}}, {{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@ipv6header={0x28, 'ipv6header\x00', 0x0, {0x40, 0x20, 0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@multicast2, @ipv6=@empty, 0x2e, 0x26, 0x9}}}, {{@ipv6={@mcast1, @remote, [0xffffffff, 0xff000000, 0x7f000080, 0xff000000], [0xffffff00, 0xffffff00], 'ip6tnl0\x00', 'ip6tnl0\x00', {}, {}, 0xff, 0x1, 0x0, 0x63}, 0x0, 0xf0, 0x138, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@empty, @ipv4=@local, 0x37, 0x3b, 0x1}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6e0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000007cc0)=[{{&(0x7f00000002c0)=@caif=@dbg, 0x80, &(0x7f0000000840)=[{&(0x7f0000000340)=""/251, 0xfb}, {&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000007ec0)=""/108, 0x6c}, {&(0x7f0000000600)=""/241, 0xf1}, {0x0}], 0x5, &(0x7f0000000b40)=""/234, 0xea}, 0xd9b9}, {{&(0x7f0000000c40)=@pppol2tpv3, 0x80, &(0x7f0000002340)=[{&(0x7f0000000cc0)=""/63, 0x3f}, {&(0x7f0000000d40)=""/232, 0xe8}, {&(0x7f0000000e40)=""/77, 0x4d}, {&(0x7f0000000ec0)=""/150, 0x96}, {&(0x7f0000000f80)=""/116, 0x74}, {&(0x7f0000001000)=""/212, 0xd4}, {0x0}, {&(0x7f00000012c0)=""/4096, 0x1000}, {0x0}], 0x9, &(0x7f00000000c0)=""/40, 0x28}, 0x7f}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000002480)=""/199, 0xc7}, {&(0x7f00000008c0)=""/55, 0x37}], 0x2, &(0x7f00000025c0)=""/157, 0x9d}, 0x9}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002c80)=""/184, 0xb8}, 0x7}, {{&(0x7f0000002d40)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f0000003040)=[{&(0x7f0000002dc0)=""/18, 0x12}, {&(0x7f0000002e00)=""/213, 0xd5}, {&(0x7f0000002f00)=""/62, 0x3e}, {0x0}, {0x0}, {&(0x7f0000002fc0)=""/31, 0x1f}, {&(0x7f0000003000)}], 0x7, &(0x7f00000030c0)=""/191, 0xbf}, 0x3}, {{&(0x7f0000003180)=@vsock, 0x80, &(0x7f0000004400)=[{&(0x7f0000007f40)=""/215, 0xd7}, {&(0x7f0000004300)=""/34, 0x22}, {&(0x7f0000004340)=""/28, 0x1c}, {&(0x7f0000004380)=""/108, 0x6c}], 0x4, &(0x7f0000004480)=""/222, 0xde}, 0x6}, {{&(0x7f0000004580)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000004a80)=[{&(0x7f0000004600)=""/120, 0x78}, {&(0x7f0000004700)=""/167, 0xa7}, {&(0x7f0000004800)=""/131, 0x83}, {0x0}, {&(0x7f0000004980)=""/212, 0xd4}], 0x5}, 0x8c2}, {{&(0x7f0000004b00)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000006cc0)=""/4096, 0x1000}, 0x52}], 0x8, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) write$UHID_DESTROY(r5, &(0x7f00000001c0), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x10001, 0xffff}, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x1) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000900)="585ccbc4ed83b836c1a6474914dc5500b66147b3c7218a91690000000042e3d35228897501f93191b076ac446ff0022b8753a1fa748c569f435fb3bae96efb74b50ec93c2db8eae3198a29e5c0cfc60000ce0637cef580b4ec61221adf59be045b70e48884ca000018cea71fcfed06fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff33c1e8e036e5031949762d009d308bd73f477252d0000000000004000000000000000000000000000000000195e23fb4430a9a4c2850b6380a743d6ea0c3b121f66c716d746aa81c301621b7662c06aae720b872d4b7828e3b48522c673aa6cb366d4201e2aee3261eb52f14533b7a54203cf9a4fa587c0385cdba539e9bd34717b0dfab09db7b064fbe2ecf9f40fa3a4015d0d0db3f9d562686fcdc3342c88c6f1b6f11449f8aeabf54c5533ec6acc2270d41713ae1538256af3719a07f55223a6eaa7c1eae5d6efa12fe95e2b0f1c500b28c5c76e731d5250e395526d04063718f448e62d4dd7cefeed6b72b31b894093aa37337784c00d68a4185f349e41455f12d31aa2d0ff79a4d69d97421a0042f0c7a664a8c4945104b25dc49be950c5af7405b86482d7314fcc3a0ad5eb24268ccd24a2996019f7c006a0b3c39c7b98c5a5406a2e4ff6d9c0ce12c4251756a667b4731c4b0eb5dc7d4381fecf196c4404b54c3c11c48f09734d9a6842f52d3307a688208b7a4681b101e1abe5fecfca1f464c03e933cbd15ab589ccd3c559542355190522a712b8f5128a6a00", 0x223, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) [ 536.320788] net_ratelimit: 16 callbacks suppressed [ 536.320807] protocol 88fb is buggy, dev hsr_slave_0 [ 536.321255] protocol 88fb is buggy, dev hsr_slave_1 17:07:45 executing program 0: socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RWSTAT(r2, &(0x7f00000000c0)={0xa863b37d6292c0fb}, 0x7) write(r1, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000280)) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r2) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r4, 0x541c, &(0x7f0000000080)) 17:07:45 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='bbr2', 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000040)={0x0, 0xfffffffffffffd96, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[], 0xfffffead}}, 0xff2f) recvmsg(r0, &(0x7f0000000880)={0x0, 0x36d, &(0x7f0000000540)=[{&(0x7f0000000380)=""/167, 0xffffff2f}, {&(0x7f0000000180)=""/75}, {&(0x7f0000000440)=""/225}, {&(0x7f0000000080)=""/12}, {&(0x7f0000000240)=""/22}], 0x1}, 0x0) 17:07:45 executing program 1: socket$packet(0x11, 0x1000000000000002, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x280080, 0x0) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000100)) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x15, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, 0x0, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000007cc0)=[{{&(0x7f00000002c0)=@caif=@dbg, 0x80, &(0x7f0000000840)=[{&(0x7f0000000340)=""/251, 0xfb}, {&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000007ec0)=""/108, 0x6c}, {&(0x7f0000000600)=""/241, 0xf1}, {0x0}], 0x5, &(0x7f0000000b40)=""/234, 0xea}, 0xd9b9}, {{&(0x7f0000000c40)=@pppol2tpv3, 0x80, &(0x7f0000002340)=[{0x0}, {&(0x7f0000000d40)=""/232, 0xe8}, {&(0x7f0000000e40)=""/77, 0x4d}, {&(0x7f0000000ec0)=""/150, 0x96}, {&(0x7f0000000f80)=""/116, 0x74}, {&(0x7f0000001000)=""/212, 0xd4}, {0x0}, {&(0x7f00000012c0)=""/4096, 0x1000}, {0x0}], 0x9, &(0x7f00000000c0)=""/40, 0x28}, 0x7f}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000002480)=""/199, 0xc7}, {&(0x7f00000008c0)=""/55, 0x37}], 0x2, &(0x7f00000025c0)=""/157, 0x9d}, 0x9}, {{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002680)=""/238, 0xee}, {&(0x7f0000002780)=""/37, 0x25}, {&(0x7f00000027c0)=""/240, 0xf0}, {&(0x7f00000028c0)=""/10, 0xa}, {&(0x7f0000002900)=""/202, 0xca}, {&(0x7f0000002a00)=""/247, 0xf7}, {0x0}], 0x7, &(0x7f0000002c80)=""/184, 0xb8}, 0x7}, {{&(0x7f0000002d40)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f0000003040)=[{&(0x7f0000002dc0)=""/18, 0x12}, {&(0x7f0000002e00)=""/213, 0xd5}, {&(0x7f0000002f00)=""/62, 0x3e}, {0x0}, {0x0}, {&(0x7f0000002fc0)=""/31, 0x1f}, {&(0x7f0000003000)}], 0x7, &(0x7f00000030c0)=""/191, 0xbf}, 0x3}, {{&(0x7f0000003180)=@vsock, 0x80, &(0x7f0000004400)=[{&(0x7f0000007f40)=""/215, 0xd7}, {&(0x7f0000004300)=""/34, 0x22}, {&(0x7f0000004340)=""/28, 0x1c}, {&(0x7f0000004380)=""/108, 0x6c}], 0x4, &(0x7f0000004480)=""/222, 0xde}, 0x6}, {{&(0x7f0000004580)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000004a80)=[{&(0x7f0000004600)=""/120, 0x78}, {&(0x7f0000004700)=""/167, 0xa7}, {&(0x7f0000004800)=""/131, 0x83}, {0x0}, {&(0x7f0000004980)=""/212, 0xd4}], 0x5}, 0x8c2}, {{&(0x7f0000004b00)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000006cc0)=""/4096, 0x1000}, 0x52}], 0x8, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) write$UHID_DESTROY(r5, &(0x7f00000001c0), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x10001, 0xffff}, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x1) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000900)="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", 0x223, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 17:07:46 executing program 4: socket$inet6(0xa, 0x80002, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xa) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0) epoll_pwait(0xffffffffffffffff, &(0x7f0000001080), 0x0, 0x0, &(0x7f0000000100), 0x8) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() tkill(r0, 0x9) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) r1 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f6800fe01b2a4a280930a060001fe8000020200000039000900350050560800000019000540fe800000000022dc1338d54400009b84136ef75afb83de4411000500c43ab822004c060cec4fab91d4", 0x55}], 0x1}, 0x0) 17:07:46 executing program 2: socket$packet(0x11, 0x1000000000000002, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x280080, 0x0) ioctl$RTC_VL_READ(r0, 0x80047013, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x15, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000003200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x680, 0x478, 0x210, 0x478, 0x0, 0x340, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x6, 0x0, {[{{@uncond, 0x0, 0xc8, 0x108}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "3c745d713ded54eb04d1bcfe4ec5e3722f760ca03b47ed1d735abcf07e43"}}, {{@uncond, 0x0, 0xc8, 0x108}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3, 0x38000, @ipv6=@rand_addr="f65360ce35d79792c798d9967e3df2d3", 0x4e21}}}, {{@ipv6={@empty, @mcast1, [0xffffff00, 0xffffff00, 0xff, 0xff000000], [0xff, 0x0, 0x17fffff01, 0xffffffff], 'rose0\x00', 'ipddp0\x00', {}, {}, 0x67, 0x9, 0x4, 0x1}, 0x0, 0xf0, 0x130, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0xe}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x5, 0x5, @ipv6=@ipv4={[], [], @empty}, 0x4e21}}}, {{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@ipv6header={0x28, 'ipv6header\x00', 0x0, {0x40, 0x20, 0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@multicast2, @ipv6=@empty, 0x2e, 0x26, 0x9}}}, {{@ipv6={@mcast1, @remote, [0xffffffff, 0xff000000, 0x7f000080, 0xff000000], [0xffffff00, 0xffffff00], 'ip6tnl0\x00', 'ip6tnl0\x00', {}, {}, 0xff, 0x1, 0x0, 0x63}, 0x0, 0xf0, 0x138, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@empty, @ipv4=@local, 0x37, 0x3b, 0x1}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6e0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000007cc0)=[{{&(0x7f00000002c0)=@caif=@dbg, 0x80, &(0x7f0000000840)=[{&(0x7f0000000340)=""/251, 0xfb}, {&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000007ec0)=""/108, 0x6c}, {&(0x7f0000000600)=""/241, 0xf1}, {0x0}], 0x5, &(0x7f0000000b40)=""/234, 0xea}, 0xd9b9}, {{&(0x7f0000000c40)=@pppol2tpv3, 0x80, &(0x7f0000002340)=[{&(0x7f0000000cc0)=""/63, 0x3f}, {&(0x7f0000000d40)=""/232, 0xe8}, {&(0x7f0000000e40)=""/77, 0x4d}, {&(0x7f0000000ec0)=""/150, 0x96}, {&(0x7f0000000f80)=""/116, 0x74}, {&(0x7f0000001000)=""/212, 0xd4}, {0x0}, {&(0x7f00000012c0)=""/4096, 0x1000}, {0x0}], 0x9, &(0x7f00000000c0)=""/40, 0x28}, 0x7f}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000002480)=""/199, 0xc7}, {&(0x7f00000008c0)=""/55, 0x37}], 0x2, &(0x7f00000025c0)=""/157, 0x9d}, 0x9}, {{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002680)=""/238, 0xee}, {&(0x7f0000002780)=""/37, 0x25}, {&(0x7f00000027c0)=""/240, 0xf0}, {&(0x7f00000028c0)=""/10, 0xa}, {&(0x7f0000002900)=""/202, 0xca}, {&(0x7f0000002a00)=""/247, 0xf7}], 0x6, &(0x7f0000002c80)=""/184, 0xb8}, 0x7}, {{&(0x7f0000002d40)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f0000003040)=[{&(0x7f0000002dc0)=""/18, 0x12}, {&(0x7f0000002e00)=""/213, 0xd5}, {&(0x7f0000002f00)=""/62, 0x3e}, {0x0}, {0x0}, {&(0x7f0000002fc0)=""/31, 0x1f}, {&(0x7f0000003000)}], 0x7, &(0x7f00000030c0)=""/191, 0xbf}, 0x3}, {{&(0x7f0000003180)=@vsock, 0x80, &(0x7f0000004400)=[{&(0x7f0000007f40)=""/215, 0xd7}, {&(0x7f0000004300)=""/34, 0x22}, {&(0x7f0000004340)=""/28, 0x1c}, {&(0x7f0000004380)=""/108, 0x6c}], 0x4, &(0x7f0000004480)=""/222, 0xde}, 0x6}, {{&(0x7f0000004580)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000004a80)=[{&(0x7f0000004600)=""/120, 0x78}, {&(0x7f0000004700)=""/167, 0xa7}, {&(0x7f0000004800)=""/131, 0x83}, {0x0}, {&(0x7f0000004980)=""/212, 0xd4}], 0x5}, 0x8c2}, {{&(0x7f0000004b00)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000006cc0)=""/4096, 0x1000}, 0x52}], 0x8, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) write$UHID_DESTROY(r5, &(0x7f00000001c0), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x10001, 0xffff}, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x1) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000900)="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", 0x223, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 17:07:46 executing program 3: socket$packet(0x11, 0x1000000000000002, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x280080, 0x0) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000100)) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x15, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000003200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x680, 0x478, 0x210, 0x478, 0x0, 0x340, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x6, &(0x7f0000000580), {[{{@uncond, 0x0, 0xc8, 0x108}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "3c745d713ded54eb04d1bcfe4ec5e3722f760ca03b47ed1d735abcf07e43"}}, {{@uncond, 0x0, 0xc8, 0x108}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3, 0x38000, @ipv6=@rand_addr="f65360ce35d79792c798d9967e3df2d3", 0x4e21}}}, {{@ipv6={@empty, @mcast1, [0xffffff00, 0xffffff00, 0xff, 0xff000000], [0xff, 0x0, 0x17fffff01, 0xffffffff], 'rose0\x00', 'ipddp0\x00', {}, {}, 0x67, 0x9, 0x4, 0x1}, 0x0, 0xf0, 0x130, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0xe}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x5, 0x5, @ipv6=@ipv4={[], [], @empty}, 0x4e21}}}, {{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@ipv6header={0x28, 'ipv6header\x00', 0x0, {0x40, 0x20, 0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@multicast2, @ipv6=@empty, 0x2e, 0x26, 0x9}}}, {{@ipv6={@mcast1, @remote, [0xffffffff, 0xff000000, 0x7f000080, 0xff000000], [0xffffff00, 0xffffff00], 'ip6tnl0\x00', 'ip6tnl0\x00', {}, {}, 0xff, 0x1, 0x0, 0x63}, 0x0, 0xf0, 0x138, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@empty, @ipv4=@local, 0x37, 0x3b, 0x1}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6e0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000007cc0)=[{{&(0x7f00000002c0)=@caif=@dbg, 0x80, &(0x7f0000000840)=[{&(0x7f0000000340)=""/251, 0xfb}, {&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000007ec0)=""/108, 0x6c}, {&(0x7f0000000600)=""/241, 0xf1}, {0x0}], 0x5, &(0x7f0000000b40)=""/234, 0xea}, 0xd9b9}, {{&(0x7f0000000c40)=@pppol2tpv3, 0x80, &(0x7f0000002340)=[{&(0x7f0000000cc0)=""/63, 0x3f}, {&(0x7f0000000d40)=""/232, 0xe8}, {&(0x7f0000000e40)=""/77, 0x4d}, {&(0x7f0000000ec0)=""/150, 0x96}, {&(0x7f0000000f80)=""/116, 0x74}, {&(0x7f0000001000)=""/212, 0xd4}, {0x0}, {&(0x7f00000012c0)=""/4096, 0x1000}, {0x0}], 0x9, &(0x7f00000000c0)=""/40, 0x28}, 0x7f}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000002480)=""/199, 0xc7}, {&(0x7f00000008c0)=""/55, 0x37}], 0x2, &(0x7f00000025c0)=""/157, 0x9d}, 0x9}, {{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002680)=""/238, 0xee}, {&(0x7f0000002780)=""/37, 0x25}, {&(0x7f00000027c0)=""/240, 0xf0}, {&(0x7f00000028c0)=""/10, 0xa}, {&(0x7f0000002900)=""/202, 0xca}, {0x0}, {0x0}], 0x7, &(0x7f0000002c80)=""/184, 0xb8}, 0x7}, {{&(0x7f0000002d40)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f0000003040)=[{&(0x7f0000002dc0)=""/18, 0x12}, {&(0x7f0000002e00)=""/213, 0xd5}, {&(0x7f0000002f00)=""/62, 0x3e}, {0x0}, {0x0}, {&(0x7f0000002fc0)=""/31, 0x1f}, {&(0x7f0000003000)}], 0x7, &(0x7f00000030c0)=""/191, 0xbf}, 0x3}, {{&(0x7f0000003180)=@vsock, 0x80, &(0x7f0000004400)=[{&(0x7f0000007f40)=""/215, 0xd7}, {&(0x7f0000004300)=""/34, 0x22}, {&(0x7f0000004340)=""/28, 0x1c}, {&(0x7f0000004380)=""/108, 0x6c}], 0x4, &(0x7f0000004480)=""/222, 0xde}, 0x6}, {{&(0x7f0000004580)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000004a80)=[{&(0x7f0000004600)=""/120, 0x78}, {&(0x7f0000004700)=""/167, 0xa7}, {&(0x7f0000004800)=""/131, 0x83}, {0x0}, {&(0x7f0000004980)=""/212, 0xd4}], 0x5}, 0x8c2}, {{&(0x7f0000004b00)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000006cc0)=""/4096, 0x1000}, 0x52}], 0x8, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) write$UHID_DESTROY(r5, &(0x7f00000001c0), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x10001, 0xffff}, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x1) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000900)="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", 0x223, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 17:07:46 executing program 4: [ 536.890113] protocol 88fb is buggy, dev hsr_slave_0 17:07:46 executing program 4: [ 536.890160] protocol 88fb is buggy, dev hsr_slave_1 17:07:46 executing program 1: socket$packet(0x11, 0x1000000000000002, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x280080, 0x0) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000100)) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x15, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, 0x0, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000007cc0)=[{{&(0x7f00000002c0)=@caif=@dbg, 0x80, &(0x7f0000000840)=[{&(0x7f0000000340)=""/251, 0xfb}, {&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000007ec0)=""/108, 0x6c}, {&(0x7f0000000600)=""/241, 0xf1}, {0x0}], 0x5, &(0x7f0000000b40)=""/234, 0xea}, 0xd9b9}, {{&(0x7f0000000c40)=@pppol2tpv3, 0x80, &(0x7f0000002340)=[{&(0x7f0000000cc0)=""/63, 0x3f}, {&(0x7f0000000d40)=""/232, 0xe8}, {&(0x7f0000000e40)=""/77, 0x4d}, {&(0x7f0000000ec0)=""/150, 0x96}, {&(0x7f0000000f80)=""/116, 0x74}, {&(0x7f0000001000)=""/212, 0xd4}, {0x0}, {&(0x7f00000012c0)=""/4096, 0x1000}, {0x0}], 0x9}, 0x7f}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000002480)=""/199, 0xc7}, {&(0x7f00000008c0)=""/55, 0x37}], 0x2, &(0x7f00000025c0)=""/157, 0x9d}, 0x9}, {{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002680)=""/238, 0xee}, {&(0x7f0000002780)=""/37, 0x25}, {&(0x7f00000027c0)=""/240, 0xf0}, {&(0x7f00000028c0)=""/10, 0xa}, {&(0x7f0000002900)=""/202, 0xca}, {&(0x7f0000002a00)=""/247, 0xf7}, {0x0}], 0x7, &(0x7f0000002c80)=""/184, 0xb8}, 0x7}, {{&(0x7f0000002d40)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f0000003040)=[{&(0x7f0000002dc0)=""/18, 0x12}, {&(0x7f0000002e00)=""/213, 0xd5}, {&(0x7f0000002f00)=""/62, 0x3e}, {0x0}, {0x0}, {&(0x7f0000002fc0)=""/31, 0x1f}, {&(0x7f0000003000)}], 0x7, &(0x7f00000030c0)=""/191, 0xbf}, 0x3}, {{&(0x7f0000003180)=@vsock, 0x80, &(0x7f0000004400)=[{&(0x7f0000007f40)=""/215, 0xd7}, {&(0x7f0000004300)=""/34, 0x22}, {&(0x7f0000004340)=""/28, 0x1c}, {&(0x7f0000004380)=""/108, 0x6c}], 0x4, &(0x7f0000004480)=""/222, 0xde}, 0x6}, {{&(0x7f0000004580)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000004a80)=[{&(0x7f0000004600)=""/120, 0x78}, {&(0x7f0000004700)=""/167, 0xa7}, {&(0x7f0000004800)=""/131, 0x83}, {0x0}, {&(0x7f0000004980)=""/212, 0xd4}], 0x5}, 0x8c2}, {{&(0x7f0000004b00)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000006cc0)=""/4096, 0x1000}, 0x52}], 0x8, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) write$UHID_DESTROY(r5, &(0x7f00000001c0), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x10001, 0xffff}, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x1) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000900)="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", 0x223, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 17:07:46 executing program 4: 17:07:46 executing program 4: 17:07:46 executing program 2: socket$packet(0x11, 0x1000000000000002, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x280080, 0x0) ioctl$RTC_VL_READ(r0, 0x80047013, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x15, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000003200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x680, 0x478, 0x210, 0x478, 0x0, 0x340, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x6, 0x0, {[{{@uncond, 0x0, 0xc8, 0x108}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "3c745d713ded54eb04d1bcfe4ec5e3722f760ca03b47ed1d735abcf07e43"}}, {{@uncond, 0x0, 0xc8, 0x108}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3, 0x38000, @ipv6=@rand_addr="f65360ce35d79792c798d9967e3df2d3", 0x4e21}}}, {{@ipv6={@empty, @mcast1, [0xffffff00, 0xffffff00, 0xff, 0xff000000], [0xff, 0x0, 0x17fffff01, 0xffffffff], 'rose0\x00', 'ipddp0\x00', {}, {}, 0x67, 0x9, 0x4, 0x1}, 0x0, 0xf0, 0x130, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0xe}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x5, 0x5, @ipv6=@ipv4={[], [], @empty}, 0x4e21}}}, {{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@ipv6header={0x28, 'ipv6header\x00', 0x0, {0x40, 0x20, 0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@multicast2, @ipv6=@empty, 0x2e, 0x26, 0x9}}}, {{@ipv6={@mcast1, @remote, [0xffffffff, 0xff000000, 0x7f000080, 0xff000000], [0xffffff00, 0xffffff00], 'ip6tnl0\x00', 'ip6tnl0\x00', {}, {}, 0xff, 0x1, 0x0, 0x63}, 0x0, 0xf0, 0x138, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@empty, @ipv4=@local, 0x37, 0x3b, 0x1}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6e0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000007cc0)=[{{&(0x7f00000002c0)=@caif=@dbg, 0x80, &(0x7f0000000840)=[{&(0x7f0000000340)=""/251, 0xfb}, {&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000007ec0)=""/108, 0x6c}, {&(0x7f0000000600)=""/241, 0xf1}, {0x0}], 0x5, &(0x7f0000000b40)=""/234, 0xea}, 0xd9b9}, {{&(0x7f0000000c40)=@pppol2tpv3, 0x80, &(0x7f0000002340)=[{&(0x7f0000000cc0)=""/63, 0x3f}, {&(0x7f0000000d40)=""/232, 0xe8}, {&(0x7f0000000e40)=""/77, 0x4d}, {&(0x7f0000000ec0)=""/150, 0x96}, {&(0x7f0000000f80)=""/116, 0x74}, {&(0x7f0000001000)=""/212, 0xd4}, {0x0}, {&(0x7f00000012c0)=""/4096, 0x1000}, {0x0}], 0x9, &(0x7f00000000c0)=""/40, 0x28}, 0x7f}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000002480)=""/199, 0xc7}, {&(0x7f00000008c0)=""/55, 0x37}], 0x2, &(0x7f00000025c0)=""/157, 0x9d}, 0x9}, {{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002680)=""/238, 0xee}, {&(0x7f0000002780)=""/37, 0x25}, {&(0x7f00000027c0)=""/240, 0xf0}, {&(0x7f00000028c0)=""/10, 0xa}, {&(0x7f0000002900)=""/202, 0xca}, {&(0x7f0000002a00)=""/247, 0xf7}], 0x6, &(0x7f0000002c80)=""/184, 0xb8}, 0x7}, {{&(0x7f0000002d40)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f0000003040)=[{&(0x7f0000002dc0)=""/18, 0x12}, {&(0x7f0000002e00)=""/213, 0xd5}, {&(0x7f0000002f00)=""/62, 0x3e}, {0x0}, {0x0}, {&(0x7f0000002fc0)=""/31, 0x1f}, {&(0x7f0000003000)}], 0x7, &(0x7f00000030c0)=""/191, 0xbf}, 0x3}, {{&(0x7f0000003180)=@vsock, 0x80, &(0x7f0000004400)=[{&(0x7f0000007f40)=""/215, 0xd7}, {&(0x7f0000004300)=""/34, 0x22}, {&(0x7f0000004340)=""/28, 0x1c}, {&(0x7f0000004380)=""/108, 0x6c}], 0x4, &(0x7f0000004480)=""/222, 0xde}, 0x6}, {{&(0x7f0000004580)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000004a80)=[{&(0x7f0000004600)=""/120, 0x78}, {&(0x7f0000004700)=""/167, 0xa7}, {&(0x7f0000004800)=""/131, 0x83}, {0x0}, {&(0x7f0000004980)=""/212, 0xd4}], 0x5}, 0x8c2}, {{&(0x7f0000004b00)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000006cc0)=""/4096, 0x1000}, 0x52}], 0x8, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) write$UHID_DESTROY(r5, &(0x7f00000001c0), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x10001, 0xffff}, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x1) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000900)="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", 0x223, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) [ 537.280112] protocol 88fb is buggy, dev hsr_slave_0 [ 537.280195] protocol 88fb is buggy, dev hsr_slave_1 [ 537.360124] protocol 88fb is buggy, dev hsr_slave_0 [ 537.360177] protocol 88fb is buggy, dev hsr_slave_1 17:07:46 executing program 0: socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RWSTAT(r1, &(0x7f00000000c0)={0xa863b37d6292c0fb}, 0x7) write(r0, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000280)) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r3, 0x541c, &(0x7f0000000080)) [ 537.440108] protocol 88fb is buggy, dev hsr_slave_0 [ 537.445306] protocol 88fb is buggy, dev hsr_slave_1 17:07:46 executing program 4: 17:07:46 executing program 1: socket$packet(0x11, 0x1000000000000002, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x280080, 0x0) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000100)) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x15, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, 0x0, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000007cc0)=[{{&(0x7f00000002c0)=@caif=@dbg, 0x80, &(0x7f0000000840)=[{&(0x7f0000000340)=""/251, 0xfb}, {&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000007ec0)=""/108, 0x6c}, {&(0x7f0000000600)=""/241, 0xf1}, {0x0}], 0x5, &(0x7f0000000b40)=""/234, 0xea}, 0xd9b9}, {{&(0x7f0000000c40)=@pppol2tpv3, 0x80, &(0x7f0000002340)=[{&(0x7f0000000cc0)=""/63, 0x3f}, {&(0x7f0000000d40)=""/232, 0xe8}, {&(0x7f0000000e40)=""/77, 0x4d}, {&(0x7f0000000ec0)=""/150, 0x96}, {&(0x7f0000000f80)=""/116, 0x74}, {&(0x7f0000001000)=""/212, 0xd4}, {0x0}, {&(0x7f00000012c0)=""/4096, 0x1000}, {0x0}], 0x9}, 0x7f}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000002480)=""/199, 0xc7}, {&(0x7f00000008c0)=""/55, 0x37}], 0x2, &(0x7f00000025c0)=""/157, 0x9d}, 0x9}, {{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002680)=""/238, 0xee}, {&(0x7f0000002780)=""/37, 0x25}, {&(0x7f00000027c0)=""/240, 0xf0}, {&(0x7f00000028c0)=""/10, 0xa}, {&(0x7f0000002900)=""/202, 0xca}, {&(0x7f0000002a00)=""/247, 0xf7}, {0x0}], 0x7, &(0x7f0000002c80)=""/184, 0xb8}, 0x7}, {{&(0x7f0000002d40)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f0000003040)=[{&(0x7f0000002dc0)=""/18, 0x12}, {&(0x7f0000002e00)=""/213, 0xd5}, {&(0x7f0000002f00)=""/62, 0x3e}, {0x0}, {0x0}, {&(0x7f0000002fc0)=""/31, 0x1f}, {&(0x7f0000003000)}], 0x7, &(0x7f00000030c0)=""/191, 0xbf}, 0x3}, {{&(0x7f0000003180)=@vsock, 0x80, &(0x7f0000004400)=[{&(0x7f0000007f40)=""/215, 0xd7}, {&(0x7f0000004300)=""/34, 0x22}, {&(0x7f0000004340)=""/28, 0x1c}, {&(0x7f0000004380)=""/108, 0x6c}], 0x4, &(0x7f0000004480)=""/222, 0xde}, 0x6}, {{&(0x7f0000004580)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000004a80)=[{&(0x7f0000004600)=""/120, 0x78}, {&(0x7f0000004700)=""/167, 0xa7}, {&(0x7f0000004800)=""/131, 0x83}, {0x0}, {&(0x7f0000004980)=""/212, 0xd4}], 0x5}, 0x8c2}, {{&(0x7f0000004b00)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000006cc0)=""/4096, 0x1000}, 0x52}], 0x8, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) write$UHID_DESTROY(r5, &(0x7f00000001c0), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x10001, 0xffff}, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x1) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000900)="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", 0x223, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 17:07:46 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='bbr2', 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000040)={0x0, 0xfffffffffffffd96, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[], 0xfffffead}}, 0xff2f) recvmsg(r0, &(0x7f0000000880)={0x0, 0x36d, &(0x7f0000000540)=[{&(0x7f0000000380)=""/167, 0xffffff2f}, {&(0x7f0000000180)=""/75}, {&(0x7f0000000440)=""/225}, {&(0x7f0000000080)=""/12}, {&(0x7f0000000240)=""/22}], 0x1}, 0x0) 17:07:46 executing program 3: socket$packet(0x11, 0x1000000000000002, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x280080, 0x0) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000100)) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x15, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000003200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x680, 0x478, 0x210, 0x478, 0x0, 0x340, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x6, &(0x7f0000000580), {[{{@uncond, 0x0, 0xc8, 0x108}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "3c745d713ded54eb04d1bcfe4ec5e3722f760ca03b47ed1d735abcf07e43"}}, {{@uncond, 0x0, 0xc8, 0x108}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3, 0x38000, @ipv6=@rand_addr="f65360ce35d79792c798d9967e3df2d3", 0x4e21}}}, {{@ipv6={@empty, @mcast1, [0xffffff00, 0xffffff00, 0xff, 0xff000000], [0xff, 0x0, 0x17fffff01, 0xffffffff], 'rose0\x00', 'ipddp0\x00', {}, {}, 0x67, 0x9, 0x4, 0x1}, 0x0, 0xf0, 0x130, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0xe}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x5, 0x5, @ipv6=@ipv4={[], [], @empty}, 0x4e21}}}, {{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@ipv6header={0x28, 'ipv6header\x00', 0x0, {0x40, 0x20, 0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@multicast2, @ipv6=@empty, 0x2e, 0x26, 0x9}}}, {{@ipv6={@mcast1, @remote, [0xffffffff, 0xff000000, 0x7f000080, 0xff000000], [0xffffff00, 0xffffff00], 'ip6tnl0\x00', 'ip6tnl0\x00', {}, {}, 0xff, 0x1, 0x0, 0x63}, 0x0, 0xf0, 0x138, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@empty, @ipv4=@local, 0x37, 0x3b, 0x1}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6e0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000007cc0)=[{{&(0x7f00000002c0)=@caif=@dbg, 0x80, &(0x7f0000000840)=[{&(0x7f0000000340)=""/251, 0xfb}, {&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000007ec0)=""/108, 0x6c}, {&(0x7f0000000600)=""/241, 0xf1}, {0x0}], 0x5, &(0x7f0000000b40)=""/234, 0xea}, 0xd9b9}, {{&(0x7f0000000c40)=@pppol2tpv3, 0x80, &(0x7f0000002340)=[{&(0x7f0000000cc0)=""/63, 0x3f}, {&(0x7f0000000d40)=""/232, 0xe8}, {&(0x7f0000000e40)=""/77, 0x4d}, {&(0x7f0000000ec0)=""/150, 0x96}, {&(0x7f0000000f80)=""/116, 0x74}, {&(0x7f0000001000)=""/212, 0xd4}, {0x0}, {&(0x7f00000012c0)=""/4096, 0x1000}, {0x0}], 0x9, &(0x7f00000000c0)=""/40, 0x28}, 0x7f}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000002480)=""/199, 0xc7}, {&(0x7f00000008c0)=""/55, 0x37}], 0x2, &(0x7f00000025c0)=""/157, 0x9d}, 0x9}, {{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002680)=""/238, 0xee}, {&(0x7f0000002780)=""/37, 0x25}, {&(0x7f00000027c0)=""/240, 0xf0}, {&(0x7f00000028c0)=""/10, 0xa}, {&(0x7f0000002a00)=""/247, 0xf7}, {0x0}], 0x6, &(0x7f0000002c80)=""/184, 0xb8}, 0x7}, {{&(0x7f0000002d40)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f0000003040)=[{&(0x7f0000002dc0)=""/18, 0x12}, {&(0x7f0000002e00)=""/213, 0xd5}, {&(0x7f0000002f00)=""/62, 0x3e}, {0x0}, {0x0}, {&(0x7f0000002fc0)=""/31, 0x1f}, {&(0x7f0000003000)}], 0x7, &(0x7f00000030c0)=""/191, 0xbf}, 0x3}, {{&(0x7f0000003180)=@vsock, 0x80, &(0x7f0000004400)=[{&(0x7f0000007f40)=""/215, 0xd7}, {&(0x7f0000004300)=""/34, 0x22}, {&(0x7f0000004340)=""/28, 0x1c}, {&(0x7f0000004380)=""/108, 0x6c}], 0x4, &(0x7f0000004480)=""/222, 0xde}, 0x6}, {{&(0x7f0000004580)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000004a80)=[{&(0x7f0000004600)=""/120, 0x78}, {&(0x7f0000004700)=""/167, 0xa7}, {&(0x7f0000004800)=""/131, 0x83}, {0x0}, {&(0x7f0000004980)=""/212, 0xd4}], 0x5}, 0x8c2}, {{&(0x7f0000004b00)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000006cc0)=""/4096, 0x1000}, 0x52}], 0x8, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) write$UHID_DESTROY(r5, &(0x7f00000001c0), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x10001, 0xffff}, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x1) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000900)="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", 0x223, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 17:07:46 executing program 4: 17:07:46 executing program 2: socket$packet(0x11, 0x1000000000000002, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x280080, 0x0) ioctl$RTC_VL_READ(r0, 0x80047013, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x15, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000003200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x680, 0x478, 0x210, 0x478, 0x0, 0x340, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x6, 0x0, {[{{@uncond, 0x0, 0xc8, 0x108}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "3c745d713ded54eb04d1bcfe4ec5e3722f760ca03b47ed1d735abcf07e43"}}, {{@uncond, 0x0, 0xc8, 0x108}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3, 0x38000, @ipv6=@rand_addr="f65360ce35d79792c798d9967e3df2d3", 0x4e21}}}, {{@ipv6={@empty, @mcast1, [0xffffff00, 0xffffff00, 0xff, 0xff000000], [0xff, 0x0, 0x17fffff01, 0xffffffff], 'rose0\x00', 'ipddp0\x00', {}, {}, 0x67, 0x9, 0x4, 0x1}, 0x0, 0xf0, 0x130, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0xe}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x5, 0x5, @ipv6=@ipv4={[], [], @empty}, 0x4e21}}}, {{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@ipv6header={0x28, 'ipv6header\x00', 0x0, {0x40, 0x20, 0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@multicast2, @ipv6=@empty, 0x2e, 0x26, 0x9}}}, {{@ipv6={@mcast1, @remote, [0xffffffff, 0xff000000, 0x7f000080, 0xff000000], [0xffffff00, 0xffffff00], 'ip6tnl0\x00', 'ip6tnl0\x00', {}, {}, 0xff, 0x1, 0x0, 0x63}, 0x0, 0xf0, 0x138, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@empty, @ipv4=@local, 0x37, 0x3b, 0x1}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6e0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000007cc0)=[{{&(0x7f00000002c0)=@caif=@dbg, 0x80, &(0x7f0000000840)=[{&(0x7f0000000340)=""/251, 0xfb}, {&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000007ec0)=""/108, 0x6c}, {&(0x7f0000000600)=""/241, 0xf1}, {0x0}], 0x5, &(0x7f0000000b40)=""/234, 0xea}, 0xd9b9}, {{&(0x7f0000000c40)=@pppol2tpv3, 0x80, &(0x7f0000002340)=[{&(0x7f0000000cc0)=""/63, 0x3f}, {&(0x7f0000000d40)=""/232, 0xe8}, {&(0x7f0000000e40)=""/77, 0x4d}, {&(0x7f0000000ec0)=""/150, 0x96}, {&(0x7f0000000f80)=""/116, 0x74}, {&(0x7f0000001000)=""/212, 0xd4}, {0x0}, {&(0x7f00000012c0)=""/4096, 0x1000}, {0x0}], 0x9, &(0x7f00000000c0)=""/40, 0x28}, 0x7f}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000002480)=""/199, 0xc7}, {&(0x7f00000008c0)=""/55, 0x37}], 0x2, &(0x7f00000025c0)=""/157, 0x9d}, 0x9}, {{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002680)=""/238, 0xee}, {&(0x7f0000002780)=""/37, 0x25}, {&(0x7f00000027c0)=""/240, 0xf0}, {&(0x7f00000028c0)=""/10, 0xa}, {&(0x7f0000002900)=""/202, 0xca}, {&(0x7f0000002a00)=""/247, 0xf7}], 0x6, &(0x7f0000002c80)=""/184, 0xb8}, 0x7}, {{&(0x7f0000002d40)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f0000003040)=[{&(0x7f0000002dc0)=""/18, 0x12}, {&(0x7f0000002e00)=""/213, 0xd5}, {&(0x7f0000002f00)=""/62, 0x3e}, {0x0}, {0x0}, {&(0x7f0000002fc0)=""/31, 0x1f}, {&(0x7f0000003000)}], 0x7, &(0x7f00000030c0)=""/191, 0xbf}, 0x3}, {{&(0x7f0000003180)=@vsock, 0x80, &(0x7f0000004400)=[{&(0x7f0000007f40)=""/215, 0xd7}, {&(0x7f0000004300)=""/34, 0x22}, {&(0x7f0000004340)=""/28, 0x1c}, {&(0x7f0000004380)=""/108, 0x6c}], 0x4, &(0x7f0000004480)=""/222, 0xde}, 0x6}, {{&(0x7f0000004580)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000004a80)=[{&(0x7f0000004600)=""/120, 0x78}, {&(0x7f0000004700)=""/167, 0xa7}, {&(0x7f0000004800)=""/131, 0x83}, {0x0}, {&(0x7f0000004980)=""/212, 0xd4}], 0x5}, 0x8c2}, {{&(0x7f0000004b00)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000006cc0)=""/4096, 0x1000}, 0x52}], 0x8, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) write$UHID_DESTROY(r5, &(0x7f00000001c0), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x10001, 0xffff}, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x1) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000900)="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", 0x223, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 17:07:47 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x0, 0xa14f9f37bd8108a2}, 0x4) 17:07:47 executing program 1: socket$packet(0x11, 0x1000000000000002, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x280080, 0x0) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000100)) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x15, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, 0x0, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000007cc0)=[{{&(0x7f00000002c0)=@caif=@dbg, 0x80, &(0x7f0000000840)=[{&(0x7f0000000340)=""/251, 0xfb}, {&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000007ec0)=""/108, 0x6c}, {&(0x7f0000000600)=""/241, 0xf1}, {0x0}], 0x5, &(0x7f0000000b40)=""/234, 0xea}, 0xd9b9}, {{&(0x7f0000000c40)=@pppol2tpv3, 0x80, &(0x7f0000002340)=[{&(0x7f0000000cc0)=""/63, 0x3f}, {&(0x7f0000000d40)=""/232, 0xe8}, {&(0x7f0000000e40)=""/77, 0x4d}, {&(0x7f0000000ec0)=""/150, 0x96}, {&(0x7f0000000f80)=""/116, 0x74}, {&(0x7f0000001000)=""/212, 0xd4}, {0x0}, {&(0x7f00000012c0)=""/4096, 0x1000}, {0x0}], 0x9}, 0x7f}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000002480)=""/199, 0xc7}, {&(0x7f00000008c0)=""/55, 0x37}], 0x2, &(0x7f00000025c0)=""/157, 0x9d}, 0x9}, {{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002680)=""/238, 0xee}, {&(0x7f0000002780)=""/37, 0x25}, {&(0x7f00000027c0)=""/240, 0xf0}, {&(0x7f00000028c0)=""/10, 0xa}, {&(0x7f0000002900)=""/202, 0xca}, {&(0x7f0000002a00)=""/247, 0xf7}, {0x0}], 0x7, &(0x7f0000002c80)=""/184, 0xb8}, 0x7}, {{&(0x7f0000002d40)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f0000003040)=[{&(0x7f0000002dc0)=""/18, 0x12}, {&(0x7f0000002e00)=""/213, 0xd5}, {&(0x7f0000002f00)=""/62, 0x3e}, {0x0}, {0x0}, {&(0x7f0000002fc0)=""/31, 0x1f}, {&(0x7f0000003000)}], 0x7, &(0x7f00000030c0)=""/191, 0xbf}, 0x3}, {{&(0x7f0000003180)=@vsock, 0x80, &(0x7f0000004400)=[{&(0x7f0000007f40)=""/215, 0xd7}, {&(0x7f0000004300)=""/34, 0x22}, {&(0x7f0000004340)=""/28, 0x1c}, {&(0x7f0000004380)=""/108, 0x6c}], 0x4, &(0x7f0000004480)=""/222, 0xde}, 0x6}, {{&(0x7f0000004580)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000004a80)=[{&(0x7f0000004600)=""/120, 0x78}, {&(0x7f0000004700)=""/167, 0xa7}, {&(0x7f0000004800)=""/131, 0x83}, {0x0}, {&(0x7f0000004980)=""/212, 0xd4}], 0x5}, 0x8c2}, {{&(0x7f0000004b00)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000006cc0)=""/4096, 0x1000}, 0x52}], 0x8, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) write$UHID_DESTROY(r5, &(0x7f00000001c0), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x10001, 0xffff}, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x1) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000900)="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", 0x223, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 17:07:47 executing program 3: socket$packet(0x11, 0x1000000000000002, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x280080, 0x0) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000100)) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x15, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000003200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x680, 0x478, 0x210, 0x478, 0x0, 0x340, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x6, &(0x7f0000000580), {[{{@uncond, 0x0, 0xc8, 0x108}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "3c745d713ded54eb04d1bcfe4ec5e3722f760ca03b47ed1d735abcf07e43"}}, {{@uncond, 0x0, 0xc8, 0x108}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3, 0x38000, @ipv6=@rand_addr="f65360ce35d79792c798d9967e3df2d3", 0x4e21}}}, {{@ipv6={@empty, @mcast1, [0xffffff00, 0xffffff00, 0xff, 0xff000000], [0xff, 0x0, 0x17fffff01, 0xffffffff], 'rose0\x00', 'ipddp0\x00', {}, {}, 0x67, 0x9, 0x4, 0x1}, 0x0, 0xf0, 0x130, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0xe}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x5, 0x5, @ipv6=@ipv4={[], [], @empty}, 0x4e21}}}, {{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@ipv6header={0x28, 'ipv6header\x00', 0x0, {0x40, 0x20, 0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@multicast2, @ipv6=@empty, 0x2e, 0x26, 0x9}}}, {{@ipv6={@mcast1, @remote, [0xffffffff, 0xff000000, 0x7f000080, 0xff000000], [0xffffff00, 0xffffff00], 'ip6tnl0\x00', 'ip6tnl0\x00', {}, {}, 0xff, 0x1, 0x0, 0x63}, 0x0, 0xf0, 0x138, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@empty, @ipv4=@local, 0x37, 0x3b, 0x1}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6e0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000007cc0)=[{{&(0x7f00000002c0)=@caif=@dbg, 0x80, &(0x7f0000000840)=[{&(0x7f0000000340)=""/251, 0xfb}, {&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000007ec0)=""/108, 0x6c}, {&(0x7f0000000600)=""/241, 0xf1}, {0x0}], 0x5, &(0x7f0000000b40)=""/234, 0xea}, 0xd9b9}, {{&(0x7f0000000c40)=@pppol2tpv3, 0x80, &(0x7f0000002340)=[{&(0x7f0000000cc0)=""/63, 0x3f}, {&(0x7f0000000d40)=""/232, 0xe8}, {&(0x7f0000000e40)=""/77, 0x4d}, {&(0x7f0000000ec0)=""/150, 0x96}, {&(0x7f0000000f80)=""/116, 0x74}, {&(0x7f0000001000)=""/212, 0xd4}, {0x0}, {&(0x7f00000012c0)=""/4096, 0x1000}, {0x0}], 0x9, &(0x7f00000000c0)=""/40, 0x28}, 0x7f}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000002480)=""/199, 0xc7}, {&(0x7f00000008c0)=""/55, 0x37}], 0x2, &(0x7f00000025c0)=""/157, 0x9d}, 0x9}, {{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002680)=""/238, 0xee}, {&(0x7f0000002780)=""/37, 0x25}, {&(0x7f00000027c0)=""/240, 0xf0}, {&(0x7f00000028c0)=""/10, 0xa}, {&(0x7f0000002a00)=""/247, 0xf7}, {0x0}], 0x6, &(0x7f0000002c80)=""/184, 0xb8}, 0x7}, {{&(0x7f0000002d40)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f0000003040)=[{&(0x7f0000002dc0)=""/18, 0x12}, {&(0x7f0000002e00)=""/213, 0xd5}, {&(0x7f0000002f00)=""/62, 0x3e}, {0x0}, {0x0}, {&(0x7f0000002fc0)=""/31, 0x1f}, {&(0x7f0000003000)}], 0x7, &(0x7f00000030c0)=""/191, 0xbf}, 0x3}, {{&(0x7f0000003180)=@vsock, 0x80, &(0x7f0000004400)=[{&(0x7f0000007f40)=""/215, 0xd7}, {&(0x7f0000004300)=""/34, 0x22}, {&(0x7f0000004340)=""/28, 0x1c}, {&(0x7f0000004380)=""/108, 0x6c}], 0x4, &(0x7f0000004480)=""/222, 0xde}, 0x6}, {{&(0x7f0000004580)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000004a80)=[{&(0x7f0000004600)=""/120, 0x78}, {&(0x7f0000004700)=""/167, 0xa7}, {&(0x7f0000004800)=""/131, 0x83}, {0x0}, {&(0x7f0000004980)=""/212, 0xd4}], 0x5}, 0x8c2}, {{&(0x7f0000004b00)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000006cc0)=""/4096, 0x1000}, 0x52}], 0x8, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) write$UHID_DESTROY(r5, &(0x7f00000001c0), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x10001, 0xffff}, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x1) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000900)="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", 0x223, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 17:07:47 executing program 2: socket$packet(0x11, 0x1000000000000002, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x280080, 0x0) ioctl$RTC_VL_READ(r0, 0x80047013, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x15, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000003200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x680, 0x478, 0x210, 0x478, 0x0, 0x340, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x6, 0x0, {[{{@uncond, 0x0, 0xc8, 0x108}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "3c745d713ded54eb04d1bcfe4ec5e3722f760ca03b47ed1d735abcf07e43"}}, {{@uncond, 0x0, 0xc8, 0x108}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3, 0x38000, @ipv6=@rand_addr="f65360ce35d79792c798d9967e3df2d3", 0x4e21}}}, {{@ipv6={@empty, @mcast1, [0xffffff00, 0xffffff00, 0xff, 0xff000000], [0xff, 0x0, 0x17fffff01, 0xffffffff], 'rose0\x00', 'ipddp0\x00', {}, {}, 0x67, 0x9, 0x4, 0x1}, 0x0, 0xf0, 0x130, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0xe}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x5, 0x5, @ipv6=@ipv4={[], [], @empty}, 0x4e21}}}, {{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@ipv6header={0x28, 'ipv6header\x00', 0x0, {0x40, 0x20, 0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@multicast2, @ipv6=@empty, 0x2e, 0x26, 0x9}}}, {{@ipv6={@mcast1, @remote, [0xffffffff, 0xff000000, 0x7f000080, 0xff000000], [0xffffff00, 0xffffff00], 'ip6tnl0\x00', 'ip6tnl0\x00', {}, {}, 0xff, 0x1, 0x0, 0x63}, 0x0, 0xf0, 0x138, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@empty, @ipv4=@local, 0x37, 0x3b, 0x1}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6e0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000007cc0)=[{{&(0x7f00000002c0)=@caif=@dbg, 0x80, &(0x7f0000000840)=[{&(0x7f0000000340)=""/251, 0xfb}, {&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000007ec0)=""/108, 0x6c}, {&(0x7f0000000600)=""/241, 0xf1}, {0x0}], 0x5, &(0x7f0000000b40)=""/234, 0xea}, 0xd9b9}, {{&(0x7f0000000c40)=@pppol2tpv3, 0x80, &(0x7f0000002340)=[{&(0x7f0000000cc0)=""/63, 0x3f}, {&(0x7f0000000d40)=""/232, 0xe8}, {&(0x7f0000000e40)=""/77, 0x4d}, {&(0x7f0000000ec0)=""/150, 0x96}, {&(0x7f0000000f80)=""/116, 0x74}, {&(0x7f0000001000)=""/212, 0xd4}, {0x0}, {&(0x7f00000012c0)=""/4096, 0x1000}, {0x0}], 0x9, &(0x7f00000000c0)=""/40, 0x28}, 0x7f}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000002480)=""/199, 0xc7}, {&(0x7f00000008c0)=""/55, 0x37}], 0x2, &(0x7f00000025c0)=""/157, 0x9d}, 0x9}, {{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002680)=""/238, 0xee}, {&(0x7f0000002780)=""/37, 0x25}, {&(0x7f00000027c0)=""/240, 0xf0}, {&(0x7f00000028c0)=""/10, 0xa}, {&(0x7f0000002900)=""/202, 0xca}, {0x0}], 0x6, &(0x7f0000002c80)=""/184, 0xb8}, 0x7}, {{&(0x7f0000002d40)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f0000003040)=[{&(0x7f0000002dc0)=""/18, 0x12}, {&(0x7f0000002e00)=""/213, 0xd5}, {&(0x7f0000002f00)=""/62, 0x3e}, {0x0}, {0x0}, {&(0x7f0000002fc0)=""/31, 0x1f}, {&(0x7f0000003000)}], 0x7, &(0x7f00000030c0)=""/191, 0xbf}, 0x3}, {{&(0x7f0000003180)=@vsock, 0x80, &(0x7f0000004400)=[{&(0x7f0000007f40)=""/215, 0xd7}, {&(0x7f0000004300)=""/34, 0x22}, {&(0x7f0000004340)=""/28, 0x1c}, {&(0x7f0000004380)=""/108, 0x6c}], 0x4, &(0x7f0000004480)=""/222, 0xde}, 0x6}, {{&(0x7f0000004580)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000004a80)=[{&(0x7f0000004600)=""/120, 0x78}, {&(0x7f0000004700)=""/167, 0xa7}, {&(0x7f0000004800)=""/131, 0x83}, {0x0}, {&(0x7f0000004980)=""/212, 0xd4}], 0x5}, 0x8c2}, {{&(0x7f0000004b00)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000006cc0)=""/4096, 0x1000}, 0x52}], 0x8, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) write$UHID_DESTROY(r5, &(0x7f00000001c0), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x10001, 0xffff}, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x1) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000900)="585ccbc4ed83b836c1a6474914dc5500b66147b3c7218a91690000000042e3d35228897501f93191b076ac446ff0022b8753a1fa748c569f435fb3bae96efb74b50ec93c2db8eae3198a29e5c0cfc60000ce0637cef580b4ec61221adf59be045b70e48884ca000018cea71fcfed06fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff33c1e8e036e5031949762d009d308bd73f477252d0000000000004000000000000000000000000000000000195e23fb4430a9a4c2850b6380a743d6ea0c3b121f66c716d746aa81c301621b7662c06aae720b872d4b7828e3b48522c673aa6cb366d4201e2aee3261eb52f14533b7a54203cf9a4fa587c0385cdba539e9bd34717b0dfab09db7b064fbe2ecf9f40fa3a4015d0d0db3f9d562686fcdc3342c88c6f1b6f11449f8aeabf54c5533ec6acc2270d41713ae1538256af3719a07f55223a6eaa7c1eae5d6efa12fe95e2b0f1c500b28c5c76e731d5250e395526d04063718f448e62d4dd7cefeed6b72b31b894093aa37337784c00d68a4185f349e41455f12d31aa2d0ff79a4d69d97421a0042f0c7a664a8c4945104b25dc49be950c5af7405b86482d7314fcc3a0ad5eb24268ccd24a2996019f7c006a0b3c39c7b98c5a5406a2e4ff6d9c0ce12c4251756a667b4731c4b0eb5dc7d4381fecf196c4404b54c3c11c48f09734d9a6842f52d3307a688208b7a4681b101e1abe5fecfca1f464c03e933cbd15ab589ccd3c559542355190522a712b8f5128a6a00", 0x223, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 17:07:47 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x0, 0xa14f9f37bd8108a2}, 0x4) 17:07:47 executing program 0: socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RWSTAT(r1, &(0x7f00000000c0)={0xa863b37d6292c0fb}, 0x7) write(r0, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000280)) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r3, 0x541c, &(0x7f0000000080)) 17:07:47 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x4, 0x0, 0x0, 0x10000000002) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) write$P9_RATTACH(r0, 0x0, 0x0) 17:07:47 executing program 2: socket$packet(0x11, 0x1000000000000002, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x280080, 0x0) ioctl$RTC_VL_READ(r0, 0x80047013, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x15, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000003200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x680, 0x478, 0x210, 0x478, 0x0, 0x340, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x6, 0x0, {[{{@uncond, 0x0, 0xc8, 0x108}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "3c745d713ded54eb04d1bcfe4ec5e3722f760ca03b47ed1d735abcf07e43"}}, {{@uncond, 0x0, 0xc8, 0x108}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3, 0x38000, @ipv6=@rand_addr="f65360ce35d79792c798d9967e3df2d3", 0x4e21}}}, {{@ipv6={@empty, @mcast1, [0xffffff00, 0xffffff00, 0xff, 0xff000000], [0xff, 0x0, 0x17fffff01, 0xffffffff], 'rose0\x00', 'ipddp0\x00', {}, {}, 0x67, 0x9, 0x4, 0x1}, 0x0, 0xf0, 0x130, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0xe}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x5, 0x5, @ipv6=@ipv4={[], [], @empty}, 0x4e21}}}, {{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@ipv6header={0x28, 'ipv6header\x00', 0x0, {0x40, 0x20, 0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@multicast2, @ipv6=@empty, 0x2e, 0x26, 0x9}}}, {{@ipv6={@mcast1, @remote, [0xffffffff, 0xff000000, 0x7f000080, 0xff000000], [0xffffff00, 0xffffff00], 'ip6tnl0\x00', 'ip6tnl0\x00', {}, {}, 0xff, 0x1, 0x0, 0x63}, 0x0, 0xf0, 0x138, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@empty, @ipv4=@local, 0x37, 0x3b, 0x1}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6e0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000007cc0)=[{{&(0x7f00000002c0)=@caif=@dbg, 0x80, &(0x7f0000000840)=[{&(0x7f0000000340)=""/251, 0xfb}, {&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000007ec0)=""/108, 0x6c}, {&(0x7f0000000600)=""/241, 0xf1}, {0x0}], 0x5, &(0x7f0000000b40)=""/234, 0xea}, 0xd9b9}, {{&(0x7f0000000c40)=@pppol2tpv3, 0x80, &(0x7f0000002340)=[{&(0x7f0000000cc0)=""/63, 0x3f}, {&(0x7f0000000d40)=""/232, 0xe8}, {&(0x7f0000000e40)=""/77, 0x4d}, {&(0x7f0000000ec0)=""/150, 0x96}, {&(0x7f0000000f80)=""/116, 0x74}, {&(0x7f0000001000)=""/212, 0xd4}, {0x0}, {&(0x7f00000012c0)=""/4096, 0x1000}, {0x0}], 0x9, &(0x7f00000000c0)=""/40, 0x28}, 0x7f}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000002480)=""/199, 0xc7}, {&(0x7f00000008c0)=""/55, 0x37}], 0x2, &(0x7f00000025c0)=""/157, 0x9d}, 0x9}, {{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002680)=""/238, 0xee}, {&(0x7f0000002780)=""/37, 0x25}, {&(0x7f00000027c0)=""/240, 0xf0}, {&(0x7f00000028c0)=""/10, 0xa}, {&(0x7f0000002900)=""/202, 0xca}, {0x0}], 0x6, &(0x7f0000002c80)=""/184, 0xb8}, 0x7}, {{&(0x7f0000002d40)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f0000003040)=[{&(0x7f0000002dc0)=""/18, 0x12}, {&(0x7f0000002e00)=""/213, 0xd5}, {&(0x7f0000002f00)=""/62, 0x3e}, {0x0}, {0x0}, {&(0x7f0000002fc0)=""/31, 0x1f}, {&(0x7f0000003000)}], 0x7, &(0x7f00000030c0)=""/191, 0xbf}, 0x3}, {{&(0x7f0000003180)=@vsock, 0x80, &(0x7f0000004400)=[{&(0x7f0000007f40)=""/215, 0xd7}, {&(0x7f0000004300)=""/34, 0x22}, {&(0x7f0000004340)=""/28, 0x1c}, {&(0x7f0000004380)=""/108, 0x6c}], 0x4, &(0x7f0000004480)=""/222, 0xde}, 0x6}, {{&(0x7f0000004580)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000004a80)=[{&(0x7f0000004600)=""/120, 0x78}, {&(0x7f0000004700)=""/167, 0xa7}, {&(0x7f0000004800)=""/131, 0x83}, {0x0}, {&(0x7f0000004980)=""/212, 0xd4}], 0x5}, 0x8c2}, {{&(0x7f0000004b00)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000006cc0)=""/4096, 0x1000}, 0x52}], 0x8, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) write$UHID_DESTROY(r5, &(0x7f00000001c0), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x10001, 0xffff}, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x1) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000900)="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", 0x223, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) [ 538.324218] mmap: syz-executor.4 (24642) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.txt. 17:07:47 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='bbr2', 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000040)={0x0, 0xfffffffffffffd96, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[], 0xfffffead}}, 0xff2f) recvmsg(r0, &(0x7f0000000880)={0x0, 0x36d, &(0x7f0000000540)=[{&(0x7f0000000380)=""/167, 0xffffff2f}, {&(0x7f0000000180)=""/75}, {&(0x7f0000000440)=""/225}, {&(0x7f0000000080)=""/12}, {&(0x7f0000000240)=""/22}], 0x1}, 0x0) 17:07:47 executing program 1: socket$packet(0x11, 0x1000000000000002, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x280080, 0x0) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000100)) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x15, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, 0x0, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000007cc0)=[{{&(0x7f00000002c0)=@caif=@dbg, 0x80, &(0x7f0000000840)=[{&(0x7f0000000340)=""/251, 0xfb}, {&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000007ec0)=""/108, 0x6c}, {&(0x7f0000000600)=""/241, 0xf1}, {0x0}], 0x5, &(0x7f0000000b40)=""/234, 0xea}, 0xd9b9}, {{&(0x7f0000000c40)=@pppol2tpv3, 0x80, &(0x7f0000002340)=[{&(0x7f0000000cc0)=""/63, 0x3f}, {&(0x7f0000000d40)=""/232, 0xe8}, {&(0x7f0000000e40)=""/77, 0x4d}, {&(0x7f0000000ec0)=""/150, 0x96}, {&(0x7f0000000f80)=""/116, 0x74}, {&(0x7f0000001000)=""/212, 0xd4}, {0x0}, {&(0x7f00000012c0)=""/4096, 0x1000}, {0x0}], 0x9, &(0x7f00000000c0)=""/40, 0x28}}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000002480)=""/199, 0xc7}, {&(0x7f00000008c0)=""/55, 0x37}], 0x2, &(0x7f00000025c0)=""/157, 0x9d}, 0x9}, {{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002680)=""/238, 0xee}, {&(0x7f0000002780)=""/37, 0x25}, {&(0x7f00000027c0)=""/240, 0xf0}, {&(0x7f00000028c0)=""/10, 0xa}, {&(0x7f0000002900)=""/202, 0xca}, {&(0x7f0000002a00)=""/247, 0xf7}, {0x0}], 0x7, &(0x7f0000002c80)=""/184, 0xb8}, 0x7}, {{&(0x7f0000002d40)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f0000003040)=[{&(0x7f0000002dc0)=""/18, 0x12}, {&(0x7f0000002e00)=""/213, 0xd5}, {&(0x7f0000002f00)=""/62, 0x3e}, {0x0}, {0x0}, {&(0x7f0000002fc0)=""/31, 0x1f}, {&(0x7f0000003000)}], 0x7, &(0x7f00000030c0)=""/191, 0xbf}, 0x3}, {{&(0x7f0000003180)=@vsock, 0x80, &(0x7f0000004400)=[{&(0x7f0000007f40)=""/215, 0xd7}, {&(0x7f0000004300)=""/34, 0x22}, {&(0x7f0000004340)=""/28, 0x1c}, {&(0x7f0000004380)=""/108, 0x6c}], 0x4, &(0x7f0000004480)=""/222, 0xde}, 0x6}, {{&(0x7f0000004580)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000004a80)=[{&(0x7f0000004600)=""/120, 0x78}, {&(0x7f0000004700)=""/167, 0xa7}, {&(0x7f0000004800)=""/131, 0x83}, {0x0}, {&(0x7f0000004980)=""/212, 0xd4}], 0x5}, 0x8c2}, {{&(0x7f0000004b00)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000006cc0)=""/4096, 0x1000}, 0x52}], 0x8, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) write$UHID_DESTROY(r5, &(0x7f00000001c0), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x10001, 0xffff}, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x1) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000900)="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", 0x223, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 17:07:47 executing program 3: socket$packet(0x11, 0x1000000000000002, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x280080, 0x0) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000100)) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x15, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000003200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x680, 0x478, 0x210, 0x478, 0x0, 0x340, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x6, &(0x7f0000000580), {[{{@uncond, 0x0, 0xc8, 0x108}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "3c745d713ded54eb04d1bcfe4ec5e3722f760ca03b47ed1d735abcf07e43"}}, {{@uncond, 0x0, 0xc8, 0x108}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3, 0x38000, @ipv6=@rand_addr="f65360ce35d79792c798d9967e3df2d3", 0x4e21}}}, {{@ipv6={@empty, @mcast1, [0xffffff00, 0xffffff00, 0xff, 0xff000000], [0xff, 0x0, 0x17fffff01, 0xffffffff], 'rose0\x00', 'ipddp0\x00', {}, {}, 0x67, 0x9, 0x4, 0x1}, 0x0, 0xf0, 0x130, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0xe}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x5, 0x5, @ipv6=@ipv4={[], [], @empty}, 0x4e21}}}, {{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@ipv6header={0x28, 'ipv6header\x00', 0x0, {0x40, 0x20, 0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@multicast2, @ipv6=@empty, 0x2e, 0x26, 0x9}}}, {{@ipv6={@mcast1, @remote, [0xffffffff, 0xff000000, 0x7f000080, 0xff000000], [0xffffff00, 0xffffff00], 'ip6tnl0\x00', 'ip6tnl0\x00', {}, {}, 0xff, 0x1, 0x0, 0x63}, 0x0, 0xf0, 0x138, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@empty, @ipv4=@local, 0x37, 0x3b, 0x1}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6e0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000007cc0)=[{{&(0x7f00000002c0)=@caif=@dbg, 0x80, &(0x7f0000000840)=[{&(0x7f0000000340)=""/251, 0xfb}, {&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000007ec0)=""/108, 0x6c}, {&(0x7f0000000600)=""/241, 0xf1}, {0x0}], 0x5, &(0x7f0000000b40)=""/234, 0xea}, 0xd9b9}, {{&(0x7f0000000c40)=@pppol2tpv3, 0x80, &(0x7f0000002340)=[{&(0x7f0000000cc0)=""/63, 0x3f}, {&(0x7f0000000d40)=""/232, 0xe8}, {&(0x7f0000000e40)=""/77, 0x4d}, {&(0x7f0000000ec0)=""/150, 0x96}, {&(0x7f0000000f80)=""/116, 0x74}, {&(0x7f0000001000)=""/212, 0xd4}, {0x0}, {&(0x7f00000012c0)=""/4096, 0x1000}, {0x0}], 0x9, &(0x7f00000000c0)=""/40, 0x28}, 0x7f}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000002480)=""/199, 0xc7}, {&(0x7f00000008c0)=""/55, 0x37}], 0x2, &(0x7f00000025c0)=""/157, 0x9d}, 0x9}, {{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002680)=""/238, 0xee}, {&(0x7f0000002780)=""/37, 0x25}, {&(0x7f00000027c0)=""/240, 0xf0}, {&(0x7f00000028c0)=""/10, 0xa}, {&(0x7f0000002a00)=""/247, 0xf7}, {0x0}], 0x6, &(0x7f0000002c80)=""/184, 0xb8}, 0x7}, {{&(0x7f0000002d40)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f0000003040)=[{&(0x7f0000002dc0)=""/18, 0x12}, {&(0x7f0000002e00)=""/213, 0xd5}, {&(0x7f0000002f00)=""/62, 0x3e}, {0x0}, {0x0}, {&(0x7f0000002fc0)=""/31, 0x1f}, {&(0x7f0000003000)}], 0x7, &(0x7f00000030c0)=""/191, 0xbf}, 0x3}, {{&(0x7f0000003180)=@vsock, 0x80, &(0x7f0000004400)=[{&(0x7f0000007f40)=""/215, 0xd7}, {&(0x7f0000004300)=""/34, 0x22}, {&(0x7f0000004340)=""/28, 0x1c}, {&(0x7f0000004380)=""/108, 0x6c}], 0x4, &(0x7f0000004480)=""/222, 0xde}, 0x6}, {{&(0x7f0000004580)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000004a80)=[{&(0x7f0000004600)=""/120, 0x78}, {&(0x7f0000004700)=""/167, 0xa7}, {&(0x7f0000004800)=""/131, 0x83}, {0x0}, {&(0x7f0000004980)=""/212, 0xd4}], 0x5}, 0x8c2}, {{&(0x7f0000004b00)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000006cc0)=""/4096, 0x1000}, 0x52}], 0x8, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) write$UHID_DESTROY(r5, &(0x7f00000001c0), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x10001, 0xffff}, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x1) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000900)="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", 0x223, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 17:07:47 executing program 2: socket$packet(0x11, 0x1000000000000002, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x280080, 0x0) ioctl$RTC_VL_READ(r0, 0x80047013, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x15, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000003200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x680, 0x478, 0x210, 0x478, 0x0, 0x340, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x6, 0x0, {[{{@uncond, 0x0, 0xc8, 0x108}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "3c745d713ded54eb04d1bcfe4ec5e3722f760ca03b47ed1d735abcf07e43"}}, {{@uncond, 0x0, 0xc8, 0x108}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3, 0x38000, @ipv6=@rand_addr="f65360ce35d79792c798d9967e3df2d3", 0x4e21}}}, {{@ipv6={@empty, @mcast1, [0xffffff00, 0xffffff00, 0xff, 0xff000000], [0xff, 0x0, 0x17fffff01, 0xffffffff], 'rose0\x00', 'ipddp0\x00', {}, {}, 0x67, 0x9, 0x4, 0x1}, 0x0, 0xf0, 0x130, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0xe}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x5, 0x5, @ipv6=@ipv4={[], [], @empty}, 0x4e21}}}, {{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@ipv6header={0x28, 'ipv6header\x00', 0x0, {0x40, 0x20, 0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@multicast2, @ipv6=@empty, 0x2e, 0x26, 0x9}}}, {{@ipv6={@mcast1, @remote, [0xffffffff, 0xff000000, 0x7f000080, 0xff000000], [0xffffff00, 0xffffff00], 'ip6tnl0\x00', 'ip6tnl0\x00', {}, {}, 0xff, 0x1, 0x0, 0x63}, 0x0, 0xf0, 0x138, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@empty, @ipv4=@local, 0x37, 0x3b, 0x1}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6e0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000007cc0)=[{{&(0x7f00000002c0)=@caif=@dbg, 0x80, &(0x7f0000000840)=[{&(0x7f0000000340)=""/251, 0xfb}, {&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000007ec0)=""/108, 0x6c}, {&(0x7f0000000600)=""/241, 0xf1}, {0x0}], 0x5, &(0x7f0000000b40)=""/234, 0xea}, 0xd9b9}, {{&(0x7f0000000c40)=@pppol2tpv3, 0x80, &(0x7f0000002340)=[{&(0x7f0000000cc0)=""/63, 0x3f}, {&(0x7f0000000d40)=""/232, 0xe8}, {&(0x7f0000000e40)=""/77, 0x4d}, {&(0x7f0000000ec0)=""/150, 0x96}, {&(0x7f0000000f80)=""/116, 0x74}, {&(0x7f0000001000)=""/212, 0xd4}, {0x0}, {&(0x7f00000012c0)=""/4096, 0x1000}, {0x0}], 0x9, &(0x7f00000000c0)=""/40, 0x28}, 0x7f}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000002480)=""/199, 0xc7}, {&(0x7f00000008c0)=""/55, 0x37}], 0x2, &(0x7f00000025c0)=""/157, 0x9d}, 0x9}, {{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002680)=""/238, 0xee}, {&(0x7f0000002780)=""/37, 0x25}, {&(0x7f00000027c0)=""/240, 0xf0}, {&(0x7f00000028c0)=""/10, 0xa}, {&(0x7f0000002900)=""/202, 0xca}, {0x0}], 0x6, &(0x7f0000002c80)=""/184, 0xb8}, 0x7}, {{&(0x7f0000002d40)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f0000003040)=[{&(0x7f0000002dc0)=""/18, 0x12}, {&(0x7f0000002e00)=""/213, 0xd5}, {&(0x7f0000002f00)=""/62, 0x3e}, {0x0}, {0x0}, {&(0x7f0000002fc0)=""/31, 0x1f}, {&(0x7f0000003000)}], 0x7, &(0x7f00000030c0)=""/191, 0xbf}, 0x3}, {{&(0x7f0000003180)=@vsock, 0x80, &(0x7f0000004400)=[{&(0x7f0000007f40)=""/215, 0xd7}, {&(0x7f0000004300)=""/34, 0x22}, {&(0x7f0000004340)=""/28, 0x1c}, {&(0x7f0000004380)=""/108, 0x6c}], 0x4, &(0x7f0000004480)=""/222, 0xde}, 0x6}, {{&(0x7f0000004580)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000004a80)=[{&(0x7f0000004600)=""/120, 0x78}, {&(0x7f0000004700)=""/167, 0xa7}, {&(0x7f0000004800)=""/131, 0x83}, {0x0}, {&(0x7f0000004980)=""/212, 0xd4}], 0x5}, 0x8c2}, {{&(0x7f0000004b00)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000006cc0)=""/4096, 0x1000}, 0x52}], 0x8, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) write$UHID_DESTROY(r5, &(0x7f00000001c0), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x10001, 0xffff}, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x1) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000900)="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", 0x223, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 17:07:47 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x4, 0x0, 0x0, 0x10000000002) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) write$P9_RATTACH(r0, 0x0, 0x0) 17:07:48 executing program 2: socket$packet(0x11, 0x1000000000000002, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x280080, 0x0) ioctl$RTC_VL_READ(r0, 0x80047013, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x15, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000003200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x680, 0x478, 0x210, 0x478, 0x0, 0x340, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x6, 0x0, {[{{@uncond, 0x0, 0xc8, 0x108}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "3c745d713ded54eb04d1bcfe4ec5e3722f760ca03b47ed1d735abcf07e43"}}, {{@uncond, 0x0, 0xc8, 0x108}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3, 0x38000, @ipv6=@rand_addr="f65360ce35d79792c798d9967e3df2d3", 0x4e21}}}, {{@ipv6={@empty, @mcast1, [0xffffff00, 0xffffff00, 0xff, 0xff000000], [0xff, 0x0, 0x17fffff01, 0xffffffff], 'rose0\x00', 'ipddp0\x00', {}, {}, 0x67, 0x9, 0x4, 0x1}, 0x0, 0xf0, 0x130, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0xe}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x5, 0x5, @ipv6=@ipv4={[], [], @empty}, 0x4e21}}}, {{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@ipv6header={0x28, 'ipv6header\x00', 0x0, {0x40, 0x20, 0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@multicast2, @ipv6=@empty, 0x2e, 0x26, 0x9}}}, {{@ipv6={@mcast1, @remote, [0xffffffff, 0xff000000, 0x7f000080, 0xff000000], [0xffffff00, 0xffffff00], 'ip6tnl0\x00', 'ip6tnl0\x00', {}, {}, 0xff, 0x1, 0x0, 0x63}, 0x0, 0xf0, 0x138, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@empty, @ipv4=@local, 0x37, 0x3b, 0x1}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6e0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000007cc0)=[{{&(0x7f00000002c0)=@caif=@dbg, 0x80, &(0x7f0000000840)=[{&(0x7f0000000340)=""/251, 0xfb}, {&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000007ec0)=""/108, 0x6c}, {&(0x7f0000000600)=""/241, 0xf1}, {0x0}], 0x5, &(0x7f0000000b40)=""/234, 0xea}, 0xd9b9}, {{&(0x7f0000000c40)=@pppol2tpv3, 0x80, &(0x7f0000002340)=[{&(0x7f0000000cc0)=""/63, 0x3f}, {&(0x7f0000000d40)=""/232, 0xe8}, {&(0x7f0000000e40)=""/77, 0x4d}, {&(0x7f0000000ec0)=""/150, 0x96}, {&(0x7f0000000f80)=""/116, 0x74}, {&(0x7f0000001000)=""/212, 0xd4}, {0x0}, {&(0x7f00000012c0)=""/4096, 0x1000}, {0x0}], 0x9, &(0x7f00000000c0)=""/40, 0x28}, 0x7f}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000002480)=""/199, 0xc7}, {&(0x7f00000008c0)=""/55, 0x37}], 0x2, &(0x7f00000025c0)=""/157, 0x9d}, 0x9}, {{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002680)=""/238, 0xee}, {&(0x7f0000002780)=""/37, 0x25}, {&(0x7f00000027c0)=""/240, 0xf0}, {&(0x7f00000028c0)=""/10, 0xa}, {&(0x7f0000002900)=""/202, 0xca}, {0x0}, {0x0}], 0x7, &(0x7f0000002c80)=""/184, 0xb8}, 0x7}, {{&(0x7f0000002d40)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f0000003040)=[{&(0x7f0000002dc0)=""/18, 0x12}, {&(0x7f0000002e00)=""/213, 0xd5}, {&(0x7f0000002f00)=""/62, 0x3e}, {0x0}, {0x0}, {&(0x7f0000002fc0)=""/31, 0x1f}, {&(0x7f0000003000)}], 0x7, &(0x7f00000030c0)=""/191, 0xbf}, 0x3}, {{&(0x7f0000003180)=@vsock, 0x80, &(0x7f0000004400)=[{&(0x7f0000007f40)=""/215, 0xd7}, {&(0x7f0000004300)=""/34, 0x22}, {&(0x7f0000004340)=""/28, 0x1c}, {&(0x7f0000004380)=""/108, 0x6c}], 0x4, &(0x7f0000004480)=""/222, 0xde}, 0x6}, {{&(0x7f0000004580)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000004a80)=[{&(0x7f0000004600)=""/120, 0x78}, {&(0x7f0000004700)=""/167, 0xa7}, {&(0x7f0000004800)=""/131, 0x83}, {0x0}, {&(0x7f0000004980)=""/212, 0xd4}], 0x5}, 0x8c2}, {{&(0x7f0000004b00)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000006cc0)=""/4096, 0x1000}, 0x52}], 0x8, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) write$UHID_DESTROY(r5, &(0x7f00000001c0), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x10001, 0xffff}, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x1) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000900)="585ccbc4ed83b836c1a6474914dc5500b66147b3c7218a91690000000042e3d35228897501f93191b076ac446ff0022b8753a1fa748c569f435fb3bae96efb74b50ec93c2db8eae3198a29e5c0cfc60000ce0637cef580b4ec61221adf59be045b70e48884ca000018cea71fcfed06fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff33c1e8e036e5031949762d009d308bd73f477252d0000000000004000000000000000000000000000000000195e23fb4430a9a4c2850b6380a743d6ea0c3b121f66c716d746aa81c301621b7662c06aae720b872d4b7828e3b48522c673aa6cb366d4201e2aee3261eb52f14533b7a54203cf9a4fa587c0385cdba539e9bd34717b0dfab09db7b064fbe2ecf9f40fa3a4015d0d0db3f9d562686fcdc3342c88c6f1b6f11449f8aeabf54c5533ec6acc2270d41713ae1538256af3719a07f55223a6eaa7c1eae5d6efa12fe95e2b0f1c500b28c5c76e731d5250e395526d04063718f448e62d4dd7cefeed6b72b31b894093aa37337784c00d68a4185f349e41455f12d31aa2d0ff79a4d69d97421a0042f0c7a664a8c4945104b25dc49be950c5af7405b86482d7314fcc3a0ad5eb24268ccd24a2996019f7c006a0b3c39c7b98c5a5406a2e4ff6d9c0ce12c4251756a667b4731c4b0eb5dc7d4381fecf196c4404b54c3c11c48f09734d9a6842f52d3307a688208b7a4681b101e1abe5fecfca1f464c03e933cbd15ab589ccd3c559542355190522a712b8f5128a6a00", 0x223, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 17:07:48 executing program 1: socket$packet(0x11, 0x1000000000000002, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x280080, 0x0) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000100)) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x15, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, 0x0, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000007cc0)=[{{&(0x7f00000002c0)=@caif=@dbg, 0x80, &(0x7f0000000840)=[{&(0x7f0000000340)=""/251, 0xfb}, {&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000007ec0)=""/108, 0x6c}, {&(0x7f0000000600)=""/241, 0xf1}, {0x0}], 0x5, &(0x7f0000000b40)=""/234, 0xea}, 0xd9b9}, {{&(0x7f0000000c40)=@pppol2tpv3, 0x80, &(0x7f0000002340)=[{&(0x7f0000000cc0)=""/63, 0x3f}, {&(0x7f0000000d40)=""/232, 0xe8}, {&(0x7f0000000e40)=""/77, 0x4d}, {&(0x7f0000000ec0)=""/150, 0x96}, {&(0x7f0000000f80)=""/116, 0x74}, {&(0x7f0000001000)=""/212, 0xd4}, {0x0}, {&(0x7f00000012c0)=""/4096, 0x1000}, {0x0}], 0x9, &(0x7f00000000c0)=""/40, 0x28}}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000002480)=""/199, 0xc7}, {&(0x7f00000008c0)=""/55, 0x37}], 0x2, &(0x7f00000025c0)=""/157, 0x9d}, 0x9}, {{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002680)=""/238, 0xee}, {&(0x7f0000002780)=""/37, 0x25}, {&(0x7f00000027c0)=""/240, 0xf0}, {&(0x7f00000028c0)=""/10, 0xa}, {&(0x7f0000002900)=""/202, 0xca}, {&(0x7f0000002a00)=""/247, 0xf7}, {0x0}], 0x7, &(0x7f0000002c80)=""/184, 0xb8}, 0x7}, {{&(0x7f0000002d40)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f0000003040)=[{&(0x7f0000002dc0)=""/18, 0x12}, {&(0x7f0000002e00)=""/213, 0xd5}, {&(0x7f0000002f00)=""/62, 0x3e}, {0x0}, {0x0}, {&(0x7f0000002fc0)=""/31, 0x1f}, {&(0x7f0000003000)}], 0x7, &(0x7f00000030c0)=""/191, 0xbf}, 0x3}, {{&(0x7f0000003180)=@vsock, 0x80, &(0x7f0000004400)=[{&(0x7f0000007f40)=""/215, 0xd7}, {&(0x7f0000004300)=""/34, 0x22}, {&(0x7f0000004340)=""/28, 0x1c}, {&(0x7f0000004380)=""/108, 0x6c}], 0x4, &(0x7f0000004480)=""/222, 0xde}, 0x6}, {{&(0x7f0000004580)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000004a80)=[{&(0x7f0000004600)=""/120, 0x78}, {&(0x7f0000004700)=""/167, 0xa7}, {&(0x7f0000004800)=""/131, 0x83}, {0x0}, {&(0x7f0000004980)=""/212, 0xd4}], 0x5}, 0x8c2}, {{&(0x7f0000004b00)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000006cc0)=""/4096, 0x1000}, 0x52}], 0x8, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) write$UHID_DESTROY(r5, &(0x7f00000001c0), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x10001, 0xffff}, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x1) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000900)="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", 0x223, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 17:07:48 executing program 3: socket$packet(0x11, 0x1000000000000002, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x280080, 0x0) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000100)) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x15, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000003200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x680, 0x478, 0x210, 0x478, 0x0, 0x340, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x6, &(0x7f0000000580), {[{{@uncond, 0x0, 0xc8, 0x108}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "3c745d713ded54eb04d1bcfe4ec5e3722f760ca03b47ed1d735abcf07e43"}}, {{@uncond, 0x0, 0xc8, 0x108}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3, 0x38000, @ipv6=@rand_addr="f65360ce35d79792c798d9967e3df2d3", 0x4e21}}}, {{@ipv6={@empty, @mcast1, [0xffffff00, 0xffffff00, 0xff, 0xff000000], [0xff, 0x0, 0x17fffff01, 0xffffffff], 'rose0\x00', 'ipddp0\x00', {}, {}, 0x67, 0x9, 0x4, 0x1}, 0x0, 0xf0, 0x130, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0xe}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x5, 0x5, @ipv6=@ipv4={[], [], @empty}, 0x4e21}}}, {{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@ipv6header={0x28, 'ipv6header\x00', 0x0, {0x40, 0x20, 0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@multicast2, @ipv6=@empty, 0x2e, 0x26, 0x9}}}, {{@ipv6={@mcast1, @remote, [0xffffffff, 0xff000000, 0x7f000080, 0xff000000], [0xffffff00, 0xffffff00], 'ip6tnl0\x00', 'ip6tnl0\x00', {}, {}, 0xff, 0x1, 0x0, 0x63}, 0x0, 0xf0, 0x138, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@empty, @ipv4=@local, 0x37, 0x3b, 0x1}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6e0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000007cc0)=[{{&(0x7f00000002c0)=@caif=@dbg, 0x80, &(0x7f0000000840)=[{&(0x7f0000000340)=""/251, 0xfb}, {&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000007ec0)=""/108, 0x6c}, {&(0x7f0000000600)=""/241, 0xf1}, {0x0}], 0x5, &(0x7f0000000b40)=""/234, 0xea}, 0xd9b9}, {{&(0x7f0000000c40)=@pppol2tpv3, 0x80, &(0x7f0000002340)=[{&(0x7f0000000cc0)=""/63, 0x3f}, {&(0x7f0000000d40)=""/232, 0xe8}, {&(0x7f0000000e40)=""/77, 0x4d}, {&(0x7f0000000ec0)=""/150, 0x96}, {&(0x7f0000000f80)=""/116, 0x74}, {&(0x7f0000001000)=""/212, 0xd4}, {0x0}, {&(0x7f00000012c0)=""/4096, 0x1000}, {0x0}], 0x9, &(0x7f00000000c0)=""/40, 0x28}, 0x7f}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000002480)=""/199, 0xc7}, {&(0x7f00000008c0)=""/55, 0x37}], 0x2, &(0x7f00000025c0)=""/157, 0x9d}, 0x9}, {{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002680)=""/238, 0xee}, {&(0x7f0000002780)=""/37, 0x25}, {&(0x7f00000027c0)=""/240, 0xf0}, {&(0x7f00000028c0)=""/10, 0xa}, {0x0}, {&(0x7f0000002a00)=""/247, 0xf7}, {0x0}], 0x7, &(0x7f0000002c80)=""/184, 0xb8}, 0x7}, {{&(0x7f0000002d40)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f0000003040)=[{&(0x7f0000002dc0)=""/18, 0x12}, {&(0x7f0000002e00)=""/213, 0xd5}, {&(0x7f0000002f00)=""/62, 0x3e}, {0x0}, {0x0}, {&(0x7f0000002fc0)=""/31, 0x1f}, {&(0x7f0000003000)}], 0x7, &(0x7f00000030c0)=""/191, 0xbf}, 0x3}, {{&(0x7f0000003180)=@vsock, 0x80, &(0x7f0000004400)=[{&(0x7f0000007f40)=""/215, 0xd7}, {&(0x7f0000004300)=""/34, 0x22}, {&(0x7f0000004340)=""/28, 0x1c}, {&(0x7f0000004380)=""/108, 0x6c}], 0x4, &(0x7f0000004480)=""/222, 0xde}, 0x6}, {{&(0x7f0000004580)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000004a80)=[{&(0x7f0000004600)=""/120, 0x78}, {&(0x7f0000004700)=""/167, 0xa7}, {&(0x7f0000004800)=""/131, 0x83}, {0x0}, {&(0x7f0000004980)=""/212, 0xd4}], 0x5}, 0x8c2}, {{&(0x7f0000004b00)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000006cc0)=""/4096, 0x1000}, 0x52}], 0x8, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) write$UHID_DESTROY(r5, &(0x7f00000001c0), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x10001, 0xffff}, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x1) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000900)="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", 0x223, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 17:07:48 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x4, 0x0, 0x0, 0x10000000002) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) write$P9_RATTACH(r0, 0x0, 0x0) [ 541.440106] net_ratelimit: 14 callbacks suppressed [ 541.440112] protocol 88fb is buggy, dev hsr_slave_0 [ 541.450191] protocol 88fb is buggy, dev hsr_slave_1 [ 541.520111] protocol 88fb is buggy, dev hsr_slave_0 [ 541.525250] protocol 88fb is buggy, dev hsr_slave_1 [ 541.600106] protocol 88fb is buggy, dev hsr_slave_0 [ 541.605288] protocol 88fb is buggy, dev hsr_slave_1 [ 542.560113] protocol 88fb is buggy, dev hsr_slave_0 [ 542.565238] protocol 88fb is buggy, dev hsr_slave_1 [ 543.120112] protocol 88fb is buggy, dev hsr_slave_0 [ 543.125260] protocol 88fb is buggy, dev hsr_slave_1 [ 546.720106] net_ratelimit: 16 callbacks suppressed [ 546.720110] protocol 88fb is buggy, dev hsr_slave_0 [ 546.730139] protocol 88fb is buggy, dev hsr_slave_1 [ 547.280140] protocol 88fb is buggy, dev hsr_slave_0 [ 547.285253] protocol 88fb is buggy, dev hsr_slave_1 [ 547.680119] protocol 88fb is buggy, dev hsr_slave_0 [ 547.685253] protocol 88fb is buggy, dev hsr_slave_1 [ 547.760126] protocol 88fb is buggy, dev hsr_slave_0 [ 547.765256] protocol 88fb is buggy, dev hsr_slave_1 [ 547.840125] protocol 88fb is buggy, dev hsr_slave_0 [ 547.845278] protocol 88fb is buggy, dev hsr_slave_1 [ 551.840118] net_ratelimit: 14 callbacks suppressed [ 551.840125] protocol 88fb is buggy, dev hsr_slave_0 [ 551.850193] protocol 88fb is buggy, dev hsr_slave_1 [ 551.920141] protocol 88fb is buggy, dev hsr_slave_0 [ 551.925237] protocol 88fb is buggy, dev hsr_slave_1 [ 552.000118] protocol 88fb is buggy, dev hsr_slave_0 [ 552.005229] protocol 88fb is buggy, dev hsr_slave_1 [ 552.960136] protocol 88fb is buggy, dev hsr_slave_0 [ 552.965262] protocol 88fb is buggy, dev hsr_slave_1 [ 553.520110] protocol 88fb is buggy, dev hsr_slave_0 [ 553.525210] protocol 88fb is buggy, dev hsr_slave_1 [ 557.120124] net_ratelimit: 16 callbacks suppressed [ 557.120130] protocol 88fb is buggy, dev hsr_slave_0 [ 557.130138] protocol 88fb is buggy, dev hsr_slave_1 [ 557.680121] protocol 88fb is buggy, dev hsr_slave_0 [ 557.685243] protocol 88fb is buggy, dev hsr_slave_1 [ 558.080163] protocol 88fb is buggy, dev hsr_slave_0 [ 558.085294] protocol 88fb is buggy, dev hsr_slave_1 [ 558.160108] protocol 88fb is buggy, dev hsr_slave_0 [ 558.160155] protocol 88fb is buggy, dev hsr_slave_1 [ 558.240116] protocol 88fb is buggy, dev hsr_slave_0 [ 558.245239] protocol 88fb is buggy, dev hsr_slave_1 [ 562.240117] net_ratelimit: 14 callbacks suppressed [ 562.240124] protocol 88fb is buggy, dev hsr_slave_0 [ 562.250203] protocol 88fb is buggy, dev hsr_slave_1 [ 562.320121] protocol 88fb is buggy, dev hsr_slave_0 [ 562.325225] protocol 88fb is buggy, dev hsr_slave_1 [ 562.400117] protocol 88fb is buggy, dev hsr_slave_0 [ 562.405230] protocol 88fb is buggy, dev hsr_slave_1 [ 563.360118] protocol 88fb is buggy, dev hsr_slave_0 [ 563.365235] protocol 88fb is buggy, dev hsr_slave_1 [ 563.920183] protocol 88fb is buggy, dev hsr_slave_0 [ 563.925329] protocol 88fb is buggy, dev hsr_slave_1 [ 567.520085] net_ratelimit: 16 callbacks suppressed [ 567.520089] protocol 88fb is buggy, dev hsr_slave_0 [ 567.530315] protocol 88fb is buggy, dev hsr_slave_1 [ 568.080150] protocol 88fb is buggy, dev hsr_slave_0 [ 568.085245] protocol 88fb is buggy, dev hsr_slave_1 [ 568.480120] protocol 88fb is buggy, dev hsr_slave_0 [ 568.485244] protocol 88fb is buggy, dev hsr_slave_1 [ 568.560123] protocol 88fb is buggy, dev hsr_slave_0 [ 568.565224] protocol 88fb is buggy, dev hsr_slave_1 [ 568.640110] protocol 88fb is buggy, dev hsr_slave_0 [ 568.645256] protocol 88fb is buggy, dev hsr_slave_1 [ 572.640123] net_ratelimit: 14 callbacks suppressed [ 572.645127] protocol 88fb is buggy, dev hsr_slave_0 [ 572.650235] protocol 88fb is buggy, dev hsr_slave_1 [ 572.720141] protocol 88fb is buggy, dev hsr_slave_0 [ 572.725263] protocol 88fb is buggy, dev hsr_slave_1 [ 572.800114] protocol 88fb is buggy, dev hsr_slave_0 [ 572.805277] protocol 88fb is buggy, dev hsr_slave_1 [ 573.760091] protocol 88fb is buggy, dev hsr_slave_0 [ 573.765163] protocol 88fb is buggy, dev hsr_slave_1 [ 574.320134] protocol 88fb is buggy, dev hsr_slave_0 [ 574.325230] protocol 88fb is buggy, dev hsr_slave_1 [ 577.920142] net_ratelimit: 16 callbacks suppressed [ 577.920147] protocol 88fb is buggy, dev hsr_slave_0 [ 577.930186] protocol 88fb is buggy, dev hsr_slave_1 [ 578.480110] protocol 88fb is buggy, dev hsr_slave_0 [ 578.485252] protocol 88fb is buggy, dev hsr_slave_1 [ 578.880119] protocol 88fb is buggy, dev hsr_slave_0 [ 578.885249] protocol 88fb is buggy, dev hsr_slave_1 [ 578.960123] protocol 88fb is buggy, dev hsr_slave_0 [ 578.965221] protocol 88fb is buggy, dev hsr_slave_1 [ 579.040161] protocol 88fb is buggy, dev hsr_slave_0 [ 579.045306] protocol 88fb is buggy, dev hsr_slave_1 [ 583.040200] net_ratelimit: 14 callbacks suppressed [ 583.040206] protocol 88fb is buggy, dev hsr_slave_0 [ 583.050329] protocol 88fb is buggy, dev hsr_slave_1 [ 583.120108] protocol 88fb is buggy, dev hsr_slave_0 [ 583.125209] protocol 88fb is buggy, dev hsr_slave_1 [ 583.200117] protocol 88fb is buggy, dev hsr_slave_0 [ 583.205256] protocol 88fb is buggy, dev hsr_slave_1 [ 584.160119] protocol 88fb is buggy, dev hsr_slave_0 [ 584.165193] protocol 88fb is buggy, dev hsr_slave_1 [ 584.720117] protocol 88fb is buggy, dev hsr_slave_0 [ 584.725217] protocol 88fb is buggy, dev hsr_slave_1 [ 588.320138] net_ratelimit: 16 callbacks suppressed [ 588.320144] protocol 88fb is buggy, dev hsr_slave_0 [ 588.330323] protocol 88fb is buggy, dev hsr_slave_1 [ 588.880156] protocol 88fb is buggy, dev hsr_slave_0 [ 588.885320] protocol 88fb is buggy, dev hsr_slave_1 [ 589.280113] protocol 88fb is buggy, dev hsr_slave_0 [ 589.285253] protocol 88fb is buggy, dev hsr_slave_1 [ 589.360124] protocol 88fb is buggy, dev hsr_slave_0 [ 589.365234] protocol 88fb is buggy, dev hsr_slave_1 [ 589.440115] protocol 88fb is buggy, dev hsr_slave_0 [ 589.445264] protocol 88fb is buggy, dev hsr_slave_1 [ 593.440135] net_ratelimit: 14 callbacks suppressed [ 593.440141] protocol 88fb is buggy, dev hsr_slave_0 [ 593.450198] protocol 88fb is buggy, dev hsr_slave_1 [ 593.520121] protocol 88fb is buggy, dev hsr_slave_0 [ 593.525212] protocol 88fb is buggy, dev hsr_slave_1 [ 593.600143] protocol 88fb is buggy, dev hsr_slave_0 [ 593.605263] protocol 88fb is buggy, dev hsr_slave_1 [ 594.560142] protocol 88fb is buggy, dev hsr_slave_0 [ 594.565270] protocol 88fb is buggy, dev hsr_slave_1 [ 595.120115] protocol 88fb is buggy, dev hsr_slave_0 [ 595.120162] protocol 88fb is buggy, dev hsr_slave_1 [ 598.720116] net_ratelimit: 16 callbacks suppressed [ 598.720122] protocol 88fb is buggy, dev hsr_slave_0 [ 598.730664] protocol 88fb is buggy, dev hsr_slave_1 [ 599.280148] protocol 88fb is buggy, dev hsr_slave_0 [ 599.285282] protocol 88fb is buggy, dev hsr_slave_1 [ 599.680137] protocol 88fb is buggy, dev hsr_slave_0 [ 599.685273] protocol 88fb is buggy, dev hsr_slave_1 [ 599.760118] protocol 88fb is buggy, dev hsr_slave_0 [ 599.765209] protocol 88fb is buggy, dev hsr_slave_1 [ 599.840149] protocol 88fb is buggy, dev hsr_slave_0 [ 599.845297] protocol 88fb is buggy, dev hsr_slave_1 [ 603.840116] net_ratelimit: 14 callbacks suppressed [ 603.840122] protocol 88fb is buggy, dev hsr_slave_0 [ 603.850279] protocol 88fb is buggy, dev hsr_slave_1 [ 603.920118] protocol 88fb is buggy, dev hsr_slave_0 [ 603.925533] protocol 88fb is buggy, dev hsr_slave_1 [ 604.000109] protocol 88fb is buggy, dev hsr_slave_0 [ 604.005236] protocol 88fb is buggy, dev hsr_slave_1 [ 604.960092] protocol 88fb is buggy, dev hsr_slave_0 [ 604.965167] protocol 88fb is buggy, dev hsr_slave_1 [ 605.520115] protocol 88fb is buggy, dev hsr_slave_0 [ 605.525237] protocol 88fb is buggy, dev hsr_slave_1 [ 609.120120] net_ratelimit: 16 callbacks suppressed [ 609.120126] protocol 88fb is buggy, dev hsr_slave_0 [ 609.130227] protocol 88fb is buggy, dev hsr_slave_1 [ 609.680118] protocol 88fb is buggy, dev hsr_slave_0 [ 609.685242] protocol 88fb is buggy, dev hsr_slave_1 [ 610.080170] protocol 88fb is buggy, dev hsr_slave_0 [ 610.085302] protocol 88fb is buggy, dev hsr_slave_1 [ 610.160126] protocol 88fb is buggy, dev hsr_slave_0 [ 610.165239] protocol 88fb is buggy, dev hsr_slave_1 [ 610.240106] protocol 88fb is buggy, dev hsr_slave_0 [ 610.240191] protocol 88fb is buggy, dev hsr_slave_1 [ 614.240115] net_ratelimit: 14 callbacks suppressed [ 614.240121] protocol 88fb is buggy, dev hsr_slave_0 [ 614.250161] protocol 88fb is buggy, dev hsr_slave_1 [ 614.320123] protocol 88fb is buggy, dev hsr_slave_0 [ 614.325237] protocol 88fb is buggy, dev hsr_slave_1 [ 614.400137] protocol 88fb is buggy, dev hsr_slave_0 [ 614.405279] protocol 88fb is buggy, dev hsr_slave_1 [ 615.360129] protocol 88fb is buggy, dev hsr_slave_0 [ 615.365218] protocol 88fb is buggy, dev hsr_slave_1 [ 615.920153] protocol 88fb is buggy, dev hsr_slave_0 [ 615.925300] protocol 88fb is buggy, dev hsr_slave_1 [ 619.520095] net_ratelimit: 16 callbacks suppressed [ 619.520100] protocol 88fb is buggy, dev hsr_slave_0 [ 619.530138] protocol 88fb is buggy, dev hsr_slave_1 [ 620.080150] protocol 88fb is buggy, dev hsr_slave_0 [ 620.085260] protocol 88fb is buggy, dev hsr_slave_1 [ 620.480113] protocol 88fb is buggy, dev hsr_slave_0 [ 620.485247] protocol 88fb is buggy, dev hsr_slave_1 [ 620.560116] protocol 88fb is buggy, dev hsr_slave_0 [ 620.565214] protocol 88fb is buggy, dev hsr_slave_1 [ 620.640134] protocol 88fb is buggy, dev hsr_slave_0 [ 620.645278] protocol 88fb is buggy, dev hsr_slave_1 [ 624.640121] net_ratelimit: 14 callbacks suppressed [ 624.640128] protocol 88fb is buggy, dev hsr_slave_0 [ 624.650189] protocol 88fb is buggy, dev hsr_slave_1 [ 624.720119] protocol 88fb is buggy, dev hsr_slave_0 [ 624.725238] protocol 88fb is buggy, dev hsr_slave_1 [ 624.800112] protocol 88fb is buggy, dev hsr_slave_0 [ 624.805243] protocol 88fb is buggy, dev hsr_slave_1 [ 625.760136] protocol 88fb is buggy, dev hsr_slave_0 [ 625.765291] protocol 88fb is buggy, dev hsr_slave_1 [ 626.320113] protocol 88fb is buggy, dev hsr_slave_0 [ 626.325255] protocol 88fb is buggy, dev hsr_slave_1 [ 629.920128] net_ratelimit: 16 callbacks suppressed [ 629.920134] protocol 88fb is buggy, dev hsr_slave_0 [ 629.930230] protocol 88fb is buggy, dev hsr_slave_1 [ 630.480123] protocol 88fb is buggy, dev hsr_slave_0 [ 630.485266] protocol 88fb is buggy, dev hsr_slave_1 [ 630.880108] protocol 88fb is buggy, dev hsr_slave_0 [ 630.885247] protocol 88fb is buggy, dev hsr_slave_1 [ 630.960109] protocol 88fb is buggy, dev hsr_slave_0 [ 630.965217] protocol 88fb is buggy, dev hsr_slave_1 [ 631.040157] protocol 88fb is buggy, dev hsr_slave_0 [ 631.045247] protocol 88fb is buggy, dev hsr_slave_1 [ 635.040157] net_ratelimit: 14 callbacks suppressed [ 635.045152] protocol 88fb is buggy, dev hsr_slave_0 [ 635.050241] protocol 88fb is buggy, dev hsr_slave_1 [ 635.120112] protocol 88fb is buggy, dev hsr_slave_0 [ 635.125221] protocol 88fb is buggy, dev hsr_slave_1 [ 635.200114] protocol 88fb is buggy, dev hsr_slave_0 [ 635.205251] protocol 88fb is buggy, dev hsr_slave_1 [ 636.160162] protocol 88fb is buggy, dev hsr_slave_0 [ 636.165284] protocol 88fb is buggy, dev hsr_slave_1 [ 636.720111] protocol 88fb is buggy, dev hsr_slave_0 [ 636.725205] protocol 88fb is buggy, dev hsr_slave_1 [ 640.320103] net_ratelimit: 16 callbacks suppressed [ 640.320107] protocol 88fb is buggy, dev hsr_slave_0 [ 640.330197] protocol 88fb is buggy, dev hsr_slave_1 [ 640.880128] protocol 88fb is buggy, dev hsr_slave_0 [ 640.885262] protocol 88fb is buggy, dev hsr_slave_1 [ 641.280122] protocol 88fb is buggy, dev hsr_slave_0 [ 641.285238] protocol 88fb is buggy, dev hsr_slave_1 [ 641.360122] protocol 88fb is buggy, dev hsr_slave_0 [ 641.365220] protocol 88fb is buggy, dev hsr_slave_1 [ 641.440120] protocol 88fb is buggy, dev hsr_slave_0 [ 641.445246] protocol 88fb is buggy, dev hsr_slave_1 [ 645.440118] net_ratelimit: 14 callbacks suppressed [ 645.440124] protocol 88fb is buggy, dev hsr_slave_0 [ 645.450200] protocol 88fb is buggy, dev hsr_slave_1 [ 645.520117] protocol 88fb is buggy, dev hsr_slave_0 [ 645.525240] protocol 88fb is buggy, dev hsr_slave_1 [ 645.600132] protocol 88fb is buggy, dev hsr_slave_0 [ 645.605295] protocol 88fb is buggy, dev hsr_slave_1 [ 646.560084] protocol 88fb is buggy, dev hsr_slave_0 [ 646.565155] protocol 88fb is buggy, dev hsr_slave_1 [ 647.120121] protocol 88fb is buggy, dev hsr_slave_0 [ 647.125226] protocol 88fb is buggy, dev hsr_slave_1 [ 650.720093] net_ratelimit: 16 callbacks suppressed [ 650.720098] protocol 88fb is buggy, dev hsr_slave_0 [ 650.730139] protocol 88fb is buggy, dev hsr_slave_1 [ 651.280115] protocol 88fb is buggy, dev hsr_slave_0 [ 651.285210] protocol 88fb is buggy, dev hsr_slave_1 [ 651.680142] protocol 88fb is buggy, dev hsr_slave_0 [ 651.685265] protocol 88fb is buggy, dev hsr_slave_1 [ 651.760120] protocol 88fb is buggy, dev hsr_slave_0 [ 651.765251] protocol 88fb is buggy, dev hsr_slave_1 [ 651.840123] protocol 88fb is buggy, dev hsr_slave_0 [ 651.845250] protocol 88fb is buggy, dev hsr_slave_1 [ 655.840125] net_ratelimit: 14 callbacks suppressed [ 655.840131] protocol 88fb is buggy, dev hsr_slave_0 [ 655.850184] protocol 88fb is buggy, dev hsr_slave_1 [ 655.920125] protocol 88fb is buggy, dev hsr_slave_0 [ 655.925250] protocol 88fb is buggy, dev hsr_slave_1 [ 656.000108] protocol 88fb is buggy, dev hsr_slave_0 [ 656.005849] protocol 88fb is buggy, dev hsr_slave_1 [ 656.960090] protocol 88fb is buggy, dev hsr_slave_0 [ 656.965214] protocol 88fb is buggy, dev hsr_slave_1 [ 657.520119] protocol 88fb is buggy, dev hsr_slave_0 [ 657.525207] protocol 88fb is buggy, dev hsr_slave_1 [ 661.120089] net_ratelimit: 16 callbacks suppressed [ 661.120093] protocol 88fb is buggy, dev hsr_slave_0 [ 661.130146] protocol 88fb is buggy, dev hsr_slave_1 [ 661.680115] protocol 88fb is buggy, dev hsr_slave_0 [ 661.685221] protocol 88fb is buggy, dev hsr_slave_1 [ 662.080148] protocol 88fb is buggy, dev hsr_slave_0 [ 662.085265] protocol 88fb is buggy, dev hsr_slave_1 [ 662.160122] protocol 88fb is buggy, dev hsr_slave_0 [ 662.165212] protocol 88fb is buggy, dev hsr_slave_1 [ 662.240116] protocol 88fb is buggy, dev hsr_slave_0 [ 662.245239] protocol 88fb is buggy, dev hsr_slave_1 [ 666.240127] net_ratelimit: 14 callbacks suppressed [ 666.240133] protocol 88fb is buggy, dev hsr_slave_0 [ 666.254318] protocol 88fb is buggy, dev hsr_slave_1 [ 666.320123] protocol 88fb is buggy, dev hsr_slave_0 [ 666.320169] protocol 88fb is buggy, dev hsr_slave_1 [ 666.400121] protocol 88fb is buggy, dev hsr_slave_0 [ 666.405255] protocol 88fb is buggy, dev hsr_slave_1 [ 667.360152] protocol 88fb is buggy, dev hsr_slave_0 [ 667.365292] protocol 88fb is buggy, dev hsr_slave_1 [ 667.920119] protocol 88fb is buggy, dev hsr_slave_0 [ 667.925246] protocol 88fb is buggy, dev hsr_slave_1 [ 671.520091] net_ratelimit: 16 callbacks suppressed [ 671.520096] protocol 88fb is buggy, dev hsr_slave_0 [ 671.530138] protocol 88fb is buggy, dev hsr_slave_1 [ 672.080229] protocol 88fb is buggy, dev hsr_slave_0 [ 672.085333] protocol 88fb is buggy, dev hsr_slave_1 [ 672.480108] protocol 88fb is buggy, dev hsr_slave_0 [ 672.485229] protocol 88fb is buggy, dev hsr_slave_1 [ 672.560122] protocol 88fb is buggy, dev hsr_slave_0 [ 672.565660] protocol 88fb is buggy, dev hsr_slave_1 [ 672.640112] protocol 88fb is buggy, dev hsr_slave_0 [ 672.645237] protocol 88fb is buggy, dev hsr_slave_1 [ 676.640120] net_ratelimit: 14 callbacks suppressed [ 676.640126] protocol 88fb is buggy, dev hsr_slave_0 [ 676.650179] protocol 88fb is buggy, dev hsr_slave_1 [ 676.720124] protocol 88fb is buggy, dev hsr_slave_0 [ 676.725229] protocol 88fb is buggy, dev hsr_slave_1 [ 676.800113] protocol 88fb is buggy, dev hsr_slave_0 [ 676.805262] protocol 88fb is buggy, dev hsr_slave_1 [ 677.760086] protocol 88fb is buggy, dev hsr_slave_0 [ 677.765247] protocol 88fb is buggy, dev hsr_slave_1 [ 678.320115] protocol 88fb is buggy, dev hsr_slave_0 [ 678.325225] protocol 88fb is buggy, dev hsr_slave_1 [ 681.920122] net_ratelimit: 16 callbacks suppressed [ 681.920127] protocol 88fb is buggy, dev hsr_slave_0 [ 681.930158] protocol 88fb is buggy, dev hsr_slave_1 [ 682.480144] protocol 88fb is buggy, dev hsr_slave_0 [ 682.485303] protocol 88fb is buggy, dev hsr_slave_1 [ 682.880134] protocol 88fb is buggy, dev hsr_slave_0 [ 682.885252] protocol 88fb is buggy, dev hsr_slave_1 [ 682.960113] protocol 88fb is buggy, dev hsr_slave_0 [ 682.965236] protocol 88fb is buggy, dev hsr_slave_1 [ 683.040152] protocol 88fb is buggy, dev hsr_slave_0 [ 683.045298] protocol 88fb is buggy, dev hsr_slave_1 [ 687.040182] net_ratelimit: 14 callbacks suppressed [ 687.040188] protocol 88fb is buggy, dev hsr_slave_0 [ 687.050271] protocol 88fb is buggy, dev hsr_slave_1 [ 687.120102] protocol 88fb is buggy, dev hsr_slave_0 [ 687.125189] protocol 88fb is buggy, dev hsr_slave_1 [ 687.200135] protocol 88fb is buggy, dev hsr_slave_0 [ 687.205240] protocol 88fb is buggy, dev hsr_slave_1 [ 688.160087] protocol 88fb is buggy, dev hsr_slave_0 [ 688.165162] protocol 88fb is buggy, dev hsr_slave_1 [ 688.720112] protocol 88fb is buggy, dev hsr_slave_0 [ 688.725223] protocol 88fb is buggy, dev hsr_slave_1 [ 692.320084] net_ratelimit: 16 callbacks suppressed [ 692.320089] protocol 88fb is buggy, dev hsr_slave_0 [ 692.330143] protocol 88fb is buggy, dev hsr_slave_1 [ 692.880123] protocol 88fb is buggy, dev hsr_slave_0 [ 692.885226] protocol 88fb is buggy, dev hsr_slave_1 [ 693.280115] protocol 88fb is buggy, dev hsr_slave_0 [ 693.285207] protocol 88fb is buggy, dev hsr_slave_1 [ 693.360124] protocol 88fb is buggy, dev hsr_slave_0 [ 693.365206] protocol 88fb is buggy, dev hsr_slave_1 [ 693.440139] protocol 88fb is buggy, dev hsr_slave_0 [ 693.445228] protocol 88fb is buggy, dev hsr_slave_1 [ 697.440174] net_ratelimit: 14 callbacks suppressed [ 697.440180] protocol 88fb is buggy, dev hsr_slave_0 [ 697.450251] protocol 88fb is buggy, dev hsr_slave_1 [ 697.520134] protocol 88fb is buggy, dev hsr_slave_0 [ 697.525243] protocol 88fb is buggy, dev hsr_slave_1 [ 697.600109] protocol 88fb is buggy, dev hsr_slave_0 [ 697.605244] protocol 88fb is buggy, dev hsr_slave_1 [ 698.560090] protocol 88fb is buggy, dev hsr_slave_0 [ 698.565169] protocol 88fb is buggy, dev hsr_slave_1 [ 699.120135] protocol 88fb is buggy, dev hsr_slave_0 [ 699.125227] protocol 88fb is buggy, dev hsr_slave_1 [ 702.720100] net_ratelimit: 16 callbacks suppressed [ 702.720105] protocol 88fb is buggy, dev hsr_slave_0 [ 702.730150] protocol 88fb is buggy, dev hsr_slave_1 [ 703.280135] protocol 88fb is buggy, dev hsr_slave_0 [ 703.285232] protocol 88fb is buggy, dev hsr_slave_1 [ 703.680142] protocol 88fb is buggy, dev hsr_slave_0 [ 703.685239] protocol 88fb is buggy, dev hsr_slave_1 [ 703.760135] protocol 88fb is buggy, dev hsr_slave_0 [ 703.765226] protocol 88fb is buggy, dev hsr_slave_1 [ 703.840159] protocol 88fb is buggy, dev hsr_slave_0 [ 703.845269] protocol 88fb is buggy, dev hsr_slave_1 [ 707.840121] net_ratelimit: 14 callbacks suppressed [ 707.840127] protocol 88fb is buggy, dev hsr_slave_0 [ 707.850224] protocol 88fb is buggy, dev hsr_slave_1 [ 707.920128] protocol 88fb is buggy, dev hsr_slave_0 [ 707.925212] protocol 88fb is buggy, dev hsr_slave_1 [ 708.000110] protocol 88fb is buggy, dev hsr_slave_0 [ 708.005201] protocol 88fb is buggy, dev hsr_slave_1 [ 708.960126] protocol 88fb is buggy, dev hsr_slave_0 [ 708.965206] protocol 88fb is buggy, dev hsr_slave_1 [ 709.520115] protocol 88fb is buggy, dev hsr_slave_0 [ 709.525226] protocol 88fb is buggy, dev hsr_slave_1 [ 713.120115] net_ratelimit: 16 callbacks suppressed [ 713.120121] protocol 88fb is buggy, dev hsr_slave_0 [ 713.130127] protocol 88fb is buggy, dev hsr_slave_1 [ 713.680112] protocol 88fb is buggy, dev hsr_slave_0 [ 713.685220] protocol 88fb is buggy, dev hsr_slave_1 [ 714.080159] protocol 88fb is buggy, dev hsr_slave_0 [ 714.085259] protocol 88fb is buggy, dev hsr_slave_1 [ 714.160113] protocol 88fb is buggy, dev hsr_slave_0 [ 714.165198] protocol 88fb is buggy, dev hsr_slave_1 [ 714.240109] protocol 88fb is buggy, dev hsr_slave_0 [ 714.245196] protocol 88fb is buggy, dev hsr_slave_1 [ 714.720460] INFO: task getty:7020 blocked for more than 140 seconds. [ 714.727097] Not tainted 4.14.158-syzkaller #0 [ 714.736723] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 714.744723] getty D28096 7020 1 0x80000002 [ 714.754924] Call Trace: [ 714.757583] __schedule+0x7b8/0x1cd0 [ 714.761527] ? firmware_map_remove+0x196/0x196 [ 714.766164] ? trace_hardirqs_on+0x10/0x10 [ 714.774960] schedule+0x92/0x1c0 [ 714.778334] schedule_timeout+0x93b/0xe10 [ 714.782750] ? __ldsem_down_write_nested+0x2fc/0x7b0 [ 714.787849] ? find_held_lock+0x35/0x130 [ 714.796445] ? usleep_range+0x130/0x130 [ 714.801098] ? __ldsem_down_write_nested+0x2fc/0x7b0 [ 714.806210] ? mark_held_locks+0xb1/0x100 [ 714.815066] ? _raw_spin_unlock_irq+0x28/0x90 [ 714.819584] ? trace_hardirqs_on_caller+0x400/0x590 [ 714.824983] __ldsem_down_write_nested+0x304/0x7b0 [ 714.829917] ? __ldsem_down_read_nested+0x5d0/0x5d0 [ 714.839525] ? __wake_up_common_lock+0xe3/0x160 [ 714.844236] ldsem_down_write+0x33/0x39 [ 714.848207] ? ldsem_down_write+0x33/0x39 [ 714.856982] tty_ldisc_lock+0x1e/0x50 [ 714.860810] tty_ldisc_hangup+0x1a5/0x5e0 [ 714.865007] __tty_hangup.part.0+0x2d3/0x6d0 [ 714.869407] ? tty_read+0x270/0x270 [ 714.877695] tty_vhangup_session+0x25/0x30 [ 714.884343] disassociate_ctty.part.0+0x9b/0x6c0 [ 714.889102] disassociate_ctty+0x78/0x90 [ 714.898042] do_exit+0x1799/0x2c80 [ 714.901622] ? mm_update_next_owner+0x5d0/0x5d0 [ 714.906287] ? retint_kernel+0x2d/0x2d [ 714.914875] do_group_exit+0x111/0x330 [ 714.918772] SyS_exit_group+0x1d/0x20 [ 714.922783] ? do_group_exit+0x330/0x330 [ 714.926840] do_syscall_64+0x1e8/0x640 [ 714.935840] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 714.940715] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 714.945898] RIP: 0033:0x7f02132181e8 [ 714.949598] RSP: 002b:00007ffdc1de02e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 714.961872] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007f02132181e8 [ 714.969149] RDX: 0000000000000001 RSI: 000000000000003c RDI: 0000000000000001 [ 714.983338] RBP: 00007f02134ed840 R08: 00000000000000e7 R09: ffffffffffffffa8 [ 714.991411] R10: 00007f02134f3740 R11: 0000000000000246 R12: 00007f02134ed840 [ 714.998676] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000000 [ 715.009953] INFO: task syz-executor.3:24692 blocked for more than 140 seconds. [ 715.018134] Not tainted 4.14.158-syzkaller #0 [ 715.026914] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 715.035643] syz-executor.3 D28688 24692 7071 0x80000002 [ 715.045436] Call Trace: [ 715.048038] __schedule+0x7b8/0x1cd0 [ 715.052696] ? __mutex_lock+0x737/0x1470 [ 715.056756] ? firmware_map_remove+0x196/0x196 [ 715.065728] schedule+0x92/0x1c0 [ 715.069096] schedule_preempt_disabled+0x13/0x20 [ 715.074789] __mutex_lock+0x73c/0x1470 [ 715.078676] ? tty_lock+0x68/0x80 [ 715.085856] ? mutex_trylock+0x1c0/0x1c0 [ 715.089913] ? do_group_exit+0x111/0x330 [ 715.094965] ? get_signal+0x381/0x1cd0 [ 715.098857] ? do_signal+0x86/0x19a0 [ 715.106565] ? do_syscall_64+0x4bc/0x640 [ 715.111450] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 715.116818] ? tty_release_struct+0x50/0x50 [ 715.125066] mutex_lock_nested+0x16/0x20 [ 715.129125] ? mutex_lock_nested+0x16/0x20 [ 715.134304] tty_lock+0x68/0x80 [ 715.137578] tty_release+0xaa/0xd60 [ 715.144984] ? ima_file_free+0xae/0x350 [ 715.148965] ? tty_release_struct+0x50/0x50 [ 715.154283] __fput+0x275/0x7a0 [ 715.157565] ____fput+0x16/0x20 [ 715.164850] task_work_run+0x114/0x190 [ 715.168741] do_exit+0x7be/0x2c80 [ 715.173217] ? mm_update_next_owner+0x5d0/0x5d0 [ 715.177893] do_group_exit+0x111/0x330 [ 715.185539] get_signal+0x381/0x1cd0 [ 715.189273] ? __fget_light+0x172/0x1f0 [ 715.194838] do_signal+0x86/0x19a0 [ 715.198392] ? SyS_recvmsg+0x50/0x50 [ 715.205833] ? setup_sigcontext+0x7d0/0x7d0 [ 715.210949] ? kasan_check_read+0x11/0x20 [ 715.215123] ? nsecs_to_jiffies+0x30/0x30 [ 715.219266] ? exit_to_usermode_loop+0x3d/0x220 [ 715.227780] exit_to_usermode_loop+0x15c/0x220 [ 715.233121] do_syscall_64+0x4bc/0x640 [ 715.237004] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 715.245616] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 715.251555] RIP: 0033:0x45a919 [ 715.254742] RSP: 002b:00007f67bd968c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 715.266200] RAX: fffffffffffffe00 RBX: 0000000000000005 RCX: 000000000045a919 [ 715.274226] RDX: 0000000000000008 RSI: 0000000020007cc0 RDI: 0000000000000008 [ 715.285242] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 715.293264] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f67bd9696d4 [ 715.304270] R13: 00000000004c8fb6 R14: 00000000004e08f8 R15: 00000000ffffffff [ 715.312308] [ 715.312308] Showing all locks held in the system: [ 715.318626] 1 lock held by khungtaskd/1045: [ 715.323135] #0: (tasklist_lock){.+.+}, at: [] debug_show_all_locks+0x7f/0x21f [ 715.332215] 2 locks held by getty/7020: [ 715.336174] #0: (&tty->legacy_mutex){+.+.}, at: [] tty_lock+0x68/0x80 [ 715.344521] #1: (&tty->ldisc_sem){++++}, at: [] ldsem_down_write+0x33/0x39 [ 715.353307] 2 locks held by getty/7021: [ 715.357266] #0: (&tty->ldisc_sem){++++}, at: [] ldsem_down_read+0x33/0x40 [ 715.365963] #1: (&ldata->atomic_read_lock){+.+.}, at: [] n_tty_read+0x1e6/0x17b0 [ 715.375288] 2 locks held by getty/7022: [ 715.379247] #0: (&tty->ldisc_sem){++++}, at: [] ldsem_down_read+0x33/0x40 [ 715.387941] #1: (&ldata->atomic_read_lock){+.+.}, at: [] n_tty_read+0x1e6/0x17b0 [ 715.397257] 2 locks held by getty/7023: [ 715.401236] #0: (&tty->ldisc_sem){++++}, at: [] ldsem_down_read+0x33/0x40 [ 715.409908] #1: (&ldata->atomic_read_lock){+.+.}, at: [] n_tty_read+0x1e6/0x17b0 [ 715.419213] 2 locks held by getty/7024: [ 715.423196] #0: (&tty->ldisc_sem){++++}, at: [] ldsem_down_read+0x33/0x40 [ 715.431897] #1: (&ldata->atomic_read_lock){+.+.}, at: [] n_tty_read+0x1e6/0x17b0 [ 715.441198] 2 locks held by getty/7025: [ 715.445157] #0: (&tty->ldisc_sem){++++}, at: [] ldsem_down_read+0x33/0x40 [ 715.453856] #1: (&ldata->atomic_read_lock){+.+.}, at: [] n_tty_read+0x1e6/0x17b0 [ 715.463159] 2 locks held by getty/7026: [ 715.467117] #0: (&tty->ldisc_sem){++++}, at: [] ldsem_down_read+0x33/0x40 [ 715.475816] #1: (&ldata->atomic_read_lock){+.+.}, at: [] n_tty_read+0x1e6/0x17b0 [ 715.485147] 1 lock held by syz-executor.3/12255: [ 715.489890] #0: (&tty->legacy_mutex){+.+.}, at: [] tty_lock+0x68/0x80 [ 715.498246] 1 lock held by syz-executor.3/15883: [ 715.503015] #0: (&tty->legacy_mutex){+.+.}, at: [] tty_lock+0x68/0x80 [ 715.511372] 2 locks held by syz-executor.0/24650: [ 715.516201] #0: (&tty->ldisc_sem){++++}, at: [] ldsem_down_read+0x33/0x40 [ 715.524936] #1: (&buf->lock){+.+.}, at: [] tty_buffer_lock_exclusive+0x1f/0x30 [ 715.534076] 1 lock held by syz-executor.3/24692: [ 715.538816] #0: (&tty->legacy_mutex){+.+.}, at: [] tty_lock+0x68/0x80 [ 715.547172] [ 715.548794] ============================================= [ 715.548794] [ 715.557168] NMI backtrace for cpu 1 [ 715.560823] CPU: 1 PID: 1045 Comm: khungtaskd Not tainted 4.14.158-syzkaller #0 [ 715.568265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 715.577622] Call Trace: [ 715.580263] dump_stack+0x142/0x197 [ 715.583913] nmi_cpu_backtrace.cold+0x57/0x94 [ 715.588403] ? irq_force_complete_move.cold+0x7d/0x7d [ 715.593588] nmi_trigger_cpumask_backtrace+0x141/0x189 [ 715.598861] arch_trigger_cpumask_backtrace+0x14/0x20 [ 715.604084] watchdog+0x5e7/0xb90 [ 715.607537] kthread+0x319/0x430 [ 715.610892] ? hungtask_pm_notify+0x50/0x50 [ 715.615206] ? kthread_create_on_node+0xd0/0xd0 [ 715.619871] ret_from_fork+0x24/0x30 [ 715.623675] Sending NMI from CPU 1 to CPUs 0: [ 715.628640] NMI backtrace for cpu 0 [ 715.628644] CPU: 0 PID: 24650 Comm: syz-executor.0 Not tainted 4.14.158-syzkaller #0 [ 715.628648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 715.628650] task: ffff88805ee22440 task.stack: ffff888060480000 [ 715.628653] RIP: 0010:update_curr+0x2c8/0x6a0 [ 715.628655] RSP: 0018:ffff888060487798 EFLAGS: 00000093 [ 715.628660] RAX: 0000000000000000 RBX: ffff88805ee224c0 RCX: 1ffff1100bdc44a2 [ 715.628663] RDX: 1ffff1100bdc44c3 RSI: ffff8880aec2b558 RDI: ffff88805ee22618 [ 715.628666] RBP: ffff8880604877d8 R08: 000000a7ce97b956 R09: 0000000000000001 [ 715.628669] R10: 0000000000000001 R11: 0000000000000001 R12: ffff8880aec2b5e0 [ 715.628672] R13: ffff88805ee22440 R14: ffff88805ee22510 R15: 0000000000000a65 [ 715.628675] FS: 00007f578b4f4700(0000) GS:ffff8880aec00000(0000) knlGS:0000000000000000 [ 715.628678] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 715.628681] CR2: 000000c43365a520 CR3: 00000000504f1000 CR4: 00000000001426f0 [ 715.628684] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 715.628687] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 715.628688] Call Trace: [ 715.628690] pick_next_task_fair+0x661/0x1430 [ 715.628692] ? kvm_clock_read+0x23/0x40 [ 715.628694] ? sched_clock_cpu+0x1b/0x1c0 [ 715.628696] ? load_balance+0x2240/0x2240 [ 715.628699] ? update_rq_clock+0xce/0x2e0 [ 715.628701] __schedule+0x43e/0x1cd0 [ 715.628703] ? retint_kernel+0x2d/0x2d [ 715.628705] ? firmware_map_remove+0x196/0x196 [ 715.628707] ? paste_selection+0x28e/0x3f2 [ 715.628709] schedule+0x92/0x1c0 [ 715.628711] paste_selection+0x293/0x3f2 [ 715.628713] ? find_held_lock+0x35/0x130 [ 715.628715] ? set_selection+0xe30/0xe30 [ 715.628717] ? lock_downgrade+0x740/0x740 [ 715.628719] ? wake_up_q+0xf0/0xf0 [ 715.628721] tioclinux+0x10e/0x400 [ 715.628723] vt_ioctl+0x180c/0x2170 [ 715.628725] ? avc_has_extended_perms+0x8ec/0xe40 [ 715.628727] ? futex_wake+0x134/0x430 [ 715.628729] ? complete_change_console+0x360/0x360 [ 715.628731] ? avc_ss_reset+0x110/0x110 [ 715.628734] ? __lock_acquire+0x5f7/0x4620 [ 715.628735] ? find_held_lock+0x35/0x130 [ 715.628737] ? tty_jobctrl_ioctl+0x44/0xc10 [ 715.628740] ? complete_change_console+0x360/0x360 [ 715.628741] tty_ioctl+0x841/0x1320 [ 715.628744] ? tty_vhangup+0x30/0x30 [ 715.628746] ? __might_fault+0x110/0x1d0 [ 715.628748] ? __might_sleep+0x93/0xb0 [ 715.628750] ? __fget+0x210/0x370 [ 715.628751] ? tty_vhangup+0x30/0x30 [ 715.628754] do_vfs_ioctl+0x7ae/0x1060 [ 715.628756] ? selinux_file_mprotect+0x5d0/0x5d0 [ 715.628758] ? lock_downgrade+0x740/0x740 [ 715.628760] ? ioctl_preallocate+0x1c0/0x1c0 [ 715.628762] ? __fget+0x237/0x370 [ 715.628764] ? security_file_ioctl+0x89/0xb0 [ 715.628765] SyS_ioctl+0x8f/0xc0 [ 715.628768] ? do_vfs_ioctl+0x1060/0x1060 [ 715.628770] do_syscall_64+0x1e8/0x640 [ 715.628772] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 715.628774] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 715.628776] RIP: 0033:0x45a919 [ 715.628778] RSP: 002b:00007f578b4f3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 715.628783] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a919 [ 715.628786] RDX: 0000000020000080 RSI: 000000000000541c RDI: 000000000000000a [ 715.628789] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 715.628792] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f578b4f46d4 [ 715.628795] R13: 00000000004c5c62 R14: 00000000004dbf18 R15: 00000000ffffffff [ 715.628796] Code: ff 0f 0b e9 fa fd ff ff 4c 8d 6b 80 0f 1f 44 00 00 65 8b 05 bb d1 bd 7e 83 f8 3f 0f 87 65 02 00 00 89 c0 48 0f a3 05 98 a5 6e 07 <0f> 82 ff 01 00 00 4c 89 ef 4c 89 fe e8 17 d0 03 00 48 8d bb 80 [ 715.629416] Kernel panic - not syncing: hung_task: blocked tasks [ 715.983476] CPU: 1 PID: 1045 Comm: khungtaskd Not tainted 4.14.158-syzkaller #0 [ 715.990910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 716.000255] Call Trace: [ 716.002841] dump_stack+0x142/0x197 [ 716.006463] panic+0x1f9/0x42d [ 716.009647] ? add_taint.cold+0x16/0x16 [ 716.013615] ? ___preempt_schedule+0x16/0x18 [ 716.018025] watchdog+0x5f8/0xb90 [ 716.021474] kthread+0x319/0x430 [ 716.024830] ? hungtask_pm_notify+0x50/0x50 [ 716.029142] ? kthread_create_on_node+0xd0/0xd0 [ 716.033803] ret_from_fork+0x24/0x30 [ 716.039255] Kernel Offset: disabled [ 716.042905] Rebooting in 86400 seconds..