00003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0) fcntl$lock(r2, 0x5, &(0x7f0000000080)={0x800000000, 0x4, 0x5, 0x6, r4}) openat$tun(0xffffffffffffff9c, &(0x7f0000000380)='/dev/net/tun\x00', 0x0, 0x0) rseq(&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x1, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, &(0x7f0000000680)=[@in={0x2, 0x4e20, @broadcast}], 0x10) syz_open_dev$dri(&(0x7f0000001080)='/dev/dri/card#\x00', 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) 00:23:39 executing program 1: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x3, 0x200002) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000040)={0x0, 0x1, 0x0, [], &(0x7f0000000000)={0xf0f043, 0x0, [], @p_u8=0x0}}) [ 162.800088][ T8319] Dead loop on virtual device ip6_vti0, fix it urgently! [ 162.906769][ T8319] Dead loop on virtual device ip6_vti0, fix it urgently! 00:23:39 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x0, 0x7ffe, 0x7ef8, 0x0, 0x8, 0xffffffffffffffff, 0x2000000}, 0xe) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x1}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @mss, @mss], 0x2217) 00:23:39 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000002c0)=0x1, 0x4) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000003780)={r0}) r1 = syz_open_dev$dmmidi(&(0x7f0000003880)='/dev/dmmidi#\x00', 0x6, 0x400000) connect$unix(r1, &(0x7f0000000240)=@abs, 0x6e) poll(&(0x7f0000000180)=[{r0}], 0x1, 0x0) [ 162.946965][ T8319] Dead loop on virtual device ip6_vti0, fix it urgently! 00:23:40 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000540)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) r1 = semget$private(0x0, 0x0, 0x0) semctl$SEM_STAT(r1, 0x1, 0x12, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000e40)={{0x0, 0x0, 0xf7, 0x3f, '\x00', 0x5ba78a22}, 0x0, [0x0, 0x4, 0x0, 0x401, 0x1000, 0x2, 0x0, 0xffffffff, 0x0, 0x80000001, 0xfffffffffffff001, 0x2, 0x5, 0x0, 0x42b3, 0x6, 0x0, 0x8000, 0x4, 0x1, 0x3, 0x3d58, 0xfffffffffffffffb, 0x9, 0x1ff, 0x0, 0x6, 0x0, 0x5, 0x5, 0x0, 0x0, 0x1000, 0x7ff, 0x0, 0x8, 0x0, 0x0, 0x1c26000000, 0xf0, 0x3, 0x7, 0x7f, 0x0, 0x0, 0x9, 0x0, 0x3fffc00000, 0x5, 0x0, 0x401, 0x9, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff37c, 0x0, 0x1, 0xb6, 0x6, 0x0, 0x1, 0x0, 0x7fffffff, 0x0, 0x6, 0x40, 0x9, 0x0, 0xc04, 0x0, 0x5, 0x6, 0x6b, 0x1, 0x0, 0x9, 0xf9dc, 0x7fffffff, 0x9, 0x0, 0x400000000, 0x8000, 0x0, 0xac, 0xffffffff, 0xfffffffffffffffa, 0xc6, 0xe32, 0x0, 0x0, 0x0, 0x7, 0x8, 0x8000, 0xa5, 0x76, 0x1b58, 0x4, 0x0, 0x0, 0x0, 0x95, 0x0, 0x0, 0x0, 0x5, 0x10001, 0x0, 0x0, 0x0, 0x7, 0x0, 0x9, 0x1, 0xffffffffffffff00, 0x2, 0x9, 0x2, 0x0, 0x6, 0x5, 0x0, 0x4, 0x96b7], {0x0, 0x1c9c380}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, &(0x7f00000000c0)) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000380), 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, &(0x7f0000000300)={0x0, 0x7}, 0x0) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x1, 0x0) write$sndseq(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x4e230000000000}, {}, @quote}], 0xff33) 00:23:40 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='cpuset\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000237, 0x0) ioctl$CAPI_INSTALLED(r0, 0x80024322) 00:23:40 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000000)="b9800000c00f3235000100000f30b9f20900000f320fb5010fc75aaa0fae710f0f060fc769000f01cbc4e184158966aac64d0f30", 0x34}], 0x1555555555555366, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, &(0x7f0000000400)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20\x00', 0x80080, 0x0) bind$bt_rfcomm(r3, &(0x7f0000000180)={0x1f, {0x3, 0x3, 0x80000001, 0x9, 0x3, 0xffff}, 0xc75}, 0xa) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$sock_netdev_private(0xffffffffffffffff, 0x0, 0x0) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) getresuid(&(0x7f0000000500), 0x0, &(0x7f0000000480)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:23:40 executing program 1: io_setup(0x800, &(0x7f0000000040)=0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="02"], 0x1}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x38007f5281140941, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000140)={0x0, 0x80000, 0xffffffffffffff9c}) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x101040, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000200)={r3, 0x80000, r4}) io_submit(r0, 0x1, &(0x7f0000000400)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000080), 0x171}]) 00:23:40 executing program 5: r0 = socket$kcm(0x10, 0x404000000002, 0x10) r1 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x1, 0x200) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f00000000c0)={0x9, 0x3f, "fc359954f4970e1b2af056c3b4fe472baa35cd3d4778260e691bc8bdf02dffa88c7108dc08a3b70b1b10703fd39a7c4b76ece2ea9a91fc98efb072db51c5ed"}) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="2e0000002200812de45ae087185082cf0124a0eba06ec4000241000000000013000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) [ 163.127248][ T8319] Dead loop on virtual device ip6_vti0, fix it urgently! [ 163.174168][ T8319] Dead loop on virtual device ip6_vti0, fix it urgently! [ 163.203047][ T8319] Dead loop on virtual device ip6_vti0, fix it urgently! [ 163.259181][ T8348] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. [ 163.322173][ T8352] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. [ 163.323053][ T8345] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 00:23:40 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='rdma.max\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="2d696f08005923ebba8c1c52c46d02006f727920eae979fd1dfd5712118ed8a90f17272c6b3c7518b748fcc53d75719956c545a12cb450514cd468e1d66082fa5528cfbf3da0dfdc753d7b6639aca31f5eaf945b78e5922989aecd6e997de006b919f10bb8fd0a3178b66ba904"], 0xc) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x400000, 0x0) write$tun(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="03fc1f18defb22287eae12ac64c0363039ee0c6d0906c97ce5763eacff54793c400d5f0000525091514dcaca05cf0c30cff2de695cd387a1a256bf2ebb94622ee772c067e6cb5828ae302386c6a6e9a339ee8ae50b0a1176a475955b350a69ec39aee8105770c77346e70feb22239e024f041ea1dfdc3d086bb6a500003a5d7ce6ebf66179b91af11d6478a5040bf99ec83a3785c964c7ed59c8114bf34d441464168c421a41cd88e64a56fa3f93f7c782d829b2b61272155bab2f7767c8ce7cd29f68e0ed7c06f0eca635b409d5e2"], 0xc3) r3 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x8, 0x400000) ioctl$IMCLEAR_L2(r3, 0x80044946, &(0x7f00000001c0)=0xc8f2) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) 00:23:40 executing program 4: syz_open_dev$video(&(0x7f00000005c0)='/dev/video#\x00', 0x8, 0x8aa04) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) pkey_free(0xffffffffffffffff) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x141000, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x0, 0x0) r2 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r1, 0xc1105511, &(0x7f0000000240)={{0x0, 0x1, 0x80, 0x46, '\x00', 0x80}, 0x0, 0x20000160, 0x9, r2, 0x7, 0x2, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x03\x00', &(0x7f0000000440)=['/proc/sys/net/ipv4/vs/snat_reroute\x00', ']]', '^lowlan0vboxnet0\x00', 'selinux@\x00', 'bdev\x00', '\x00', 'ip6gre0\x00'], 0x4d, [], [0x3, 0x800000000000, 0x3, 0x8000000000100]}) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000b80)={{{@in=@remote, @in6}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000600)=0xe8) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) bind$inet(r1, &(0x7f0000b9bff0)={0x2, 0x2004e21}, 0x36c) r3 = socket$nl_generic(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r3, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000800)=ANY=[@ANYBLOB="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"]}) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x100000000000000, &(0x7f00000004c0)={@remote, 0x0}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000001c0)={r4, @loopback, @rand_addr=0x1cb}, 0xc) syz_open_procfs(r2, &(0x7f0000000040)='ns\x00') r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) timer_create(0x4, &(0x7f0000000180), &(0x7f00000001c0)) fcntl$getown(0xffffffffffffffff, 0x9) rt_sigqueueinfo(0x0, 0x4, &(0x7f0000000680)={0x3, 0x8}) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f00000003c0)='ip6_vti0\x00', 0x10) r6 = socket$l2tp(0x18, 0x1, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x4e21, 0x4, @loopback, 0xfffffffffffffffc}, 0x1c) connect$l2tp(r6, &(0x7f0000000380)=@pppol2tpv3={0x18, 0x1, {0x0, r5, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) r7 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000500)="0214e0cef3273d1c77035abcf37f6a8ac5cf7ea6be3b6095ba154fcd7d6c93970989eb400c755b1acb00e595", 0x2c, 0xfffffffffffffffb) r8 = add_key(&(0x7f0000000540)='user\x00', &(0x7f0000000580)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$reject(0x13, r7, 0xfffffffffffffff9, 0x4, r8) sendmmsg(r6, &(0x7f0000005fc0), 0x800000000000059, 0x0) 00:23:40 executing program 1: r0 = syz_open_dev$adsp(0x0, 0x7ffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) write$FUSE_LSEEK(0xffffffffffffffff, 0x0, 0x206) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000380), &(0x7f0000000200)=0xfffffffffffffc97) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) socket$inet(0x2, 0x80001, 0x84) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, 0x0, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f00000001c0)=@assoc_value, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fd/0\x00') bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x11) sendto$inet(0xffffffffffffffff, 0x0, 0xffffffe3, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) 00:23:40 executing program 5: openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x2, 0x0) ioctl$VIDIOC_S_EDID(0xffffffffffffffff, 0xc0245629, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @loopback}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_G_EDID(0xffffffffffffffff, 0xc0245628, 0x0) r1 = openat$vfio(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_GET_UNIQUE(r1, 0xc0086401, 0x0) ioctl$sock_netdev_private(0xffffffffffffffff, 0x0, 0x0) ioctl$EVIOCGVERSION(r1, 0x80044501, &(0x7f00000000c0)=""/214) bind$vsock_dgram(r1, &(0x7f0000000400)={0x28, 0x0, 0x0, @my}, 0x10) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f00000004c0)='security.ima\x00', 0x0, 0x0, 0x3) ioctl$VIDIOC_SUBDEV_G_FMT(r1, 0xc0585604, 0x0) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, 0x0) socket$xdp(0x2c, 0x3, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000001c0)={{{@in=@loopback, @in6=@dev}}, {{@in6=@mcast2}, 0x0, @in6=@ipv4={[], [], @dev}}}, &(0x7f00000002c0)=0xe8) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)={@multicast2, @loopback, 0x0, 0x1, [@multicast1]}, 0x14) setsockopt$inet_mreqsrc(r0, 0x0, 0x25, &(0x7f00003fdff5)={@multicast2, @loopback, @loopback}, 0xc) 00:23:40 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x7, 0x0, 0xfffffffffffffffe) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x800, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r1, 0x0, 0x83, &(0x7f0000000180)={'nat\x00', 0x0, 0x3, 0xa7, [], 0x3, &(0x7f0000000080)=[{}, {}, {}], &(0x7f00000000c0)=""/167}, &(0x7f0000000200)=0x50) ioctl$TUNGETIFF(r1, 0x800454d2, &(0x7f0000000040)) 00:23:40 executing program 2: r0 = socket$inet6(0xa, 0x5, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000000)) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0xd}, 0x1c) sendmmsg(r0, &(0x7f00000089c0)=[{{&(0x7f0000000440)=@in={0x2, 0x4e20, @multicast2=0xe000000d}, 0x80, 0x0}, 0x4}], 0x1, 0x0) [ 163.795394][ T8360] Dead loop on virtual device ip6_vti0, fix it urgently! 00:23:40 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x2, 0x10000) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f00000001c0)={{{@in6=@loopback, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f00000002c0)=0xe8) recvfrom$packet(r0, &(0x7f00000000c0)=""/207, 0xcf, 0x101, &(0x7f0000000300)={0x11, 0x1f, r1, 0x1, 0x0, 0x6, @remote}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f00000004c0)='./file0\x00', 0x14104a, 0x0) fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f0000000040)=0x3) write$P9_RLERRORu(r2, 0x0, 0x0) sendfile(r2, r2, &(0x7f0000000080), 0x2000000800004c36) 00:23:41 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000540)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) r1 = semget$private(0x0, 0x0, 0x0) semctl$SEM_STAT(r1, 0x1, 0x12, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000e40)={{0x0, 0x0, 0xf7, 0x3f, '\x00', 0x5ba78a22}, 0x0, [0x0, 0x4, 0x0, 0x401, 0x1000, 0x2, 0x0, 0xffffffff, 0x0, 0x80000001, 0xfffffffffffff001, 0x2, 0x5, 0x0, 0x42b3, 0x6, 0x0, 0x8000, 0x4, 0x1, 0x3, 0x3d58, 0xfffffffffffffffb, 0x9, 0x1ff, 0x0, 0x6, 0x0, 0x5, 0x5, 0x0, 0x0, 0x1000, 0x7ff, 0x0, 0x8, 0x0, 0x0, 0x1c26000000, 0xf0, 0x3, 0x7, 0x7f, 0x0, 0x0, 0x9, 0x0, 0x3fffc00000, 0x5, 0x0, 0x401, 0x9, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff37c, 0x0, 0x1, 0xb6, 0x6, 0x0, 0x1, 0x0, 0x7fffffff, 0x0, 0x6, 0x40, 0x9, 0x0, 0xc04, 0x0, 0x5, 0x6, 0x6b, 0x1, 0x0, 0x9, 0xf9dc, 0x7fffffff, 0x9, 0x0, 0x400000000, 0x8000, 0x0, 0xac, 0xffffffff, 0xfffffffffffffffa, 0xc6, 0xe32, 0x0, 0x0, 0x0, 0x7, 0x8, 0x8000, 0xa5, 0x76, 0x1b58, 0x4, 0x0, 0x0, 0x0, 0x95, 0x0, 0x0, 0x0, 0x5, 0x10001, 0x0, 0x0, 0x0, 0x7, 0x0, 0x9, 0x1, 0xffffffffffffff00, 0x2, 0x9, 0x2, 0x0, 0x6, 0x5, 0x0, 0x4, 0x96b7], {0x0, 0x1c9c380}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, &(0x7f00000000c0)) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000380), 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, &(0x7f0000000300)={0x0, 0x7}, 0x0) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x1, 0x0) write$sndseq(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x4e230000000000}, {}, @quote}], 0xff33) 00:23:41 executing program 3: mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x0, 0xffffffffffffffff) clone(0x104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='ecryptfs\x00', 0x0, 0x0) r0 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x20, 0x4000) ioctl$UI_END_FF_UPLOAD(r0, 0x406055c9, &(0x7f0000000100)={0x2, 0xfffffffffffffff9, {0x54, 0x32c, 0x58, {0x7b7, 0x4}, {0x7, 0x1}, @cond=[{0x8, 0xffffffffffff7fff, 0x3, 0x7, 0x20, 0x7}, {0x6, 0x8, 0x5, 0x79, 0xffffffff80000001, 0x3ff}]}, {0x54, 0x5, 0x9, {0x7, 0x2}, {0x4c5, 0x25c8}, @rumble={0x3, 0x9b2b}}}) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000180)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r0, 0xc1105518, &(0x7f0000000200)={{0x0, 0x3, 0x2, 0x5, 'syz0\x00', 0x2}, 0x3, 0x10, 0x8, r1, 0x5, 0x5, 'syz0\x00', &(0x7f00000001c0)=[',\x85.n#-{0x0}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000005040)=[{{&(0x7f00000000c0)=@can={0x1d, r1}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000300)="46a3f2956cc221c96a83bfaab1c18adf8b380ddadf5034cc4b0efcd1209201e48e5053635bb847625bc5adf022477f3cf40370222f7553f01622295fb6b1c36bd28157c3b1e3b1f9f6ade0003299e03e88dd12a223b7219e4cf9cfd0a6aa01b82befb93449b9bdd6d706e0b111d6d77c46c3d92a57f0bc003f0a5f0d18bee6773e74030ac27148a0c997e57e944b44e937697f90b88701", 0x97}, {&(0x7f00000003c0)="58da2792e57fd7d8762917f4c7b5b3211dfa0c596be15a7dcddf45174abee294577fb560f0767e94a8ed962b318bccbde11029bb0464cf9c6af04a35333bbee508f3851b9843f33018b72744e2b3e5d1dd5c79e68e57550c777ad77671bc1ced6abed4912892f0b346c0293ee28899fb5697425b55856e47c539e20e2432cba795f6b5df033fd72afdd1c2d7fae027b2284484296a64d06b720c9c048a", 0x9d}], 0x2}, 0x3}, {{&(0x7f0000000480)=@isdn={0x22, 0x9, 0x0, 0x3, 0x6561}, 0x80, &(0x7f0000001900)=[{&(0x7f0000000500)="a9dcf06fdf7845c8c0789ef01cee0c9182c27ff792d0dcd86c578e58eec377f647f27d3f6cd6696b02635aa5646d246e88b9f03932f176c1ba595e8333bcecf18c51629d9e2f18143f8e66cd6a3ab5b6d3ac536a19be1c1f4797a051ef6c52756d98b9a817eb6491f070e9ea944470f5801c9770f24be9fbbd5a4b4414c65b07cfde81da7ef366b81b2d30a3f360d24f129e4fcfd3ee341cc779be9394e4e121db540ea3648df001e9527145fbb3aa392b59e1cad6d82a31deb9f2e0f4c06942291f93e54a6331a1f4c041bcba2134c9b2760264888eb5bee4a382e4c4ab0c12f53aafb3ea", 0xe5}, {&(0x7f0000000600)="55ec2e11f6ea923c77f2fc52f37d2b4d4ac6b48af5ad8e5952d26be4135a5f855d2d9fe266ae7c17686886a2316958d001cd527e4050bb579f7e94a08993b56b29c0bae9103525d2bcf4e29f87eb135e6e73858a1ab85e3b91b119a7ebf65d4942111c0f67e4b6e29f6d5294377e6da1f1523089858bd801afa27cfa151a77480f01cce90bad432a7b4e49cb7eee68ab55c99b40db5044af00df29b02ed9c32770c0640eb55d66259fb55d1525c2dd9e229abde92af56d39ec6b787762b96e0cf53ea3d6875b9a9443f84e1bfdd06f", 0xcf}, {&(0x7f0000000700)="31b65d46728dce82d8962bc74fa9c687a7890b264c35ff0a2fbca04fc8013d5eb18cf2ed5cf2afba6a887f21d2a9effc5baa28a75ef2e3d2962999799053dbcc66058868a7af29e1b1d0e41b101b019187ddc9d7362854a96aad3f68e0cdcc226682f08be147bffe5e3c8134a830fafe9e15553b31e20ac7c318caf3f886d79bcd56ee9a592e561dc853690d3d249e7cb72820a63868a9ee4b9e6f29af9853b8b6a9c314ca5fbf8fdd310d7c472d1990424d78911c5bc42f9a0fcbf1f3e49f9d59baac82a38a1cf98eb6a2e8596a0eaf6f00ae00bfcc69f0185ca2a49a7d80ce4497caa24ef3770153fb443dd71c2c88682823dfab41e640d592357ed9b5a495909242dad1072dfda1650761615fbb68a1c6facd3bf2a966f2cae214c30c0312cbbb4f672d1c1481e4aeaf0607e32e6e01a5ecc43d6f90ff893e77b43e9a22ae8fef8f09c93a46f276fab6897b79a64c1262b833a2d2080aac87a90e4deed5f4717b9e331a5f47e78eb5117109d48e0ede20a4255593bec263e7ca36f38cd47de263c0624d271dba7aae51c9c34d7205adc44180d7d121526fbbd1945a88ea5207acd5af008a3b14d25ef8ceae0cc5f29a1d583f2c32c845310e9a664c49fa6c0e839d33e9bcda58d024a2805c1ca45a8769f0d2555f7eff9915a2b546c8de943989b90c3c517e82980353ffeedd8e9cdeac7c8185ee60c9968a7ab1dfc86e5d12edb4fce15ae3633aeaacacc7e8b6717e9c4086044c5576c81f546f0db62956a97d163f7d3bd1d31621a3a53b33cd68208119b58ccdd171960a718ca42a7eec582c9a5afe2ada0976ecf8e6c133d9c584174b2a9e0c33950e73ca25d3fa30d8036fa82bc07054e1a1d84ff8b813767c7d7ca1eb691a6a77a42e04d9724732409ad00d0118054d294be3089ddfe2892f280a0a1f5431f9b3e31327e11d9e1ad90a352ce92f00b2d22354d7e1af5b197230d1840cd75433a6c212c6d99b7b2f2b758ba83987eb312782b24243964747998263bfcf16f4839d719a189b0633b871b075044a00ac7c47530222dfd9e54595bc5a30f175e53fc920072d039741954445a1c046e0447d3efaa406c2dff958b1aa8b7ed057a58a7e7205dba0906786102b2b1fe3102046e42d6a08adda1c669857577dd50ce62cea2fb8c63e22bc0212ffeb2368a803cf246cda4848a9d1b2e6147b0b469be46bb09bab6ad19c65c86958c7f11d31cc0ad4fb15d52c858e63d29efe3ce31d6ad647ab84ed1205bb254138cce3cf077d9b4f2553350cbda1b634e686944b70a904d767c39746370290191fb814d3599b2470ae9a9da25bc3ea2c3bc368cfbb370b5f5acd6325cf854f8aedce059e6b1f3cc25bd384d0ad2a890d4b19b0fecc45ae940e4de936cf6ac52afd43c60cf633aefe4bc264dbe878386535f2f5db1b21ffec0324967d67c4374c429209307cb0f9122819d5dc105d3430619ee1ed79a88aaf4c950a530bd965673448bf688d31fe5ba2148538bd35c10d7a1cfe74438f20dff9cf204f75b8b0a0221063b9268a68c4ed83b8b41cb158e0be7c6ca85609cc65afe78c2711182fc5d4c978eda17f47a59a485832b953d64705984df56a8743d2f44f85e2e3afe50c4fb43dba1fef3ded694f292846d32345c35181709dd8ef325996e0da363c8d0e6081e192754bb27bc360a9597910c814306be2b3e08c3032e379c0709d8c9bee9be3ee293f1018ad37a9c61b384601cd078fb96eb9d696e0f05fadf617e06b23de591ac8041a6ef97717eac818599aed3508621b3ef0e7911173a381790251429a62db25dccef42340da0546d98136681ec69ee185b057bc24eff271573f88a9bb0ad768d9aad00c628fd8a19b5273e8caf418d55c10cf6ff5baaf8c6b75a672837e66ff21c0d673e11caef934ba4e6cfb5202d89f665489cc1b864ff6b1f59e827fc24cedd347c70ab6a96b206ac9d950529ad0922bfdb9ab76e9e99940630273247c5e16b06c703dfcfc60fe4a483d64cd8a4aa04bd96da52f8d4ce548e52330e6b92a736cfd5c0ca1df89abe922a28a6cc77d76e0fb4e272e3145bf427a20dc2288147fea612c48b8a645ff005e39ecd8c70c931658c43124bcccd75e873a99ea5fc1ec5425bc34266c6a98cd1551aa72a48b7109f2d6bc0f5e21caa972baa549dbbcb66360962caf16ff44642f8d060331975de72d4ef0a300d5cb290b243723650a00c272b28fa9bfa09ce14cd3c36c09a4ae873fde594bc5a80c607c702b91000e090a0f1b3159959804a3dbdc647959822120acda97779a16be6c0790fe04837e8999797ca3a2f896ad2ae2573c636c3bf57783935c1509b44486d1fe2210ba27019186a0ce31aea61e5a4ddd1f7199c0ed378f653f5d4b7218afea6a4ec886b1d40910c7f05de4a9fd3e29a49f9d8f103340d2ac4398c8f0a1daaff66b025968fcbd8696977f61eb98968980b92918f29cc2bd557bce9b8af5e50dadee2a92e7fbd003c1135b4d029ffba44b8c1a5bfd99dc877f531400a2a625dc75d28c051ad62484b6366668d83293bea32588fdbc48e7954410ec1fb38be052ca71f42c70a7759565f8b7bf381bcdf612b4f1921ee097a263123c9fd78007052b2ddd340dbe1c81b6f64314de01a74eb1788dac3ffff09c208fd5db0e9b56e6763e409e36501543edb59cbe7397f5d426579de6092ee0559e6c96134fd535d39d6113cc45e6c583e52334b6a506b86e9cf23ae51738d1007c5a7ebd1a1cc5ccd15b8670ba80c4ab7182ed57802d671be5bd50a126182893dde277adda5bf3dcac2362e97de37a08dc62ec04e85a6bb4004905d2ec93fa77320d8069fa2bfb98fca536872fa20832fa52782e9ad43d22717a78743333d43ea8f1a1a8334b851ed5324544ce6997389320329eac8cc9c866e29a097cfbd173abe568ab281aadb49ac6ad9c7da7a913defdb6311fb4e9193fa33800bf87ff3ac78ab4839697a3078ffd13b27e730654d7897ea737a59558af9ed269a616b1f33dc65465df887461f4fb544962a25f87c8d0a5d42073cae4ec796fd7fb1d7e633491b572899da2190b49bca7e6cba093e4472b36af31220997096bb87acc25a4dd31e8ddc3058329992df349ef2147ed32d6f016c2bef8a1314ab50891da2d9e42e91c0315ec35f81aea41ce2abf91a5377fdb0d5a043e4b19108f9edff4670e64f26ca1496e2b69d710042dd47d1a9a4563bc27875579d9b86d3ef77566326e72579dea4749bea87039012a483d439c2f06d54ba6717529be72c155780f3c437c2ce9223f873bc034693c02053a81680a2a465344bea32d6ec3de9f384065ff8ead98402705c19707693620fb908ac04e22d8b722913bee93aa58104c5afa85a7eb8a214e5d810b2b3ca3ec3fcb9b672aa42f2c98724617867cf911924a38a497b4ef595f00c59555e1a6e07e71b2e45beb50ee8d5693b5cdfcdcdb887e6e04a521e603b7b7364d36743e7976974edc9a2045c7de6a5435a127d93248e0bd687c08b1ffb118a46edf71e8eb59a71e1a54dfa7909b0ac05b4fb8d04afc0b142f11cd932be38fd8dbad2ddcd584a4784c3199a811a701ddc75b12f51b65a67e97f5c320d6434c224a343edef9773911a3f05fae1d17ae65a466c1db284271d1217fa6b3afa79a4d224c215b3f39f21719a66930d27caa3c3b0a393c299600b1b4758b93417f4057a0d2a44b0d4240735f5106db33156527331280de6a53d0ce33b1f0cb0b03a8b01020d9ef277ae3938ea6d98a37ad1825e8eec54520e8113e464c935057474526e1dd341976b83c5d17a14de60f0d491905388ee165677eab7a6e106ee685305e23b3e1ae5a4e8ed2458e24c91ea84d10e6ec08dee590288a8ba2ef86244f53cb4930f6703cd5a867853822dcd2727cfc91e84f49e309d80a52ab0951302d3e24cca50c5fb7169d9ef9763c04435c05986fe518e556a2aa49557d1a766b172b2a76f54e5ce53dac93b16de5dae3943cee5394ea4670d4a4d8548c0d63c40a4ca7808fa78f05e7d41608a05ab30db3e5e56732dcbf3b33a1007c0b130a7940a814144b0f6611a6b09bf71731b21b96f8190f0e119bc07474aee5b7eff1237cd40d986d14ab26a7976cfe39873b717c79d16e83e22f6737b6270fbb8ffccabfe8d85a512ac84b5a6a7a487192e69415eb7294a5bcd351b71d3bebc4398e0d14cee0216e6faeddf6f23efa9d46c89178c11ef1ce0cf2fab549137a311845177c29593c228ff41db02b8fb530d11b1e97966a52c5290703860d4cfe3a287b3cd2381152728f2fc855bcbc663dfcf7df87c1f3f2c881e7e73584a1441b5d3fbcfa9353cee423915cedf086e376c3e155d66c60cc9dcf81a5c5fa1410b91fe58bfb39abcdc57dd5a017f2bf2c34339efecfcaa8f6385ff28c11fc0327d63385969d8cc192940eb144dfaced3116b424b17b1d706f26412bccb7254890ba3807f668b8434e4dec0a13f986189f45660d09d2e278745a483ced9879b8eca4ed36e30cc99b1e90df2169594fd0cd78eb617975fb23e3948e535e4b0c1eefd305d366d46c8b4539f0ca16922a7d8df29f6ca3723c01f2a24cd901aec525f0ea6851cb3928d23ecbbd346cde49d7ba53bb50f230a211470268b0dd2fee71dc4880286364bd774886dfa0c03fe324ed4c20378885ec3d4ae054f4964601362a77ace37d0fe5e5a7d377dc367608ca2f68e47ce70a0a7a3fd7c2082184787c29d3fde730a8a1b590c20e0b564d2c804c3296f15708f8cb931c0e60df7822446b358664cc3cf3974d039817092ab0f57a64db76e19c36fca6ab7a6453ee28026b4c8d203cdda59465be822668784bd6b576941b9c32560cd738945ddeb8d2daa4aca82b17567962071be94e23c2ae82594657faeac9f131cdfb4f1a540a5accdbe18365a221890f6ff2fa9ffa0fe603352086206a5eee7c9956d5b03e8a400f357ce4c2e97780d56f064d7381981bc35f7725dacd440b975520fa256b230559924950850fdb09fc6372cab30b47a937e26f2f143e4ed7511d04593057de7bcfe927db2d4c57660eacb98e32eb8885fbd3713f3d5b3e2dd7b3b3c572927f8982fb48aefcf81163469dcfcce0b94d142dacfaee1c7ec713f37bbac91192649a2abb74add3c3901a4a3e224cd6b69b348982672d65ec8d30e55fceea7f4c8dccf511d8a3987175f005e0ca3dd65243750c782f2de2f6a83d7231343f27eb638c5b90d55b2017d5dd24d1540e3474d078ff0fd84aa7fae2fe709b670e765f1fc5d5588ccbee98768a84c5dbac93fa01f88ce28f0634e1c091f836b01ec757205777be6e287c8922a23cc98661e8aac4a3e0549b89ed94cbf0f42fb7423b0bfa5007674cae09e697e02a273441637fbbf3d3d17eabc9fa0bffec90f2c628fe1765980be74295e9abd91c8b0ece70c2825b08c289947fa0885858b0f99390e0b0ae76e53cc20b7784106ca271e73250db5743d6b699a02d9a23ab480580a90fa7bef0762c2352803c3f5b795a5b8a5176898877dbac3558b0ce642b9217e21db7d25f002e4baa74d173d8b9d7ab20f55558fc5ef6548ba27bef30dca2d25f5acac09edf76165e8b985dce344040957517e4d98e26c6b32810a07141e0b5edad9715e334953d17e4ed794c73337e17a0101540393403ad8bce7331303f400082230364d86faf42128654f6b7b9d6863fa2f60ded5289c4afdf2f7a755ee33fa17d9f488cfdc6a1440e2ef810190566fdba7ca94dbf4798d2d8c8ad25774f966ed987cfb455e44dea831b6edf8b", 0x1000}, {&(0x7f0000000200)="e51b9ab99108adf4d827737360bf0dfb03929085a64c7df7205dc85ffe6d1428fb730ded0b169050831c668d9c9653565634ea8d263ca87c", 0x38}, {&(0x7f0000001700)="1e13b88bf0b9dfa05fa54162a0578e5c60d38ab368cc4672af5209f88cbebe7a1ebac5026ba2b2a5d0406ca7e9a2a8278b7e4a3da07fd753440cf34d9d06c28c00a8838bac6ff86c98ce9295259e8cd888fe51d2fa10429f4e3bf98a44435ade948db76b89e220984b62fa29a514d3d91b5db3cba56c052618ddcc74227cd353fb6d169344f82f", 0x87}, {&(0x7f00000017c0)="52a6ea4ff986", 0x6}, {&(0x7f0000001800)="c2eaccfe86e24972a09a8c0400cf83935810197cae20d7a5c183427ec95f1e8f6586c38fd53619aedf0f5c5d8e89d20b49986666695fba8ac50e7b7c511efd52e9e1905cd908e20e91d09614f1f9d4486ad29ee3e72c0f94e148e7148d7fa23a790e7902da599c14fd2830ad439bcf00150e4a29066938ef36b47b222779e43cb7a25552ea88a23b2b0d7973196b2f434d35c3d508fb43d1aa80e5176e74b14aa5b31a1897e2934be42bfa0f4a9873b19b18f7c3ad0addad20e7c1b20b91805193336a5f6e99bc2012d265fa0632e488a3488398b97bfa71523b12a88671ac70d4", 0xe1}], 0x7, &(0x7f0000001940)=[{0xb8, 0x1, 0x5315, "20fd68631d6c696ff012adaff6cdcc715d04960ff2aa64dd3e481d2dc76b8c56dacea58cada9fd9bb03bfe45e1847140ef26fcb1435eee89aefd8ff1fcdd3630769b03c9093ac63aae828d8dcecad28d6c9bca3ed90ffc9c4c6372330af584918bd89d492b92a6bd71ff10894fdd13eae771e670e4f3b1d8ef77df25a6850838338b22509aa034e6d6f1ddd2bbea656eef9519dd5b4d86d9bacfe902b20ba5749cbdf00c7c904f2f03"}, {0xd4, 0x6, 0x5, "545baf47c1c8cadead766de1c572a1262706a3f8249b6748609ce72fc707f14ce250d3468629567e48d01e4a0b414c130bbf14da1ec16960c25bd9bd97f0708ef5480c85f2fe11f98dc64036aedb77d5011261333ef611a33f780bfb031e28f751ad6f10ba0775b39ead58795979e055702fde84408a7cca21a62c183d86671c6ef3c7a63441de0b1a92d298f0fb2310be48133e87939e82d6aa4fb0a8dc9c7bc21ca7d6afe9b682d688fbe45d16859c175e442bb5e7eb45ea9d2aecb86e5d895e7f939e33414a"}, {0x98, 0x10f, 0x8, "b5351b6e403f4436eb8ffbc360596948804443347f67a5c633fdd455ff7898e51394553620080004f48704f896f8ee8b2220c61826e6bac2940fdd34af816a44280ab0df6b2d18a75ad4eca30180a2b7f64ccb158cfc6be745d5511b534b89c37d3aa479a5c2b55a01ae979efe94614f052c3bdd7a2d8a1d0bccb44697f18cde2f73e4286801788adc"}], 0x224}, 0x7}, {{&(0x7f0000001b80)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x7, 0x2, 0x4, 0x3, {0xa, 0x4e21, 0x40, @dev={0xfe, 0x80, [], 0x13}, 0x9}}}, 0x80, &(0x7f0000001d00)=[{&(0x7f0000001c00)="c9da05dfe0891145a0fb6331cd56c855ba1b1cac0908a909f3300873b108b643923d03160c29903ae47c49bbe1647f24254a0015646536136432ab5f3d1d7a66612aff8c6a9330822ec7d1c14e317754a0999f94d88795815f", 0x59}, {&(0x7f0000001c80)="2bfe8496805fa242c28a9549931fd7a176c4ceac7b80c3a493751b1d1881900412b321df8d5f0ff49c21d79ecd3ea9e847e6d155346b6bf8ae990f9c37098e7c58ce5bcf9d6c87aa7a24b17f096128c4f357c75d5b9409a147384ea7fa51919fd5e23efd7d881d960fdc", 0x6a}], 0x2}, 0x10000}, {{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000001d40)="3d79a21146872011f8dd7a39eb59a0f0fed8e40ac00073b2d2ab1121a52c15ff48e36fe0370a68e14dd2c2ed1fe4e8597793b81d18be27ec031a8374ec82c12bb24ff04318bb539a118a47b04135108c4b8a8e483486be51ae9fca463daaafacf6ddb35ed119ef97db8e79557b4736094829a2edcab1e60956afedc65703dded1b3440431939b09d5abd328e8eda3cb1fdd9043d7d6ca5e1659418b6f3f40abe22d561bdd693091fb7af5afaf3afdfa1caec1d2a503986c2cf49489eb0db51c0685de4a11be101be108d0d1acf2a8a6ae39193aca4f26e2a967c5cc3e2d496037f980646d14621880f7fb6ebd63a90438a0c8c615857d9bd", 0xf8}], 0x1, &(0x7f0000001e80)=[{0x100c, 0x113, 0x100, "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"}, {0x4c, 0x12f, 0x8, "ee88faa5695fb7e929b1ec4b1f325bd7e6cbb88db06a58746c8026acc8635de312f43d87cf3a5cd85b2834eb216e81db783dcc860dcbb1152ea66c336b"}, {0xb8, 0x105, 0x0, "08a610881a769411735bd79cb444369ce3adef731e8123e0f874919c069eb75567b342b08ca989fa421fe767a9351909b2b9aaddcf1cbf91ece613901e6ab59b25cb67bd9bcfcf4590c18f7dbc9e776d1e698b4f0398e1c5014fe9130867cc04c83694502b44d93154aacfad1539609ceca7a81016c28d6049bc7e8796adc71c710ba6645091d6d1011f29bf4664cb64909a8509c4d218931e79fbb6456b575dff64d18bfea4a4668f"}], 0x1110}, 0x1}, {{&(0x7f0000002fc0)=@nfc={0x27, 0x0, 0x0, 0x7}, 0x80, &(0x7f0000003380)=[{&(0x7f0000003040)="ffd0f38f3c7f0b64b08b2f98f2d49fa4a37787d1802c222539c72c15df76e540c6ab858200453e0f72abaab5834e84e5bf6af7f2cd0b9b074bf846b90f568ec58a2fcd7bba4f2cda8d86fd87f52025cdfaa786795433fc5ad056293681468c17f2497b9e8c5352e13b7ceb797c5e7e101522b502e725a8a2824acb4511d15a2ca6b7417cbb61f3eed8c7737dce9afaff94c1f8b1bf8b6288d0b60b04cbf53151", 0xa0}, {&(0x7f0000003100)="5755198b561551a5b93186796b227327f02611ade49f81a580e5ba37afe3b735eb3f26a9ad055b8f573e3112dc5ff433f9ba5d075ea2f5570d5f40b1620b801f281723b7d58b35fd07421d5a2aa5457d5591d65752dc7ed06ede39b187b10f79e69bc38569bce56b762438b246d26cc0eae9ebb0157c28afe9f77b105a31a64db43731430e95a033dcadbc47431a76f38a", 0x91}, {&(0x7f00000031c0)="030e6618b539be522f06affc9c64e9b06f3d362e00f7fd", 0x17}, {&(0x7f0000003200)="f48e8565e3001825acb9585edbebde5baa11deeec1b3230699b9861a933bca9ec184d777e77b86cd5ceb6c55f49c4b9623ed661716cb14d6ee678f1811bb3cf211604923ccea0d656cd8e7d9a636ae44ca5ddc5eaefe810af49703795d9137ef49a5f80b97ca17ff9f4be7", 0x6b}, {&(0x7f0000003280)="23a13b7cd9aad1ef7d015e139267f84a561998525ab6a6e3457dd4a11f19ceaecf7ad762526345ac0bf784ba585d4854b9cad784e85eab73e219656652b111cb6f6406e16afd39e66e1469df1a2a5dc04834792beaf14227d5fa92b66d954df8f9ab9ed051856ff574e895bcce62f23155c688034c1908bd41b23906c337d0ef059c47c0a0670c5093a1969150617a6f396dae1c554fb264f6a2f3ffe05b3f9dde595e84cb047048b0a45545ab2cfe808f55e27b920b11e6ecea33af99fdffd302762444851cb5f7ee3277116ebad9da5bb58e16ba71b21e160d1ca776e6a7d6456bc08d1b9950a6779462f3cd07", 0xee}], 0x5, &(0x7f00000033c0)=[{0x90, 0x11f, 0x5d0, "816ae8314c5d790593ea18c84658290445563e64fe527471c7cca42463c124f00d5b150ebca994bc0cf0526fb913cd4290738821ddc5cd7dc10289864d8e99e6085b2eda01e9028933be1f98d92b7cede38bf6087baa1e86efbaeac5d4620da3ff69656a119bf02c318aeaf49fa82a58eddf978aae8dcd986a3fa31b0f13543cd5e5b0"}, {0xa0, 0x10b, 0xea, "fa954a1a9c5177bf5f2d127204708912012148e695b819d41b21db0d6924190d86704b1a496eb7b486c5d9543e3c273d59b135a397b2c34e1f7c8c1e0f5c554443ee7869ae994f34b805554b2d4a2d0d09e00ab22b7aa422225b4c3c1c9f74c630413afa45f2fe9969cc244dbb52a9f3dccfdb67a93273c27d0f6991ba44ab85d0134505425f18c7e346627f576ebde2a3"}, {0x58, 0x10a, 0x3, "602f5cbc361ffe17026da439dba6b7fa29e5d82b15f0c1110cee4fe6d0db46d871580602e3dfc6892fae533a72cc0001287fa6f9b1c74e1e285f64a1d96a271fe5034c51bd1eb9273c52"}, {0xd0, 0x88, 0x3ff, "4d77a52f4f31fad05b98c41d2598006363cd1e145acd0ec6e4b2f7aedd03f25aac015f9b2c84998b5e2d7496f18c2fce495a359b74d186fa40aa16b4917bff711206310e1c6ccfddac296e5a9523a12f59931f3a38efb0bb8090d2b693e2462c4549df35390a16a6a0c75a9ce79b8ec59d46768f27077a2c0918c44e4c1d77de12a589a0bec5496347490d216af9e8512a8232b157fab4435aae6843182bb7447f884737898a5e150fb615be73ed1247973d594f3eed2e0899e0756708a643630c64"}, {0x30, 0x117, 0xffffffffffffffe1, "17dc50a05e41d9ab1e0b9b715008576248f417df9f97ebd194ec4148ec51dacb93"}, {0xf8, 0x0, 0x8, "8928b013e20fc682526180c6a5b1ed5d5442631790900818b7710ec09ed85ac7a6abe68ffd49d67a4334cff8c86de6b6cd75dc1dd799e4ea92340044aae51d2e81b66191dbed5a9e00dfe222ea6ddca09e861aa89c6af411a6a71b5cab4494aefeb132b483966805ea52608099c90783f7dcc3d727db94fad18b81d605cdd9cda15724a0c6bf8f5d24df204f482af3d2b87036856582f1a4ea2c7cfee90d236260a62125aadbb7d5490abd0363d63b87527580fc876d00b0e622da92ce150b61ebbe1b1f5178480c7ab891512bf52db183a71a09934e9f641c8287d7f24e4399186f5cd20658fd7f85821320"}], 0x380}, 0x7}, {{0x0, 0x0, &(0x7f00000038c0)=[{&(0x7f0000003740)="a74e3677f8677a32341444af05cef59bf3c631bc3f2c5b993c1e49465ecf11f91134278c3c267d9fdad2367f5853d8a19df6679e41ea077649b3cda88fc556877984cd7da69bf9ca96655cc626a36cf5c2444e340e6a6bcaca217ad2747f4a022aac621cf0d703576faf49", 0x6b}, {&(0x7f00000037c0)="2041994342a17776f56f61b947fe159581a2aac2d3f91944329178e486e93670d88677c07f6a16e0047964cb59d0266efbfc5a032eabda61fa5ede854db8e2498c96910d10ba0929275867b88501d57ab8ca15efc5f9c53e94358ccf6999a1c64667a339bbfcc9", 0x67}, {&(0x7f0000003840)="b1f2fc7983b966c7076f13f5e59a69ef4379cffb852caf1def5d2a66e5cf210070ad9300c08654390a", 0x29}, {&(0x7f0000003880)="c56dcf282c2cdb7d259d5e20a331d9958d081d90f0a70256f79d0c4fea31b360c5d90cd00044c48caa6a347bd1a1bd6515be44c9fcf78515a9e1", 0x3a}], 0x4, &(0x7f0000003900)=[{0xf4, 0x115, 0x6, "289e7b91636d14916d8eb7d7ad4818016f006a2908b1285c465bb654492be6578f11847d0de3e29589f1b5c3f1acb9d9f8285951b45162164e4f3708652d8e13df571ceef7a3f1e1b21847455a62070e0abd710af47faec1c521a8e582ba62015c559b5ae211cec4cfd6ff7d0c67607eb380a837b42b16b46ebc06666ab8b5591121cf0042267a5f089bb983ab2c71c9a2da6174c43dd2cf4834f6524a211a4a78f5242c4f34452ec45dc2fcea0680eaafa0c1d989a764cedc4463d053b5266b620c0e535e373e29440baf7ea15c79ac0a5fd18954b3285c1d29f1dc661d764816545b65ea44b1"}, {0x54, 0x10f, 0x7bb4, "3c080d87621567e2e8af3a736f0370aae69f04aad748c542f48b52d0ecb2085cd58fc4a1a2fb87b3170e9c62c69ce648de84f5827aff9aa7faf750a146ab0949095f3563c4"}, {0x98, 0x10d, 0xffffffffffff2ddf, "980305b1f4f3e49a58dcea6b9d3febab497ea30c81067303cd01c03e03e91a8b8f4223b8f73aad038702fe77d2e8d11c3e85492055cf80bf4dc4ead92ca20c24d0764e647f4e37fcbce4a3f95c6bacf081803f6de29d4a50199be1dedb1dd649adff502370901647d2f853d729963f8ca3e30fb5cd4f0d8140add29393d08c2744fde8d1292fdf3578fcd44c"}, {0x98, 0x13f, 0x20, "851d2e8285cf1cee56ead6dc0f1ec46f5acfdf1be012b35180700c465ba8300a5409155d097d34f61527693ce844c8e83e3618b5c730d6b2c5ebdf53acf501c6479664f320b549a4527e51235e86937afdac22eb55f6c63e8c45122e73224304101f084e29325b4901eb2b7682f984b686cf11d1900e7d282362dc1b8215e94058802fac7962212cec258275"}, {0xf0, 0x10f, 0x0, "8c4e9f4ec9bf88050fe1596871c3d20176f5da2fc7a9199f793b3b42f05c5cd8dc7bf2922d8f19aadb46eb3d1dc538c6dba274f0a707c2238f608d9de3f8f192820a8572ed6ce22dda64a6ee65158c20ef76154b038d297862fdaa483f482eaa67a08683410104783ffac6847e6f18548645890dc59a76225ec958ec77b77b21670f71354fd1344a14a4a0fda478a20f9e58015bbbe61d82bab2b8d8f1a26c4d88ab3c92cb49f797261f7c5f5dc076ae780f3f97eab37d7f55796ff2821d1291b0c1c8c66778baec7ebfaf9cf024d77ab11e2383cb02541067494d2815d68b47c22ce9"}, {0xf8, 0x1bf, 0x0, "6fc7f29c2e10f34e1b5ea8e003341fd83a0bdd5350eb55b2ef417e3348979f6b05330e59eab99ed587be44c0f66cab5dc8d98f6f77a5cf885f6189d16ed72c866b03167985d6e96744dcd35ca9e7f474098262924aa728723b144b79453375746ee0a5ad4d770aa39ad5414446960b515114518f9fb66d0fbf7c0fe7eebe80fde5a8729b657375ffef58c268e2d35ede3557013ae72f3524b6cb44d7a0877c22ca87223d3adf8a475bb1c46ba70eddfb94ef154e8345ff369f551eb2db1bc84345cce44b9550be2e9b8ec6bc33feac984c0a0573a8f277513901e89a98a5d6863d29474d9eca7c03d829fa"}], 0x460}}, {{&(0x7f0000003d80)=@nfc={0x27, 0x0, 0x1}, 0x80, &(0x7f0000004f00)=[{&(0x7f0000003e00)="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", 0x1000}, {&(0x7f0000004e00)="202e1bd1804aaadf444abc9f64696cb97f2c56ab4e625d4bffe751e5275a52a0cc138b59b5f15b76bcc9b3700d2d9279e7e98fa2562209e11c0f1c40cc518aef8f6f2790ed4be4a1875d3d040f3467087de09383cb5d30f12592ef59550501a33bd8dd1190986422c2b346f952223dd2d4125b725e5951f909b35422efc29b7e44d7f4722b29a87eddaf5f", 0x8b}, {&(0x7f0000004ec0)="b0ae355e65c330564cc3fc526bec86f300cc4dcd888eb59ba5a88e4dede855eb6bff08c5b4", 0x25}], 0x3, &(0x7f0000004f40)=[{0xf0, 0x115, 0x9f, "1cdf937568de88c16ebe7c50eca6ca19eb6c7ee43988a363dbc207d709691675ea038e4df281c730644455cd56519424859dbc2ce1613cb229dd1785ed3caa7c4f44325946aeb8c468b4c16e4fc76e26b198b966670d17cb2d0452534402d1716f3a5ab3f42051cca18a258bdebdd8e867ed34400d1f37ecf9be772ead923f25177335613ebac0a7fff42ca388a9782724bec250249dfbb53f907b37fe223312cde01236ee862379a95aa2ed7059db870792998c833b8cd9832c4a011621ed8aed77265117c073e8fa954f480550e30ec4fb4ad432b0395235cab6e076abb9087c44"}], 0xf0}, 0xff}], 0x7, 0x4000000) writev(r0, &(0x7f0000000240), 0x1f9) 00:23:41 executing program 5: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x496, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f00000000c0)=0x500, 0x4) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @rand_addr, 0x10001}, 0x1c) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 00:23:41 executing program 4: syz_open_dev$video(&(0x7f00000005c0)='/dev/video#\x00', 0x8, 0x8aa04) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) pkey_free(0xffffffffffffffff) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x141000, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x0, 0x0) r2 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r1, 0xc1105511, &(0x7f0000000240)={{0x0, 0x1, 0x80, 0x46, '\x00', 0x80}, 0x0, 0x20000160, 0x9, r2, 0x7, 0x2, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x03\x00', &(0x7f0000000440)=['/proc/sys/net/ipv4/vs/snat_reroute\x00', ']]', '^lowlan0vboxnet0\x00', 'selinux@\x00', 'bdev\x00', '\x00', 'ip6gre0\x00'], 0x4d, [], [0x3, 0x800000000000, 0x3, 0x8000000000100]}) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000b80)={{{@in=@remote, @in6}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000600)=0xe8) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) bind$inet(r1, &(0x7f0000b9bff0)={0x2, 0x2004e21}, 0x36c) r3 = socket$nl_generic(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r3, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000800)=ANY=[@ANYBLOB="00bd0800000000000000c91df0a4a83109fd74aad282d2ef5d2ed0d2af2f7a005987c9f39719d4d148649d471d24f45265359347e31612e80a971034903c3ffeb0000000f34669e4fd53f518a55c923b903428b1cd8cf464d3744822b7dca780aef5a887977f991dc24ab0e2775d2e1091589500021c1ea4870900000000000000eb4b24a052f2cfa267025f5731f96ebde59df0b83acfdae902d1d2d27f2a3e2381e01f10839d4e53b5c332257b8c5c19482ccbab1507603a1efd893196e8eb1cc5fcd40496ba920e60df320c0000000016ea577c1c74676bca920ea6fed777b08b221714d462c6925b6e6c7e5288df22619e2c2a30000000c5032f62010000000000004570d991920000a1d3063a6f4c5d6723b210f2f8ecbf4f2b1a60196fb0a6e2be719b96db91d27b1a1e8ddbcd8f3622c23160cb26c529eaeed5d0c51522e29824b2b7daebb90369d71e35d198984390b71bad688a91fa0089c7051393c69563c313162c092c56cd308beb1bebf3d945dded5561b1cb7bf010be7e8ba177dba713ecf4068e0e024f469f856d61e1477247ab013ca643079802f339d0800ff7d120e6e8010650f7185fc638c5cee557c413e3b145baf66b0e0e9cbae8c6e990a002a13751ccea9eb1f5079e010000000000000062a49559c1a49e2b2977621a933b21c76fe4a89f6f5c545c17d6efb56a1465c01be76cd598f8770c9521a065eaaf681b97e82eb1eb81216b3283e57ec8a529022e50f20bcfdbe8579fdd877f71700cef7c40f535465a287fef59d6b47c20f6bd759787dab7a49f27140a289b00000000d7e0fa7e84f66a1b483fc1baa55e0855287cb15ddb7a5a94508b649273428d2c6d84cc3ec5198553bf1b739de9b6b38ea3325ee5edea12ce8858ef3631b8b7bac462eb0fd733dc8d04314dc9af6c4cff620fb4fa2a285f0dcd69164000a90f93eff0cdeabe31fa74f96f49b0cbedc81ccd28ea8c873f8029d3e3c7602a0bdd5abab461e83fae6532c4d70402d3f6b08dd5dd5b511df8cb360a7d785120cfea9afaf1ef30d018cea6f9b942e2816e223e80c45a895b04b672bebeecbfe8037ef72b6c7fcadae43e9a75bc11b8f08a353134c37b7e2992d9f71d791d4a373ce4362205cd1596e0904426c5a248d90c827c74b1f306350d4619a29d64f738a8a75ea83b84bc01aa65cc332316bd8bbabf3efb3fb2c9ecd02a8005bc15af5e5a32c63a9e"]}) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x100000000000000, &(0x7f00000004c0)={@remote, 0x0}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000001c0)={r4, @loopback, @rand_addr=0x1cb}, 0xc) syz_open_procfs(r2, &(0x7f0000000040)='ns\x00') r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) timer_create(0x4, &(0x7f0000000180), &(0x7f00000001c0)) fcntl$getown(0xffffffffffffffff, 0x9) rt_sigqueueinfo(0x0, 0x4, &(0x7f0000000680)={0x3, 0x8}) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f00000003c0)='ip6_vti0\x00', 0x10) r6 = socket$l2tp(0x18, 0x1, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x4e21, 0x4, @loopback, 0xfffffffffffffffc}, 0x1c) connect$l2tp(r6, &(0x7f0000000380)=@pppol2tpv3={0x18, 0x1, {0x0, r5, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) r7 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000500)="0214e0cef3273d1c77035abcf37f6a8ac5cf7ea6be3b6095ba154fcd7d6c93970989eb400c755b1acb00e595", 0x2c, 0xfffffffffffffffb) r8 = add_key(&(0x7f0000000540)='user\x00', &(0x7f0000000580)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$reject(0x13, r7, 0xfffffffffffffff9, 0x4, r8) sendmmsg(r6, &(0x7f0000005fc0), 0x800000000000059, 0x0) 00:23:41 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x70100, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4800}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r1, 0x800, 0x70bd26, 0x25dfdbfe, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0x6}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x24008810}, 0x20004000) r2 = gettid() tkill(r2, 0x400035) 00:23:41 executing program 1: unshare(0x24020400) mknod(&(0x7f0000000280)='./file0\x00', 0x1040, 0x0) execve(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='personality\x00') fchdir(r0) preadv(r0, &(0x7f0000000600)=[{&(0x7f00000004c0)=""/208, 0xd0}], 0x1, 0x0) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000100)=""/148, 0x94}], 0x1, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40000000000002, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f00000000c0)=0x6, 0x4) 00:23:41 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000080)='ip_vti0\x00') pipe2(0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip\a\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf4\x00', 0x10) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) sendmmsg(r1, &(0x7f0000005fc0), 0x578dc68791b521, 0x0) [ 164.771375][ T8380] syz-executor.2 (8380) used greatest stack depth: 22104 bytes left 00:23:41 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0xfffffffffffffdbe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x5) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000280)=0x74, 0x4) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x6685) r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x8, 0x40000) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000680)={0x2, 0x4e23, @local}, 0x10) ioctl$UI_DEV_CREATE(r1, 0x5501) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000200)) mmap(&(0x7f000000f000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) ioctl$BLKSECDISCARD(r2, 0x127d, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) socket$inet6(0x10, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f00000000c0)=ANY=[], &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @rand_addr=0x3}, 0x10) ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, 0x0) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) setrlimit(0xd, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) [ 164.894129][ T8414] Dead loop on virtual device ip6_vti0, fix it urgently! 00:23:42 executing program 5: clock_gettime(0x0, &(0x7f0000000240)) socket$inet6(0xa, 0x1, 0xfffffffffffffff7) openat$zero(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/zero\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000b00)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, 0x0, 0x800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) r1 = syz_open_dev$usb(&(0x7f0000000740)='/dev/bus/usb/00#/00#\x00', 0x101, 0x8c001) ioctl$KVM_REINJECT_CONTROL(r1, 0xae71, &(0x7f0000000780)={0x5e}) ioctl$BLKGETSIZE64(0xffffffffffffffff, 0x80041272, &(0x7f0000000040)) syz_open_dev$audion(&(0x7f00000002c0)='/dev/audio#\x00', 0x5, 0x0) r2 = socket$inet6_sctp(0xa, 0x4080000000000005, 0x84) add_key$user(&(0x7f0000000100)='user\x00', &(0x7f00000005c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) prctl$PR_SET_UNALIGN(0x6, 0x3) keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, &(0x7f0000000440)={'enc=', 'pkcs1', ' hash=', {'tgr160\x00'}}, &(0x7f00000004c0)="b03711a4ffd6214c196576ea37e147830aba823ac34597dbcd60e8e7428e1ee28f1638740fc3781b6f3c3440a149b41f21ab94c90f8b42e94f360290cba15a58d03e6db5340157c8a981ce59962ba5d741ebb6e37dc00fce74d477b15c409eb7f12267d82f19a54fe0483827d81aef9b5d018b67c1d97f49bd683e5431259b306e7e5cb1aaa21bd8a00335b63b30b8df9cb93e61d326318e621d5f1e4f66fbcb2fe8f9562a8c627ccab348a632f9ad65da561bd53b78fa3f35dd9afda1c96988cc4540d39201e05a29ab21fe0afdfbc28f0fe8b8ce182379f5c7688d5eb1e2d73351ee6ea7238402862de8116f5e00020e4be80573830d1b", 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000000c0)='nbd\x00') getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x20, &(0x7f0000000140)=[@in={0x2, 0x4e23, @loopback=0xac14140b}, @in={0x2, 0x4e23, @local={0xac, 0xc0}}]}, &(0x7f00000001c0)=0x10) 00:23:42 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000540)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) r1 = semget$private(0x0, 0x0, 0x0) semctl$SEM_STAT(r1, 0x1, 0x12, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000e40)={{0x0, 0x0, 0xf7, 0x3f, '\x00', 0x5ba78a22}, 0x0, [0x0, 0x4, 0x0, 0x401, 0x1000, 0x2, 0x0, 0xffffffff, 0x0, 0x80000001, 0xfffffffffffff001, 0x2, 0x5, 0x0, 0x42b3, 0x6, 0x0, 0x8000, 0x4, 0x1, 0x3, 0x3d58, 0xfffffffffffffffb, 0x9, 0x1ff, 0x0, 0x6, 0x0, 0x5, 0x5, 0x0, 0x0, 0x1000, 0x7ff, 0x0, 0x8, 0x0, 0x0, 0x1c26000000, 0xf0, 0x3, 0x7, 0x7f, 0x0, 0x0, 0x9, 0x0, 0x3fffc00000, 0x5, 0x0, 0x401, 0x9, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff37c, 0x0, 0x1, 0xb6, 0x6, 0x0, 0x1, 0x0, 0x7fffffff, 0x0, 0x6, 0x40, 0x9, 0x0, 0xc04, 0x0, 0x5, 0x6, 0x6b, 0x1, 0x0, 0x9, 0xf9dc, 0x7fffffff, 0x9, 0x0, 0x400000000, 0x8000, 0x0, 0xac, 0xffffffff, 0xfffffffffffffffa, 0xc6, 0xe32, 0x0, 0x0, 0x0, 0x7, 0x8, 0x8000, 0xa5, 0x76, 0x1b58, 0x4, 0x0, 0x0, 0x0, 0x95, 0x0, 0x0, 0x0, 0x5, 0x10001, 0x0, 0x0, 0x0, 0x7, 0x0, 0x9, 0x1, 0xffffffffffffff00, 0x2, 0x9, 0x2, 0x0, 0x6, 0x5, 0x0, 0x4, 0x96b7], {0x0, 0x1c9c380}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, &(0x7f00000000c0)) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000380), 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, &(0x7f0000000300)={0x0, 0x7}, 0x0) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x1, 0x0) write$sndseq(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x4e230000000000}, {}, @quote}], 0xff33) 00:23:42 executing program 1: r0 = socket(0xa, 0x2, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x401, 0x200000) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000002c0)=@nat={'nat\x00', 0x3c1, 0x1, 0x15c, [0x20000340], 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"]}, 0x1a3) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f0000000080)={r2, r3/1000+30000}, 0x8) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, &(0x7f00000000c0)={0x0, 0x7530}, 0x8) 00:23:42 executing program 1: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) mlockall(0x4) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r0, 0xc0a45322, &(0x7f0000000040)) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_ifreq(r1, 0x8947, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) 00:23:42 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000080)={0x1, 0x100000001}, 0x8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000000c0)={r1, 0x1, 0x0, @link_local}, 0x10) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000000)={0x0, 0x1, 0x6}, 0x10) 00:23:42 executing program 4: syz_open_dev$video(&(0x7f00000005c0)='/dev/video#\x00', 0x8, 0x8aa04) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) pkey_free(0xffffffffffffffff) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x141000, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x0, 0x0) r2 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r1, 0xc1105511, &(0x7f0000000240)={{0x0, 0x1, 0x80, 0x46, '\x00', 0x80}, 0x0, 0x20000160, 0x9, r2, 0x7, 0x2, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x03\x00', &(0x7f0000000440)=['/proc/sys/net/ipv4/vs/snat_reroute\x00', ']]', '^lowlan0vboxnet0\x00', 'selinux@\x00', 'bdev\x00', '\x00', 'ip6gre0\x00'], 0x4d, [], [0x3, 0x800000000000, 0x3, 0x8000000000100]}) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000b80)={{{@in=@remote, @in6}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000600)=0xe8) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) bind$inet(r1, &(0x7f0000b9bff0)={0x2, 0x2004e21}, 0x36c) r3 = socket$nl_generic(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r3, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000800)=ANY=[@ANYBLOB="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"]}) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x100000000000000, &(0x7f00000004c0)={@remote, 0x0}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000001c0)={r4, @loopback, @rand_addr=0x1cb}, 0xc) syz_open_procfs(r2, &(0x7f0000000040)='ns\x00') r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) timer_create(0x4, &(0x7f0000000180), &(0x7f00000001c0)) fcntl$getown(0xffffffffffffffff, 0x9) rt_sigqueueinfo(0x0, 0x4, &(0x7f0000000680)={0x3, 0x8}) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f00000003c0)='ip6_vti0\x00', 0x10) r6 = socket$l2tp(0x18, 0x1, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x4e21, 0x4, @loopback, 0xfffffffffffffffc}, 0x1c) connect$l2tp(r6, &(0x7f0000000380)=@pppol2tpv3={0x18, 0x1, {0x0, r5, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) r7 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000500)="0214e0cef3273d1c77035abcf37f6a8ac5cf7ea6be3b6095ba154fcd7d6c93970989eb400c755b1acb00e595", 0x2c, 0xfffffffffffffffb) r8 = add_key(&(0x7f0000000540)='user\x00', &(0x7f0000000580)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$reject(0x13, r7, 0xfffffffffffffff9, 0x4, r8) sendmmsg(r6, &(0x7f0000005fc0), 0x800000000000059, 0x0) 00:23:42 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) flistxattr(0xffffffffffffffff, 0x0, 0x0) rt_sigtimedwait(&(0x7f0000000340), 0x0, &(0x7f00000003c0)={0x0, 0x1c9c380}, 0x8) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x30, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x8000000000000002) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r2, 0x222, 0x70bd28, 0x25dfdbfb, {{}, 0x0, 0x4109, 0x0, {0x14, 0x18, {0x4, @bearer=@l2={'eth', 0x3a, 'ip6gre0\x00'}}}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x814}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r1, 0x402c5342, &(0x7f0000000100)={0x4, 0xfffffffffffffff9, 0xa685, {0x0, 0x1c9c380}, 0x1000, 0x6f2b}) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)="390000001300070069000000000f0000ab0080e72a000000460001070300001419000a0010000000004803f5000e0002000087ef38bf463f59", 0x39}], 0x1) 00:23:42 executing program 1: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl(r0, 0x6, &(0x7f00000001c0)="5716c432e736eed6dd672056f9df4592463c4c31e46393010764b6932fe342268be3a74dfb611b5ae8a26cd5d5b6f841bea5d8397edad458eff5eb9319ae1c1100e6d7e64c48c0834b8c5666aa93fcad7b0c58eb027125fdd8c00784caccc53667ca797c42642e0815b994a3ec49b85d57ec16eb8f167cf0132236f1cc66e36a9b5a7fa6fdead708f4a1f70a99ae7de4672bbd0cd0eae25cd1c5df327523bc758a6e3e5c2a3b7a071af3c67802453a029fe5b0af1890fcac4b2e3fcf4be7fdb9090a6d5a75d567afa2fda9d43b8a2bf19e383f2d14e63e263fd192") r1 = getpgrp(0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x2000, 0x10c) ioctl$SCSI_IOCTL_SYNC(r2, 0x4) capget(&(0x7f0000000000)={0x20080522, r1}, &(0x7f0000000540)) [ 165.916963][ T8459] device syz_tun entered promiscuous mode [ 166.003571][ T8458] device syz_tun left promiscuous mode 00:23:43 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'bond0\x00\x00\x19\x00', @ifru_names='lo\x00\x00\x00\x00\x00\x00\x00\x04\x00'}) fsetxattr$security_smack_entry(r0, &(0x7f0000000000)='security.SMACK64IPOUT\x00', &(0x7f0000000080)='bond0\x00\x00\x19\x00', 0x9, 0x1) [ 166.088871][ T8465] netlink: 'syz-executor.5': attribute type 10 has an invalid length. 00:23:43 executing program 1: readv(0xffffffffffffffff, &(0x7f0000002180)=[{&(0x7f0000000100)=""/4096, 0x1000}, {&(0x7f0000001100)=""/4096, 0x1000}, {&(0x7f0000000000)=""/44, 0x2c}, {&(0x7f0000000040)=""/38, 0x26}, {&(0x7f00000021c0)=""/59, 0x3b}, {&(0x7f0000002100)=""/65, 0x41}], 0x6) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x3, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) r1 = semget$private(0x0, 0x6, 0x0) semctl$GETZCNT(r1, 0x2, 0xf, &(0x7f0000002200)=""/126) r2 = socket$inet6_sctp(0xa, 0x4000000000000001, 0x84) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000847fff)='`', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x3, 0xfec0000000000000, @loopback}, 0x1c) [ 166.134983][ T8460] Dead loop on virtual device ip6_vti0, fix it urgently! [ 166.700193][ T8465] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 166.768802][ T8472] bond0: enslaved VLAN challenged slave lo. Adding VLANs will be blocked as long as lo is part of bond bond0 [ 166.786769][ T8472] bond0: lo is up - this may be due to an out of date ifenslave [ 166.807558][ T8481] netlink: 'syz-executor.5': attribute type 10 has an invalid length. 00:23:43 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000080)='ip_vti0\x00') pipe2(0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip\a\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf4\x00', 0x10) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) sendmmsg(r1, &(0x7f0000005fc0), 0x578dc68791b521, 0x0) 00:23:43 executing program 1: readv(0xffffffffffffffff, &(0x7f0000002180)=[{&(0x7f0000000100)=""/4096, 0x1000}, {&(0x7f0000001100)=""/4096, 0x1000}, {&(0x7f0000000000)=""/44, 0x2c}, {&(0x7f0000000040)=""/38, 0x26}, {&(0x7f00000021c0)=""/59, 0x3b}, {&(0x7f0000002100)=""/65, 0x41}], 0x6) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x3, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) r1 = semget$private(0x0, 0x6, 0x0) semctl$GETZCNT(r1, 0x2, 0xf, &(0x7f0000002200)=""/126) r2 = socket$inet6_sctp(0xa, 0x4000000000000001, 0x84) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000847fff)='`', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x3, 0xfec0000000000000, @loopback}, 0x1c) 00:23:43 executing program 0: readv(0xffffffffffffffff, &(0x7f0000002180)=[{&(0x7f0000000100)=""/4096, 0x1000}, {&(0x7f0000001100)=""/4096, 0x1000}, {&(0x7f0000000000)=""/44, 0x2c}, {&(0x7f0000000040)=""/38, 0x26}, {&(0x7f00000021c0)=""/59, 0x3b}, {&(0x7f0000002100)=""/65, 0x41}], 0x6) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x3, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) r1 = semget$private(0x0, 0x6, 0x0) semctl$GETZCNT(r1, 0x2, 0xf, &(0x7f0000002200)=""/126) r2 = socket$inet6_sctp(0xa, 0x4000000000000001, 0x84) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000847fff)='`', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x3, 0xfec0000000000000, @loopback}, 0x1c) 00:23:43 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) process_vm_readv(0x0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/106, 0xffffff19}], 0x1, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='limits\x00') preadv(r1, &(0x7f00000005c0)=[{&(0x7f0000000080)=""/190, 0xbe}, {&(0x7f0000000140)=""/108, 0x6c}, {&(0x7f00000001c0)=""/153, 0x99}, {&(0x7f00000002c0)=""/186, 0xba}, {&(0x7f0000000380)=""/52, 0x34}, {&(0x7f00000003c0)=""/86, 0x56}, {&(0x7f0000000440)=""/119, 0x77}, {&(0x7f00000004c0)=""/155, 0x9b}], 0x8, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000840)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000980)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000880)={0x94, r2, 0x504, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x784}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x51}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffffffffffc}, @IPVS_CMD_ATTR_DEST={0x54, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@remote}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffffffffffff9}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e24}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1000}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xffffffffffffffff}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x10}, 0x4040000) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000740)=ANY=[@ANYBLOB="020000000000000000d00100000000002a00000000000000", @ANYPTR64=&(0x7f0000000600)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="00200000000000000400000200000000c300000000000000", @ANYPTR64=&(0x7f0000000640)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']) setsockopt$sock_int(r1, 0x1, 0xb, &(0x7f00000007c0)=0x4, 0x4) fcntl$notify(r0, 0x402, 0x10) 00:23:43 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x800, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x802, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e22, 0x1, @remote, 0x61}}, [0xe4e2, 0x9, 0x4278617c, 0xf922, 0x1, 0x9, 0x684, 0x3, 0x3, 0xfff, 0x1, 0xfffffffffffffeff, 0x9, 0xdc, 0x101]}, &(0x7f0000000180)=0x100) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f00000001c0)={r4, 0x80, 0x30}, 0xc) ioctl$UI_SET_FFBIT(r3, 0x4004556b, 0x29) ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00', 0x3a}) ioctl$UI_SET_FFBIT(r3, 0x4004556b, 0x51) ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f00000000c0)=0x8, 0x4) ioctl$NBD_DO_IT(r0, 0xab03) r5 = fcntl$dupfd(r1, 0x0, r0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rfkill\x00', 0x2000, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r5, &(0x7f0000000000)={0x4, 0x8}, 0x10) [ 166.838660][ T8481] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 166.957104][ T8492] input: syz0 as /devices/virtual/input/input9 00:23:44 executing program 5: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000000)="fc88b7628fe551af60b2585c3858cb703a63b5e851f9cf20365cd7d81a53a89d7fa649327c2b13d5c4106e822d83c70570f287b42889b6084b026e685ffcfd7abe2e") r1 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ifreq(r1, 0x89f0, &(0x7f0000000080)={'tunl0\x00', @ifru_flags}) 00:23:44 executing program 1: readv(0xffffffffffffffff, &(0x7f0000002180)=[{&(0x7f0000000100)=""/4096, 0x1000}, {&(0x7f0000001100)=""/4096, 0x1000}, {&(0x7f0000000000)=""/44, 0x2c}, {&(0x7f0000000040)=""/38, 0x26}, {&(0x7f00000021c0)=""/59, 0x3b}, {&(0x7f0000002100)=""/65, 0x41}], 0x6) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x3, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) r1 = semget$private(0x0, 0x6, 0x0) semctl$GETZCNT(r1, 0x2, 0xf, &(0x7f0000002200)=""/126) r2 = socket$inet6_sctp(0xa, 0x4000000000000001, 0x84) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000847fff)='`', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x3, 0xfec0000000000000, @loopback}, 0x1c) 00:23:44 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) process_vm_readv(0x0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/106, 0xffffff19}], 0x1, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='limits\x00') preadv(r1, &(0x7f00000005c0)=[{&(0x7f0000000080)=""/190, 0xbe}, {&(0x7f0000000140)=""/108, 0x6c}, {&(0x7f00000001c0)=""/153, 0x99}, {&(0x7f00000002c0)=""/186, 0xba}, {&(0x7f0000000380)=""/52, 0x34}, {&(0x7f00000003c0)=""/86, 0x56}, {&(0x7f0000000440)=""/119, 0x77}, {&(0x7f00000004c0)=""/155, 0x9b}], 0x8, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000840)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000980)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000880)={0x94, r2, 0x504, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x784}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x51}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffffffffffc}, @IPVS_CMD_ATTR_DEST={0x54, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@remote}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffffffffffff9}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e24}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1000}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xffffffffffffffff}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x10}, 0x4040000) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000740)=ANY=[@ANYBLOB="020000000000000000d00100000000002a00000000000000", @ANYPTR64=&(0x7f0000000600)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="00200000000000000400000200000000c300000000000000", @ANYPTR64=&(0x7f0000000640)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']) setsockopt$sock_int(r1, 0x1, 0xb, &(0x7f00000007c0)=0x4, 0x4) fcntl$notify(r0, 0x402, 0x10) 00:23:44 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x42, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'nr0\x01\x00', 0x49001}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') syz_open_dev$vbi(&(0x7f0000000280)='/dev/vbi#\x00', 0x2, 0x2) memfd_create(&(0x7f0000000000)='\xac\x00\x00', 0xfffffffffffffffd) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, &(0x7f0000000480)=0xfffffffffffffe65) ioctl$RTC_IRQP_SET(r3, 0x4004700c, 0x1f2) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x0, 0x0) recvmsg$kcm(r5, &(0x7f00000002c0)={&(0x7f00000004c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000700)=""/75, 0x4b}], 0x1, &(0x7f0000000780)=""/190, 0xbe}, 0x2102) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000380)) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ACQUIRE(r4, 0x6430) r6 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r8, 0x11b, 0x3, &(0x7f00000000c0)=0x2, 0x4) setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x2000, 0x1000, 0xfffffffffffffffd}, 0x18) setsockopt$XDP_UMEM_FILL_RING(r8, 0x11b, 0x5, &(0x7f00000008c0)=0x8, 0x4) r9 = add_key(&(0x7f0000000040)='cifs.idmap\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000600)="5ddd011df7abe55766d8b836bffbf001b4b05169f2f3c9c673d8e12fe7872c9331691ddaa49bc656a4ed4b8d54d506c97620cfa7ca227c534efa4a6868af1de78db005273cc5337b69f6e75bcb2b6fdab620bd68f5afc746662f0f7eee58d1a2b724e33c37e9c0df26c3b94817241a5ec25704489a3262a2982038252f4433e81478ab248945150a9fd9b62530a1a9af9d7e2446a23dabb928109f72aaeae4bc39c3d3dacdb6619dfeaf51a7c3492ef73b7427cbab0431cf59b0dc0fb1e90c23f81ff65e90f082d4dcaf9e38e7ddf068acb538722fb8e77db9270c2a736345c4", 0xe0, 0xfffffffffffffffd) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000440)={0x0, 0x0}, &(0x7f0000000540)=0xc) getresgid(&(0x7f0000000840)=0x0, &(0x7f0000000a40), &(0x7f0000000a80)) keyctl$chown(0x4, r9, r10, r11) setsockopt$XDP_UMEM_COMPLETION_RING(r8, 0x11b, 0x6, &(0x7f0000000880)=0x800, 0x4) bind$xdp(r8, &(0x7f0000000300)={0x2c, 0x0, r7}, 0x10) sendmsg$xdp(r8, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x40) [ 167.145528][ T8501] input: syz0 as /devices/virtual/input/input10 00:23:44 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40042406, &(0x7f0000000000)=')th1\x00') r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/btrfs-control\x00', 0x86000, 0x0) getsockopt$TIPC_NODE_RECVQ_DEPTH(r1, 0x10f, 0x83, &(0x7f0000000080), &(0x7f0000000040)=0x4) [ 167.334175][ T8514] device nr0 entered promiscuous mode 00:23:44 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)='vxcan1\x00', 0x10) r1 = dup2(r0, r0) sendmsg$TIPC_CMD_SET_LINK_TOL(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000006c0)}, 0x8081) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0xf7) 00:23:44 executing program 1: r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000040)={0x29, 0x4, 0x0, {0x4, 0x6648, 0x1, 0x0, [0x0]}}, 0x29) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) nanosleep(0x0, 0x0) r1 = socket(0x11, 0x803, 0x300) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0086426, &(0x7f00000000c0)={0x7, &(0x7f0000000080)=[{}, {}, {}, {0x0}, {}, {}, {}]}) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, &(0x7f0000000100)={r2}) r3 = socket$inet(0x2, 0x80003, 0x4) sendto$inet(r3, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x10) recvmmsg(r1, &(0x7f0000002e00), 0x386, 0x22, 0x0) 00:23:45 executing program 3: unshare(0x4000002) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000480)='ns/mnt\x00') setns(r0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x81, 0x2200) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000140)={0x1, 0xb6}, 0x8) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000040)=0x2) clone(0x40010000, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000080), &(0x7f00000000c0)=0xb) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000100)=[@in6={0xa, 0x4e24, 0x26, @rand_addr="08f0d168fec86cc5170f7750e2eba497", 0x5d2f}], 0x1c) 00:23:45 executing program 4: socket$inet_tcp(0x2, 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001f40)=[{{0x0, 0x0, &(0x7f0000001c40)=[{0x0}, {&(0x7f0000001a00)=""/94, 0x5e}], 0x2, 0x0, 0xfffffffffffffeec}}], 0x7ffffffffffffac, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor\x00', 0x400880, 0x0) ioctl$VHOST_SET_LOG_BASE(r1, 0x4008af04, &(0x7f0000000080)=&(0x7f0000000040)) bind$alg(r0, &(0x7f0000000340)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000001bc0), 0xfe, 0x0, &(0x7f0000001d00)={0x77359400}) 00:23:45 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000002640)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'authenc(rmd160-generic,ecb-cast6-avx)\x00'}, 0x58) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x4040, 0x0) ioctl$BLKROTATIONAL(r1, 0x127e, &(0x7f00000000c0)) 00:23:45 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x212000, 0x0) ioctl$SG_GET_PACK_ID(r0, 0x227c, 0x0) r1 = add_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$invalidate(0x15, r1) 00:23:45 executing program 1: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x6, 0x111080) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000040)=0x10000) bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x5, 0x9, 0x69, 0x6}, 0x2c) 00:23:45 executing program 1: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x1000000000}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f0000012000/0x2000)=nil, &(0x7f0000013000/0x3000)=nil, 0x2000, 0x1}) 00:23:45 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) setxattr$system_posix_acl(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000100000000000000040000060000000010000000000000d589858f0000000000"], 0x1f0, 0x0) r1 = socket(0x1, 0x80800, 0x6) recvmsg$kcm(r1, &(0x7f00000002c0)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000180)=""/80, 0x50}], 0x1, &(0x7f0000000200)=""/136, 0x88}, 0x0) r2 = dup3(r1, r1, 0x80000) ioctl$PERF_EVENT_IOC_ID(r2, 0x80042407, &(0x7f0000000300)) ioctl$TCSBRK(r0, 0x5409, 0x8) r3 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3, 0x10000) ioctl$SCSI_IOCTL_DOORUNLOCK(r3, 0x5381) 00:23:45 executing program 4: r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) clock_gettime(0xfffffffffffffffc, &(0x7f0000000080)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0445609, &(0x7f0000000040)={0x3f, 0xf, 0x4, 0x102, {r1, r2/1000+10000}, {0x0, 0xf, 0x8, 0x9, 0xfffffffffffffffe, 0x3, "83831c1e"}, 0x101, 0x2, @fd=r0, 0x4}) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f00000000c0)={0x0, 0x1, 0xfffffffffffffffa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x19000000]}) 00:23:45 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x200, 0x0) fsetxattr$security_smack_transmute(r0, &(0x7f0000000040)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000080)='TRUE', 0x4, 0x1) r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done={0x40046302}], 0x0, 0x0, 0x0}) 00:23:45 executing program 3: syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0xd, 0x401) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 00:23:45 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="840000002f0000005700000000000000950000000000000016143b8124fd041fdbf41ea2b39e3703d3fbb140a54327e87403a2af5d65539a9deebf2f89ec618fd945843cb1533d4f04671bf2a088fdd2932c4d5c1170862627ad8c337ac55ef19333181e8206734cf739bbef0ef38ae8cddb4b0a88b6d1db8032dd77e261d5d0afac39879f6cfc4136889ce919bce3317f87a17993c5908aff926b4c217239fb2f8039e8bb5ddf6c562925c8021671bfc22dcedca8e1f0a8e8519b9c32be"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x99, &(0x7f0000000240)=""/153}, 0x48) 00:23:45 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000000180)=""/157, 0x9d}], 0x1}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000040)={@remote}, 0x20) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000003c0)=0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000400)={{{@in=@dev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000580)=0xe8) r3 = getegid() r4 = getpgid(0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000005c0)={0x0, 0x0}, &(0x7f0000000600)=0xc) getgroups(0x7, &(0x7f0000000640)=[0x0, 0x0, 0xee00, 0x0, 0xee00, 0xee01, 0x0]) fcntl$getownex(r0, 0x10, &(0x7f00000006c0)={0x0, 0x0}) socket$key(0xf, 0x3, 0x2) rt_sigtimedwait(&(0x7f00000008c0), &(0x7f0000000900), &(0x7f0000000a80)={0x0, 0x1c9c380}, 0x8) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000ac0)={{{@in=@initdev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@loopback}}, &(0x7f00000007c0)=0xe8) setfsgid(r6) stat(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r0, &(0x7f0000000980)=[{&(0x7f0000000100)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000280)="faec2d1a72a2a159483ca44b5a9af13855", 0x11}, {&(0x7f00000002c0)="8ea1db451201fbb8dff675fc757c36c9218f045f8b317d649f1085440b157721127ed030f8564cfb262efc997a57e2d6b8ffe19496102ada73658499a70f3a9d1b0b02dd7c5b9db4a69b1f1faad168021ea5911b5572c7f7aae9eebcc7c277dec5a6663e294c4393ea2670aa38017810eeb7c93ee78e63099457996abe8445ae53b02f5aa3d9586a9990", 0x8a}], 0x2, &(0x7f00000009c0)=ANY=[@ANYBLOB="180000000100000002000000", @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="180000000100000002000000", @ANYRES32=r4, @ANYRES32=r5, @ANYRES32=r7, @ANYBLOB="00925b44d8f57b2fb9f3f1c20ec134b5e5b937c8bd40f5e4f806051abbb4872ec0c0d76bb5d9ba95442d8b996416497892becaa5c848ef5b", @ANYRES32=r8, @ANYRES32=r9, @ANYRES32=r10, @ANYBLOB="1c0000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB='(\x00\x00\x00', @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0], 0x8c}], 0x1, 0x40) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x20) r11 = syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') preadv(r11, &(0x7f0000000500)=[{&(0x7f0000000240)=""/28, 0x3c}, {&(0x7f0000000540)=""/26}], 0x304, 0x0) syslog(0x9, 0x0, 0x0) 00:23:45 executing program 1: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000240)={0x40, 0x4, 0x475499dc70f5b93a}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000100)='\xe7\x00\xbe6\xa8\x94\xe50[\xab\xb1\xc2+\x81\xcb\xae\x0et7\xa0[-\x92\xfb\"?\x1a\x97H\xbeK\x89s\xd5W\x9cV\x93\x1a\x13\x81\x16\x8d\x8b\x91\f\xe6\x90{jMP\x9d\x00\x05R\xf9r?m>$\x89y\xfd|W\xe9\x19', 0x2, 0x0) connect$netlink(r0, &(0x7f0000000280)=@proc={0x10, 0x0, 0x25dfdbfd, 0x1000000}, 0xc) write$cgroup_int(r2, &(0x7f0000000080), 0x12) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000008c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="080002006ba10689d145475fa10647200982c5981a3cf1dd5b0bfa3863426abb29e42c3cf32fc64153546e92c57401df2f1e9166d2756c9ae69e1add701be91404cb09c11e1ee9eff022e5128fdf09dc5bd3afe00fe8630178e65a88bc9d4507c004", @ANYRES32=r3], 0x3fc}], 0x1, 0x0, 0x0, 0x8840}, 0x80) r4 = socket$inet6(0x10, 0x20000000000003, 0x0) sendmsg(r4, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="5500000018007f1412fe01b2a4a280930a06000000a84306910000000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0001400000060cec4faba7d4", 0x55}], 0x1}, 0x0) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x80000, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffff9c, 0xc0086426, &(0x7f0000000300)={0x9, &(0x7f0000000340)=[{}, {}, {}, {}, {0x0}, {}, {}, {}, {}]}) ioctl$DRM_IOCTL_NEW_CTX(r5, 0x40086425, &(0x7f00000001c0)={r6, 0x2}) ioctl$PPPOEIOCSFWD(r2, 0x4004b100, &(0x7f0000000200)={0x18, 0x0, {0x0, @empty, 'bcsf0\x00'}}) [ 168.391676][ T8572] binder: BC_ACQUIRE_RESULT not supported [ 168.426456][ T8579] binder: BC_ACQUIRE_RESULT not supported 00:23:45 executing program 0: r0 = socket(0x40000000015, 0x5, 0x0) sendto$inet(r0, &(0x7f0000000000)="0b2eba61ad71742fe677e6654ff52bb9f4198b65f8d08a6440dfad28c9f1576092fe230bfe4451f9", 0x28, 0x0, &(0x7f000069affb)={0x3, 0x0, @dev}, 0x10) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'bond_slave_0\x00', {0x2, 0x4e20, @empty}}) [ 168.479933][ T8572] binder: 8571:8572 ioctl c0306201 200003c0 returned -22 [ 168.522675][ T8579] binder: 8571:8579 ioctl c0306201 200003c0 returned -22 [ 168.549165][ T8594] netlink: 'syz-executor.1': attribute type 15 has an invalid length. [ 168.575840][ T8594] netlink: 'syz-executor.1': attribute type 21 has an invalid length. [ 168.607432][ T8594] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 00:23:45 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$TUNGETVNETHDRSZ(r1, 0x800454d7, &(0x7f0000000000)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000280)={0x7b, 0x0, [0x4b564d00, 0x5de]}) 00:23:45 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) socket$inet_udplite(0x2, 0x2, 0x88) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000480)="64f5d9f7", 0x4) fcntl$setstatus(r1, 0x4, 0x2000) fcntl$setsig(r1, 0xa, 0x2c) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x400000, 0x0) ioctl$KVM_PPC_GET_PVINFO(r2, 0x4080aea1, &(0x7f0000000540)=""/4096) read(r1, &(0x7f00000003c0)=""/72, 0x100000104) 00:23:45 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000002640)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'authenc(rmd160-generic,ecb-cast6-avx)\x00'}, 0x58) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x4040, 0x0) ioctl$BLKROTATIONAL(r1, 0x127e, &(0x7f00000000c0)) 00:23:45 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x200, 0xecbe46398a082d12) write$FUSE_IOCTL(r2, &(0x7f0000000100)={0xfffffffffffffe45, 0x0, 0x4, {0xd27, 0x0, 0x7f, 0xaa}}, 0x20) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0x4106}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000180)={'eql\x00\x00\x00\xa9[\f\x00', @ifru_flags=0x1}) [ 168.648358][ T8603] netlink: 'syz-executor.1': attribute type 15 has an invalid length. [ 168.660205][ T8603] netlink: 'syz-executor.1': attribute type 21 has an invalid length. [ 168.678869][ T8603] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 00:23:45 executing program 4: r0 = getpid() r1 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0x50, &(0x7f00000004c0)}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000980)={r0, r1, 0x0, 0x1d, &(0x7f0000000880)='posix_acl_accessbdevselinux{\x00'}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x31, &(0x7f0000000a80)='wlan1vmnet0wlan1bdev]systembdev/self(**userwlan0\x00', 0x0}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000b00)={r0, r1, 0x0, 0xffffffffffffffdd, &(0x7f00000009c0)='f\xa2O\x04P\xd2\x87\x82m\xe2\xc1\x12>\xc2\xc0\xb7\xaas\xbeoh\x0e\xc3R\xb7\xf1\x9f0\x91\x94\x97GibaG\x949\xd7\x9f\xc9[\x86\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00-\xe0\xe1\xb0\\\x9bL\xc8\x12\x84\x8b2\xbbp\xfdE\xbd%bIFs;\x9c6r\xde\xcf\xfa\x94\x1f,\x93\x19D\xebY\xf5\xed\xfa\x8b\xc1{\xf6\x98\xa9\xc0-\xc6qP\xbe\x03\x12\xe3b\xd6\xb1\xe2\xc9u\xc7W\x94\x01\xf7\xce-7\x1ei\xd0\x1d\xa7\xf2U\xa4\xf1P', r3}, 0x2d) r5 = fcntl$dupfd(0xffffffffffffffff, 0xdde0ff77848e7e58, 0xffffffffffffffff) perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x5, 0x8001, 0x5, 0x3f, 0x0, 0xd0, 0x10800, 0x2, 0x3, 0xc50, 0x6e6e, 0x6, 0x4, 0x100, 0x40, 0x1000, 0x1, 0x1, 0x9d5c, 0x2, 0x5, 0x7, 0x5, 0x80000001, 0x5, 0x8ae7, 0x9, 0x6, 0x101, 0x38000000, 0xfffffffffffffffd, 0x0, 0xff, 0xffff, 0x4, 0x3, 0x0, 0x5, 0x4, @perf_bp={&(0x7f0000000280), 0x2}, 0x20, 0xffffffffffffff00, 0x0, 0x8, 0xa4ec, 0x6, 0x8001}, r4, 0x1, r5, 0xa) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) ioctl$PPPIOCSFLAGS(r5, 0x40047459, &(0x7f0000000080)=0x1000000) syz_genetlink_get_family_id$ipvs(&(0x7f00000008c0)='IPVS\x00') r6 = add_key$keyring(&(0x7f0000000c40)='keyring\x00', &(0x7f0000000c80)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$revoke(0x3, r6) ioctl$RNDCLEARPOOL(r1, 0x5206, &(0x7f0000000900)) timer_create(0x5, &(0x7f00000001c0)={0x0, 0x1f, 0x1, @thr={&(0x7f0000000100)="2aadc4a73b7363f82ff106b0fe81d3b3d0ecb73401c0eb5a36f00146d68d3aa05c7411f35a2bd76ad5", &(0x7f0000000140)="14622fa65ffa43ca0320a8ce5584661413fb38fd06bac31ae88f760d4af13079b5e7ea1b0b3df927a29bae21a104fde6323db7d3054e8cb347161f407048d8a30352f6dfb1e5fc8fb82904648ae266701564eb12a8cc9b1ea9225ff0b4"}}, &(0x7f0000000200)=0x0) ioctl$KVM_GET_FPU(r5, 0x81a0ae8c, &(0x7f00000006c0)) waitid(0x2, r2, 0x0, 0x8, &(0x7f00000003c0)) connect$vsock_stream(r5, &(0x7f00000002c0)={0x28, 0x0, 0xffffffff, @my=0x0}, 0x10) timer_gettime(r7, &(0x7f0000000240)) getrusage(0x0, &(0x7f0000000540)) ioctl$DRM_IOCTL_GET_UNIQUE(r5, 0xc0086401, &(0x7f0000000b40)={0x4, &(0x7f0000000940)=""/4}) r8 = syz_open_procfs(0x0, &(0x7f0000000300)='fdinfo/3\x00') ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f00000005c0)={0x3, @raw_data="1c45ce0fd41460c28b9e17ff0a39abab91b971792d194e1093af05eceb5d02e8bcd2c4f0f2f57ebaaf5d5c3134378339b8e27c2323e521d6db0a890ff2ba06c0957c1164d0f0a63fc18976597be6837d28fca947ffe207353a943a1fcee3ef78c67edfff80ff7c6fbda288cfc6087a342fb7084a175dacf38234476dbab64653ab240eb2469491d098dee05e43c0ac7f63559a6a91d4847304a3721766c02d1720b6312cdda497f1ab7ceec784fa2c2315dfd04252a3c94c5aecb55f65686834d545fc86e55fc3c1"}) preadv(r8, &(0x7f0000000480)=[{&(0x7f0000000040)=""/27, 0x1b}], 0x1, 0x0) 00:23:45 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x7f, 0x500) ioctl(r0, 0xffffffdffbffffa5, &(0x7f0000000100)) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x480100, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0xc0002000}) 00:23:45 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f00000002c0)='/dev/snd/pcmC#D#c\x00', 0x4, 0x4000) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f000099a000/0x18000)=nil, 0x0, 0x0, 0xa, 0x0, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = dup(r1) ioctl$VT_RESIZE(r2, 0x5609, &(0x7f0000000280)={0x80000000, 0x70a8, 0x101}) r3 = syz_open_dev$media(0x0, 0x2, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vsock\x00', 0x600040, 0x0) getsockopt$inet6_opts(r3, 0x29, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$unix(r3, &(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e) r4 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x9, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000180)={0x200, 0x100, 0x800a, 0x1ff, 0x81, 0x40, 0x4, 0x8, 0x0}, &(0x7f00000001c0)=0x20) getsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000200)={r5, 0x3}, &(0x7f0000000240)=0x8) read(r4, 0x0, 0xfffffffffffffe8c) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getegid() chown(&(0x7f0000000340)='./file0\x00', r6, r7) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0185648, &(0x7f0000000140)={0xa30000, 0x7fff, 0xcc6a, [], &(0x7f0000000100)={0x0, 0x1, [], @string=&(0x7f00000000c0)=0x3f}}) bpf$MAP_CREATE(0x0, &(0x7f0000733000), 0x2c) recvmmsg(0xffffffffffffffff, &(0x7f0000003140), 0x0, 0x0, 0x0) 00:23:45 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x2, &(0x7f00000000c0)=0x201, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x4400, 0x0) ioctl$KDSIGACCEPT(r2, 0x4b4e, 0x1c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000100)=0x0) ptrace$setregs(0xd, r4, 0x8, &(0x7f00000001c0)="5ef1308a11e0c562ae94e78b6568513edf5dd715e1ec655db0821826b5befd9b312fc65611cc3867a201f9f50754c2b986a6fcb29f2c320a29124fa0dd406c8628b031a00013b636effeaa3751821dc8f07e2976577bb8cefc6b5fee19e0b9d348a166e58a2cd7b7b5fe22734c0eaca3062005c6b3b32f13e40e5b456dadaf326e797462aba6ffd20785555180fbe479f49bdb0ec28667b6f2daa68fd0f32f26d9490459f8ab00705a6ce5fd2da228ba0e2d1898c8da7ba2b43ca414f0db") setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) getsockopt$inet6_tcp_int(r1, 0x6, 0x17, &(0x7f0000000400), &(0x7f0000000440)=0x4) sendto$inet6(r3, &(0x7f0000000280), 0x0, 0x20000004, 0x0, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000340), 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000040000)) tkill(r5, 0x401104000000016) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)="2e00000032008157e45ae087185082cf0300b0eba06e004003000000005106000000000000000000081f401fe091", 0x2e}], 0x1}, 0x0) 00:23:46 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001400010100000000000000000a0000007540550abafd4e0b6922e866c0da0df194bba06c1b34b39d7e14d40b3abd97efd3e2b59ec63d67857e617b04015f27d65cc4175012cd3132f463666777a48f9fb062af134c3b214f674f4ce2cd6d78d2bf01f02a6b14cc8eca0a011f574fa6bda309", @ANYRES32=r1, @ANYBLOB="14000100000000000000000000000000000000010800080000010000"], 0x34}}, 0x0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x400, 0x0) ioctl$sock_bt_bnep_BNEPCONNDEL(r2, 0x400442c9, &(0x7f00000000c0)={0xe92, @remote}) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', r1}) 00:23:46 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x12, 0x19, 0x0, "e46db855395503d93f8a8966b76ac6bef891fb016969a1b15039f812bf03faa1a3092a1573085cc57ec9f5665873f5bea25ac7540efa0586d841b1ee72afb88e", "7f2dd3c6adad0847fac33679668a52541b697af43dc04e4e7798056989b16c46", [0x5, 0x9]}) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/fib_triestat\x00') write$P9_RREADLINK(r0, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, 0x0, 0x8, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nullb0\x00', 0x4000000004002, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/nullb0\x00', 0x0, 0x0) ioctl$PPPIOCGCHAN(r1, 0x80047437, 0x0) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000000)) ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000040)=0x8c) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000300)={0x0, 0x0, 0x5}) ioctl$KVM_SET_IRQCHIP(r0, 0x8208ae63, &(0x7f0000000340)={0x3, 0x0, @pic={0x400, 0x9, 0x3, 0x80000001, 0x7fffffff, 0x20, 0xfd, 0x6, 0x7, 0x6, 0x8001, 0x3a8, 0x4, 0x2, 0x8, 0x5}}) preadv(r4, 0x0, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) fallocate(r5, 0x0, 0x9, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000002c0)={0x7567, 0x0, 0x400000000, 0x800}, 0x8) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nullb0\x00', 0x801, 0x0) getsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000001700), 0x0) ioctl$BLKZEROOUT(r6, 0x127f, &(0x7f0000000080)={0x0, 0x4004400}) 00:23:46 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000002640)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'authenc(rmd160-generic,ecb-cast6-avx)\x00'}, 0x58) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x4040, 0x0) ioctl$BLKROTATIONAL(r1, 0x127e, &(0x7f00000000c0)) [ 169.138552][ T8638] netlink: 22 bytes leftover after parsing attributes in process `syz-executor.2'. 00:23:46 executing program 1: r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x200202) ioctl$TIOCLINUX5(r0, 0x541c, &(0x7f0000000040)={0x5, 0x5, 0x0, 0x2}) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in={{0x2, 0x4e22, @multicast2}}, 0x0, 0x100, 0x0, "69ed38f8ab56fe7e00855820942e6ba0fdb0a726130724764081e6519b260e8fb10c08318c6d7034e5dd8f3d3f6c897fae80b5bbb9d497f66e94e487027604e89d2cd98bb25d7359b3fac46f11df1bba"}, 0xd8) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="850000002e00000035000000ffffffff9500000000000000eddfd2b50e7f53febc5b6b1cde12dcfcb267bc2822e1488fb1360498c75ae75793e473a9c4e6dd2c4d2b201c27845c1b1fea58ebcb30f8db706f63a712ed1c5797e4dcb025f210ee294a3cc8fc30ca806af415d3aca2b4930bc1af8b0a85577a15a35d9a8c29d1b081f4f5daaa6572e2c96ec272b095ba5476"], &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x2de, &(0x7f0000000400)=""/195, 0x0, 0x0, [0x42]}, 0x48) [ 169.218538][ T8650] QAT: Invalid ioctl [ 169.222786][ T8650] QAT: Invalid ioctl [ 169.296987][ T8646] netlink: 22 bytes leftover after parsing attributes in process `syz-executor.2'. 00:23:46 executing program 1: r0 = syz_open_pts(0xffffffffffffff9c, 0x40) ioctl$KDMKTONE(r0, 0x4b30, 0x3) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x220200, 0x0) r2 = accept4(r1, &(0x7f0000000300)=@can={0x1d, 0x0}, &(0x7f0000000380)=0x80, 0x80800) connect$vsock_stream(r2, &(0x7f00000001c0)={0x28, 0x0, 0xffffffff, @reserved}, 0x10) write$tun(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="02800505000405fff000ffff00ff9afcd8127bdd4e69ebffffeb754b95"], 0x1) setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000003c0)={r3, @multicast1, @remote}, 0xc) getsockopt$inet_udp_int(r1, 0x11, 0xfffffffffffffffd, &(0x7f00000000c0), &(0x7f0000000240)=0x4) ioctl$KVM_GET_REGS(r1, 0x8090ae81, &(0x7f0000000900)) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000280)='fou\x00') sendmsg$FOU_CMD_DEL(r2, &(0x7f0000000ac0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000800}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)={0x14, r4, 0x4, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x40005) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = geteuid() setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000009c0)={{{@in=@remote, @in6=@dev={0xfe, 0x80, [], 0x23}, 0x9, 0x3, 0x4e20, 0x1000, 0x0, 0x80, 0x80, 0xc, 0x0, r5}, {0x0, 0x3, 0x19dc20000000, 0x80000001, 0xfffffffffffffff8, 0x2db6, 0x8}, {0x80000001, 0x1, 0x8001, 0x2}, 0xffff, 0x6e6bbb, 0x0, 0x1, 0x0, 0x3}, {{@in6=@mcast2, 0x4d4}, 0xa, @in, 0x3500, 0x3, 0x2, 0x5, 0x9, 0x8001, 0x2}}, 0xe8) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_GET_LAPIC(r1, 0x8400ae8e, &(0x7f0000000500)={"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"}) bind$netlink(r6, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000b00)=0x8, 0x4) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x0, 0xfdffffff}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x1c, 0x22, 0x1, 0x6000000, 0x0, {0x4}, [@typed={0x8, 0xc, @pid}]}, 0x1c}}, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000180)={0xfffffffffffffd4f, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x4, 0x1, 0x0, 0x0, 0x2, 0x3}) 00:23:46 executing program 5: r0 = socket$inet(0x10, 0x802, 0x0) sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000380)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) recvfrom$packet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) r2 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0xd1c38bb0d7a0613) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000400)={0x104, r3, 0x400, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x48, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x1ff}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_hsr\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xe}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x124}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x800}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x81}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x3ff}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x100000000}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xc1a}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4ea6}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xf3}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e23}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}]}, 0x104}}, 0x8000) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000002c0)={'i\x00', 0x820}) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2fa}}], 0xfe, 0x0, 0x0) 00:23:46 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x2, &(0x7f00000000c0)=0x201, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x4400, 0x0) ioctl$KDSIGACCEPT(r2, 0x4b4e, 0x1c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000100)=0x0) ptrace$setregs(0xd, r4, 0x8, &(0x7f00000001c0)="5ef1308a11e0c562ae94e78b6568513edf5dd715e1ec655db0821826b5befd9b312fc65611cc3867a201f9f50754c2b986a6fcb29f2c320a29124fa0dd406c8628b031a00013b636effeaa3751821dc8f07e2976577bb8cefc6b5fee19e0b9d348a166e58a2cd7b7b5fe22734c0eaca3062005c6b3b32f13e40e5b456dadaf326e797462aba6ffd20785555180fbe479f49bdb0ec28667b6f2daa68fd0f32f26d9490459f8ab00705a6ce5fd2da228ba0e2d1898c8da7ba2b43ca414f0db") setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) getsockopt$inet6_tcp_int(r1, 0x6, 0x17, &(0x7f0000000400), &(0x7f0000000440)=0x4) sendto$inet6(r3, &(0x7f0000000280), 0x0, 0x20000004, 0x0, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000340), 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000040000)) tkill(r5, 0x401104000000016) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)="2e00000032008157e45ae087185082cf0300b0eba06e004003000000005106000000000000000000081f401fe091", 0x2e}], 0x1}, 0x0) [ 169.916356][ T8645] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 169.992229][ T8673] QAT: Invalid ioctl [ 170.118319][ T8671] netlink: 22 bytes leftover after parsing attributes in process `syz-executor.2'. [ 170.295232][ T8662] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 170.306441][ T8650] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. 00:23:47 executing program 0: mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000280)={'veth1_to_team\x00', &(0x7f0000001e40)=ANY=[@ANYBLOB='\x00']}) r1 = shmget$private(0x0, 0x3000, 0x7800008c, &(0x7f0000002000/0x3000)=nil) shmat(r1, &(0x7f0000fff000/0x1000)=nil, 0x2000) 00:23:47 executing program 3: socketpair$unix(0x1, 0x8000000002, 0x0, &(0x7f0000d12000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pipe(&(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x4, 0x0, 0x9}, 0x0, &(0x7f0000000140)={0x1b9}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0xfffffffffffffdc3, 0x0) ioctl$KVM_NMI(r2, 0xae9a) close(r0) 00:23:47 executing program 2: getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffffff, 0x0, 0x2000, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, 0x0, 0x0) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mq_getsetattr(r0, 0x0, 0x0) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x0) semget$private(0x0, 0x3, 0x5a) semctl$GETNCNT(0x0, 0x3, 0xe, 0x0) write$P9_RSTATu(r2, &(0x7f0000000740)=ANY=[@ANYRES32, @ANYRES32], 0x8) ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f0000000100)={0xffff}) fadvise64(r1, 0x0, 0x0, 0x0) r4 = fcntl$getown(0xffffffffffffffff, 0x9) rt_sigqueueinfo(r4, 0x3a, &(0x7f0000000080)={0x28, 0x0, 0x8}) ioctl$DRM_IOCTL_MARK_BUFS(r3, 0x40186417, &(0x7f0000000040)={0x7fe000000, 0x2, 0x8001, 0x6, 0x1, 0x4}) unshare(0x40000000) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000180)={0x0, 0x2}) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f00000000c0)={0x2, 0xd5fb}, 0x2) write$P9_RSYMLINK(r0, &(0x7f0000000000)={0x14, 0x11, 0x0, {0x20, 0x0, 0x8}}, 0x14) 00:23:47 executing program 4: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x100081) r1 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x0) sendfile(r0, r1, 0x0, 0x20000102000004) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) setitimer(0x2, &(0x7f0000000040)={{0x0, 0x7530}, {r2, r3/1000+10000}}, &(0x7f0000000080)) 00:23:47 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0x282000, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e21, 0x1, @remote}}, 0x5d, 0x6, 0xbc, 0xaf17, 0x1}, &(0x7f0000000280)=0x98) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={r2, @in6={{0xa, 0x4e24, 0x1, @rand_addr="0b5e3c4c9f9b78ac49abdca8988e039b", 0xab86}}, 0x8, 0x2, 0x3f, 0x101, 0x40}, 0x98) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{}, {}, 0x7}) close(r0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r1, 0x80045530, &(0x7f0000000140)=""/16) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x10100, 0x0) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) recvmmsg(r3, &(0x7f0000003f00)=[{{&(0x7f0000000380)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000400)=""/123, 0x7b}, {&(0x7f0000000480)=""/243, 0xf3}, {&(0x7f0000000180)}, {&(0x7f0000000580)=""/36, 0x24}, {&(0x7f00000005c0)=""/201, 0xc9}, {&(0x7f00000006c0)=""/174, 0xae}], 0x6, &(0x7f00000007c0)=""/191, 0xbf}, 0x1000}, {{&(0x7f0000000880)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}}, 0x80, &(0x7f0000001e40)=[{&(0x7f0000000900)=""/167, 0xa7}, {&(0x7f00000009c0)=""/143, 0x8f}, {&(0x7f0000000a80)=""/158, 0x9e}, {&(0x7f0000000b40)=""/4096, 0x1000}, {&(0x7f0000001b40)=""/130, 0x82}, {&(0x7f0000001c00)=""/94, 0x5e}, {&(0x7f0000001c80)=""/1, 0x1}, {&(0x7f0000001cc0)=""/18, 0x12}, {&(0x7f0000001d00)=""/180, 0xb4}, {&(0x7f0000001dc0)=""/96, 0x60}], 0xa, &(0x7f0000001ec0)=""/179, 0xb3}, 0x8d}, {{&(0x7f0000001f80)=@alg, 0x80, &(0x7f0000002180)=[{&(0x7f0000002000)=""/103, 0x67}, {&(0x7f0000002080)=""/244, 0xf4}], 0x2, &(0x7f00000021c0)=""/193, 0xc1}, 0x4}, {{&(0x7f00000022c0)=@nl, 0x80, &(0x7f0000002780)=[{&(0x7f0000002340)=""/155, 0x9b}, {&(0x7f0000002400)=""/101, 0x65}, {&(0x7f0000002480)=""/133, 0x85}, {&(0x7f0000002540)=""/62, 0x3e}, {&(0x7f0000002580)=""/218, 0xda}, {&(0x7f0000002680)=""/255, 0xff}], 0x6, &(0x7f00000027c0)=""/249, 0xf9}, 0x1}, {{&(0x7f00000028c0)=@ethernet={0x0, @local}, 0x80, &(0x7f0000003ac0)=[{&(0x7f0000002940)=""/94, 0x5e}, {&(0x7f00000029c0)=""/199, 0xc7}, {&(0x7f0000002ac0)=""/4096, 0x1000}], 0x3}, 0x100000000}, {{&(0x7f0000003b00)=@generic, 0x80, &(0x7f0000003e40)=[{&(0x7f0000003b80)=""/18, 0x12}, {&(0x7f0000003bc0)=""/201, 0xc9}, {&(0x7f0000003cc0)=""/165, 0xa5}, {&(0x7f0000003d80)=""/172, 0xac}], 0x4, &(0x7f0000003e80)=""/124, 0x7c}, 0x3}], 0x6, 0x1, 0x0) setsockopt$inet_buf(r3, 0x0, 0x2f, &(0x7f0000003fc0)="846a7ff82116678088a18d9556da0edac974256662794b686c0313eabd0fe85a42cb5be2dc1776b97dcf5a1f3cfdab48163e6e854d0f6177a8306cd06d253d8799170bc422d2ea35d1d1b515af1b6f258ddd9cbf745dd0292e51f14d9e80ed660f39ed1bd919cb1e268b1da4eba03eb2c0e706a20a7a52f4440f41113040892154bb6706e3d385dec07193a06348a293ec7109ce1af3", 0x96) 00:23:47 executing program 4: unshare(0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) futex(0x0, 0x0, 0x100002, 0x0, 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) sendfile64(r0, 0xffffffffffffffff, 0x0, 0x8) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_raw(r2, &(0x7f0000000140)={0x1d, r3}, 0x10) socket$pptp(0x18, 0x1, 0x2) setsockopt(r2, 0x65, 0x1, &(0x7f0000000000)="68ff7686ffd393c03232158730fd2fbcebfa242ba306e0ed14a193ad4072d7fcd30e863942fa3e7a2e02986e0a1672addf4823080e889a213eb985b8ef82e1b604b9d5ea03ebee7fc95a6b60f580926032c67946dc148b523efe311a6c66", 0x5e) syz_open_dev$dri(0x0, 0x0, 0x0) close(r2) unshare(0x40000400) prctl$PR_SET_FPEMU(0xa, 0x2) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, 0x0, &(0x7f0000000100)) sendmsg$TIPC_NL_BEARER_DISABLE(r1, 0x0, 0x10) sendmsg$tipc(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x4004081) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x7) getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, 0x0, 0x0) 00:23:47 executing program 0: socket$inet6(0xa, 0x80003, 0xff) [ 170.583656][ T8686] IPVS: ftp: loaded support on port[0] = 21 00:23:47 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xc09, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip={{0xc, 0x1, 'ipip\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_ENCAP_TYPE={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x41) utimensat(r1, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={{0x77359400}}, 0x0) [ 170.680897][ T8662] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 170.795819][ T8711] netlink: 'syz-executor.0': attribute type 15 has an invalid length. 00:23:47 executing program 1: r0 = syz_open_pts(0xffffffffffffff9c, 0x40) ioctl$KDMKTONE(r0, 0x4b30, 0x3) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x220200, 0x0) r2 = accept4(r1, &(0x7f0000000300)=@can={0x1d, 0x0}, &(0x7f0000000380)=0x80, 0x80800) connect$vsock_stream(r2, &(0x7f00000001c0)={0x28, 0x0, 0xffffffff, @reserved}, 0x10) write$tun(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="02800505000405fff000ffff00ff9afcd8127bdd4e69ebffffeb754b95"], 0x1) setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000003c0)={r3, @multicast1, @remote}, 0xc) getsockopt$inet_udp_int(r1, 0x11, 0xfffffffffffffffd, &(0x7f00000000c0), &(0x7f0000000240)=0x4) ioctl$KVM_GET_REGS(r1, 0x8090ae81, &(0x7f0000000900)) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000280)='fou\x00') sendmsg$FOU_CMD_DEL(r2, &(0x7f0000000ac0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000800}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)={0x14, r4, 0x4, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x40005) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = geteuid() setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000009c0)={{{@in=@remote, @in6=@dev={0xfe, 0x80, [], 0x23}, 0x9, 0x3, 0x4e20, 0x1000, 0x0, 0x80, 0x80, 0xc, 0x0, r5}, {0x0, 0x3, 0x19dc20000000, 0x80000001, 0xfffffffffffffff8, 0x2db6, 0x8}, {0x80000001, 0x1, 0x8001, 0x2}, 0xffff, 0x6e6bbb, 0x0, 0x1, 0x0, 0x3}, {{@in6=@mcast2, 0x4d4}, 0xa, @in, 0x3500, 0x3, 0x2, 0x5, 0x9, 0x8001, 0x2}}, 0xe8) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_GET_LAPIC(r1, 0x8400ae8e, &(0x7f0000000500)={"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"}) bind$netlink(r6, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000b00)=0x8, 0x4) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x0, 0xfdffffff}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x1c, 0x22, 0x1, 0x6000000, 0x0, {0x4}, [@typed={0x8, 0xc, @pid}]}, 0x1c}}, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000180)={0xfffffffffffffd4f, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x4, 0x1, 0x0, 0x0, 0x2, 0x3}) 00:23:47 executing program 0: r0 = syz_open_pts(0xffffffffffffff9c, 0x40) ioctl$KDMKTONE(r0, 0x4b30, 0x3) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x220200, 0x0) r2 = accept4(r1, &(0x7f0000000300)=@can={0x1d, 0x0}, &(0x7f0000000380)=0x80, 0x80800) connect$vsock_stream(r2, &(0x7f00000001c0)={0x28, 0x0, 0xffffffff, @reserved}, 0x10) write$tun(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="02800505000405fff000ffff00ff9afcd8127bdd4e69ebffffeb754b95"], 0x1) setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000003c0)={r3, @multicast1, @remote}, 0xc) getsockopt$inet_udp_int(r1, 0x11, 0xfffffffffffffffd, &(0x7f00000000c0), &(0x7f0000000240)=0x4) ioctl$KVM_GET_REGS(r1, 0x8090ae81, &(0x7f0000000900)) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000280)='fou\x00') sendmsg$FOU_CMD_DEL(r2, &(0x7f0000000ac0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000800}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)={0x14, r4, 0x4, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x40005) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = geteuid() setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000009c0)={{{@in=@remote, @in6=@dev={0xfe, 0x80, [], 0x23}, 0x9, 0x3, 0x4e20, 0x1000, 0x0, 0x80, 0x80, 0xc, 0x0, r5}, {0x0, 0x3, 0x19dc20000000, 0x80000001, 0xfffffffffffffff8, 0x2db6, 0x8}, {0x80000001, 0x1, 0x8001, 0x2}, 0xffff, 0x6e6bbb, 0x0, 0x1, 0x0, 0x3}, {{@in6=@mcast2, 0x4d4}, 0xa, @in, 0x3500, 0x3, 0x2, 0x5, 0x9, 0x8001, 0x2}}, 0xe8) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_GET_LAPIC(r1, 0x8400ae8e, &(0x7f0000000500)={"b83cd02fd0a87e92a54c31de4fb80fb96cc3fa1ae4b90dbe22e4bf3b1c325d0a60e4253f103b218b29cf5424a054e304bd34449bd4d664f0a9580dfbbf439da9c9a1dfe652c396fb026b6c793d9107655834fd26fe6ae0fdd8eb57325f8c5eb6ae1f742736066b403caf129763162025b54cc975558d46c0994a7196ef9667a8469a14b58b6b9d75d03ef52d5a3ae77ba5466ef30141d66481333ccd2cfd7f7db18e489c4c15063c9a7876bf95989af5482696c7dc01f352dc66f6a6ebc45ab4edc157539da6da8888cb73fc127291e33955521f8cf6ac3ecbbd07683b8702ffb393c4a88ac9456b57e020297201e607ee10c898b0bbcc8b2543f12104fe04cbf06b77501cb89a68dc3e7bf47df921ea0ff61b3b69c110707edb91e5ddfc7568bb8208b8118e0af97efd145b911b89cccbb17d81f5625a092a13ba5e2c9f004da7f1667f6b90a6653a12f841fcfeb82b6710a7f2183dcd3387aed0b44ef5d966bc85632df3a1c59506e130d195dad53e41760ebdedd5951d68adb266f0499922827a30691cf930ae20e136760bd56b8c8fa50344549e4c1eed273a26966c6ee93cbd79068839dd3f1e4995de33afb1af582d79ebe7194e4221f09c9ace24d1e7dfe5ab842c6bdfdfc76bb9060ed60aec1cfd0e5e2f6e469f65549f67941bd8488257b87126b59efe684595b56cba8369a7bc2a43736be2de03ef39d87535e506c316d8ccdc6a76a48830e7d8181532c05b49c5633a5e2c609e69df8bf8018711b9bd504094cae1dbb547a6373a745e69cda9309f712ab1c2fe2efbc601ae4fee89e2d84f9f3b2f41bf343491278ccec85acf9275429c9ad7834fd517275c1e71683840779b96d07280b88d206d5eaf452ab69f48e70060e779c51c4c04f2e4352366b51ef80e61bfedbdd252bbd34d5756c615054081ead9062ddcf5baa87f342d6f8b5507ea9a4e8959a077b89dd1c71e39e478706836b52b767bf56a926560cecd54b0f152598bf13388ffb1ee498634a85b0111722c79293901a99d757e508730b299cacde416dd5a82f9a27c967d8ef14abab3fc191f32a513c2b3ec3835f7ef58775879a87c5679afce70102a2e2d59ddb4cdcfbc530a7ed7d29d72c92082b39d630a15e6b52b1266f2fd8ae5c1670cdcdc364108ac99bdafe2be3d7311fc9251bb69b69609a21e586ec8e8b63efe517b880b6cc75584b15639902b58bf34d220af2ddc057615ff43521148472d688473aa38ab074e4e129e6b1ce3c66ac8336eb1d6f2f9dfe58e21ae678dbeb0e6a0e7ab8053188bd2a81bfef2bb20f548bd458195e7e624ecfe6fd9f472d4e745d462a393d51d21fd5a0eef6c92048d4d8267d71935fe3d975b4710cf3fd0a6d6dc8a41858670c139a39a78494b10cb01641278fb42214c5a60af0d7f09020ef58a74063816ebd13d178118661165d3"}) bind$netlink(r6, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000b00)=0x8, 0x4) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x0, 0xfdffffff}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x1c, 0x22, 0x1, 0x6000000, 0x0, {0x4}, [@typed={0x8, 0xc, @pid}]}, 0x1c}}, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000180)={0xfffffffffffffd4f, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x4, 0x1, 0x0, 0x0, 0x2, 0x3}) 00:23:48 executing program 5: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfdfffffffffffffe, 0x8072, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x3, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0x7, 0x0) ioctl$sock_bt_cmtp_CMTPCONNADD(r1, 0x400443c8, &(0x7f0000000100)={r0, 0x7}) syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x3, 0x100) mmap(&(0x7f00006ea000/0x200000)=nil, 0x200000, 0x0, 0x8d470, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xffffffffffffff7f, 0x810, r1, 0x0) ioctl$VIDIOC_QUERYSTD(r1, 0x8008563f, &(0x7f0000000080)=0x0) ioctl$VIDIOC_S_STD(r1, 0x40085618, &(0x7f00000000c0)=r2) 00:23:48 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x3, 0x2) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f0000000040)) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f00000001c0)={0x1, 0xb1, 0x4, 0x0, 0x0, [{r0, 0x0, 0xffff}, {r1, 0x0, 0x5}, {r0, 0x0, 0xffffffffffffe4b5}, {r0, 0x0, 0x16ba}]}) ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000080)=0x10000) socket$unix(0x1, 0x2, 0x0) r2 = msgget(0x2, 0x294) msgctl$IPC_RMID(r2, 0x0) 00:23:48 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x8000) ioctl$TIOCNOTTY(r1, 0x5422) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x5, 0x4) 00:23:48 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmsg(r0, &(0x7f0000000380)={&(0x7f0000000200)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000280)=""/133, 0x85}], 0x1}, 0x20) ioctl(r0, 0x800000000008982, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x2000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f00000000c0)={0x6, 0x118, 0xfa00, {{0x80000000, 0x7, "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", 0x75, 0xaf, 0xb07, 0x1, 0x81000000, 0x3ff, 0x800, 0x1}, r2}}, 0x120) 00:23:50 executing program 2: socket$inet6(0xa, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet(0x2, 0x2, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x802, 0x0) socket$inet(0x2, 0x2, 0x0) write$P9_RSYMLINK(r0, &(0x7f0000000180)={0x14, 0x11, 0x1, {0x20, 0x1, 0x5}}, 0x14) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) delete_module(&(0x7f00000001c0)='*\x00', 0x200) unshare(0x40400) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200), 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000040)={0x0, 'bond0\x00', 0x1}, 0x18) 00:23:50 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$caif_seqpacket(0x25, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f00000003c0), 0xffffffffffffffff) truncate(&(0x7f0000000040)='./file0\x00', 0x5) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f00000001c0)=@broute={'broute\x00', 0x20, 0x1, 0x148, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000540], 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="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"]}, 0x188) execve(&(0x7f0000000100)='./file0\x00', &(0x7f00000006c0)=[&(0x7f0000000540)='\x00'], &(0x7f00000002c0)=[&(0x7f0000000240)=']\x00']) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x9, 0x0) ioctl$VIDIOC_ENUMSTD(r2, 0xc0405619, &(0x7f00000000c0)={0x8, 0xcb0ec, "814c41a134e6b0d79b704b288c94e8e7c91446d180ff0241", {}, 0xfffffffffffffffd}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, &(0x7f0000000400)={0x0, 0x1f}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r3 = dup(0xffffffffffffffff) getegid() stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000300)) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000f40)) geteuid() getsockopt$sock_cred(r3, 0x1, 0x11, 0x0, &(0x7f0000001040)) stat(0x0, &(0x7f00000010c0)) getsockopt$MISDN_TIME_STAMP(r3, 0x0, 0x1, &(0x7f0000001540), &(0x7f0000001580)=0x4) stat(&(0x7f0000001140)='./file0\x00', 0x0) ioctl$SG_SET_KEEP_ORPHAN(r0, 0x2287, &(0x7f0000000380)=0x100000001) getegid() write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000180)=r3) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)) 00:23:50 executing program 0: r0 = syz_open_pts(0xffffffffffffff9c, 0x40) ioctl$KDMKTONE(r0, 0x4b30, 0x3) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x220200, 0x0) r2 = accept4(r1, &(0x7f0000000300)=@can={0x1d, 0x0}, &(0x7f0000000380)=0x80, 0x80800) connect$vsock_stream(r2, &(0x7f00000001c0)={0x28, 0x0, 0xffffffff, @reserved}, 0x10) write$tun(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="02800505000405fff000ffff00ff9afcd8127bdd4e69ebffffeb754b95"], 0x1) setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000003c0)={r3, @multicast1, @remote}, 0xc) getsockopt$inet_udp_int(r1, 0x11, 0xfffffffffffffffd, &(0x7f00000000c0), &(0x7f0000000240)=0x4) ioctl$KVM_GET_REGS(r1, 0x8090ae81, &(0x7f0000000900)) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000280)='fou\x00') sendmsg$FOU_CMD_DEL(r2, &(0x7f0000000ac0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000800}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)={0x14, r4, 0x4, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x40005) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = geteuid() setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000009c0)={{{@in=@remote, @in6=@dev={0xfe, 0x80, [], 0x23}, 0x9, 0x3, 0x4e20, 0x1000, 0x0, 0x80, 0x80, 0xc, 0x0, r5}, {0x0, 0x3, 0x19dc20000000, 0x80000001, 0xfffffffffffffff8, 0x2db6, 0x8}, {0x80000001, 0x1, 0x8001, 0x2}, 0xffff, 0x6e6bbb, 0x0, 0x1, 0x0, 0x3}, {{@in6=@mcast2, 0x4d4}, 0xa, @in, 0x3500, 0x3, 0x2, 0x5, 0x9, 0x8001, 0x2}}, 0xe8) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_GET_LAPIC(r1, 0x8400ae8e, &(0x7f0000000500)={"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"}) bind$netlink(r6, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000b00)=0x8, 0x4) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x0, 0xfdffffff}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x1c, 0x22, 0x1, 0x6000000, 0x0, {0x4}, [@typed={0x8, 0xc, @pid}]}, 0x1c}}, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000180)={0xfffffffffffffd4f, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x4, 0x1, 0x0, 0x0, 0x2, 0x3}) 00:23:50 executing program 4: r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r0, 0x10d, 0xa, &(0x7f000079bffc), &(0x7f0000350ffc)=0x7f) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x200, 0x0) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000040), 0x4) 00:23:50 executing program 1: r0 = syz_open_pts(0xffffffffffffff9c, 0x40) ioctl$KDMKTONE(r0, 0x4b30, 0x3) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x220200, 0x0) r2 = accept4(r1, &(0x7f0000000300)=@can={0x1d, 0x0}, &(0x7f0000000380)=0x80, 0x80800) connect$vsock_stream(r2, &(0x7f00000001c0)={0x28, 0x0, 0xffffffff, @reserved}, 0x10) write$tun(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="02800505000405fff000ffff00ff9afcd8127bdd4e69ebffffeb754b95"], 0x1) setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000003c0)={r3, @multicast1, @remote}, 0xc) getsockopt$inet_udp_int(r1, 0x11, 0xfffffffffffffffd, &(0x7f00000000c0), &(0x7f0000000240)=0x4) ioctl$KVM_GET_REGS(r1, 0x8090ae81, &(0x7f0000000900)) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000280)='fou\x00') sendmsg$FOU_CMD_DEL(r2, &(0x7f0000000ac0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000800}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)={0x14, r4, 0x4, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x40005) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = geteuid() setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000009c0)={{{@in=@remote, @in6=@dev={0xfe, 0x80, [], 0x23}, 0x9, 0x3, 0x4e20, 0x1000, 0x0, 0x80, 0x80, 0xc, 0x0, r5}, {0x0, 0x3, 0x19dc20000000, 0x80000001, 0xfffffffffffffff8, 0x2db6, 0x8}, {0x80000001, 0x1, 0x8001, 0x2}, 0xffff, 0x6e6bbb, 0x0, 0x1, 0x0, 0x3}, {{@in6=@mcast2, 0x4d4}, 0xa, @in, 0x3500, 0x3, 0x2, 0x5, 0x9, 0x8001, 0x2}}, 0xe8) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_GET_LAPIC(r1, 0x8400ae8e, &(0x7f0000000500)={"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"}) bind$netlink(r6, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000b00)=0x8, 0x4) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x0, 0xfdffffff}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x1c, 0x22, 0x1, 0x6000000, 0x0, {0x4}, [@typed={0x8, 0xc, @pid}]}, 0x1c}}, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000180)={0xfffffffffffffd4f, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x4, 0x1, 0x0, 0x0, 0x2, 0x3}) 00:23:50 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x31, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x2, 0x2, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffff9c, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0xa60}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000200)={r1, 0x7fff}, &(0x7f0000000240)=0x8) r2 = socket$vsock_dgram(0x28, 0x2, 0x0) connect$vsock_dgram(r2, &(0x7f0000000000)={0x28, 0x0, 0x0, @my}, 0x10) 00:23:50 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) gettid() setpgid(0x0, 0x0) r0 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000000)={0x5, [0x5, 0x81, 0xf1, 0xffffffffffffff80, 0x7]}, 0xe) 00:23:50 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, r0, 0x0, 0xa, &(0x7f0000000140)='+vboxnet1\x00', 0xffffffffffffffff}, 0x30) sched_setattr(r1, &(0x7f00000001c0)={0x30, 0x2, 0x1, 0x100000001, 0x2, 0x5, 0xffffffff, 0x7}, 0x0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, 0x0, 0x55a3, &(0x7f0000000040)=""/209) 00:23:50 executing program 2: r0 = eventfd(0x0) ppoll(&(0x7f0000000080)=[{r0}], 0x1, &(0x7f00000000c0)={0x0, 0x989680}, 0x0, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x1f, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000100)={0x0, 0x3, 0x1, 0x1, 0x6}) ioctl$void(r0, 0xc0045878) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000140)=0xc) timer_create(0x6, &(0x7f0000000180)={0x0, 0x19, 0x8000000040000000, @tid=r2}, &(0x7f0000000240)) 00:23:50 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='syz_tun\x00', 0x65) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x80200, 0x0) getsockopt$inet6_int(r1, 0x29, 0xc8, &(0x7f0000000040), &(0x7f0000000080)=0x4) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @broadcast}, 0x10) 00:23:50 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) io_setup(0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) io_setup(0x40, &(0x7f0000000000)=0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x2000, 0x0) io_cancel(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0xe, 0x5, r0, &(0x7f00000000c0)="8cb101ce43347cd3f10c62e6780bad28c276de9a98624f5e8378006fb3f20dff43ded47f0e85ade5da2b0714943713d153ab0601d4a7e572bfde97db2560a2267a8007970905274dad19d4d8546db048b2ab26f22971105fba0899c1f544934306d7ea0d1e5695e84db0516300dbf2f048b4dde5a0aab3eff1bc41d4026730f99b157dff3ef9a7cd9b2a19e4d80591d655a50f8f13653820404cf671ffa1fa264bc9a3b534f5936d6aed577568566e648dd742b9c9f4fc936da25f81af244b9257", 0xc1, 0x3, 0x0, 0x2, r2}, &(0x7f0000000200)) bind$inet6(r0, &(0x7f0000001500)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 00:23:50 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x2000) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@dev={0xfe, 0x80, [], 0x26}}, 0x0) ioctl(r0, 0xffefffffffffffc8, &(0x7f0000000040)) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x80000, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r1, 0x0, 0x2d, &(0x7f00000000c0)={0x2, {{0x2, 0x4e20, @remote}}}, 0x84) 00:23:50 executing program 3: syz_extract_tcp_res(&(0x7f0000000780), 0x7fff, 0x401) r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f00000000c0), &(0x7f0000000100)=0x8) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0xc005, @multicast2}]}}}]}, 0x38}}, 0x80) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000500)='/dev/dlm-monitor\x00', 0x14000, 0x0) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000700), &(0x7f0000000740)=0x8) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000429bd7010fc00000c00090008000200020000000000000000"], 0x20}}, 0x20000000) r3 = dup(r0) sendmsg$TIPC_NL_NAME_TABLE_GET(r3, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000480)={&(0x7f00000001c0)={0x2b0, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x110, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'vxcan1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x1, @mcast2, 0x282f}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0xe4c, @empty, 0x4}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @multicast2}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x1, @local, 0x7}}}}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffff801}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ip6tnl0\x00'}}]}, @TIPC_NLA_MEDIA={0x44, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}, @TIPC_NLA_LINK={0x28, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffff8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}]}, @TIPC_NLA_MON={0x34, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffffffffff8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x108}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}]}, @TIPC_NLA_BEARER={0xa0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x80000000, @mcast2, 0xfeb3}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x19}, 0x8}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffffffffffff4ca}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}, @TIPC_NLA_LINK={0x4}, @TIPC_NLA_NET={0x34, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x40}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x80000000}, @TIPC_NLA_NET_NODEID_W1={0xc}]}, @TIPC_NLA_MEDIA={0x14, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x2b0}, 0x1, 0x0, 0x0, 0x4}, 0x80) getsockopt$IP_VS_SO_GET_INFO(r3, 0x0, 0x481, &(0x7f0000000680), &(0x7f00000006c0)=0xc) 00:23:50 executing program 5: r0 = socket$inet6_sctp(0xa, 0x100000000001, 0x84) r1 = syz_open_dev$mouse(&(0x7f0000000140)='/dev/input/mouse#\x00', 0x200, 0x0) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000200)='team\x00') r3 = accept4(r0, &(0x7f0000000240)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x80, 0x0) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000000300)={0x0, @rand_addr, @broadcast}, &(0x7f0000000340)=0xc) getsockname$packet(0xffffffffffffff9c, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000440)=0xda) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@initdev}}, &(0x7f00000005c0)=0xe8) accept4$packet(0xffffffffffffffff, &(0x7f0000001880)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000018c0)=0x14, 0x80800) getsockname$packet(0xffffffffffffffff, &(0x7f0000001900)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000001940)=0x14) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000001980)={{{@in=@initdev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6}}, &(0x7f0000001a80)=0xe8) accept4$packet(0xffffffffffffffff, &(0x7f0000001ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000001b00)=0x14, 0x80800) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000002e80)={{{@in=@empty, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@multicast1}}, &(0x7f0000002f80)=0xe8) getsockname(r0, &(0x7f0000002fc0)=@ll={0x11, 0x0, 0x0}, &(0x7f0000003040)=0x80) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000600)={0x0, 0xdf, "05ade7c0e362515e1fdadace4d3ec1ab1adab027312e91546138dab625e4be2ebfae87f2236269771bfa95e39dd8214cfac3dc9e209a812771663d42fc4b0acc7d713dfa67a397b029cebfc0505ca7de05c360aeb5bf7ae591624c5af5d401588e1ba16dabe572c4a9bfd31e1a246395bbdc3822fd3bc129381c7e1699fb28b440df3709ab4cb17224583d4aa646c1dda8898c0e548e8b5a78ca76a9fd9fe84781f3db2310905a72748fcbd647f367bd66a55f8486fe8eeceda1b50bd35f5715ca0900fecd0a2394422be816430a2be592e2b3415781b786b8213d8c44a722"}, &(0x7f0000000380)=0xe7) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f00000003c0)={0x1, 0x8000, 0x774, 0x8, r14}, 0x10) getsockname$packet(0xffffffffffffff9c, &(0x7f0000003080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000030c0)=0x14) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f00000034c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10400}, 0xc, &(0x7f0000003480)={&(0x7f0000003100)={0x36c, r2, 0x14, 0x70bd2a, 0x25dfdbff, {}, [{{0x8, 0x1, r4}, {0xf8, 0x2, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r6}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r7}}}]}}, {{0x8, 0x1, r8}, {0xf4, 0x2, [{0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x800}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x40}}, {0x8, 0x6, r10}}}]}}, {{0x8, 0x1, r11}, {0xc8, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r12}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r13}, {0x84, 0x2, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r15}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0xe93}}, {0x8}}}]}}]}, 0x36c}, 0x1, 0x0, 0x0, 0x800}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, 0x0, &(0x7f0000000180)) r16 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x42001, 0x0) ioctl$PIO_FONT(r16, 0x4b61, &(0x7f0000000040)="b51b49c8c78cf0025c75099c287bde7fa75b889623fd5c7639ee8d1e76bb0fe2463fae70c2c048b4b509395bffebe19b757874f23fcc507525f9b80d69df6ec6bc2314847f437e477d345340e831a6c12a5f631ccd7612ef332dce2f895c516aaeb731232df27bbb14f33306172232db75727f73e9e30e95576f25bb079d728c48c818e6de6a7af92a82fb5b84a80fb5099a632655e58b1a310dc6a247bdf6460a4d5779ecacf9b22f8594399fe7b58a8ccdc2d7b7b019d83d6cffc66a79718bbfd89b6039841debc53c0b1a4b8ce9b3b281d3d2309e795ddc2767888bb25db29d86a800f537677fc7328cb82a83f4bb02883f8c") shutdown(r0, 0x0) [ 173.770655][ T8805] Unknown ioctl 19297 00:23:51 executing program 0: r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000000040)={0x33, @rand_addr=0x4, 0x4e20, 0x4, 'wlc\x00', 0x4, 0x7, 0x66}, 0x2c) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x200, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) fcntl$dupfd(r1, 0x0, r1) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000080), &(0x7f00000000c0)=0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x1000000002e, &(0x7f0000000300)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x3e, &(0x7f0000000500)=ANY=[@ANYBLOB="0180c200000000000000000086dd60520bd2f67d093a0600083a00fe80000000000001000000000000000000000100000000000890780000000000000000"], 0x0) 00:23:51 executing program 4: setitimer(0x2, &(0x7f00000002c0)={{0x77359400}, {0x77359400}}, 0x0) setitimer(0x2, &(0x7f0000000000)={{0x0, 0x7530}, {0x77359400}}, 0x0) r0 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x3, 0x200000) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0x9) [ 174.004707][ T8811] IPVS: set_ctl: invalid protocol: 51 0.0.0.4:20000 [ 174.089488][ T8803] Unknown ioctl 19297 [ 174.101648][ T8811] IPVS: set_ctl: invalid protocol: 51 0.0.0.4:20000 00:23:51 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x100000000) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000007c0)=0x1d0, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x2, @ipv4={[], [], @loopback}, 0x9}, 0x1c) fstat(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = getgid() fstat(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0xc) setgroups(0x4, &(0x7f0000000240)=[r1, r2, r3, r4]) sendmsg(r0, &(0x7f000001b000)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="f67f986af9dc3ba1fe8000000000000087209739ae649266f062bcd978b94585b9bf1100ed8bc3b5", 0x28}], 0x1}, 0x0) 00:23:51 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x200000a, 0x10, r0, 0x0) getsockopt$packet_int(r0, 0x107, 0x14, 0x0, &(0x7f0000000000)) 00:23:51 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x0, 0x0, 0x0}, 0x48) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x80000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lstat(0x0, &(0x7f0000000140)) fadvise64(r1, 0xffffbffffffffffe, 0x3, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x3, 0x200019) connect$inet(r2, 0x0, 0x0) r3 = syz_open_dev$cec(&(0x7f00000001c0)='/dev/cec#\x00', 0x1, 0x2) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000280)=@assoc_value={0x0}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000300)={r4, 0x7, 0x6, [0x81, 0x361, 0x1, 0x0, 0x10000, 0x5]}, &(0x7f0000000340)=0x14) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, {0x0, 0x0, 0x59b, 0x0, 0x0, 0x0, 0x8000000000000}, {0x100}}, {{@in6}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0xe8) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000200)) setsockopt$inet_tcp_int(r5, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) mmap$xdp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000000, 0x810, r3, 0x100000000) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000700)={0x0, 0x40000007fff, 0x80000001}, 0x14) socket$inet_tcp(0x2, 0x1, 0x0) shutdown(r5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x3000000, 0x0, 0x0, 0xc0ffffff, 0x25}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x1, 0xc3, &(0x7f000000cf3d)=""/195}, 0x48) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240)='/dev/btrfs-control\x00', 0x200, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000040)=""/24, &(0x7f00000000c0)=0x18) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, 0x0, 0x0) 00:23:51 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000001c0)) ioctl$SG_GET_NUM_WAITING(r1, 0x227d, &(0x7f0000000140)) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000000)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x1) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x0, 0x0, 0xffffffffffffff33}) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000180)) 00:23:51 executing program 5: r0 = socket$kcm(0x2, 0x6, 0x0) socket$tipc(0x1e, 0x2, 0x0) getsockopt$bt_hci(r0, 0x10d, 0x10, &(0x7f0000000000)=""/86, &(0x7f0000000180)=0x56) 00:23:51 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x80, 0x0) setsockopt$sock_int(r1, 0x1, 0xb, &(0x7f0000d1c000)=0x2c, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x38) syz_emit_ethernet(0x140, &(0x7f0000000640)={@local, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff11, 0x0, @remote, @local, {[], @udp={0x0, 0x4e20, 0x8}}}}}}, 0x0) socket$alg(0x26, 0x5, 0x0) 00:23:51 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = gettid() write$P9_RATTACH(r0, &(0x7f0000000000)={0x14, 0x69, 0x2, {0x20, 0x4, 0x5}}, 0x14) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000010000100000000000000000000000000", @ANYRES32=r1, @ANYBLOB="000000000000000008001300a4fc56f6d8e55f544c334a5f41c132e3588ddaaab768dc07105eb79d483a8e62abe88921221e7c9511267a71270dce9dec7ab8ceef706f4197e481e886e46d0ff1ed4707a9d62a173bb8f73474fdfcc626243052f622ed13dc9a674f7cd8fc02e6b4d7175f18b4eb62094c9c7439e40b5c336645536e92990008e55e65fb683c95fd5aec79fcb7209b5a43825eac58c91e144f53c1ca7d2300467569b370", @ANYRES32=r3], 0x28}}, 0x0) 00:23:51 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x1, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xffff, 0x0) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000040), &(0x7f00000001c0)=0x4) ioctl$ASHMEM_GET_NAME(r0, 0x81007702, &(0x7f0000000080)=""/204) 00:23:51 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x4d}, {0x6}]}, 0x10) r1 = syz_open_dev$sndpcmc(&(0x7f0000000100)='/dev/snd/pcmC#D#c\x00', 0xb7, 0x10002) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffff9c, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xa6c0}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000200)={r2, @in6={{0xa, 0x4e24, 0x4, @mcast2, 0xfffffffffffffffc}}, 0xc36, 0x80000000}, &(0x7f00000002c0)=0x88) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x3ff, 0xc50, 0x9}]}, 0x8) 00:23:51 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x6, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002e80)='/dev/vcs\x00', 0x80000, 0x0) write$P9_RFSYNC(r1, &(0x7f0000002ec0)={0x7, 0x33, 0x2}, 0x7) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000280), 0x10) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x1, 0x0) ioctl$PPPIOCCONNECT(r1, 0x4004743a, &(0x7f00000004c0)=0x1) recvmmsg(r0, &(0x7f0000002dc0)=[{{&(0x7f0000000080)=@nl=@unspec, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000100)=""/173, 0xad}, {&(0x7f00000002c0)=""/208, 0xd0}, {&(0x7f00000001c0)=""/162, 0xa2}], 0x3, &(0x7f0000000400)=""/163, 0xa3}}, {{&(0x7f0000000500)=@x25={0x9, @remote}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000580)=""/85, 0x55}, {&(0x7f0000000600)=""/8, 0x8}, {&(0x7f0000000640)=""/228, 0xe4}, {&(0x7f0000000740)=""/133, 0x85}], 0x4}, 0xfffe00000000}, {{&(0x7f0000000840)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000002a80)=[{&(0x7f00000008c0)=""/21, 0x15}, {&(0x7f0000000900)=""/69, 0x45}, {&(0x7f0000000980)=""/156, 0x9c}, {&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000001a40)=""/1, 0x1}, {&(0x7f0000001a80)=""/4096, 0x1000}], 0x6, &(0x7f0000002ac0)=""/92, 0x5c}, 0x5}, {{0x0, 0x0, &(0x7f0000002bc0)=[{&(0x7f0000002b40)=""/66, 0x42}], 0x1}, 0x10001}, {{&(0x7f0000002c00)=@generic, 0x80, &(0x7f0000002d40)=[{&(0x7f0000002c80)}, {&(0x7f0000002cc0)=""/113, 0x71}], 0x2, &(0x7f0000002d80)=""/45, 0x2d}, 0xfe7}], 0x5, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_G_CROP(r2, 0xc038563b, &(0x7f0000002c80)={0x1, 0x0, {0x7fffffff, 0x1, 0xfff, 0x66}}) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000002f00), &(0x7f0000002f40)=0x4) 00:23:51 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) io_setup(0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) io_setup(0x40, &(0x7f0000000000)=0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x2000, 0x0) io_cancel(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0xe, 0x5, r0, &(0x7f00000000c0)="8cb101ce43347cd3f10c62e6780bad28c276de9a98624f5e8378006fb3f20dff43ded47f0e85ade5da2b0714943713d153ab0601d4a7e572bfde97db2560a2267a8007970905274dad19d4d8546db048b2ab26f22971105fba0899c1f544934306d7ea0d1e5695e84db0516300dbf2f048b4dde5a0aab3eff1bc41d4026730f99b157dff3ef9a7cd9b2a19e4d80591d655a50f8f13653820404cf671ffa1fa264bc9a3b534f5936d6aed577568566e648dd742b9c9f4fc936da25f81af244b9257", 0xc1, 0x3, 0x0, 0x2, r2}, &(0x7f0000000200)) bind$inet6(r0, &(0x7f0000001500)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 00:23:51 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x0, 0x0, 0x0}, 0x48) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x80000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lstat(0x0, &(0x7f0000000140)) fadvise64(r1, 0xffffbffffffffffe, 0x3, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x3, 0x200019) connect$inet(r2, 0x0, 0x0) r3 = syz_open_dev$cec(&(0x7f00000001c0)='/dev/cec#\x00', 0x1, 0x2) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000280)=@assoc_value={0x0}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000300)={r4, 0x7, 0x6, [0x81, 0x361, 0x1, 0x0, 0x10000, 0x5]}, &(0x7f0000000340)=0x14) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, {0x0, 0x0, 0x59b, 0x0, 0x0, 0x0, 0x8000000000000}, {0x100}}, {{@in6}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0xe8) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000200)) setsockopt$inet_tcp_int(r5, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) mmap$xdp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000000, 0x810, r3, 0x100000000) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000700)={0x0, 0x40000007fff, 0x80000001}, 0x14) socket$inet_tcp(0x2, 0x1, 0x0) shutdown(r5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x3000000, 0x0, 0x0, 0xc0ffffff, 0x25}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x1, 0xc3, &(0x7f000000cf3d)=""/195}, 0x48) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240)='/dev/btrfs-control\x00', 0x200, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000040)=""/24, &(0x7f00000000c0)=0x18) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, 0x0, 0x0) 00:23:51 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x0, 0x0, 0x0}, 0x48) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x80000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lstat(0x0, &(0x7f0000000140)) fadvise64(r1, 0xffffbffffffffffe, 0x3, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x3, 0x200019) connect$inet(r2, 0x0, 0x0) r3 = syz_open_dev$cec(&(0x7f00000001c0)='/dev/cec#\x00', 0x1, 0x2) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000280)=@assoc_value={0x0}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000300)={r4, 0x7, 0x6, [0x81, 0x361, 0x1, 0x0, 0x10000, 0x5]}, &(0x7f0000000340)=0x14) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, {0x0, 0x0, 0x59b, 0x0, 0x0, 0x0, 0x8000000000000}, {0x100}}, {{@in6}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0xe8) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000200)) setsockopt$inet_tcp_int(r5, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) mmap$xdp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000000, 0x810, r3, 0x100000000) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000700)={0x0, 0x40000007fff, 0x80000001}, 0x14) socket$inet_tcp(0x2, 0x1, 0x0) shutdown(r5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x3000000, 0x0, 0x0, 0xc0ffffff, 0x25}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x1, 0xc3, &(0x7f000000cf3d)=""/195}, 0x48) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240)='/dev/btrfs-control\x00', 0x200, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000040)=""/24, &(0x7f00000000c0)=0x18) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, 0x0, 0x0) [ 174.793336][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 174.799401][ C1] protocol 88fb is buggy, dev hsr_slave_1 00:23:51 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_TSC_KHZ(0xffffffffffffffff, 0xaea2, 0x0) socket$xdp(0x2c, 0x3, 0x0) bind$can_raw(0xffffffffffffffff, &(0x7f0000000100), 0x10) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) setsockopt(0xffffffffffffffff, 0x65, 0x10000000002, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000540)={{{@in=@multicast1, @in=@empty}}, {{@in=@dev}, 0x0, @in6=@loopback}}, &(0x7f0000000640)=0xe2cb) unshare(0x20000) getsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040), &(0x7f0000000080)=0xb) 00:23:51 executing program 4: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) 00:23:52 executing program 1: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000500)={0x0, {0x0, 0x0, 0x0, 0x1ff, 0x6}}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_user\x00', 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup/syz0\x00', 0x200002, 0x0) r1 = dup(r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x2, &(0x7f00000000c0)=0x201, 0x4) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) prctl$PR_CAP_AMBIENT(0x2f, 0x7, 0xb) bind(0xffffffffffffffff, &(0x7f0000000540)=@l2={0x1f, 0x0, {0x0, 0x3}, 0x0, 0x8000}, 0x80) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000340)='lp\x00', 0x3) sendto$inet6(r3, &(0x7f0000000280), 0x0, 0x20000004, 0x0, 0x0) ioctl$KVM_PPC_GET_SMMU_INFO(r1, 0x8250aea6, &(0x7f0000000380)=""/157) r4 = gettid() pause() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000340), 0x0}}, &(0x7f0000044000)) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r4, 0x2, &(0x7f00000001c0)=""/74) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {r5, r6+30000000}}, &(0x7f0000040000)) tkill(r4, 0x401104000000016) connect$unix(r1, &(0x7f0000000240)=@file={0x1, './file0\x00'}, 0x6e) 00:23:52 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x20000) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r0, 0x8, r1) socketpair$unix(0x1, 0x4000000000000002, 0x0, &(0x7f0000000280)) epoll_create1(0x80000) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r2, 0x80e05411, &(0x7f0000000380)=""/45) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x40) write$FUSE_NOTIFY_POLL(r3, &(0x7f0000000140)={0x0, 0x1, 0x0, {0xffffffff}}, 0x18) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, r3}) ioctl$DRM_IOCTL_GEM_OPEN(r3, 0xc010640b, &(0x7f0000000200)={0x0, 0x0, 0x70}) ioctl$DRM_IOCTL_GEM_FLINK(r3, 0xc008640a, 0x0) bind$inet6(r4, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff) prctl$PR_GET_FPEMU(0x9, 0x0) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, 0x0, 0x0) ioctl$TIOCGSOFTCAR(r5, 0x5419, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$pppoe(0x18, 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) r6 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0xfffffffffffffffd) ioctl$TIOCGPGRP(r5, 0x540f, &(0x7f0000000240)) ioctl$TIOCMBIS(r6, 0x5416, &(0x7f0000000300)=0x1f) ioctl$GIO_FONTX(r6, 0x4b6b, &(0x7f0000000400)=""/114) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000001c0)=0x1fe, 0x4) ftruncate(r6, 0x80003) sendfile(r4, r6, &(0x7f00000000c0), 0x8000fffffffe) 00:23:52 executing program 3: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/capi/capi20ncci\x00', 0x1, 0x0) ioctl$KVM_ARM_SET_DEVICE_ADDR(r0, 0x4010aeab, &(0x7f0000000200)={0x3abd, 0x100009}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f0000000380)={0x9, 0x80000000000000, 0x100, 'queue1\x00'}) openat$urandom(0xffffffffffffff9c, &(0x7f0000000580)='/dev/urandom\x00', 0x4000, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x200, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r2, &(0x7f00000006c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000680)={&(0x7f0000000700)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r3, @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x50}, 0x4040000) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sysfs$3(0x3) lsetxattr$trusted_overlay_nlink(0x0, &(0x7f00000000c0)='trusted.overlay.nlink\x00', &(0x7f0000000100)={'L+', 0x8}, 0x28, 0x2) ioctl$VIDIOC_G_PARM(r2, 0xc0cc5615, &(0x7f0000000280)={0xe, @raw_data="8cb705c060eee6d53758833d90a61b5d39df5fdebb71a7d99d3c22990d73f048f1ca6f0ea38783c541009a1ef0b3b210e1f6bc1ca25a8e692a07a7e8de8a88c11a133b886c01c8f7ac7bbcd725f7beec27a8b54b12c3cc6d32fe515ba0af471a16e049b18f7fd7837cca7d9a6780248c4cdf4cf5f7f220910350b59e425e20d9945d642eeb937676da066def5a2469f8a2c638cacb0ce71fb109b99f03bf71e01ac9c2b66b22af0cfae47affd809e30c4f9d8324441731bb0bf7e64c30b0af1d5834435f9a014c28"}) ioctl$ION_IOC_HEAP_QUERY(r2, 0xc0184908, &(0x7f0000000140)={0x34}) connect$pppoe(r1, &(0x7f00000004c0)={0x18, 0x0, {0x2, @link_local, 'ip6gre0\x00'}}, 0x1e) sendmmsg(r1, &(0x7f000000d180), 0x255, 0x0) setxattr$trusted_overlay_nlink(&(0x7f0000000240)='./file0\x00', &(0x7f0000000440)='trusted.overlay.nlink\x00', &(0x7f0000000480)={'L-', 0x10c55e33}, 0x28, 0x1) ioctl$VIDIOC_QUERYSTD(r2, 0x8008563f, &(0x7f00000005c0)) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000180)={0xffff, 0x800, 0x4, 0x0, 0x2}) 00:23:52 executing program 5: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x80000, 0x0) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0186416, &(0x7f0000000100)={0xa74f740, 0x100, 0x9, 0x40, 0x1, 0x8}) r1 = getpgrp(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x2, 0x70, 0x4, 0x80000001, 0x9, 0xfffffffffffffff8, 0x0, 0x9, 0xca0, 0x4, 0x218, 0x8, 0x8, 0x2, 0x0, 0x7d7, 0x5, 0x1, 0x9, 0xff, 0x9, 0x5, 0x8001, 0x3, 0x2, 0x1ff, 0x4, 0xab, 0x80000000, 0x8000, 0x7ff, 0x8000, 0x5, 0x1ff, 0x10000, 0xff, 0x9, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x5, 0x7}, 0x2220, 0x7, 0xff, 0xf, 0x7fff, 0x4, 0x5}, r1, 0x10, r0, 0xb) r2 = socket$kcm(0x10, 0x5, 0x10) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="250000001d008110e00f80ecdb4cb9d94a63190408000f003b000000090001000300000040", 0x25}], 0x1}, 0x0) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/attr/current\x00', 0x2, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000240)={@multicast2, @multicast2, 0x1, 0xa, [@remote, @multicast2, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @multicast1, @local, @multicast2, @local, @local]}, 0x38) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f00000001c0)={&(0x7f0000000180)=[0x80], 0x1, 0x6, 0x100000000, 0x9, 0x100, 0x7, {0x5, 0x59, 0x2a, 0x1000, 0x6, 0x2, 0x0, 0x400, 0x1, 0x5, 0xfffffffffffffffc, 0x3, 0xb9, 0x8f, "7300116277b87b92cdec0e4d4b91b9414836deca71a97fffa2ec430217ec3dc3"}}) 00:23:52 executing program 0: clone(0x400000041fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0)) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dlm-control\x00', 0x105, 0x0) write$cgroup_pid(r1, &(0x7f0000000040)=r0, 0x12) ptrace(0x10, r0) ptrace$peek(0x2, r0, &(0x7f0000000240)) ioctl$VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000080)=0x3ff) getsockopt$inet_dccp_int(r1, 0x21, 0x1b, &(0x7f0000000140), &(0x7f0000000180)=0x4) 00:23:52 executing program 5: mmap(&(0x7f0000000000/0x7f2000)=nil, 0x7f2000, 0x3, 0x10, 0xffffffffffffffff, 0x0) mlock2(&(0x7f00003f5000/0xf000)=nil, 0xf000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000e79000)=[{&(0x7f00003fb000)}], 0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000200)={0x6, 0x118, 0xfa00, {{0x1, 0x4, "ad561cd816027e0635683250305f21b665032eee43178f6238798012409cfd1b2b6bbd499b19bc9161c8c295a84ce93b40e75d6110a2ca827307f97ff74d66b055c6c65bcbb50f3dc535556a2f654b186de7eed175424d3335234051635aef63499acd14c44c72bb770ee810dcf43100372dbf0140c9fb52e61281e1418d012282e51feeb10821e4ffb2b9acdb8483054af37f8877bca723f63a1634426b3a1150dfe1cac04fe8c3cf19876b3deaca58b8a965312ba66442c92414f38bffcb83b3bf99ad2228b1c1f10187815b664f4d91ae6591ee21d656b6cc4625f3ecd64731cadf66c62f6083c49e4847588a169de9bc2e3998dcc62b3d70f34f3bc7f7df", 0x21, 0x9, 0x3, 0x0, 0x5, 0x0, 0x1}, r0}}, 0x120) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net\x00\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000340)=""/223, 0xdf, 0x40000020, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(0xffffffffffffffff, 0x80045500, &(0x7f0000000440)) r2 = semget$private(0x0, 0x7, 0x100) semctl$SEM_STAT(r2, 0x4, 0x12, &(0x7f00000000c0)) setitimer(0x0, &(0x7f0000000080)={{0x0, 0x2710}}, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000b40)={0x0, @in6={{0xa, 0x0, 0x8, @dev}}}, &(0x7f0000000140)=0x84) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000480)={r3, 0x4}, 0x8) 00:23:52 executing program 5: mmap(&(0x7f0000000000/0x7f2000)=nil, 0x7f2000, 0x3, 0x10, 0xffffffffffffffff, 0x0) mlock2(&(0x7f00003f5000/0xf000)=nil, 0xf000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000e79000)=[{&(0x7f00003fb000)}], 0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000200)={0x6, 0x118, 0xfa00, {{0x1, 0x4, "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", 0x21, 0x9, 0x3, 0x0, 0x5, 0x0, 0x1}, r0}}, 0x120) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net\x00\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000340)=""/223, 0xdf, 0x40000020, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(0xffffffffffffffff, 0x80045500, &(0x7f0000000440)) r2 = semget$private(0x0, 0x7, 0x100) semctl$SEM_STAT(r2, 0x4, 0x12, &(0x7f00000000c0)) setitimer(0x0, &(0x7f0000000080)={{0x0, 0x2710}}, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000b40)={0x0, @in6={{0xa, 0x0, 0x8, @dev}}}, &(0x7f0000000140)=0x84) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000480)={r3, 0x4}, 0x8) 00:23:53 executing program 2: r0 = socket(0x4001010, 0x80008, 0x7dc1) setsockopt$inet_int(r0, 0x0, 0x3b, &(0x7f0000000000)=0xfffffefffffffffc, 0x4) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x1200, 0x0) ioctl$SG_GET_ACCESS_COUNT(r1, 0x2289, &(0x7f0000000040)) getpid() 00:23:53 executing program 0: mmap(&(0x7f0000000000/0x7f2000)=nil, 0x7f2000, 0x3, 0x10, 0xffffffffffffffff, 0x0) mlock2(&(0x7f00003f5000/0xf000)=nil, 0xf000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000e79000)=[{&(0x7f00003fb000)}], 0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000200)={0x6, 0x118, 0xfa00, {{0x1, 0x4, "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", 0x21, 0x9, 0x3, 0x0, 0x5, 0x0, 0x1}, r0}}, 0x120) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net\x00\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000340)=""/223, 0xdf, 0x40000020, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(0xffffffffffffffff, 0x80045500, &(0x7f0000000440)) r2 = semget$private(0x0, 0x7, 0x100) semctl$SEM_STAT(r2, 0x4, 0x12, &(0x7f00000000c0)) setitimer(0x0, &(0x7f0000000080)={{0x0, 0x2710}}, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000b40)={0x0, @in6={{0xa, 0x0, 0x8, @dev}}}, &(0x7f0000000140)=0x84) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000480)={r3, 0x4}, 0x8) 00:23:53 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8}, 0x37a) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x4cd, &(0x7f00000003c0)={&(0x7f0000000380)=@ipv6_getroute={0x1c, 0x1a, 0x401, 0x0, 0x0, {0x2, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x881}, 0x0) 00:23:53 executing program 3: r0 = syz_open_dev$video(&(0x7f00000001c0)='/dev/video#\x00', 0x7fffffff, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x8000, 0x2000000000000002, {0x1, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x15182c}}}) ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000200)=0x80000001) preadv(r0, &(0x7f0000000280)=[{&(0x7f0000000000)=""/142, 0x8e}], 0x1, 0x0) 00:23:53 executing program 5: r0 = socket$inet6(0xa, 0x1000000000001, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="645d000000000000000000000000a0cf9114000000001d00ff01100000000000109214c6f5f62fdeda09d7fcef9224e863744edd9e963b6897ae568e6f5d501a8ac05f6f57965defb97c4f8e3b1c8133f16b8d21170fea1fc7044cc629aae284fe386502f4ed19255b97e0f42f0c9bd9da23889cea7250f59073ca0000ffff2282ba9365fb72b88bd5f238c2c7e146d6eef708cb46f233dc1ca6aed0bbff5506000000000000005d673a795656d8e3fadd30"]}) 00:23:55 executing program 1: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000040), 0x4800) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r1 = getpid() sched_setparam(r1, &(0x7f0000000100)=0x1ff) sched_rr_get_interval(0x0, &(0x7f0000000000)) 00:23:55 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x400, 0x0) mq_notify(r0, &(0x7f00000001c0)={0x0, 0x1e, 0x7, @thr={&(0x7f0000000040)="b525c56dbcda003b22076d3c841fda2d94ba8a3a49c79103d58e26fca1503ad0eeb897940267546742ef5982d16b519d74f636a172aca1289b09b552455052659e51588baa169a21cab91aa08fbf4e243dfa4477488a4a3d24873cc0d0ba285bf4365424ef573f9b009fe11c67af05d22c7eb5e3d4a553f620070a3604f3949b655f142a40c83b0728116ca9f4deb5c7bb96146d1a8e7b11ada48490bc9c10", &(0x7f0000000100)="ab551dabd05062d433eca3304f936a89ad979d8e7f5ea1d973294ddfc0941762a26ba6a1f1fa417e38e8da57fec3dc543f2f2fa9aec2660bf78e3d"}}) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000469ffc)=0x7fe, 0x4) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000200)=0x10001, 0x4) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000cd2ff0)={0x2, 0x4e24}, 0x10) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e22, 0xfe000000000000, @mcast2, 0x100}, 0x1c) mmap(&(0x7f0000000000/0xda6000)=nil, 0xda6000, 0x3, 0x64031, 0xffffffffffffffff, 0x0) 00:23:55 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x80, 0x0, 0x0, 0x73d}, 0x29b) ioctl$IMGETVERSION(0xffffffffffffffff, 0x80044942, 0x0) sendto$inet6(r0, &(0x7f0000000000), 0x101d0, 0x0, 0x0, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x1f, 0x4400) ioctl$VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f00000000c0)={0x5, 0xf, 0x3, "3ea190551162c2fbb41c1e239a41502d84eebd8945a03b7878e296f74ef8b1e5", 0x35323645}) ioctl$PPPOEIOCSFWD(r0, 0x4004b100, &(0x7f0000000080)={0x18, 0x0, {0x1, @remote, 'teql0\x00'}}) 00:23:55 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(0xffffffffffffffff, 0xc0385720, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="200000002000290f000000000000000002002000000000000000000000000000"], 0x20}}, 0x0) 00:23:55 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setrlimit(0x8c00000000000007, &(0x7f00000000c0)) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000040)) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x4}) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x2840, 0x0) write$P9_RATTACH(r3, &(0x7f0000000180)={0x14, 0x69, 0x1, {0x1, 0x1, 0x7}}, 0x14) setsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f0000000040)={@loopback, @local, @empty}, 0xc) 00:23:55 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffffffffffc, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r1) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040)) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000480)=0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, r0, 0x0, 0x9, &(0x7f0000000100)='selinux)\x00'}, 0x30) setsockopt$TIPC_MCAST_REPLICAST(r2, 0x10f, 0x86) r6 = getpgrp(r4) sendmsg$netlink(r2, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="00000100000000000000000000000000"]}], 0x1, &(0x7f0000000300)=[@cred={0x18, 0x1, 0x2, r6}], 0xff31}, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f00000002c0)={0x0, 0x4}, &(0x7f0000000340)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000380)={r7, 0xb8, "94fad2446c5fb81262b4d131b39551f24ffc654552d469f6278aa2331ab63e3329677ba8fe857a47fe7c2d0e3937d54ba31d25b9f8463a6c354833d6bbc67cf4e15a4047bd95f3817b6f3d529508c11329da67a822c8ad73321962991403bbe6d4b8f6561d5f524299fff7d7919236515bc5bd0d0ec74555a08f14a245233ee7c167657fdb7b46fa38d0cc2105901d8e6a61d72007b9dee3627b356a3b08e19342f046cef4315d5f859bc537cbec2c19c4a8078388442571"}, &(0x7f0000000440)=0xc0) perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0x200, 0x1, 0x1, 0x9, 0x0, 0x200, 0x0, 0x4, 0xff, 0x1, 0x8001, 0x8, 0x9, 0xfffffffffffff000, 0x7, 0x7f, 0x6, 0x498d, 0x80000000, 0x81, 0xda, 0x0, 0xfff, 0x7ff, 0x6, 0xffff, 0x0, 0x0, 0x80000000, 0x4, 0xffffffff00000001, 0x5, 0x9, 0x0, 0x4, 0x7, 0x0, 0xdf87, 0x0, @perf_config_ext={0x3, 0x4}, 0x29441, 0x7fff, 0x1, 0x7, 0x80000001, 0x7, 0x5}, r3, 0x8, r2, 0x8) ioctl$FS_IOC_FSGETXATTR(r5, 0x801c581f, &(0x7f0000000200)={0x9, 0xa65, 0x6, 0x1, 0x2}) [ 178.105487][ T8940] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 00:23:55 executing program 1: r0 = socket(0x100000001f, 0x2, 0xd) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, &(0x7f0000000000)=""/49) write(r0, &(0x7f0000000080)="1f0000000102ff05fd4354c007f37ffff20501000800010004000100ffdf00", 0x1f) 00:23:55 executing program 2: unshare(0x24020400) mknod(&(0x7f00000056c0)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000f8aff8)='./file0\x00', 0x0, 0x0) r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f000000d000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000008ff8)=0x3f) r3 = getpid() r4 = eventfd2(0x0, 0x0) read$eventfd(r4, &(0x7f0000000040), 0x8) execve(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) ioctl$int_in(r4, 0x5452, &(0x7f0000000000)=0x5) dup3(r1, r4, 0x0) fcntl$setown(r4, 0x8, r3) fcntl$setsig(r1, 0xa, 0x12) dup2(r1, r2) tkill(r0, 0x16) 00:23:55 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffff663b, 0x7ff, 0xf090ab2}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000380)={0x79}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x1, 0x0, [{0x0, 0x1, 0x0, 0x0, @adapter}]}) socket$bt_rfcomm(0x1f, 0x3, 0x3) 00:23:55 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setrlimit(0x8c00000000000007, &(0x7f00000000c0)) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000040)) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x4}) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x2840, 0x0) write$P9_RATTACH(r3, &(0x7f0000000180)={0x14, 0x69, 0x1, {0x1, 0x1, 0x7}}, 0x14) setsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f0000000040)={@loopback, @local, @empty}, 0xc) 00:23:55 executing program 4: 00:23:55 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f0000000340)=0x6) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r1, 0x800, 0x70bd26, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x4) r2 = syz_open_dev$video(&(0x7f00000001c0)='/dev/video#\x00', 0x7fffffdf, 0x0) ioctl$KVM_SET_CPUID2(r0, 0x4008ae90, &(0x7f0000000380)={0x2, 0x0, [{0x6, 0x6, 0x4, 0xbd, 0x2000000000000000, 0x1, 0x8379}, {0xc0000007, 0x95, 0x4, 0x80000001, 0xb9, 0xff, 0x8}]}) ioctl$VIDIOC_S_TUNER(r2, 0x4054561e, &(0x7f0000000000)={0x0, "f9ae1cbb773723d6000ffe32aef1595d74b27e60fe3337e41a5300c87ccde83b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r1, 0x300, 0x70bd29, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) 00:23:55 executing program 0: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x48000, 0x0) getsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$pppoe(r0, &(0x7f0000000240)={0x18, 0x0, {0x3, @broadcast, 'erspan0\x00'}}, 0x1e) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000280)={{{@in=@local, @in=@loopback}}, {{}, 0x0, @in6=@loopback}}, &(0x7f0000000200)=0xe8) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x4001fd, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) sendmmsg(r0, &(0x7f0000005b40), 0x40000000000014d, 0x0) 00:23:55 executing program 5: r0 = socket$inet(0x2, 0x80005, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)='U', 0x1}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x7b, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0xffffffffffffffd0) 00:23:55 executing program 4: setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x8040, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x140000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000100)={0x198, r1, 0x110, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffffffffffa}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x100000000}]}, @TIPC_NLA_BEARER={0x144, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @multicast2}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x4, @mcast1, 0x8}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x6}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1b}}}, {0x14, 0x2, @in={0x2, 0x4e22, @multicast1}}}}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'team_slave_1\x00'}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @remote}}, {0x14, 0x2, @in={0x2, 0x4e22, @multicast1}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ipddp0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80}]}, @TIPC_NLA_NET={0x24, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xff}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x20000040}, 0x80) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x0) close(r2) 00:23:55 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x2, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x4, 0x684, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000200], 0x0, &(0x7f0000000080), &(0x7f0000000200)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x11, 0x62, 0x8863, 'ip6gretap0\x00', 'dummy0\x00', 'bond0\x00', 'bond0\x00', @broadcast, [0x0, 0xff, 0xff, 0xff, 0xff], @remote, [0xff, 0xff, 0x0, 0xff, 0xff], 0xd8, 0x13c, 0x184, [@cpu={'cpu\x00', 0x8, {{0xfffffffffffffffc, 0x1}}}, @connbytes={'connbytes\x00', 0x18, {{0xbe8f, 0x9, 0x2, 0x1}}}]}, [@common=@RATEEST={'RATEEST\x00', 0x18, {{'syz0\x00', 0xdcfd, 0x1, 0x800}}}, @common=@AUDIT={'AUDIT\x00', 0x4}]}, @common=@IDLETIMER={'IDLETIMER\x00', 0x24, {{0x3280000000000000, 'syz1\x00', 0x7}}}}, {{{0x0, 0x1, 0x0, 'eql\x00', 'veth0_to_bond\x00', 'sit0\x00', 'bridge_slave_1\x00', @local, [0xff, 0xff, 0x0, 0xff, 0xff], @broadcast, [0x0, 0xff], 0x70, 0xd4, 0x118}, [@common=@AUDIT={'AUDIT\x00', 0x4}, @common=@RATEEST={'RATEEST\x00', 0x18, {{'syz1\x00', 0x6, 0x9, 0x2}}}]}, @common=@ERROR={'ERROR\x00', 0x20, {"a6969b0a1ad9a2594659f17adc859fb69326d6a5a9031d877a4cfb40bba3"}}}]}, {0x0, '\x00', 0x2, 0x5bd5f6a11a0f1157, 0x2, [{{{0x5, 0x1, 0xaaeb, 'bpq0\x00', 'ip6gretap0\x00', 'ip6_vti0\x00', 'bcsf0\x00', @local, [0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @broadcast, [0x40f959bdff3388ce, 0x0, 0xff, 0xff, 0xff], 0xc8, 0x21c, 0x264, [@realm={'realm\x00', 0xc, {{0x8001, 0x87, 0x1}}}, @state={'state\x00', 0x4, {{0x20000000}}}]}, [@common=@NFQUEUE0={'NFQUEUE\x00', 0x4, {{0x7266}}}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x100000001, 'system_u:object_r:etc_runtime_t:s0\x00'}}}]}, @common=@log={'log\x00', 0x24, {{0xe7, "4771d4813efb5e8884f9fb979711869f9ab4c6cab9b186b5e1a717ff5be2", 0x2}}}}, {{{0x11, 0x1, 0x0, 'veth0\x00', 'veth0_to_bond\x00', 'bcsf0\x00', 'syzkaller1\x00', @empty, [0x0, 0x0, 0x0, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0xff, 0xff, 0xff, 0xff, 0xff], 0x70, 0xac, 0xf4}, [@common=@RATEEST={'RATEEST\x00', 0x18, {{'syz1\x00', 0x1, 0x80000001, 0x2180}}}]}, @common=@IDLETIMER={'IDLETIMER\x00', 0x24, {{0x9, 'syz0\x00', 0x8001}}}}]}]}, 0x6d4) r1 = syz_open_dev$video(&(0x7f00000001c0)='/dev/video#\x00', 0x7fff, 0x0) ioctl$VIDIOC_PREPARE_BUF(r1, 0x4004560e, &(0x7f0000000000)={0x0, 0x0, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, "8106c5a2"}, 0x0, 0x0, @offset, 0xfd7c}) 00:23:55 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nullb0\x00', 0x2, 0x0) io_setup(0x5b3, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000001540)=[&(0x7f0000000140)={0x0, 0x0, 0xf000000000001b, 0x1, 0x0, r0, &(0x7f0000000000), 0x0, 0x1, 0x0, 0x0, r0}]) ioctl$BLKGETSIZE(r0, 0x1260, &(0x7f0000000000)) 00:23:55 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f0000000140)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2}}) seccomp(0x1, 0x1, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x0, 0x9, 0x4, 0x81}]}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x40345410) 00:23:55 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x43d) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x1000001c3) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000000c0)=0x9, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000400)={0x0, 0x8d9c, 0x10002}, 0x14) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x4f3d1d6e) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 00:23:58 executing program 2: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = add_key$keyring(0x0, &(0x7f0000000440)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x40) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='/gro<#\xfbW\xe6\xc6\x0f\x1fKE\xb7M\x99\x9a\x9a\x8c,\xe1[&\xe5\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ}\xb7\xf3\xfe\xf6\xe0.+\xe3\x89\xde\x139E\xa3\x85\xbd\x81\xe9\xbd\xee\xee\x03\x00\x00\x00\x00\x00\x00\x00[T\aE\xdfK\x1d\xeeH;\x15v$\xc5\xbcq\x9a\t\x9ej5\t\x00\x00\x009\x8c4', 0x2761, 0x0) sync_file_range(0xffffffffffffffff, 0x8, 0x9c39, 0x2) write$cgroup_pid(r3, &(0x7f0000000080), 0xfffffe38) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000200)={0x5, &(0x7f0000000540)=[{}, {}, {}, {}, {}]}) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0xf800000000000000, &(0x7f00000001c0)={0x5}, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0x660c, 0x0) ioctl$KVM_GET_REGS(r1, 0x8090ae81, &(0x7f0000000300)) r4 = open(&(0x7f0000000280)='./bus\x00', 0x0, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r2, 0xc018643a, &(0x7f0000000500)={0x8000000, 0x0, 0x4}) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000100)={0x100000000, 0x0, 0xd3c, 0x8dee, 0x2, 0xfffffffffffeffff, 0x10001, 0x3f, 0x4, 0x4, 0x8001, 0x2}) ioctl$KVM_SET_ONE_REG(r3, 0x4010aeac, &(0x7f0000000240)={0x1, 0x7f}) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000140)='veno\x00', 0x5) r5 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000180)='SEG6\x00') keyctl$negate(0xd, r5, 0x0, r0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8, 0x4002091, r4, 0x0) memfd_create(0x0, 0x0) 00:23:58 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000200)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x1000000}) 00:23:58 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) accept4$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000040)=0x1c, 0x80800) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x8}, &(0x7f0000000200), 0x0) fsync(r1) 00:23:58 executing program 5: bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)=""/1}, 0x18) socketpair(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(0xffffffffffffffff, &(0x7f0000001540)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa]}}, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffd7}, 0x0) r2 = syz_open_dev$usb(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x7ff, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(r2, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000040}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0x88, r3, 0x0, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_REF={0x8}]}, @TIPC_NLA_NODE={0x2c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xa772}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x40}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7f}]}, @TIPC_NLA_MON={0x3c, 0x9, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9c}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xf4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x200}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfe5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffff}]}]}, 0x88}}, 0x40) ioctl$FIDEDUPERANGE(r2, 0xc0189436, &(0x7f0000000700)={0x5, 0xfffd, 0x6, 0x0, 0x0, [{r1, 0x0, 0x7fffffff}, {r1, 0x0, 0x6}, {r1}, {r0, 0x0, 0x2}, {r2, 0x0, 0x80}, {r2, 0x0, 0xb}]}) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000200)={{{@in6=@ipv4, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@dev}}, &(0x7f0000000300)=0xe8) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuseblk(&(0x7f0000000000)='/dev/loop0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='fuseblk\x00', 0x200000, &(0x7f0000000400)={{'fd', 0x3d, r2}, 0x2c, {'rootmode'}, 0x2c, {'user_id', 0x3d, r4}, 0x2c, {'group_id', 0x3d, r5}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x200}}, {@max_read={'max_read', 0x3d, 0xffff}}, {@allow_other='allow_other'}, {@blksize={'blksize', 0x3d, 0xa00}}], [{@smackfsdef={'smackfsdef', 0x3d, 'vboxnet0'}}, {@seclabel='seclabel'}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}]}}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f9, &(0x7f0000000140)='sit0\x00') 00:23:58 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x43d) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x1000001c3) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000000c0)=0x9, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000400)={0x0, 0x8d9c, 0x10002}, 0x14) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x4f3d1d6e) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 00:23:58 executing program 0: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x48000, 0x0) getsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$pppoe(r0, &(0x7f0000000240)={0x18, 0x0, {0x3, @broadcast, 'erspan0\x00'}}, 0x1e) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000280)={{{@in=@local, @in=@loopback}}, {{}, 0x0, @in6=@loopback}}, &(0x7f0000000200)=0xe8) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x4001fd, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) sendmmsg(r0, &(0x7f0000005b40), 0x40000000000014d, 0x0) 00:23:58 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @multicast1}, 0x65) 00:23:58 executing program 3: syz_emit_ethernet(0x42, &(0x7f0000000080)={@random="5db04249924a", @empty, [], {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x9, @broadcast, @dev={0xfe, 0x80, [], 0x22}, @empty, @empty}}}}, &(0x7f0000000000)={0x1, 0x1, [0x7dd, 0x255, 0x9a5, 0xd0]}) 00:23:58 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) semget$private(0x0, 0x0, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) 00:23:58 executing program 5: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) connect$unix(r0, &(0x7f0000000400)=@file={0x1, './file1\x00'}, 0x6e) ioctl$int_out(r0, 0xc6cb305344fb8656, &(0x7f0000000200)) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000001380)="2f0629900cf0dc747d23c8d65bc91a6391dc483ea0641bfb1035b4b2782bb468b9da2439a7c00caf333d6b4579d9dc7d4d377a3a68c31a27ad81f04bdd235bf6f53b7d8af3ebb15e5e33b35c7994fd56dae708ccf59d9112df8fbc20046ba3fb7b3e42cc8130e133b319832903dd7f5b23f8e533325fac20c12293e222663ef63449e1aec6fdfea00e50b4b590fb") mkdir(0x0, 0x1) mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f00000001c0)='devtmpfs\x00', 0x0, 0x0) pipe(0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9a9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FIGETBSZ(r1, 0x2, &(0x7f00000000c0)) quotactl(0x2080000200, &(0x7f0000000340)='./file1\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x6d) r3 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) syz_emit_ethernet(0x1, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x0) setsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000000), 0x4) recvmmsg(r2, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) getpgid(0x0) getpgid(0x0) chroot(&(0x7f0000000040)='./file1\x00') sendto$inet6(r2, &(0x7f0000000100)="b4", 0x1, 0x0, 0x0, 0x0) 00:23:58 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000002c0)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip6_flowlabel\x00') preadv(r0, &(0x7f0000000700), 0x31f, 0x0) 00:23:58 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) memfd_create(0x0, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getpgid(0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='oom_adj\x00') sendfile(r0, r0, 0x0, 0x8) [ 181.722727][ T9060] syz-executor.3 (9060): /proc/9058/oom_adj is deprecated, please use /proc/9058/oom_score_adj instead. 00:23:59 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf74, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000780)='wchan\x00') bind$inet(r0, &(0x7f00000007c0)={0x2, 0x4e21, @multicast2}, 0x10) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x400000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) r1 = add_key(&(0x7f0000000080)='r\b\x00\x00\x00', &(0x7f0000000f00)={'syz', 0x1}, &(0x7f0000000e00)="21c2b34aab8718600a0939b6bfa4ee015e4104002a79dca18f94c0d56aecbe3f10f4c0f17dcfb81442c556a63c6a53617641f56b34a86fa45a380a32e468830ea1eb9205bf7e23cf13ae49f1f903c5a5c804e98af2886f4cff812d256dd98349dbd18b63145cf956148bcf7c2151805ce18f7ef6", 0x74, 0xfffffffffffffffc) add_key(&(0x7f00000002c0)='id_legacy\x00', &(0x7f0000000380)={'syz', 0x1}, &(0x7f0000000400), 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, r1, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'trusted:', '}lo', 0x20, 0xb5}, 0x2d, 0x0) lsetxattr$security_ima(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='security.ima\x00', &(0x7f0000000580)=@sha1={0x1, "15f26aa2874deb00e1f776715ba4de785cc32036"}, 0x15, 0x2) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000640)={0x0}) r2 = open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000680)={@remote, 0x40, 0x0, 0x0, 0x0, 0x3ff, 0x4}, 0x0) socket(0x2000400000000010, 0x2000000000000002, 0x0) r3 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) write$9p(r2, &(0x7f0000000800)="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", 0x600) sendfile(r2, r3, 0x0, 0x10000) 00:23:59 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x72bbf9c1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) gettid() sched_setaffinity(0x0, 0xfffffffffffffd1c, &(0x7f0000000280)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='projid_map\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000237, 0x0) 00:23:59 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_emit_ethernet(0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="5002000090780000"], 0x0) 00:23:59 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountstats\x00') sendfile(r0, r1, 0x0, 0x62) 00:23:59 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x43d) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x1000001c3) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000000c0)=0x9, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000400)={0x0, 0x8d9c, 0x10002}, 0x14) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x4f3d1d6e) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 00:23:59 executing program 0: prctl$PR_SET_MM(0x43724f53, 0x1, &(0x7f0000ffc000/0x2000)=nil) 00:23:59 executing program 5: shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) getresgid(0x0, 0x0, 0x0) getresgid(0x0, 0x0, 0x0) stat(0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x42800, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) r1 = gettid() setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) shmctl$SHM_INFO(0x0, 0xe, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) shmget(0x3, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) ioctl$void(0xffffffffffffffff, 0x0) tkill(r1, 0x3000000000016) 00:23:59 executing program 3: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) connect$unix(r0, &(0x7f0000000400)=@file={0x1, './file1\x00'}, 0x6e) ioctl$int_out(0xffffffffffffffff, 0x0, 0x0) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, 0x0) mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f00000001c0)='devtmpfs\x00', 0x0, 0x0) pipe(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9a9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FIGETBSZ(r1, 0x2, &(0x7f00000000c0)) quotactl(0x2080000200, &(0x7f0000000340)='./file1\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x400, 0x0) r2 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r2, 0x0, 0x0) r3 = socket$inet6(0xa, 0x0, 0x6) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) syz_emit_ethernet(0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="50001970d3dfb5669609000090780000"], 0x0) recvmmsg(r2, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) getpgid(0x0) chroot(&(0x7f0000000040)='./file1\x00') sendto$inet6(r2, &(0x7f0000000100)="b4", 0x1, 0x0, 0x0, 0x0) 00:23:59 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) timer_create(0x0, 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) getgid() listen(r1, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) connect$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000000), 0x4) 00:23:59 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000001a00010400000000000000000a0000000000000000000000fee0776eecdfacc1"], 0x1}}, 0x0) 00:23:59 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) r1 = epoll_create1(0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x2eb, 0x0) dup3(r0, r1, 0x0) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) write$9p(r1, 0x0, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, 0x0, 0x0) 00:23:59 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x1a5, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x7ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 00:23:59 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000340)='\x00\x00\x00\x00\x00') r1 = openat$cgroup_ro(r0, &(0x7f0000000440)='mem\x00\x01y7swaS.cur\x89\xc9B\xab\xe3\xfarent\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x10, 0xffffffffffffffff, 0x0) recvfrom$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) preadv(r1, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x0) 00:23:59 executing program 5: 00:23:59 executing program 1: 00:23:59 executing program 0: 00:24:00 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x43d) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x1000001c3) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000000c0)=0x9, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000400)={0x0, 0x8d9c, 0x10002}, 0x14) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x4f3d1d6e) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 00:24:00 executing program 1: 00:24:00 executing program 5: 00:24:00 executing program 0: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x20400040c2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xf7d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write(r0, &(0x7f0000000600)="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", 0x200) 00:24:00 executing program 2: 00:24:00 executing program 3: 00:24:00 executing program 1: 00:24:00 executing program 3: 00:24:00 executing program 5: 00:24:00 executing program 2: 00:24:00 executing program 1: 00:24:00 executing program 0: 00:24:00 executing program 3: 00:24:00 executing program 5: 00:24:00 executing program 1: 00:24:00 executing program 2: 00:24:00 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x43d) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x1000001c3) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000000c0)=0x9, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000400)={0x0, 0x8d9c, 0x10002}, 0x14) splice(r0, 0x0, r1, 0x0, 0x10005, 0x0) 00:24:00 executing program 0: 00:24:00 executing program 5: 00:24:00 executing program 2: 00:24:00 executing program 1: 00:24:00 executing program 0: 00:24:00 executing program 3: 00:24:01 executing program 2: 00:24:01 executing program 0: 00:24:01 executing program 5: 00:24:01 executing program 3: 00:24:01 executing program 1: 00:24:01 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x43d) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x1000001c3) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000000c0)=0x9, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000400)={0x0, 0x8d9c, 0x10002}, 0x14) splice(r0, 0x0, r1, 0x0, 0x10005, 0x0) 00:24:01 executing program 2: 00:24:01 executing program 5: syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x8000000001, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 00:24:01 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)={0x5, 0x1ff, 0x9, 0x2}, 0x1b) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000fcb000)={r0, &(0x7f0000fcbfff), 0x0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={r0, &(0x7f0000000000)="f7a3f5b1afe32f2a28230a8120cffe9ecadfe91f7d93d69f99ab30bade1250bd8eeee35ec932d7bd0df1d687038ecd482c29e852382b0ecf700e092d5f9d8f4080f0c8d2a0dd486d726b0ace24f431ff4ee4c679799cd4109ab8b9c854642e63b3848484ad840b23a3ede25c5d073bcf2d130a9631974143b8042d53c70a5cbadd698ee3dc8f70441bc457e6c42400cc8e020276e8c2b5d3ce8d1d8a3e23643d2feef953da48169eadc8fb948bb2b307c6a929a81a78f4cf86c19d460a3a17b9aa00000000000000000000000000", 0x0}, 0x18) 00:24:01 executing program 1: 00:24:01 executing program 3: 00:24:01 executing program 1: 00:24:01 executing program 2: 00:24:01 executing program 3: [ 184.815984][ T9209] ptrace attach of "/root/syz-executor.5"[9202] was attempted by "/root/syz-executor.5"[9209] 00:24:01 executing program 5: 00:24:01 executing program 0: 00:24:02 executing program 1: 00:24:02 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x43d) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x1000001c3) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000000c0)=0x9, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000400)={0x0, 0x8d9c, 0x10002}, 0x14) splice(r0, 0x0, r1, 0x0, 0x10005, 0x0) 00:24:02 executing program 3: 00:24:02 executing program 2: 00:24:02 executing program 5: 00:24:02 executing program 0: 00:24:02 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000000240)={&(0x7f0000000000), 0xc, 0x0, 0x1, 0x0, 0x0, 0x51}, 0x40) 00:24:02 executing program 0: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) connect$unix(r0, &(0x7f0000000400)=@file={0x1, './file1\x00'}, 0x6e) ioctl$int_out(r0, 0xc6cb305344fb8656, &(0x7f0000000200)) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000001380)) mkdir(0x0, 0x1) mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f00000001c0)='devtmpfs\x00', 0x0, 0x0) pipe(0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9a9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000940000)={0x0, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FIGETBSZ(r1, 0x2, &(0x7f00000000c0)) quotactl(0x0, 0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x400, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x8000, 0x0, 0x0) r3 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r3, 0x0, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="50001970d3dfb5669609000090780000"], 0x0) recvmmsg(r2, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) getpgid(0x0) getpgid(0x0) chroot(&(0x7f0000000040)='./file1\x00') sendto$inet6(r2, &(0x7f0000000100)="b4", 0x1, 0x0, 0x0, 0x0) 00:24:02 executing program 2: setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000002c0)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/icmp\x00') preadv(r0, &(0x7f0000000700), 0x31f, 0x0) 00:24:02 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) close(r0) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x0, 0x0) ioctl$sock_ifreq(r1, 0x893f, &(0x7f0000000080)={'veth1_to_team\x00', @ifru_ivalue=0x9}) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r2, 0x200001a0, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e20, 0x2, @loopback, 0x6}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e20, 0x29a2c3d, @loopback, 0x7fffffff}, @in6={0xa, 0x4e24, 0x1, @dev={0xfe, 0x80, [], 0x14}, 0x2}, @in={0x2, 0x4e23, @rand_addr=0x4}, @in={0x2, 0x4e20, @rand_addr=0x1}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xa}}, @in={0x2, 0x4e20, @empty}, @in6={0xa, 0x4e20, 0x7, @rand_addr="cd0b224f6e916b98aebff796176cada0", 0x5}, @in={0x2, 0x4e22, @remote}], 0xd0) fcntl$getflags(r1, 0x40a) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r1, 0x810c5701, &(0x7f00000009c0)) 00:24:02 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) 00:24:02 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000200)) syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0xfffeffffffffffda, 0x40) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x400000, 0x0) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r1, 0x111, 0x1, 0x8, 0x4) ioctl$TIOCLINUX2(r1, 0x541c, &(0x7f00000000c0)={0x2, 0x40, 0xdb, 0x4, 0x5, 0x80000001}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x20000) 00:24:02 executing program 2: pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) rmdir(&(0x7f0000000240)='./file0\x00') fcntl$setpipe(r0, 0x407, 0x0) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYBLOB='\n'], 0x1) r2 = getpid() sched_setaffinity(r2, 0x8, &(0x7f0000000000)=0x5) fcntl$setpipe(r1, 0x407, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r1, 0xc1105518, &(0x7f0000000100)={{0x5, 0x2, 0xfca, 0x8, 'syz1\x00'}, 0x3, 0x400, 0x800, r2, 0x9, 0x5366, 'syz1\x00', &(0x7f0000000080)=['\x00', '\\\x00', 'selinux!\x00', '\x00', '\x00', '\x00', ']md5sum$@@\x00', '\xd9nodevvboxnet1vmnet1[))em1vboxnet1trustedcgroup}cpuset$cgroupB$cgroupwlan0\x00', '\x00'], 0x66, [], [0x3, 0x7e, 0x100000000, 0x6]}) 00:24:03 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x43d) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x1000001c3) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000000c0)=0x9, 0x4) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x4f3d1d6e) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 00:24:03 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x2, 0x80000028021) write$evdev(r0, &(0x7f0000000040)=[{{}, 0x1, 0x80000018, 0x2}, {{0x77359400}}], 0x20) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000000), &(0x7f00000000c0)=0x4) 00:24:03 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x1, 0x200000) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x10000, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000100)={'batadv0\x00\x80\x01\xa0\xff\xff\xff\xff\x03', @random="01003a1e2413"}) 00:24:03 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f00000002c0)='/dev/dmmidi#\x00', 0x400, 0x402) ioctl$DRM_IOCTL_RM_MAP(r1, 0x4018641b, &(0x7f0000000300)={&(0x7f0000ffa000/0x3000)=nil, 0x3, 0x1, 0x13, &(0x7f0000ffa000/0x1000)=nil, 0x3f}) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000340)=ANY=[]) shmget$private(0x0, 0x3000, 0x1000, &(0x7f0000ffa000/0x3000)=nil) request_key(&(0x7f0000000140)='syzkaller\x00', &(0x7f00000003c0)={'syz'}, 0x0, 0xffffffffffffffff) ioctl$SG_GET_ACCESS_COUNT(r1, 0x2289, &(0x7f0000000180)) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x80000, 0x0) write$cgroup_subtree(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="0000000000eaa505cde7a9f998685ae89519d623b5906fcb4daba9f8a6f7e6abe199832bf14dc3013d4a84d5e8177b829d76ff2c3131bbba5aa5b9572d5f39f8437f08577e"], 0x6) write$RDMA_USER_CM_CMD_BIND(r0, 0x0, 0x0) nanosleep(&(0x7f00000000c0)={0x0, 0x989680}, &(0x7f0000000100)) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000001c0)=0x0) get_robust_list(r3, &(0x7f0000000400)=&(0x7f0000000380)={&(0x7f0000000240)={&(0x7f0000000200)}, 0x0, &(0x7f0000000340)={&(0x7f0000000280)}}, &(0x7f0000000440)=0xc) sendmsg$nl_crypto(r2, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000540)=@get={0x100, 0x13, 0x8, 0x70bd2b, 0x25dfdbfe, {{'ecb(des3_ede)\x00'}, [], [], 0x2000, 0x400}, [{0x8, 0x1, 0x40}, {0x8, 0x1, 0x6}, {0x8, 0x1, 0x89d1}, {0x8, 0x1, 0x400}]}, 0x100}}, 0x4000) ioctl$CAPI_CLR_FLAGS(r2, 0x80044325, &(0x7f0000000080)) 00:24:03 executing program 5: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='.\xea\b\x02\x00\x00\x00]p\v\xf6u\x00p\xcb`E\x8c\xd4`\xd2]\x97', 0x200002, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000001c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0}}, 0x20) r1 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x5, 0x644002) syz_genetlink_get_family_id$net_dm(&(0x7f0000000100)='NET_DM\x00') sendmsg$NET_DM_CMD_STOP(r1, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x300, 0x70bd28, 0x25dfdbfb, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0x84) r2 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) r3 = memfd_create(&(0x7f0000000000)='/dev/vbi#\x00', 0x4) ftruncate(r3, 0x1000000) sendfile(r2, r3, &(0x7f00000000c0)=0xf10002, 0xeffffdef) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r1, 0xc0305302, &(0x7f0000000240)={0x4, 0x3ff, 0x5, 0x400, 0xf151, 0xfffffffffffffff7}) close(r2) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000080)) 00:24:03 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r2 = epoll_create(0x7) setsockopt$RDS_CANCEL_SENT_TO(r1, 0x114, 0x1, &(0x7f00000000c0)={0x2, 0x4e21, @remote}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$l2tp(0x18, 0x1, 0x1) sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setpriority(0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f0000000100)={'icmp\x00'}, &(0x7f0000000140)=0x1e) sendfile(r1, r2, 0x0, 0x1000007ffff001) [ 186.551855][ T9283] ucma_write: process 184 (syz-executor.2) changed security contexts after opening file descriptor, this is not allowed. 00:24:03 executing program 0: keyctl$setperm(0x5, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000080), &(0x7f0000000100)=0x4) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) getuid() ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000000)=0x6) ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:24:03 executing program 3: connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchdir(0xffffffffffffffff) rmdir(&(0x7f0000000040)='./file0\x00') mkdir(&(0x7f0000000080)='./file0\x00', 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) rmdir(&(0x7f0000000180)='./file0\x00') 00:24:03 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000100)='/dev/snd/pcmC#D#c\x00', 0x3, 0x200100) symlinkat(&(0x7f0000000080)='./file0\x00', r0, &(0x7f0000000140)='./file0\x00') r1 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000001c0)={[{0x9, 0xb03, 0x1, 0x7, 0xc4ba, 0xff, 0x1, 0x2e38, 0x4, 0x2, 0x100, 0x400, 0x5}, {0x7fff, 0x3f, 0xfffffffffffffffa, 0x100, 0x3, 0xa49, 0xfff, 0x8001, 0xffffffff, 0x1c4, 0x3, 0x8, 0x28adaac7}, {0x1f, 0xff, 0x7fffffff, 0x8, 0x10001, 0x1, 0x2b, 0x100000000, 0x3, 0xffffffffffffffff, 0x89, 0x8, 0x4}], 0xffffffff80000001}) r2 = memfd_create(&(0x7f00000000c0)='\x00', 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, 0x0) ioctl$VIDIOC_G_INPUT(r0, 0x80045626, &(0x7f0000000180)) fcntl$setlease(r2, 0x400, 0x1) fcntl$setown(r2, 0x8, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1) execveat(r2, &(0x7f0000000340)='\x00', 0x0, &(0x7f0000000300), 0x1000) 00:24:03 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000000c0)={0x0, 0xd, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "26471a69"}, 0x0, 0x0, @userptr, 0x4}) munlockall() 00:24:03 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000040)=ANY=[@ANYBLOB='filter'], 0x1) getsockopt$inet_buf(r0, 0x0, 0x83, &(0x7f0000000040)=""/24, &(0x7f0000000100)=0x18) ioctl$sock_bt_bnep_BNEPCONNADD(r0, 0x400442c8, &(0x7f0000000000)={r0, 0x3, 0x80000001, "121e39e0677064c4bdbfc85e07173e40c274d8d81e09e0cda4ccc465935de9503c566b9dcf5368f09831"}) 00:24:03 executing program 2: mlock2(&(0x7f0000c83000/0x4000)=nil, 0x4000, 0x0) r0 = socket(0x1e, 0x3, 0x9) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cachefiles\x00', 0x20400, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) syz_genetlink_get_family_id$tipc(&(0x7f00000004c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, 0x0, 0x8000) getsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, 0x0, &(0x7f00000001c0)) fsetxattr$security_selinux(r0, &(0x7f0000000040)='security.selinux\x00', &(0x7f0000000180)='system_u:object_r:var_t:s0\x00', 0x1b, 0x0) fremovexattr(r0, 0x0) r2 = gettid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000240)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r3, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f00000003c0)={0x7, 0x70, 0x2, 0x2, 0x6, 0x3, 0x0, 0x0, 0x800, 0x4, 0x9eb2, 0x0, 0x7fff, 0x3f, 0xfff, 0x5, 0x9, 0x5, 0x1f, 0x4, 0xff, 0x1f, 0x5, 0x7f, 0x9, 0xc26b, 0x1000, 0x7, 0x3, 0x8001, 0x7, 0x100, 0x93f3, 0x0, 0x0, 0x9, 0x20000000000000, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000002c0), 0x9}, 0x401, 0x10001, 0x8, 0x9, 0x1000, 0x400, 0x8}, r2, 0xb, 0xffffffffffffffff, 0x9) readv(r3, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) connect$l2tp(0xffffffffffffffff, &(0x7f0000000700)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, 0x3}}, 0x26) prlimit64(r2, 0xc, &(0x7f0000000000)={0x5, 0x91}, &(0x7f0000000080)) fcntl$setpipe(r0, 0x407, 0x47) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x3d, 0x7fffffffffffd}, 0x4) ioctl$KVM_ARM_SET_DEVICE_ADDR(r1, 0x4010aeab, &(0x7f0000000580)={0x1, 0x2}) perf_event_open(&(0x7f0000000440)={0x1, 0x70, 0x1, 0xc627, 0x1f, 0x0, 0x0, 0x1, 0x2020, 0x6, 0x7, 0x7, 0x4, 0x0, 0x1, 0x2, 0x2, 0xc8, 0x4, 0x0, 0x5, 0xd6a, 0x3, 0x1f, 0x1, 0x1ff, 0x6, 0x3, 0x8, 0x6, 0xffffffff, 0x2, 0xe402, 0x0, 0x1, 0x52a, 0x1f, 0x0, 0x0, 0xfffffffffffffffb, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x107, 0x6, 0x7, 0x2, 0x3a}, 0x0, 0x5, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000340)={0x2, 0x70, 0x101, 0xffffffffffffff01, 0x8, 0x100, 0x0, 0x4, 0x200, 0x9, 0x7, 0x4, 0x277265ff, 0x2, 0xb0, 0x7, 0x5, 0x6, 0x6, 0x9, 0x100000001, 0x5, 0x1, 0x8, 0xb3, 0x3, 0x8, 0xb34, 0x5, 0x101, 0x8, 0x6, 0x6, 0x4, 0x2, 0x6, 0xbf, 0x7fffffff, 0x0, 0xc31b, 0x0, @perf_config_ext={0xfffffffffffffffc, 0xffffffff7fffffff}, 0x4600, 0x7, 0x40, 0x4, 0x6, 0x8001, 0x10001}, 0xffffffffffffffff, 0x3, r3, 0x8) syz_open_dev$cec(&(0x7f0000000200)='/dev/cec#\x00', 0x2, 0x2) ioctl$BLKFLSBUF(r3, 0x1261, &(0x7f00000000c0)=0x8) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000081d47a91b0cf73861d5ca87cae43e65c4009b69fcd9b50af1c129cff803cf9912007f5ab52422ec229265538e530d46e970f40cddf63c7ae4bd3399a3a"], 0x0) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0xa7) [ 186.981908][ T9322] ebtables: wrong size: *len 24, entries_size 144, replsz 144 [ 186.998598][ T9323] ebtables: wrong size: *len 24, entries_size 144, replsz 144 00:24:04 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x43d) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x1000001c3) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000000c0)=0x9, 0x4) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x4f3d1d6e) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 00:24:04 executing program 3: syz_open_dev$video(&(0x7f00000005c0)='/dev/video#\x00', 0x8, 0x8aa04) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) pkey_alloc(0x0, 0x1) pkey_alloc(0x0, 0x1) r0 = pkey_alloc(0x0, 0x1) pkey_free(r0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x140ffb, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x0, 0x0) r3 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r2, 0xc1105511, &(0x7f0000000240)={{0x0, 0x1, 0x80, 0x46, '\x00', 0x80}, 0x0, 0x20000160, 0x9, r3, 0x7, 0x2, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x03\x00', &(0x7f0000000440)=['/proc/sys/net/ipv4/vs/snat_reroute\x00', ']]', '^lowlan0vboxnet0\x00', 'selinux@\x00', 'bdev\x00', '\x00', 'ip6gre0\x00'], 0x4d, [], [0x3, 0x800000000000, 0x3, 0x8000000000100]}) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000700)={{{@in=@remote, @in6}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000400)=0xffffffffffffff05) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) bind$inet(r2, &(0x7f0000b9bff0)={0x2, 0x2004e21}, 0x36c) r4 = socket$nl_generic(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r4, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000800)=ANY=[@ANYBLOB="00bd0800000000000000c91df0a4a83109fd74aad282d2ef5d2ed0d2af2f7a005d87c9f39719d4d148649d471d24f45265359347e31612e80a971034903c3ffeb0000000f34669e4fd53f518a55c923b903428b1cd8cf464d3744822b7dca780aef5a887977f991dc24ab0e2775d2e1091589500021c1ea4870900000000000000eb4b24a052f2cfa267e45f5731f96ebde59df0b83acfdae902d1d2d27f2a3e2381e01f10839d4e53b5c332257b8c5c19482ccbab1507603a1efd893196e8eb1cc5fcd40496ba920e60df320c0000000016ea577c1c74676bca920ea6fed777b08b221714d462c6925b6e6c7e5288df22619e2c2a30000000c5032f62010000000000004570d991920000a1d3063a6f4c5d6723b210f2f8ecbf4f2b1a60196fb0a6e2be719b96db91d27b1a1e8ddbcd8f3622c23160cb26c529eaeed5d0c51522e29824b2b7daebb90369d71e35d198984390b71bad688a91fa0089c7051393c69563c313d945dded5561b1cb7bf010be7e8ba177dba713ecf4068e0e024f469f856d61e1477247ab013ca643079802f339d0800ff7d120e6e8010650f7185fc638c5cee557c413e3b145baf66b0e0e9cbae8c6e990a002a13751ccea9eb1f5079e1cced41862c6785362a49559c1a49e2b2977621a933b63d82bdfa721c76fe4a89f6f5c545c17d6efb56a1465c01be76cd598f8770c9521a065eaaf681b97e82eb1eb81216b3283e57ec8a529022e50f20bcfdbe8579fdd877f71700cef7c40f535465a287fef59d6b47c20f6bd759787dab7a49f27140a289b00000000d7e0fa7e84f66a1b483fc1baa55e0855287cb15ddb7a5a94508b649273428d2c6d84cc3ec5198553bf1b739de9b6b38ea3325ee5edea12ce8858ef363196b7bac462eb0fd733dc8d04314dc9af6c4cff620fb4fa2a285f0dcd69164000a90f93eff0cdeabe31fa74f96f49b0cbedc81ccd28ea8c873f8029d3e3c7602a0bdd5abab461e83fae6532c4d70402d3f6b08dd5dd5b511df8cb360a7d785120cfea9afaf1ef30d018cea6f9b942e2816e223e80c45a895b04b672bebeecbfe8037ef72b6c7fcadae43e9a75bc11b8f08a353134c37b7e2992d9f71d791d4a373ce4362205cd1596e0904426c5a248d90c827c74b1f306350d4619a29d64f738a8a75ea83b84bc01aa65cc332316bd8bbabf3efb3fb2c9ecd02a8005bc15af5e5a32c63a9e532c767578be61"]}) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x100000000000000, &(0x7f00000004c0)={@remote, 0x0}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000001c0)={r5, @loopback, @rand_addr=0x1cb}, 0xc) syz_open_procfs(r3, &(0x7f0000000040)='ns\x00') r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) timer_create(0x4, &(0x7f0000000180), &(0x7f00000001c0)) fcntl$getown(0xffffffffffffffff, 0x9) rt_sigqueueinfo(0x0, 0x4, &(0x7f0000000680)={0x3, 0x8}) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f00000003c0)='ip6_vti0\x00', 0x10) r7 = socket$l2tp(0x18, 0x1, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x4e21, 0x4, @loopback, 0xfffffffffffffffc}, 0x1c) connect$l2tp(r7, &(0x7f0000000380)=@pppol2tpv3={0x18, 0x1, {0x0, r6, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) r8 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000500)="0214e0cef3273d1c77035abcf37f6a8ac5cf7ea6be3b6095ba154fcd7d6c93970989eb400c755b1acb00e595", 0x2c, 0xfffffffffffffffb) r9 = add_key(&(0x7f0000000540)='user\x00', &(0x7f0000000580)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$reject(0x13, r8, 0xfffffffffffffff9, 0x4, r9) sendmmsg(r7, &(0x7f0000005fc0), 0x800000000000059, 0x0) 00:24:04 executing program 5: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='.\xea\b\x02\x00\x00\x00]p\v\xf6u\x00p\xcb`E\x8c\xd4`\xd2]\x97', 0x200002, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000001c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0}}, 0x20) r1 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x5, 0x644002) syz_genetlink_get_family_id$net_dm(&(0x7f0000000100)='NET_DM\x00') sendmsg$NET_DM_CMD_STOP(r1, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x300, 0x70bd28, 0x25dfdbfb, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0x84) r2 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) r3 = memfd_create(&(0x7f0000000000)='/dev/vbi#\x00', 0x4) ftruncate(r3, 0x1000000) sendfile(r2, r3, &(0x7f00000000c0)=0xf10002, 0xeffffdef) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r1, 0xc0305302, &(0x7f0000000240)={0x4, 0x3ff, 0x5, 0x400, 0xf151, 0xfffffffffffffff7}) close(r2) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000080)) [ 187.489071][ T9337] Dead loop on virtual device ip6_vti0, fix it urgently! [ 187.553498][ T9337] Dead loop on virtual device ip6_vti0, fix it urgently! 00:24:04 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000100)='/dev/snd/pcmC#D#c\x00', 0x3, 0x200100) symlinkat(&(0x7f0000000080)='./file0\x00', r0, &(0x7f0000000140)='./file0\x00') r1 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000001c0)={[{0x9, 0xb03, 0x1, 0x7, 0xc4ba, 0xff, 0x1, 0x2e38, 0x4, 0x2, 0x100, 0x400, 0x5}, {0x7fff, 0x3f, 0xfffffffffffffffa, 0x100, 0x3, 0xa49, 0xfff, 0x8001, 0xffffffff, 0x1c4, 0x3, 0x8, 0x28adaac7}, {0x1f, 0xff, 0x7fffffff, 0x8, 0x10001, 0x1, 0x2b, 0x100000000, 0x3, 0xffffffffffffffff, 0x89, 0x8, 0x4}], 0xffffffff80000001}) r2 = memfd_create(&(0x7f00000000c0)='\x00', 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, 0x0) ioctl$VIDIOC_G_INPUT(r0, 0x80045626, &(0x7f0000000180)) fcntl$setlease(r2, 0x400, 0x1) fcntl$setown(r2, 0x8, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1) execveat(r2, &(0x7f0000000340)='\x00', 0x0, &(0x7f0000000300), 0x1000) [ 187.599874][ T9337] Dead loop on virtual device ip6_vti0, fix it urgently! [ 187.617415][ T9337] Dead loop on virtual device ip6_vti0, fix it urgently! [ 187.637062][ T9337] Dead loop on virtual device ip6_vti0, fix it urgently! [ 187.645561][ T9337] Dead loop on virtual device ip6_vti0, fix it urgently! 00:24:04 executing program 3: syz_open_dev$video(&(0x7f00000005c0)='/dev/video#\x00', 0x8, 0x8aa04) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) pkey_alloc(0x0, 0x1) pkey_alloc(0x0, 0x1) r0 = pkey_alloc(0x0, 0x1) pkey_free(r0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x140ffb, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x0, 0x0) r3 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r2, 0xc1105511, &(0x7f0000000240)={{0x0, 0x1, 0x80, 0x46, '\x00', 0x80}, 0x0, 0x20000160, 0x9, r3, 0x7, 0x2, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x03\x00', &(0x7f0000000440)=['/proc/sys/net/ipv4/vs/snat_reroute\x00', ']]', '^lowlan0vboxnet0\x00', 'selinux@\x00', 'bdev\x00', '\x00', 'ip6gre0\x00'], 0x4d, [], [0x3, 0x800000000000, 0x3, 0x8000000000100]}) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000700)={{{@in=@remote, @in6}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000400)=0xffffffffffffff05) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) bind$inet(r2, &(0x7f0000b9bff0)={0x2, 0x2004e21}, 0x36c) r4 = socket$nl_generic(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r4, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000800)=ANY=[@ANYBLOB="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"]}) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x100000000000000, &(0x7f00000004c0)={@remote, 0x0}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000001c0)={r5, @loopback, @rand_addr=0x1cb}, 0xc) syz_open_procfs(r3, &(0x7f0000000040)='ns\x00') r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) timer_create(0x4, &(0x7f0000000180), &(0x7f00000001c0)) fcntl$getown(0xffffffffffffffff, 0x9) rt_sigqueueinfo(0x0, 0x4, &(0x7f0000000680)={0x3, 0x8}) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f00000003c0)='ip6_vti0\x00', 0x10) r7 = socket$l2tp(0x18, 0x1, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x4e21, 0x4, @loopback, 0xfffffffffffffffc}, 0x1c) connect$l2tp(r7, &(0x7f0000000380)=@pppol2tpv3={0x18, 0x1, {0x0, r6, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) r8 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000500)="0214e0cef3273d1c77035abcf37f6a8ac5cf7ea6be3b6095ba154fcd7d6c93970989eb400c755b1acb00e595", 0x2c, 0xfffffffffffffffb) r9 = add_key(&(0x7f0000000540)='user\x00', &(0x7f0000000580)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$reject(0x13, r8, 0xfffffffffffffff9, 0x4, r9) sendmmsg(r7, &(0x7f0000005fc0), 0x800000000000059, 0x0) 00:24:05 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200000000003, 0x9, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x4000000001, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000600)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iqv\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x00\x00\x00\x00\x00\x00\x00\xae\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00.g\x10H\xa8\xc9\x1f\xfc\x1e\xdfF\x16K\a@\x8c7\x1d!\xfd\xb0\xefW\x8f\xb8\x19\x8dS\xcer\x00SE\xdcD\xd2\x98\fy\x8dQ?7m\x9a\xe3\xca\xb0~\xdb*\xa7\xbf\xeftV\xa1\x94\x911\xa7\x8cYiY\xd2\xecF\xec\xb4/\xca\x97~^o\xd74\x11\'\xe1\xce\x06\xe1\xebV\xfd\xaa\x19\xd3\x14\xad\xea=o\xf2\x15g\xa9\xca\xa7\xc6\xd6\xaa\x86\xcc\x03\xcfD\xfe\x0f\xd4\xa7\x9f\xd8\n\x13T\x83\xdb\x19}\xf1\xa9\xac\x9eV\xb9\x15\x852\xfd\xaea\xff\xcb\x86d:\n\x85\x807]\x96\xb4\x96\xbc\xa6\xe6\x86\x80Gy\xfe\x8c\x1aV\xce\xb2h\xfd\xee*\xf0\xb3\xc38o\xac\x96Y\xa6\x81~\x8e\x8b@k\x7f\x88\xdd<}\x91\x83\xb0[\xff\xe3\xb9\xc6P\xd7\xc9\x87 \xef\xc9M\xa7\xbc\x1c\xa4~\x9b\xee\x94\x02&\x980\x10\x96\x96\\\x00\x00\x00\x00\x00', 0x0) pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000200)=',', 0x1}], 0x1, 0x4081806) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x2, &(0x7f0000002000)=ANY=[@ANYBLOB="b700000000004000070000000000000095000000000000"], 0x0, 0x1, 0xc3, &(0x7f0000006f3d)=""/195}, 0x48) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0x1000000000000f, &(0x7f0000000180)=0x57bb, 0x4) write$binfmt_elf64(r4, 0x0, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x34, &(0x7f00000000c0)=r3, 0x4) fsetxattr$trusted_overlay_origin(r3, &(0x7f0000000000)='trusted.overlay.origin\x00', &(0x7f0000000040)='y\x00', 0x2, 0x3) sendfile(r0, r2, 0x0, 0x20020102000007) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000003880), &(0x7f00000038c0)=0x4) 00:24:06 executing program 0: keyctl$setperm(0x5, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000080), &(0x7f0000000100)=0x4) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) getuid() ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000000)=0x6) ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:24:06 executing program 5: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='.\xea\b\x02\x00\x00\x00]p\v\xf6u\x00p\xcb`E\x8c\xd4`\xd2]\x97', 0x200002, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000001c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0}}, 0x20) r1 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x5, 0x644002) syz_genetlink_get_family_id$net_dm(&(0x7f0000000100)='NET_DM\x00') sendmsg$NET_DM_CMD_STOP(r1, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x300, 0x70bd28, 0x25dfdbfb, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0x84) r2 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) r3 = memfd_create(&(0x7f0000000000)='/dev/vbi#\x00', 0x4) ftruncate(r3, 0x1000000) sendfile(r2, r3, &(0x7f00000000c0)=0xf10002, 0xeffffdef) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r1, 0xc0305302, &(0x7f0000000240)={0x4, 0x3ff, 0x5, 0x400, 0xf151, 0xfffffffffffffff7}) close(r2) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000080)) 00:24:06 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x43d) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x1000001c3) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000000c0)=0x9, 0x4) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x4f3d1d6e) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 00:24:06 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000180)='net/tcp\x00', 0xffffffffffffffff}, 0x30) r2 = syz_open_procfs(r1, &(0x7f00000000c0)='net/\xf3\xe5\xa7Jv\x12zA;r\xe1\xfb\x02\x12\x1btcp\xbd\x0eD\x95\xa2\xd1\xc2(Q\x80\xf0\x95(\x12G\x96\xc0\xd7\xc1\xc1\xfc^\xcf\xbb\xceuZ\xe6\x91\xa5\a\x92R$\x8b\x90[{m\\\x8f*\x86\r\xf4\xd3NBAf\xca9\xa9\x04}\xc3\xe6\x19\\C*\xa3J\x12\xda\x03uuaf\xdf\x12\xd6\xf2\x0fX\xf7\xd6a1\xd0*\xc6\xf8\x7f\xd2\x86<\\\x18S') sendfile(r0, r2, 0x0, 0x4) 00:24:06 executing program 3: syz_open_dev$video(&(0x7f00000005c0)='/dev/video#\x00', 0x8, 0x8aa04) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) pkey_alloc(0x0, 0x1) pkey_alloc(0x0, 0x1) r0 = pkey_alloc(0x0, 0x1) pkey_free(r0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x140ffb, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x0, 0x0) r3 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r2, 0xc1105511, &(0x7f0000000240)={{0x0, 0x1, 0x80, 0x46, '\x00', 0x80}, 0x0, 0x20000160, 0x9, r3, 0x7, 0x2, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x03\x00', &(0x7f0000000440)=['/proc/sys/net/ipv4/vs/snat_reroute\x00', ']]', '^lowlan0vboxnet0\x00', 'selinux@\x00', 'bdev\x00', '\x00', 'ip6gre0\x00'], 0x4d, [], [0x3, 0x800000000000, 0x3, 0x8000000000100]}) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000700)={{{@in=@remote, @in6}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000400)=0xffffffffffffff05) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) bind$inet(r2, &(0x7f0000b9bff0)={0x2, 0x2004e21}, 0x36c) r4 = socket$nl_generic(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r4, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000800)=ANY=[@ANYBLOB="00bd0800000000000000c91df0a4a83109fd74aad282d2ef5d2ed0d2af2f7a005d87c9f39719d4d148649d471d24f45265359347e31612e80a971034903c3ffeb0000000f34669e4fd53f518a55c923b903428b1cd8cf464d3744822b7dca780aef5a887977f991dc24ab0e2775d2e1091589500021c1ea4870900000000000000eb4b24a052f2cfa267e45f5731f96ebde59df0b83acfdae902d1d2d27f2a3e2381e01f10839d4e53b5c332257b8c5c19482ccbab1507603a1efd893196e8eb1cc5fcd40496ba920e60df320c0000000016ea577c1c74676bca920ea6fed777b08b221714d462c6925b6e6c7e5288df22619e2c2a30000000c5032f62010000000000004570d991920000a1d3063a6f4c5d6723b210f2f8ecbf4f2b1a60196fb0a6e2be719b96db91d27b1a1e8ddbcd8f3622c23160cb26c529eaeed5d0c51522e29824b2b7daebb90369d71e35d198984390b71bad688a91fa0089c7051393c69563c313d945dded5561b1cb7bf010be7e8ba177dba713ecf4068e0e024f469f856d61e1477247ab013ca643079802f339d0800ff7d120e6e8010650f7185fc638c5cee557c413e3b145baf66b0e0e9cbae8c6e990a002a13751ccea9eb1f5079e1cced41862c6785362a49559c1a49e2b2977621a933b63d82bdfa721c76fe4a89f6f5c545c17d6efb56a1465c01be76cd598f8770c9521a065eaaf681b97e82eb1eb81216b3283e57ec8a529022e50f20bcfdbe8579fdd877f71700cef7c40f535465a287fef59d6b47c20f6bd759787dab7a49f27140a289b00000000d7e0fa7e84f66a1b483fc1baa55e0855287cb15ddb7a5a94508b649273428d2c6d84cc3ec5198553bf1b739de9b6b38ea3325ee5edea12ce8858ef363196b7bac462eb0fd733dc8d04314dc9af6c4cff620fb4fa2a285f0dcd69164000a90f93eff0cdeabe31fa74f96f49b0cbedc81ccd28ea8c873f8029d3e3c7602a0bdd5abab461e83fae6532c4d70402d3f6b08dd5dd5b511df8cb360a7d785120cfea9afaf1ef30d018cea6f9b942e2816e223e80c45a895b04b672bebeecbfe8037ef72b6c7fcadae43e9a75bc11b8f08a353134c37b7e2992d9f71d791d4a373ce4362205cd1596e0904426c5a248d90c827c74b1f306350d4619a29d64f738a8a75ea83b84bc01aa65cc332316bd8bbabf3efb3fb2c9ecd02a8005bc15af5e5a32c63a9e532c767578be61"]}) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x100000000000000, &(0x7f00000004c0)={@remote, 0x0}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000001c0)={r5, @loopback, @rand_addr=0x1cb}, 0xc) syz_open_procfs(r3, &(0x7f0000000040)='ns\x00') r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) timer_create(0x4, &(0x7f0000000180), &(0x7f00000001c0)) fcntl$getown(0xffffffffffffffff, 0x9) rt_sigqueueinfo(0x0, 0x4, &(0x7f0000000680)={0x3, 0x8}) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f00000003c0)='ip6_vti0\x00', 0x10) r7 = socket$l2tp(0x18, 0x1, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x4e21, 0x4, @loopback, 0xfffffffffffffffc}, 0x1c) connect$l2tp(r7, &(0x7f0000000380)=@pppol2tpv3={0x18, 0x1, {0x0, r6, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) r8 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000500)="0214e0cef3273d1c77035abcf37f6a8ac5cf7ea6be3b6095ba154fcd7d6c93970989eb400c755b1acb00e595", 0x2c, 0xfffffffffffffffb) r9 = add_key(&(0x7f0000000540)='user\x00', &(0x7f0000000580)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$reject(0x13, r8, 0xfffffffffffffff9, 0x4, r9) sendmmsg(r7, &(0x7f0000005fc0), 0x800000000000059, 0x0) 00:24:06 executing program 2: r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x32, &(0x7f0000000040)={@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff]}, 0x800}, 0x20) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0xe3f, @rand_addr="4169aa4f8b1436cbf2a280fe95ab2c37", 0x2e0}, 0x1c) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f0000000080)={'HL\x00'}, &(0x7f0000000100)=0x1e) pause() 00:24:06 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000008c0)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\x00', 0x19, 0x2, 0x23c, [0x20000500, 0x0, 0x0, 0x20000530, 0x2000066c], 0x0, 0x0, &(0x7f0000000500)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0x0, 0x1, [{{{0x5, 0x0, 0x0, 'bond_slave_1\x00', 'veth1_to_bond\x00', 'lo\x00', 'veth1\x00', @dev, [], @empty, [], 0xac, 0xdc, 0x10c, [@limit={'limit\x00', 0x18}]}, [@arpreply={'arpreply\x00', 0xc, {{@remote}}}]}, @arpreply={'arpreply\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0x0, 0x1, [{{{0x5, 0x0, 0x0, 'syz_tun\x00', 'yam0\x00', 'veth1\x00', 'gre0\x00', @empty, [], @broadcast, [], 0x70, 0x70, 0xa0}}, @common=@dnat={'dnat\x00', 0xc, {{@local}}}}]}]}, 0x28c) 00:24:07 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'veth0_to_hsr\x00', 0x1000}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'veth0_to_bridge\x00'}) [ 189.968872][ T9371] Dead loop on virtual device ip6_vti0, fix it urgently! [ 189.991044][ T9371] Dead loop on virtual device ip6_vti0, fix it urgently! 00:24:07 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa4, 0xbc, 0x0, {"2a3e2b33ae707668b18a6ed20cbb559216293215e2d42288a19be4fec1426db50ecf025774a78d9385a19c8a0470271712e7b12eed93cdfdcac4616828a42eb6e1636be8aec3f6fe372232698120f29ba7a09653c39614e6cd187427bc416acfb567a4eb7ea74a033d098a74df075b54e0dee50932f393f16ec41a289dcb4e0297b8a6239a8536f426935f4af4bcd166350ccf4e5e430759ba6cf55050a9b0993c317478"}}, {0x0, "4490e3448868317eb801accbbc7d9e2742871ccc2a3310c5c83c946f94302d14c06e4f869f4760bab8c0185f63305eaf98335327b47ee9292625493e9008ac99c8548bc6a6ad60324c236e4e9c24d71bfc22f17dc9619db37851902cd6706b78257b652c3d9c1faaa4e340eb0ecc689a71df3ce5ec13a122542d48bcce80ebe5892b2f14ec06bda8dfe35592155eec6e6c72a90bf20b86ff33d7ab0579e0c31846f61e6d15d46ceb89006f8d82d4a037c09f8abc180d607ae3429cc0d06857"}}, &(0x7f0000000340)=""/138, 0x17d, 0x8a, 0x1}, 0x20) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x40, 0x0) open(&(0x7f00000000c0)='.\x00', 0x410602, 0x0) 00:24:07 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = accept4$packet(0xffffffffffffff9c, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000040)=0x14, 0x80800) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000080)={{{@in=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@remote}}, &(0x7f0000000240)=0xe8) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000001c0)={r2, 0x1, 0x6, @broadcast}, 0x10) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000200)={0x11000000}, 0xc) [ 190.486277][ T9371] Dead loop on virtual device ip6_vti0, fix it urgently! 00:24:07 executing program 3: syz_open_dev$video(&(0x7f00000005c0)='/dev/video#\x00', 0x8, 0x8aa04) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) pkey_alloc(0x0, 0x1) pkey_alloc(0x0, 0x1) r0 = pkey_alloc(0x0, 0x1) pkey_free(r0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x140ffb, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x0, 0x0) r3 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r2, 0xc1105511, &(0x7f0000000240)={{0x0, 0x1, 0x80, 0x46, '\x00', 0x80}, 0x0, 0x20000160, 0x9, r3, 0x7, 0x2, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x03\x00', &(0x7f0000000440)=['/proc/sys/net/ipv4/vs/snat_reroute\x00', ']]', '^lowlan0vboxnet0\x00', 'selinux@\x00', 'bdev\x00', '\x00', 'ip6gre0\x00'], 0x4d, [], [0x3, 0x800000000000, 0x3, 0x8000000000100]}) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000700)={{{@in=@remote, @in6}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000400)=0xffffffffffffff05) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) bind$inet(r2, &(0x7f0000b9bff0)={0x2, 0x2004e21}, 0x36c) r4 = socket$nl_generic(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r4, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000800)=ANY=[@ANYBLOB="00bd0800000000000000c91df0a4a83109fd74aad282d2ef5d2ed0d2af2f7a005d87c9f39719d4d148649d471d24f45265359347e31612e80a971034903c3ffeb0000000f34669e4fd53f518a55c923b903428b1cd8cf464d3744822b7dca780aef5a887977f991dc24ab0e2775d2e1091589500021c1ea4870900000000000000eb4b24a052f2cfa267e45f5731f96ebde59df0b83acfdae902d1d2d27f2a3e2381e01f10839d4e53b5c332257b8c5c19482ccbab1507603a1efd893196e8eb1cc5fcd40496ba920e60df320c0000000016ea577c1c74676bca920ea6fed777b08b221714d462c6925b6e6c7e5288df22619e2c2a30000000c5032f62010000000000004570d991920000a1d3063a6f4c5d6723b210f2f8ecbf4f2b1a60196fb0a6e2be719b96db91d27b1a1e8ddbcd8f3622c23160cb26c529eaeed5d0c51522e29824b2b7daebb90369d71e35d198984390b71bad688a91fa0089c7051393c69563c313d945dded5561b1cb7bf010be7e8ba177dba713ecf4068e0e024f469f856d61e1477247ab013ca643079802f339d0800ff7d120e6e8010650f7185fc638c5cee557c413e3b145baf66b0e0e9cbae8c6e990a002a13751ccea9eb1f5079e1cced41862c6785362a49559c1a49e2b2977621a933b63d82bdfa721c76fe4a89f6f5c545c17d6efb56a1465c01be76cd598f8770c9521a065eaaf681b97e82eb1eb81216b3283e57ec8a529022e50f20bcfdbe8579fdd877f71700cef7c40f535465a287fef59d6b47c20f6bd759787dab7a49f27140a289b00000000d7e0fa7e84f66a1b483fc1baa55e0855287cb15ddb7a5a94508b649273428d2c6d84cc3ec5198553bf1b739de9b6b38ea3325ee5edea12ce8858ef363196b7bac462eb0fd733dc8d04314dc9af6c4cff620fb4fa2a285f0dcd69164000a90f93eff0cdeabe31fa74f96f49b0cbedc81ccd28ea8c873f8029d3e3c7602a0bdd5abab461e83fae6532c4d70402d3f6b08dd5dd5b511df8cb360a7d785120cfea9afaf1ef30d018cea6f9b942e2816e223e80c45a895b04b672bebeecbfe8037ef72b6c7fcadae43e9a75bc11b8f08a353134c37b7e2992d9f71d791d4a373ce4362205cd1596e0904426c5a248d90c827c74b1f306350d4619a29d64f738a8a75ea83b84bc01aa65cc332316bd8bbabf3efb3fb2c9ecd02a8005bc15af5e5a32c63a9e532c767578be61"]}) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x100000000000000, &(0x7f00000004c0)={@remote, 0x0}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000001c0)={r5, @loopback, @rand_addr=0x1cb}, 0xc) syz_open_procfs(r3, &(0x7f0000000040)='ns\x00') r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) timer_create(0x4, &(0x7f0000000180), &(0x7f00000001c0)) fcntl$getown(0xffffffffffffffff, 0x9) rt_sigqueueinfo(0x0, 0x4, &(0x7f0000000680)={0x3, 0x8}) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f00000003c0)='ip6_vti0\x00', 0x10) r7 = socket$l2tp(0x18, 0x1, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x4e21, 0x4, @loopback, 0xfffffffffffffffc}, 0x1c) connect$l2tp(r7, &(0x7f0000000380)=@pppol2tpv3={0x18, 0x1, {0x0, r6, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) r8 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000500)="0214e0cef3273d1c77035abcf37f6a8ac5cf7ea6be3b6095ba154fcd7d6c93970989eb400c755b1acb00e595", 0x2c, 0xfffffffffffffffb) r9 = add_key(&(0x7f0000000540)='user\x00', &(0x7f0000000580)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$reject(0x13, r8, 0xfffffffffffffff9, 0x4, r9) sendmmsg(r7, &(0x7f0000005fc0), 0x800000000000059, 0x0) 00:24:07 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x43d) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x1000001c3) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000400)={0x0, 0x8d9c, 0x10002}, 0x14) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x4f3d1d6e) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 00:24:09 executing program 1: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0x0, 0x800) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r0, 0xfffffffffffffffc) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/dsp\x00', 0x8000000007ffe, 0x0) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) bind$pptp(r1, &(0x7f00000001c0)={0x18, 0x2, {0x0, @empty}}, 0x1e) r4 = open(&(0x7f000000fffa)='./bus\x00', 0x28800, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r4, 0x0) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000240)={0x7fff, 0xfc1b, 0x7, 0x81, 0x1, 0x1ff, 0x0, 0x3}, &(0x7f0000000280)={0x40, 0x0, 0x80000000000, 0x2, 0x3, 0x2, 0x97d4, 0xfffffffffffffffd}, &(0x7f00000002c0)={0x34, 0x20, 0x7, 0x400, 0x101, 0xab, 0x1}, &(0x7f0000000340)={r5, r6+30000000}, &(0x7f00000003c0)={&(0x7f0000000380), 0x8}) read(r2, &(0x7f0000000000)=""/250, 0x128b9372) 00:24:09 executing program 2: r0 = getpid() shmget(0x1, 0x2000, 0x220, &(0x7f0000ffd000/0x2000)=nil) ptrace$setregs(0xf, r0, 0x1, &(0x7f0000000040)="23ae9a35fbfe3445ffb978c10321d5898f0d6b19689abd63ac454cf382b9e57dea4647e3f495eb2dcb5aad1a6ba47e7bcf1a8dd784ac60fba92f38449ea9d2735dab5dee23b4d3a88077b36c519a7d6e8c26d1588a98a849391f6a2b2723dc002fa72369b849c7a0cff82d98cb160bdc5cbd3ad98e5ae3064da4ba23eb927e166cc9feb3e0112700bf24ecabbd67d04b333b01") rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) shmget(0x0, 0x1000, 0x10, &(0x7f0000ffe000/0x1000)=nil) pipe2$9p(&(0x7f0000000140), 0xa6281b48cad38377) r2 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x9, 0x80000) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000100)=[@in={0x2, 0x4e24, @empty}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x20) setsockopt$RXRPC_SECURITY_KEY(r1, 0x110, 0x1, &(0x7f0000000180)='.posix_acl_aacess1)system\x00a\xf8\xd8\xe1n\xc2\x9c3I\xb2\x9a\xc2t\xa8\x12Ey`e(\xc9w?\xaf\xe6\xd5\xfbqm\x9b\x1f$\x99\xa1\x8d\v\xcfVEql6^\xd7\xc9\x1cA\xa4\x06\xe1u\xa9\xc5\x80\x99n2\x89\x92', 0x17e) 00:24:09 executing program 0: keyctl$setperm(0x5, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000080), &(0x7f0000000100)=0x4) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) getuid() ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000000)=0x6) ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:24:09 executing program 3: mkdir(&(0x7f00000000c0)='./file0\x00', 0x80) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000080)='./file0\x00') umount2(&(0x7f0000b1d000)='.', 0x2) open(&(0x7f00000001c0)='./file0\x00', 0x8040, 0x0) mount(&(0x7f0000000000)=@md0='/dev/md0\x00', &(0x7f0000000880)='./file0\x00', 0x0, 0x101080, 0x0) 00:24:09 executing program 5: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='.\xea\b\x02\x00\x00\x00]p\v\xf6u\x00p\xcb`E\x8c\xd4`\xd2]\x97', 0x200002, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000001c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0}}, 0x20) r1 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x5, 0x644002) syz_genetlink_get_family_id$net_dm(&(0x7f0000000100)='NET_DM\x00') sendmsg$NET_DM_CMD_STOP(r1, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x300, 0x70bd28, 0x25dfdbfb, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0x84) r2 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) r3 = memfd_create(&(0x7f0000000000)='/dev/vbi#\x00', 0x4) ftruncate(r3, 0x1000000) sendfile(r2, r3, &(0x7f00000000c0)=0xf10002, 0xeffffdef) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r1, 0xc0305302, &(0x7f0000000240)={0x4, 0x3ff, 0x5, 0x400, 0xf151, 0xfffffffffffffff7}) close(r2) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000080)) 00:24:09 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x43d) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x1000001c3) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000400)={0x0, 0x8d9c, 0x10002}, 0x14) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x4f3d1d6e) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 00:24:09 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x3, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x53d) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xd) 00:24:10 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x43d) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x1000001c3) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000400)={0x0, 0x8d9c, 0x10002}, 0x14) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x4f3d1d6e) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 00:24:10 executing program 2: r0 = getpid() shmget(0x1, 0x2000, 0x220, &(0x7f0000ffd000/0x2000)=nil) ptrace$setregs(0xf, r0, 0x1, &(0x7f0000000040)="23ae9a35fbfe3445ffb978c10321d5898f0d6b19689abd63ac454cf382b9e57dea4647e3f495eb2dcb5aad1a6ba47e7bcf1a8dd784ac60fba92f38449ea9d2735dab5dee23b4d3a88077b36c519a7d6e8c26d1588a98a849391f6a2b2723dc002fa72369b849c7a0cff82d98cb160bdc5cbd3ad98e5ae3064da4ba23eb927e166cc9feb3e0112700bf24ecabbd67d04b333b01") rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) shmget(0x0, 0x1000, 0x10, &(0x7f0000ffe000/0x1000)=nil) pipe2$9p(&(0x7f0000000140), 0xa6281b48cad38377) r2 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x9, 0x80000) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000100)=[@in={0x2, 0x4e24, @empty}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x20) setsockopt$RXRPC_SECURITY_KEY(r1, 0x110, 0x1, &(0x7f0000000180)='.posix_acl_aacess1)system\x00a\xf8\xd8\xe1n\xc2\x9c3I\xb2\x9a\xc2t\xa8\x12Ey`e(\xc9w?\xaf\xe6\xd5\xfbqm\x9b\x1f$\x99\xa1\x8d\v\xcfVEql6^\xd7\xc9\x1cA\xa4\x06\xe1u\xa9\xc5\x80\x99n2\x89\x92', 0x17e) 00:24:10 executing program 1: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETVERSION(r0, 0x40047602, &(0x7f0000000000)=0x9) close(r0) 00:24:10 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="01070013000000"], 0x14}}, 0x0) 00:24:10 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x43d) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x1000001c3) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000400)={0x0, 0x8d9c, 0x10002}, 0x14) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x4f3d1d6e) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 00:24:10 executing program 2: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000380)={0x2, 0x4e23}, 0x10) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @remote}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, 0x0, 0x0) 00:24:10 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @ipv4}}}, 0x104) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = dup3(r1, r0, 0x80000) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, 0x0, &(0x7f0000000300)) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, 0x0, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000140), 0x4) preadv(0xffffffffffffffff, 0x0, 0x0, 0x7ffffffff000) socket$inet6_dccp(0xa, 0x6, 0x0) 00:24:12 executing program 0: keyctl$setperm(0x5, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000080), &(0x7f0000000100)=0x4) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) getuid() ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000000)=0x6) ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:24:12 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x4000, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x0, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc2c45512, &(0x7f0000000280)={{0x6, 0x7, 0x0, 0x80000001, 'syz0\x00', 0x10001}, 0x1, [0x8, 0x101, 0x9a, 0x4, 0x8001, 0xfffffffffffffffd, 0x1, 0x7fff, 0x7fffffff, 0xf5a, 0x10001, 0xffffffff, 0xf3e, 0xffffffff, 0x8001, 0x4, 0x7f, 0x8001, 0x4, 0x1, 0x46, 0x1, 0x8, 0x6, 0x8, 0x4, 0x10, 0x5, 0x2, 0x2, 0x7aa, 0x3, 0x0, 0xfffffffffffffffc, 0x8, 0x9, 0x4, 0x1, 0x4, 0x100, 0x100, 0xffffffffffffffff, 0x8, 0x80, 0x3, 0xffffffff, 0x20, 0x6, 0x9, 0x200, 0x8, 0x8, 0x7, 0x3, 0x7fff, 0x1, 0x3, 0x5, 0x4, 0x4, 0xfff, 0x80000000, 0x0, 0x53bf, 0x9, 0x1, 0x2, 0xff, 0x3, 0x7d, 0x5, 0x6, 0x2, 0x4, 0x0, 0x4, 0x2, 0xc7, 0x2e8, 0x401, 0x3, 0x6, 0x0, 0xa00000, 0x7a, 0x7, 0x6, 0xfff, 0x3, 0x4, 0x3ff, 0x101, 0x0, 0x1, 0x4, 0x6, 0x7, 0x4, 0x6, 0x1, 0x3, 0x5, 0x1ff, 0x9, 0xfffffffffffffff9, 0x6, 0x9, 0x6, 0x42, 0x8, 0x79, 0x3, 0x80000000, 0x80000000, 0x0, 0x3, 0x45, 0x0, 0x8, 0x5, 0x401, 0x700000000, 0x4, 0x4, 0x7fffffff, 0x101, 0x9, 0x250a00]}) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x10800, 0x0) getgroups(0x0, 0x0) unshare(0x4a000000) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000180)={0x8, 0x6, 0x2, 0xff, 0x4, [{0xb4bc, 0x5, 0x8000, 0x0, 0x0, 0x1000}, {0x101, 0xeb10, 0xffffffffffffffff, 0x0, 0x0, 0x2000}, {0x80, 0x3, 0x3, 0x0, 0x0, 0xc09}, {0x4, 0x7, 0x200, 0x0, 0x0, 0x2}]}) 00:24:12 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x43d) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000400)={0x0, 0x8d9c, 0x10002}, 0x14) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x4f3d1d6e) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 00:24:12 executing program 2: syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000779000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f0000002ff0), 0x10) write$binfmt_misc(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="6379e5c5"], 0x1200e) openat$mixer(0xffffffffffffff9c, &(0x7f0000000480)='/dev/mixer\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000002480)=[{&(0x7f0000002400)}], 0x1, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020012, 0xffffffffffffffff, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/self/net/pfkey\x00', 0x40000, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740)='TIPCv2\x00') openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0x200000, 0x0) sendmsg$TIPC_NL_SOCK_GET(r2, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, r3, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8001}, 0x40041) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x3, 0x0, &(0x7f00000004c0)='8)1'}) r4 = creat(&(0x7f0000000580)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8008000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r4, 0x84, 0x21, &(0x7f0000000100), &(0x7f0000000140)=0x4) close(r5) chown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) 00:24:12 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @ipv4}}}, 0x104) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = dup3(r1, r0, 0x80000) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, 0x0, &(0x7f0000000300)) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, 0x0, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000140), 0x4) preadv(0xffffffffffffffff, 0x0, 0x0, 0x7ffffffff000) socket$inet6_dccp(0xa, 0x6, 0x0) 00:24:12 executing program 5: r0 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x4, 0x206000) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f0000000240)={0x6, 0xe0, 0xffffffffffffffff, 0xffffffffffffff7f, 0x8, 0x1}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x005\xf6\x91\xc6\xcf\xecf\xe4\x8d\xa3<\xc1\"+\x04\x00\x00\x00\x00\x00\x00\x00\xf9\x9f\x06\xa24\xe9\t\x83\x99\xb3\x18\x04\xf6\xb9\x82/*[\xcd\xd1\xcaJ\x10$\x83\x1d') ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f00000000c0)={[0x0, 0x7, 0xffffffffffffffc1, 0x0, 0x6, 0x99f8, 0x7, 0x80, 0xf95e, 0x8, 0x7f, 0x10001, 0x1, 0x1, 0x0, 0x4], 0x5000, 0x800}) preadv(r1, &(0x7f0000000480), 0x1000000000000237, 0x0) 00:24:13 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4002}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000000)=0x1) r2 = socket$inet6(0xa, 0x40000080806, 0x0) lremovexattr(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=@known='trusted.overlay.impure\x00') connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000040)={0x1, 0xdf5e}, 0x8) close(r2) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="c54a1ddd51acd77d0c18f12bbd0e"], 0xfffffff4) [ 196.222848][ T9486] device nr0 entered promiscuous mode [ 196.248651][ T9478] IPVS: ftp: loaded support on port[0] = 21 00:24:13 executing program 2: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000200), 0x10) sendmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="050000000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x7530, @ANYBLOB="00000000010000000000000000000000388dbba2b150d176ada39f8eb8e60393887ce5ee5595c27efd4f0c2f6df303d67a646e79b8501035a60000fb5c9e7da9ee0de47b42"], 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x5, 0x0, 0xffffffffffffffff, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "c4d981aeb150d176"}}, 0x34}}, 0x0) 00:24:13 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000040)) r1 = socket$kcm(0x11, 0x3, 0x0) sendmsg(r1, &(0x7f00000002c0)={&(0x7f0000000140)=@nfc={0x103, 0x14}, 0x80, &(0x7f0000000100)=[{&(0x7f00000001c0)="9cabbf0400cbb140419b8000810050aba019062cf6a8d5ebdd6da66a1543059bc73ece88", 0x24}], 0x1}, 0x0) 00:24:13 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x43d) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000400)={0x0, 0x8d9c, 0x10002}, 0x14) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x4f3d1d6e) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 00:24:13 executing program 5: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) 00:24:13 executing program 5: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x2200, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f00000000c0)=0x1d, 0x4) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, 0x0, &(0x7f0000000100)=0x54) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x48000, 0x0) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000040)={@broadcast, @multicast2, 0x1, 0xa, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x22}, @empty, @multicast1, @rand_addr=0x7, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @empty, @broadcast, @dev={0xac, 0x14, 0x14, 0x29}]}, 0x38) 00:24:16 executing program 0: keyctl$setperm(0x5, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000080), &(0x7f0000000100)=0x4) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) getuid() ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000000)=0x6) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:24:16 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x2bd, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x2, 0xa}}, 0xffffffffffffffe5) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {0x0, r1, 0x4}}, 0xffffffffffffff2c) 00:24:16 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x82000) ioctl$KDGKBLED(0xffffffffffffffff, 0x4b64, &(0x7f00000001c0)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x1, 0x0) getsockopt$inet6_buf(r1, 0x29, 0x45, &(0x7f0000000540)=""/4096, &(0x7f0000000180)=0x1000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc)) prctl$PR_MCE_KILL(0x21, 0x1, 0x1) r5 = syz_open_pts(r3, 0x0) ppoll(&(0x7f00000000c0)=[{r5}], 0x3e, 0x0, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) getsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f0000000040), &(0x7f0000000080)=0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000140)='lp\x00', 0x3) open(0x0, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) bind$rxrpc(0xffffffffffffffff, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) nanosleep(0x0, 0x0) ioctl$FIONREAD(r3, 0x541b, &(0x7f0000000000)) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FICLONERANGE(r1, 0x4020940d, 0x0) recvfrom$inet6(r2, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c) sendto$inet6(r2, &(0x7f0000000500)="2ff6", 0x2, 0x0, 0x0, 0x0) r6 = accept4(r1, 0x0, 0x0, 0x0) sendto$inet6(r6, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 00:24:16 executing program 5: syz_emit_ethernet(0x82, &(0x7f0000000140)={@random="458c61936df8", @empty, [], {@ipv6={0x86dd, {0x0, 0x6, '\"[s', 0x4c, 0x88, 0x0, @dev, @local, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x8, 0x3, [], "fd5597af963c077d"}}}}}}}, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x20040, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={0xffffffffffffffff}, 0xd9dfe70f9ecf68f6, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000040)=0xf2a, r1, 0x0, 0x0, 0x1}}, 0x20) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000200)='/proc/capi/capi20ncci\x00', 0x1, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000240)=0x1, 0x4) ioctl$KVM_GET_TSC_KHZ(r0, 0xaea3) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r0) 00:24:16 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x4000, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x0, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc2c45512, &(0x7f0000000280)={{0x6, 0x7, 0x0, 0x80000001, 'syz0\x00', 0x10001}, 0x1, [0x8, 0x101, 0x9a, 0x4, 0x8001, 0xfffffffffffffffd, 0x1, 0x7fff, 0x7fffffff, 0xf5a, 0x10001, 0xffffffff, 0xf3e, 0xffffffff, 0x8001, 0x4, 0x7f, 0x8001, 0x4, 0x1, 0x46, 0x1, 0x8, 0x6, 0x8, 0x4, 0x10, 0x5, 0x2, 0x2, 0x7aa, 0x3, 0x0, 0xfffffffffffffffc, 0x8, 0x9, 0x4, 0x1, 0x4, 0x100, 0x100, 0xffffffffffffffff, 0x8, 0x80, 0x3, 0xffffffff, 0x20, 0x6, 0x9, 0x200, 0x8, 0x8, 0x7, 0x3, 0x7fff, 0x1, 0x3, 0x5, 0x4, 0x4, 0xfff, 0x80000000, 0x0, 0x53bf, 0x9, 0x1, 0x2, 0xff, 0x3, 0x7d, 0x5, 0x6, 0x2, 0x4, 0x0, 0x4, 0x2, 0xc7, 0x2e8, 0x401, 0x3, 0x6, 0x0, 0xa00000, 0x7a, 0x7, 0x6, 0xfff, 0x3, 0x4, 0x3ff, 0x101, 0x0, 0x1, 0x4, 0x6, 0x7, 0x4, 0x6, 0x1, 0x3, 0x5, 0x1ff, 0x9, 0xfffffffffffffff9, 0x6, 0x9, 0x6, 0x42, 0x8, 0x79, 0x3, 0x80000000, 0x80000000, 0x0, 0x3, 0x45, 0x0, 0x8, 0x5, 0x401, 0x700000000, 0x4, 0x4, 0x7fffffff, 0x101, 0x9, 0x250a00]}) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x10800, 0x0) getgroups(0x0, 0x0) unshare(0x4a000000) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000180)={0x8, 0x6, 0x2, 0xff, 0x4, [{0xb4bc, 0x5, 0x8000, 0x0, 0x0, 0x1000}, {0x101, 0xeb10, 0xffffffffffffffff, 0x0, 0x0, 0x2000}, {0x80, 0x3, 0x3, 0x0, 0x0, 0xc09}, {0x4, 0x7, 0x200, 0x0, 0x0, 0x2}]}) 00:24:16 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x43d) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000400)={0x0, 0x8d9c, 0x10002}, 0x14) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x4f3d1d6e) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 00:24:16 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000300)=0x0) fcntl$lock(r0, 0x0, &(0x7f0000000340)={0x2, 0x2, 0x80, 0x0, r2}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x400, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000040)={0x0, @in6={{0xa, 0x4e20, 0x7, @remote, 0x1}}, [0x5, 0x7, 0x3, 0x3, 0x5, 0xda, 0x100, 0x2, 0x1000, 0x6, 0x6f96, 0x1, 0x9, 0x1, 0x3]}, &(0x7f0000000140)=0x100) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r3, 0x84, 0x19, &(0x7f00000001c0)={r4, 0xfffffffffffffff7}, 0x8) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000200)={0x80ffff, 0x0, @ioapic}) [ 199.046071][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 199.124688][ T9528] IPVS: ftp: loaded support on port[0] = 21 00:24:16 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x800, 0x0) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f0000000100)={0x0, 0x8, 0x5a74, &(0x7f00000000c0)=0x9}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$PPPIOCGUNIT(r0, 0x80047456, &(0x7f0000000140)) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="48000000100001040200fe3e3a9e61a01adfac907cfbfc7cb169d762dba8d69416d44362cec4302359faf41a54a965c4bb97", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012000c000100697036677265000018000200140003000f000000000000000000000000000001"], 0x48}}, 0x0) perf_event_open(&(0x7f0000000600)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @ipv4}}}, 0x108) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r3, &(0x7f0000000100), 0x2df, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x7704, 0x0) 00:24:16 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r0, &(0x7f0000000140)={&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000080)=""/97, 0x61}, {&(0x7f0000000480)=""/131, 0x83}, {&(0x7f0000000540)=""/152, 0x98}], 0x3, &(0x7f0000000280)=""/105, 0x69}, 0x100) r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getown(r2, 0x9) unlink(0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000600)={0x0, @in6={{0xa, 0x4e23, 0x3, @mcast1, 0x3}}}, &(0x7f0000000240)=0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000380)={r3}, &(0x7f00000003c0)=0x8) r4 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="0000000000000000c9729ba9"]], 0x0, 0x0, 0x0}) [ 199.335680][ T9546] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 199.413114][ T9549] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 199.508138][ T9552] binder: 9550:9552 transaction failed 29189/-22, size 0-8 line 2994 00:24:16 executing program 1: r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000), 0x4) ftruncate(r0, 0x3ff) r1 = memfd_create(&(0x7f0000003000)='\x00', 0x4) fcntl$dupfd(r1, 0x40a, 0xffffffffffffffff) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x20000, 0x0) 00:24:16 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) semget(0xffffffffffffffff, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r3 = dup2(r0, r2) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, 0x0) semctl$SEM_STAT(0x0, 0x7, 0x12, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, 0x0, &(0x7f0000000640)) fstat(r3, 0x0) getgid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f0000000100)={[], 0x101, 0xe50000000000000, 0x1000, 0x0, 0x8000, 0x3000, 0x5, [], 0x4}) dup3(r2, r1, 0x0) 00:24:16 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x1000001c3) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000400)={0x0, 0x8d9c, 0x10002}, 0x14) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x4f3d1d6e) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 00:24:16 executing program 0: keyctl$setperm(0x5, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000080), &(0x7f0000000100)=0x4) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) getuid() ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000000)=0x6) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:24:16 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4000000000000024, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x7, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000080)=0xffffffff, 0x4) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000040)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 00:24:17 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000bc0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58) r1 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$audion(0x0, 0x0, 0x40) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000980)={r2, 0x0, 0x2f, 0x0, &(0x7f00000004c0)="d1f1d767f4baf6f5665c932993103e087b9c873249e32776d11594cc42c0e621dfe8b3e2d295783ac7cd20257973fb", 0x0}, 0x28) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, 0x0, &(0x7f0000000900)) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffff9c, 0x84, 0x6f, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)}, &(0x7f0000000440)=0xc) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000140)=0x3) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000a40)={0x0, @in6={{0xa, 0x0, 0x1000000020000, @remote, 0x4}}, 0x7e, 0x0, 0x8, 0x3e2d, 0xa8}, &(0x7f0000000580)=0x98) socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000b40)=ANY=[], &(0x7f0000000540)) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10) r3 = accept4$alg(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f00000005c0)={0x10001}, 0x1) sendmmsg$alg(r3, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0) sendmsg$alg(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000006c0)="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", 0x1af}], 0x1}, 0x0) recvmmsg(r3, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0xf}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000600)=""/154, 0x9a}}], 0x1, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x6}, &(0x7f0000000040)=0x20) syz_open_dev$sndpcmp(&(0x7f00000003c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x40) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="cf010001270300001000000088050000c6030000ff0700000000000000000000a048b6f062b58c89ed46213559d4c067a088ffc84e423ab183210342c60fd28b8a18d3f9ba96b3532dad6206790dff9a958eae9d404180a096ca49780ef76f624598e4a377c84cb1acf44874a53fbac1c5f2ae7f5b93a734"], 0x6d) clone(0x8000000200020fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) ioctl$sock_ifreq(r3, 0x8994, &(0x7f0000000380)={'veth1_to_bond\x00', @ifru_names='bond0\x00'}) getpid() getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000340)) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000280)=@req3={0xffffffff, 0x2, 0x1ed3, 0x6, 0x4, 0x2, 0x2}, 0x1c) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x4000, 0x0) 00:24:17 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) semget(0xffffffffffffffff, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r3 = dup2(r0, r2) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, 0x0) semctl$SEM_STAT(0x0, 0x7, 0x12, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, 0x0, &(0x7f0000000640)) fstat(r3, 0x0) getgid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f0000000100)={[], 0x101, 0xe50000000000000, 0x1000, 0x0, 0x8000, 0x3000, 0x5, [], 0x4}) dup3(r2, r1, 0x0) [ 200.033294][ T9571] FAULT_FLAG_ALLOW_RETRY missing 30 [ 200.059941][ T9571] CPU: 0 PID: 9571 Comm: syz-executor.3 Not tainted 5.1.0-rc1+ #34 [ 200.069394][ T9571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 200.079716][ T9571] Call Trace: [ 200.083051][ T9571] dump_stack+0x172/0x1f0 [ 200.087403][ T9571] handle_userfault.cold+0x41/0x5d [ 200.092527][ T9571] ? __lock_acquire+0x548/0x3fb0 [ 200.102803][ T9571] ? userfaultfd_ioctl+0x3aa0/0x3aa0 [ 200.108111][ T9571] ? __handle_mm_fault+0x360c/0x3ec0 [ 200.113416][ T9571] ? find_held_lock+0x35/0x130 [ 200.118185][ T9571] ? __handle_mm_fault+0x360c/0x3ec0 [ 200.123487][ T9571] ? kasan_check_write+0x14/0x20 [ 200.128434][ T9571] ? lock_downgrade+0x880/0x880 [ 200.133290][ T9571] ? kasan_check_read+0x11/0x20 [ 200.138145][ T9571] ? do_raw_spin_unlock+0x57/0x270 [ 200.143264][ T9571] __handle_mm_fault+0x361d/0x3ec0 [ 200.148386][ T9571] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 200.153942][ T9571] ? find_held_lock+0x35/0x130 [ 200.158871][ T9571] ? handle_mm_fault+0x322/0xb30 [ 200.163850][ T9571] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 200.170123][ T9571] ? kasan_check_read+0x11/0x20 [ 200.170147][ T9571] handle_mm_fault+0x43f/0xb30 [ 200.170178][ T9571] __do_page_fault+0x5ef/0xda0 [ 200.184566][ T9571] do_page_fault+0x71/0x581 [ 200.189085][ T9571] page_fault+0x1e/0x30 [ 200.193268][ T9571] RIP: 0010:copy_user_generic_unrolled+0x9e/0xc0 [ 200.199621][ T9571] Code: 48 8d 7f 40 ff c9 75 b6 89 d1 83 e2 07 c1 e9 03 74 12 4c 8b 06 4c 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 89 d1 <8a> 06 88 07 48 ff c6 48 ff c7 ff c9 75 f2 31 c0 0f 1f 00 c3 0f 1f [ 200.219229][ T9571] RSP: 0018:ffff888058b67bd8 EFLAGS: 00010202 [ 200.225295][ T9571] RAX: 0000000000000004 RBX: 0000000000000004 RCX: 0000000000000004 [ 200.234264][ T9571] RDX: 0000000000000004 RSI: 0000000020013e95 RDI: ffff888058b67c80 [ 200.242242][ T9571] RBP: ffff888058b67c10 R08: 1ffff1100b16cf90 R09: ffffed100b16cf91 [ 200.250222][ T9571] R10: ffffed100b16cf90 R11: 0000000000000003 R12: 0000000020013e95 [ 200.258207][ T9571] R13: 0000000020013e99 R14: ffff888058b67c80 R15: 00007ffffffff000 [ 200.266304][ T9571] ? _copy_from_user+0x10b/0x150 [ 200.271342][ T9571] sctp_setsockopt+0xcfc/0x68a0 [ 200.276213][ T9571] ? sctp_setsockopt_paddr_thresholds+0x540/0x540 [ 200.282641][ T9571] ? ___might_sleep+0x163/0x280 [ 200.287500][ T9571] ? __might_sleep+0x95/0x190 [ 200.292197][ T9571] ? debug_lockdep_rcu_enabled+0x71/0xa0 [ 200.298089][ T9571] ? aa_sk_perm+0x288/0x880 [ 200.302599][ T9571] ? aa_sock_opt_perm.isra.0+0xa1/0x130 [ 200.308148][ T9571] compat_sock_common_setsockopt+0x10e/0x150 [ 200.314132][ T9571] __compat_sys_setsockopt+0x181/0x380 [ 200.319595][ T9571] ? sock_common_setsockopt+0xe0/0xe0 [ 200.324973][ T9571] ? compat_sock_get_timestampns+0x220/0x220 [ 200.330963][ T9571] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 200.336424][ T9571] ? do_fast_syscall_32+0xd1/0xc98 [ 200.341542][ T9571] ? entry_SYSENTER_compat+0x70/0x7f [ 200.346875][ T9571] ? do_fast_syscall_32+0xd1/0xc98 [ 200.352005][ T9571] __ia32_compat_sys_setsockopt+0xbd/0x150 [ 200.358091][ T9571] do_fast_syscall_32+0x281/0xc98 [ 200.363145][ T9571] entry_SYSENTER_compat+0x70/0x7f [ 200.368426][ T9571] RIP: 0023:0xf7f04869 [ 200.372491][ T9571] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 200.392086][ T9571] RSP: 002b:00000000f5d000cc EFLAGS: 00000296 ORIG_RAX: 000000000000016e [ 200.400489][ T9571] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000084 [ 200.408454][ T9571] RDX: 0000000000000007 RSI: 0000000020013e95 RDI: 0000000000000004 [ 200.416597][ T9571] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 200.424561][ T9571] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 200.432521][ T9571] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 200.461579][ T9581] binder: 9550:9581 transaction failed 29189/-22, size 0-8 line 2994 [ 200.509657][ T12] binder: undelivered TRANSACTION_ERROR: 29189 [ 200.540490][ T3480] binder: undelivered TRANSACTION_ERROR: 29189 00:24:17 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0xd0000, 0x0) ioctl$RTC_PIE_OFF(r0, 0x7006) ioctl$KVM_RUN(r0, 0xae80, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYRES16=r1, @ANYRES32=r1, @ANYRESDEC=r1, @ANYPTR64=&(0x7f0000000000)=ANY=[@ANYRESHEX=r1, @ANYRES32=r1], @ANYBLOB="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"], 0x5}, 0x1, 0x0, 0x0, 0x800}, 0x0) 00:24:17 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x0, 0x2) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000000100)={0x10, 0x30, 0xfa00, {0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x38) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x7c, r2, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x51}, @IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x67}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0xaf}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x800) 00:24:17 executing program 1: syz_emit_ethernet(0x2a, &(0x7f0000000140)={@random="eb535dccdb85", @link_local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0xf401, 0x0, @remote={0xac, 0x1c}, @local}, @igmp={0xb, 0x0, 0x0, @broadcast}}}}}, 0x0) r0 = semget$private(0x0, 0x3, 0x200) semctl$GETZCNT(r0, 0x7, 0xf, &(0x7f0000000000)=""/53) 00:24:17 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x1000001c3) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000400)={0x0, 0x8d9c, 0x10002}, 0x14) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x4f3d1d6e) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 00:24:17 executing program 0: keyctl$setperm(0x5, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000080), &(0x7f0000000100)=0x4) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) getuid() ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000000)=0x6) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:24:17 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) memfd_create(0x0, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x3) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r2, 0x40505330, &(0x7f0000000080)={{0x5, 0x2}, {0x10001, 0x6}, 0x8, 0x0, 0x6}) setsockopt(r1, 0x10d, 0x800000000d, &(0x7f00001c9fff), 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) read(r1, &(0x7f00000005c0)=""/144, 0x14c) sendmmsg(r0, &(0x7f0000005700)=[{{&(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x4e21, @empty}, 0x3, 0x4}}, 0x80, &(0x7f0000003b80), 0x480, &(0x7f0000000180)=[{0x0, 0x11f, 0x5, "b426e997406091787408eb2420e84c43da24434d3a0432097f9252228dece33068ffe1533adf29443e6eddb82bdcb945dd80f92049edc34562a6507cebbc575064458ddd32d10c95749903b96c1dc25975296a8a28ad2cd670c70ba6b54905d84ea1a1331977ac72d34263c5e9a1a4a837aad7861a8f235a8985ea9063fff8b2c538c72f93a05949a5791b3105c70a14f05a824c0191946fd744ea8edd9affe3b176b48e5c6f785140d1f5057a7d8d06ffbfbab55f5ceef2ac156b006086e8669660db4622baccbfd1929de9475b0876653233259d620f777f9732ab779a8af0c7a49677de3c2181f5b36645f29c5c074e7ef1080c2679df"}, {0x0, 0x115, 0x4, "0726bd2617927834785406b64e99af45a4845f5831bd317705d438a201399be3373c7b6f3ed2d76895718d6516596317765d6e18819a5ac31daa147bd5df615a97c754a5bce2694d8479681996ba2fd345658aab145f9c694ba5c4847e4a664c0247796b806c456425927167bff01ee77b37995d4eba0dd42a837fef935370aa9d4597c8a48485a6b02c1e32f8c975db7a229d5ac8cf9ac0"}, {0x0, 0x6, 0x9c, "fcbadc6f00e8605eb468e67ca8f25809f89aa11b0e3d87591bd2110410c0773fa55c4e478b86f027bb24ad61199db72251bde3e68e118cd51e1e603101a67998ea281a03fe61a5276821c0ff079125228529af3f6a03d0eaf5b4ae1e2407373cb69affa71c3eaaf803811329660277d6bbf89b7329479c4c8a3ce6216dd391a4224427c33c70cb281f54c14e6e68881d49cc4814aab2556ce5735934c383f1cc69ce2123b5ab927ea0fd83536a386a7fea0adea0765e49929a788f6e56bcdca6ea3d8dd4a45570c5acd0c1258b8f4f827d9d8aecd8b747205e4bf0581ec8cf72788692f87bb2e3af"}]}}], 0x3a6, 0x0) 00:24:17 executing program 5: r0 = socket$inet(0x2, 0x6, 0xffffffff85decb61) setsockopt$inet_int(r0, 0x0, 0x82, 0x0, 0x0) 00:24:17 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_dccp_int(r0, 0x21, 0x0, &(0x7f0000000200), &(0x7f0000000240)=0x4) capget(&(0x7f0000000840)={0x19980330}, &(0x7f0000000880)) perf_event_open(&(0x7f00000002c0)={0x5, 0x70, 0x0, 0x0, 0x0, 0x40, 0x0, 0xdf87, 0x8, 0x8, 0x1, 0x0, 0x80000001, 0x6, 0x0, 0xffffffff, 0x1, 0x0, 0xffffffff, 0x3ff, 0x0, 0x0, 0x0, 0x6, 0x1, 0x4, 0x0, 0x3, 0x1800000000000, 0x3a53, 0x687923fb, 0x1, 0x7, 0x8, 0x0, 0x9, 0x1ff, 0x0, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000280), 0x1}, 0x2300, 0x1000000000, 0x109, 0x4, 0x1, 0x8}, 0x0, 0xd, r0, 0x8) stat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)) stat(&(0x7f0000000580)='./file0\x00', &(0x7f0000000500)) r1 = getpgrp(0x0) waitid(0x2, r1, 0x0, 0x7, &(0x7f00000005c0)) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000140)=0x1) openat$nullb(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/nullb0\x00', 0x20000, 0x0) mount$fuseblk(&(0x7f0000000340)='/dev/loop0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='fuseblk\x00', 0x4000, &(0x7f00000008c0)=ANY=[@ANYBLOB="2c626c6b73697a653d3078303030303030303030303030313630302c626c6ba2b8b4af55de2acb6af3697a653d3078303030303010303030303030316530302c6d61785f726561643d307830ac7d442e42a03e0092dd7937b72217ca5d0ddd028fb3becabc10fa42ad76cd2706318a4fdc415171db76a22e99c35d4bb7e5929e922026c831e0b04196a023bb0e132649776f68f2dc7f235cbd98360943b276226eb4cd786562fab47c577a546ec0bcad82264c2e96e9d5b2190ea30cc7900799d720240f4cad40ce1b06ab5fa0fb8bcd274af10fca2e1c32f31f807cc2a5042f94"]) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f00000004c0)=r0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000740)) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='nfs\t', 0x0, &(0x7f0000000000)) clone(0x8000000, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) 00:24:18 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x200000001, 0xa, 0x2000000000000009, 0x1}, 0x25c) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x185) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f0000000d40), 0x0, 0x1}, 0x20) r1 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x1, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r1, 0x0, 0x83, &(0x7f0000000200)={'nat\x00', 0x0, 0x3, 0x1000, [], 0x9, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000540)=""/4096}, &(0x7f0000000040)=0x50) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f00000000c0)={0x80000001, 0x0, 0x6, 0x4, 0x7f, 0x6}) 00:24:18 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000040)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) fcntl$F_GET_RW_HINT(r1, 0x40b, &(0x7f0000000000)) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0) 00:24:18 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000bc0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58) r1 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$audion(0x0, 0x0, 0x40) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000980)={r2, 0x0, 0x2f, 0x0, &(0x7f00000004c0)="d1f1d767f4baf6f5665c932993103e087b9c873249e32776d11594cc42c0e621dfe8b3e2d295783ac7cd20257973fb", 0x0}, 0x28) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, 0x0, &(0x7f0000000900)) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffff9c, 0x84, 0x6f, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)}, &(0x7f0000000440)=0xc) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000140)=0x3) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000a40)={0x0, @in6={{0xa, 0x0, 0x1000000020000, @remote, 0x4}}, 0x7e, 0x0, 0x8, 0x3e2d, 0xa8}, &(0x7f0000000580)=0x98) socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000b40)=ANY=[], &(0x7f0000000540)) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10) r3 = accept4$alg(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f00000005c0)={0x10001}, 0x1) sendmmsg$alg(r3, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0) sendmsg$alg(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000006c0)="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", 0x1af}], 0x1}, 0x0) recvmmsg(r3, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0xf}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000600)=""/154, 0x9a}}], 0x1, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x6}, &(0x7f0000000040)=0x20) syz_open_dev$sndpcmp(&(0x7f00000003c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x40) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="cf010001270300001000000088050000c6030000ff0700000000000000000000a048b6f062b58c89ed46213559d4c067a088ffc84e423ab183210342c60fd28b8a18d3f9ba96b3532dad6206790dff9a958eae9d404180a096ca49780ef76f624598e4a377c84cb1acf44874a53fbac1c5f2ae7f5b93a734"], 0x6d) clone(0x8000000200020fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) ioctl$sock_ifreq(r3, 0x8994, &(0x7f0000000380)={'veth1_to_bond\x00', @ifru_names='bond0\x00'}) getpid() getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000340)) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000280)=@req3={0xffffffff, 0x2, 0x1ed3, 0x6, 0x4, 0x2, 0x2}, 0x1c) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x4000, 0x0) 00:24:18 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0x401, 0x0, {0x4, @sdr}}) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) io_setup(0x6, &(0x7f0000000380)=0x0) io_submit(r3, 0x1, &(0x7f00000004c0)=[&(0x7f0000000480)={0x0, 0x0, 0x0, 0xf, 0x779, r0, &(0x7f00000003c0)="2dc87728fed43da8426cbdbafc76fd629094509ad5fa8c96bccd860207afae5e095ea920291c0515bba655c3557a91d35a03250bd1883376f395e759247e196ee74d9cbc940bed3aa1e61f796fffaf415c9936503930c5ab1d8802f05f329d5dd0507ffe0699e2b18a9e6bb552a77f3a7b7567765e7c8bc1c155612699771648fbfe3bf6cf72a7e0b76c647e04280ba34b765cd7cc4eef402b040a89de8a2aa50929ed49f27b94ae4f722e26fc2a", 0xae, 0x5, 0x0, 0x2, r0}]) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f0000000640)={0x80000001, 0x0, 0x7b03, {r1, r2+30000000}, 0x2, 0x3}) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000500)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f0000000200)=0x2) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000280)={r4, @in6={{0xa, 0x4e20, 0x100000000, @empty, 0x8}}, 0x5757, 0x8001, 0x9, 0x1, 0x9}, &(0x7f0000000340)=0x98) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000700)={&(0x7f0000000180), 0xc, &(0x7f00000006c0)={&(0x7f0000000240)={0x30, r5, 0x400, 0x70bd28, 0x25dfdbff, {{}, 0x0, 0x4107, 0x0, {0x14, 0x18, {0x9, @bearer=@udp='udp:syz1\x00'}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20000010}, 0x48000) 00:24:18 executing program 5: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x4000, 0x0) ioctl$TIOCSCTTY(r0, 0x540e, 0x3f) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000e05000)={0x2, 0xd, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0xffffff80, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0xffffff80, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0) 00:24:18 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x1000001c3) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000400)={0x0, 0x8d9c, 0x10002}, 0x14) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x4f3d1d6e) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 00:24:18 executing program 0: keyctl$setperm(0x5, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000080), &(0x7f0000000100)=0x4) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) getuid() ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:24:19 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000240)={0x0, {{0xa, 0x4e21, 0x4, @mcast2, 0x7}}, {{0xa, 0x4e20, 0xd0c, @rand_addr="294aea6cb59b6fc0a9cac25bab337e43", 0x8}}}, 0x104) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x8000, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000700)="118433d14aac1ab8d07e20487e4bca35576c7ccf09209bf795551bab3f2bc45e06dba29d414f41f43c66bb72e7c1b443fb79e14b094477d41d125adad91670b8c7646a5ba8ca1eed1376a33c6b456c7e6389b82715c50bd61708f57b0097a98bbe5e9671bb0bd6b0e4ba403fca1bc333970f4975cb8040974a36da8a8bb1a53fac8766c67d2d03841627ac219eb126bc899a553a6ff35bbf3d2c7866e956a2f675d1ad7986fe2ee7c0c700aa87a2e60cf3a6adbf162fe28cffce54c3a95783b98db677fa0433752cc1f8f806f92d4c94e8", 0xd1) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, 0x0, 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x200000000000f) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, 0x0, &(0x7f0000000100)) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x3ff, 0x9, 0xfffffffffffffffc, 0x1, 0x9}, &(0x7f0000000140)=0x14) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000180)={r2, @in={{0x2, 0x4e20, @local}}, 0x5, 0x9, 0x5, 0x100000000, 0x30}, 0x98) r3 = getegid() setsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000000)=0x8, 0x4) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f0000000000)=ANY=[], @ANYRES32, @ANYRES32=r3, @ANYRES32], 0x14) unshare(0x40000000) 00:24:19 executing program 3: r0 = socket$inet6(0xa, 0x3, 0xfffffffffffffffc) r1 = socket$inet(0x2, 0x80001, 0x84) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000680)=0x11, 0x4) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 00:24:19 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f00006cdffb)="8907040000", 0x5) r1 = dup2(r0, r0) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000180)={@rand_addr, @rand_addr, 0x0}, &(0x7f00000001c0)=0xc) getpeername$packet(0xffffffffffffff9c, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000300)={@dev, @multicast1, 0x0}, &(0x7f0000000340)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@broadcast, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@dev}}, &(0x7f0000000480)=0xe8) getpeername$packet(0xffffffffffffff9c, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000500)=0x14) getpeername$packet(0xffffffffffffffff, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000580)=0x14) getpeername$packet(0xffffffffffffff9c, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000600)=0x14) accept4$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000680)=0xffffffffffffff08, 0x843) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000700)={{{@in6=@remote, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in6=@empty}}, &(0x7f0000000800)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000840)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000940)=0xe8) accept4$packet(0xffffffffffffff9c, &(0x7f0000000f80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000fc0)=0x14, 0x80000) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000001000)={'vcan0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000001540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2400}, 0xc, &(0x7f0000001500)={&(0x7f0000001040)=ANY=[@ANYBLOB="b0040000", @ANYRES16=r2, @ANYBLOB="00022dbd7000fbdbdf250200000008000100", @ANYRES32=r3, @ANYBLOB="a40002006400d616422c01006270665f686173685f66756e6300000000000000000000000000000000000000080003000b0000003400040000040000000000001aff05000000ffff2800690800000300c2ffff0f0000feff0101ffff00007f000706040000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="ec0002003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r6, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000080003000300000008000400080000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r7, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000800030003000000080004000100000008000100", @ANYRES32=r8, @ANYBLOB="8c0002004c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000008000300050000001c000400686173685f746f5f706f72745f6d617070696e67000000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r9, @ANYBLOB="08000100", @ANYRES32=r10, @ANYBLOB="ec0002003c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000008000300050000000c00040068617368000000006c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b0000003c0004000100ff00ffffff7f2000060305000000040008011a0000007f001f000100000048000805000000000000030104000000000093098100000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b000000080004000200000008000600", @ANYRES32=r11, @ANYBLOB="08000100", @ANYRES32=r12, @ANYBLOB="6c010200400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000700000008000600", @ANYRES32=r13, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004002000000008000600", @ANYRES32=r14, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000800030003000000080004007a05000038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000800030003000000080004000600000038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000800030003000000080004000008000040000100240001006d6f646500000000000000000000000000000000000000000000000000000000080003000500000010000400726f756e64726f62696e0000"], 0x4b0}, 0x1, 0x0, 0x0, 0x2000c841}, 0x0) sendmmsg(r0, &(0x7f0000005c00)=[{{&(0x7f00000000c0)=@in={0x2, 0x4e20, @multicast1}, 0x80, &(0x7f0000000080), 0x0, &(0x7f00000001c0)}}, {{&(0x7f0000000000)=@in={0x2, 0x4e20}, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000000400)}}], 0x2, 0x0) ioctl$KDGETMODE(r1, 0x4b3b, &(0x7f00000002c0)) ioctl$VIDIOC_TRY_DECODER_CMD(r1, 0xc0485661, &(0x7f0000000980)={0x5, 0x0, @raw_data=[0x9, 0x20, 0x14f, 0xfffffffffffffe00, 0x153a, 0x8, 0x7, 0x81, 0x418, 0xffffffff, 0x3, 0x5, 0x5, 0x7, 0x8, 0x5]}) 00:24:19 executing program 3: syz_emit_ethernet(0x3a, &(0x7f00000004c0)=ANY=[@ANYBLOB="aa94aaaaaaaa000008004900002c00000000000002acf204df675a6b1414aa07030000ea00009078e0000001"], 0x0) r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x8002, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x402c5828, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x5, 0x7ff}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x80500, 0x0) ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0xfffffffffffffff9) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f00000000c0)={0x1, [0x7]}, &(0x7f0000000100)=0x6) [ 202.288672][ T9666] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 00:24:19 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000bc0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58) r1 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$audion(0x0, 0x0, 0x40) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000980)={r2, 0x0, 0x2f, 0x0, &(0x7f00000004c0)="d1f1d767f4baf6f5665c932993103e087b9c873249e32776d11594cc42c0e621dfe8b3e2d295783ac7cd20257973fb", 0x0}, 0x28) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, 0x0, &(0x7f0000000900)) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffff9c, 0x84, 0x6f, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)}, &(0x7f0000000440)=0xc) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000140)=0x3) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000a40)={0x0, @in6={{0xa, 0x0, 0x1000000020000, @remote, 0x4}}, 0x7e, 0x0, 0x8, 0x3e2d, 0xa8}, &(0x7f0000000580)=0x98) socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000b40)=ANY=[], &(0x7f0000000540)) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10) r3 = accept4$alg(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f00000005c0)={0x10001}, 0x1) sendmmsg$alg(r3, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0) sendmsg$alg(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000006c0)="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", 0x1af}], 0x1}, 0x0) recvmmsg(r3, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0xf}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000600)=""/154, 0x9a}}], 0x1, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x6}, &(0x7f0000000040)=0x20) syz_open_dev$sndpcmp(&(0x7f00000003c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x40) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="cf010001270300001000000088050000c6030000ff0700000000000000000000a048b6f062b58c89ed46213559d4c067a088ffc84e423ab183210342c60fd28b8a18d3f9ba96b3532dad6206790dff9a958eae9d404180a096ca49780ef76f624598e4a377c84cb1acf44874a53fbac1c5f2ae7f5b93a734"], 0x6d) clone(0x8000000200020fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) ioctl$sock_ifreq(r3, 0x8994, &(0x7f0000000380)={'veth1_to_bond\x00', @ifru_names='bond0\x00'}) getpid() getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000340)) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000280)=@req3={0xffffffff, 0x2, 0x1ed3, 0x6, 0x4, 0x2, 0x2}, 0x1c) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x4000, 0x0) [ 202.364438][ T9662] IPVS: ftp: loaded support on port[0] = 21 00:24:19 executing program 1: r0 = memfd_create(&(0x7f00000001c0)='ppp0+,selfppp0vmnet1proc\']\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) r2 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x3, 0x2) getsockopt$inet_opts(r2, 0x0, 0x0, 0x0, &(0x7f0000000180)) ioctl$BLKRRPART(r2, 0x125f, 0x0) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000200)='trusted.overlay.redirect\x00', &(0x7f0000000240)='./file0\x00', 0x8, 0x0) r3 = dup2(r1, r0) setsockopt$inet_int(r2, 0x0, 0x400018, &(0x7f0000000580)=0x2, 0x23c) semget(0xffffffffffffffff, 0x6, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x80, 0x0) mount$fuse(0x20000000, 0x0, 0x0, 0x0, 0x0) socket$kcm(0x29, 0x0, 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@remote, @in=@multicast1}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, 0x0) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r5 = syz_open_dev$video(&(0x7f0000000480)='/dev/video#\x00', 0x100000007fffffff, 0x0) ioctl$VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f0000000240)={0x0, 0x7, 0x2, {0x1, @sliced={0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeedcafe]}}}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000100)={@local, @empty={[0x0, 0x0, 0x0, 0xd9]}, @loopback, 0x0, 0x0, 0x0, 0x500}) ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000180)) fcntl$getown(0xffffffffffffffff, 0x9) socket$unix(0x1, 0x0, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, 0x0, &(0x7f00000002c0)) ioctl$KVM_SET_BOOT_CPU_ID(r4, 0xae78, 0x0) getsockopt$XDP_MMAP_OFFSETS(r4, 0x11b, 0x1, &(0x7f0000000180), 0x0) fsetxattr(r4, &(0x7f0000000040)=@known='com.apple.system.Security\x00', &(0x7f0000000080)='[[%\x00', 0x4, 0x0) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r4, 0x10f, 0x84, 0x0, &(0x7f0000000240)) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r3, 0x40bc5311, &(0x7f00000004c0)={0x80, 0x1, 'client1\x00', 0x0, "7fd82d5e02ca3901", "08000000000000007711bef9a2d9020000e804c022000000000000000096e700"}) 00:24:19 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x210001, 0x0) ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f0000000040)=""/27) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000080)={0x0, 0x6, 0x0, 0xdcf, 0x8}, &(0x7f00000000c0)=0x18) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000100)={r1, 0x13}, 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="3000000010000b0f000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000f001202080001006772650004000200"], 0x30}}, 0x0) 00:24:19 executing program 3: r0 = semget(0x0, 0x2, 0x406) semctl$IPC_RMID(r0, 0x0, 0x0) 00:24:19 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_EMULATED_HOST(r0, 0x2276, &(0x7f0000000040)) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x2280, 0x0) ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f0000000080)={'veth1_to_hsr\x00', {0x2, 0x4e20, @rand_addr=0x7}}) removexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)=@known='com.apple.system.Security\x00') [ 202.899088][ T9691] Unknown ioctl 35093 [ 202.921848][ T9691] Unknown ioctl 35093 [ 202.936731][ T9694] IPVS: ftp: loaded support on port[0] = 21 00:24:20 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) r1 = dup(r0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000002e80)=0x214, 0x4) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x3fff, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000266ffc), 0x4) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000007a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB], 0x1}}, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1, &(0x7f0000000040)=0x400, 0x4) sendto$unix(r1, &(0x7f0000000100)="df", 0x1, 0x0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x14}, 0x14}}, 0x811) 00:24:20 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x43d) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x1000001c3) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000400)={0x0, 0x8d9c, 0x10002}, 0x14) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x4f3d1d6e) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x10005, 0x0) 00:24:21 executing program 0: keyctl$setperm(0x5, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000080), &(0x7f0000000100)=0x4) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:24:21 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/btrfs-control\x00', 0x400000, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x1f, &(0x7f0000000140)={@mcast1, 0x0}, 0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x200000, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000002800)=ANY=[], 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000002c0)={@mcast1, @mcast1, @mcast1, 0x0, 0x0, 0x4, 0x0, 0x3, 0x10000000280, r2}) dup(r0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r3, 0x402c5342, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000380)='TIPC\x00') sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MON_SET(r4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbbf4, 0x0, 0xd}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x8, 0x11, [@generic="e2"]}]}, 0x1c}}, 0x0) 00:24:21 executing program 1: r0 = memfd_create(&(0x7f00000001c0)='ppp0+,selfppp0vmnet1proc\']\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) r2 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x3, 0x2) getsockopt$inet_opts(r2, 0x0, 0x0, 0x0, &(0x7f0000000180)) ioctl$BLKRRPART(r2, 0x125f, 0x0) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000200)='trusted.overlay.redirect\x00', &(0x7f0000000240)='./file0\x00', 0x8, 0x0) r3 = dup2(r1, r0) setsockopt$inet_int(r2, 0x0, 0x400018, &(0x7f0000000580)=0x2, 0x23c) semget(0xffffffffffffffff, 0x6, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x80, 0x0) mount$fuse(0x20000000, 0x0, 0x0, 0x0, 0x0) socket$kcm(0x29, 0x0, 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@remote, @in=@multicast1}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, 0x0) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r5 = syz_open_dev$video(&(0x7f0000000480)='/dev/video#\x00', 0x100000007fffffff, 0x0) ioctl$VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f0000000240)={0x0, 0x7, 0x2, {0x1, @sliced={0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeedcafe]}}}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000100)={@local, @empty={[0x0, 0x0, 0x0, 0xd9]}, @loopback, 0x0, 0x0, 0x0, 0x500}) ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000180)) fcntl$getown(0xffffffffffffffff, 0x9) socket$unix(0x1, 0x0, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, 0x0, &(0x7f00000002c0)) ioctl$KVM_SET_BOOT_CPU_ID(r4, 0xae78, 0x0) getsockopt$XDP_MMAP_OFFSETS(r4, 0x11b, 0x1, &(0x7f0000000180), 0x0) fsetxattr(r4, &(0x7f0000000040)=@known='com.apple.system.Security\x00', &(0x7f0000000080)='[[%\x00', 0x4, 0x0) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r4, 0x10f, 0x84, 0x0, &(0x7f0000000240)) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r3, 0x40bc5311, &(0x7f00000004c0)={0x80, 0x1, 'client1\x00', 0x0, "7fd82d5e02ca3901", "08000000000000007711bef9a2d9020000e804c022000000000000000096e700"}) 00:24:21 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xe) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x0, 0x3, 0xffffffffffffbfff, 0x6092, 0x1}) ioctl$TIOCNXCL(r0, 0x540d) 00:24:21 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x7def, 0x2) write$eventfd(r1, &(0x7f0000000040)=0x6, 0x8) r2 = socket$kcm(0x29, 0x5, 0x0) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000c00)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8.\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x0e\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xfeu\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 00:24:21 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x43d) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x1000001c3) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000400)={0x0, 0x8d9c, 0x10002}, 0x14) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x4f3d1d6e) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x10005, 0x0) [ 204.925937][ T9714] device nr0 entered promiscuous mode 00:24:22 executing program 5: keyctl$setperm(0x5, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000080), &(0x7f0000000100)=0x4) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) getuid() ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:24:22 executing program 1: r0 = syz_open_dev$audion(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x100082) r2 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x0) fsync(0xffffffffffffffff) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000000)="ab847b0f1fb0a8abe8f8cf2129fc56f2", 0x10) fsetxattr$trusted_overlay_nlink(r1, &(0x7f0000000080)='trusted.overlay.nlink\x00', &(0x7f00000001c0)={'U-', 0x4}, 0x28, 0x2) sendfile(r1, r2, 0x0, 0x20000102000007) 00:24:22 executing program 1: r0 = syz_open_dev$audion(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x100082) r2 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x0) fsync(0xffffffffffffffff) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000000)="ab847b0f1fb0a8abe8f8cf2129fc56f2", 0x10) fsetxattr$trusted_overlay_nlink(r1, &(0x7f0000000080)='trusted.overlay.nlink\x00', &(0x7f00000001c0)={'U-', 0x4}, 0x28, 0x2) sendfile(r1, r2, 0x0, 0x20000102000007) 00:24:22 executing program 1: r0 = socket$kcm(0xa, 0x2, 0x73) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x400000, 0x0) getsockname$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000080)=0x1c) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000140), &(0x7f0000000180)=0x40) write$P9_RREMOVE(r1, &(0x7f0000000100)={0x7, 0x7b, 0x2}, 0x7) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) 00:24:22 executing program 5: keyctl$setperm(0x5, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000080), &(0x7f0000000100)=0x4) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) getuid() ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:24:22 executing program 1: lseek(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) r1 = getpgrp(0xffffffffffffffff) ptrace$peekuser(0x3, r0, 0x400) tgkill(r0, r1, 0x7) 00:24:24 executing program 0: keyctl$setperm(0x5, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000080), &(0x7f0000000100)=0x4) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:24:24 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x43d) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x1000001c3) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000400)={0x0, 0x8d9c, 0x10002}, 0x14) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x4f3d1d6e) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x10005, 0x0) 00:24:24 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x6, 0x20000) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000400)={0x8, 0x9, 0x0, 0x800, 0x4, 0x7, 0xc7c0, 0x3b43, 0x0}, &(0x7f0000000440)=0x20) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000600)={r1, @in6={{0xa, 0x4e22, 0x9, @mcast1, 0x2}}, [0x400, 0x2, 0x7fffffff, 0x200003, 0xdbec, 0xd417, 0x3, 0x1, 0x8001, 0x0, 0x6, 0x1, 0x0, 0xfffffffffffffffe, 0x7ff]}, &(0x7f0000000100)=0x100) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000140)={r2}, &(0x7f00000002c0)=0x8) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x1, 0x0) r4 = dup3(r0, r3, 0x80000) open(&(0x7f00000005c0)='./file0/../file0\x00', 0x0, 0x1) ioctl$TIOCGWINSZ(r4, 0x5413, &(0x7f00000000c0)) ioctl$KDSKBLED(r3, 0x4b65, 0x500000000000000) getsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000300)={0x0, 0x72cd80000, 0xffff, 0x1000, 0x45, 0x40}, &(0x7f0000000340)=0x14) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f00000003c0)={r5, 0x1ff}, &(0x7f0000000380)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000180)={r6, @in6={{0xa, 0x4e21, 0x800, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x5}}, 0x2fdf, 0x2ed6cb52, 0x81, 0x3, 0x3}, &(0x7f0000000240)=0x98) bind$vsock_stream(r4, &(0x7f0000000280)={0x28, 0x0, 0xffffffff, @host}, 0x10) creat(&(0x7f0000000040)='./file0\x00', 0x0) write$P9_RREAD(r0, &(0x7f0000000500)={0x98, 0x75, 0x2, {0x8d, "8ab8a7e0261e2ac8b65719b1f4d980285506e7fc3c4859ddf7f41100b4cab2c8f259def3a2cdb6ccad55f344552cbd8a1b1797e2db375cb42e0fcb48496fab7255704395f9046abbed9f62748be2307ef373712380a085f9d13c44308d18de05abba0687d7f8ba3f7fcf899b1d618119f72c4e905247d491a5a5e57a0fdc89111797407809e866981e2d16a85a"}}, 0x98) 00:24:24 executing program 2: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000081, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x8000, 0x0) openat$random(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/urandom\x00', 0x800, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000080)={'nr0\x00', 0x200}) mkdir(&(0x7f00000002c0)='.\x00', 0x5) ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80e05411, &(0x7f0000000480)=""/4096) r2 = shmget(0x1, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x7e}], 0x1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_names\x00') perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r3, &(0x7f0000000480), 0x1000000000000237, 0x0) shmat(r2, &(0x7f0000ffc000/0x1000)=nil, 0x4000) mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='9p\x00', 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff03c}, {0x80000006}]}, 0x10) 00:24:24 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/btrfs-control\x00', 0x400000, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x1f, &(0x7f0000000140)={@mcast1, 0x0}, 0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x200000, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000002800)=ANY=[], 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000002c0)={@mcast1, @mcast1, @mcast1, 0x0, 0x0, 0x4, 0x0, 0x3, 0x10000000280, r2}) dup(r0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r3, 0x402c5342, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000380)='TIPC\x00') sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MON_SET(r4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbbf4, 0x0, 0xd}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x8, 0x11, [@generic="e2"]}]}, 0x1c}}, 0x0) 00:24:25 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc\x00', 0x80000, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, &(0x7f0000000080)={0x0, @aes256}) r1 = gettid() timer_create(0x6, &(0x7f00000000c0)={0x0, 0x100000012, 0xfffffffffffffffc, @thr={&(0x7f0000000100)="543f05157236f541a2aece6c7764a6", &(0x7f0000000140)="ce447007f935e1bdf502"}}, &(0x7f0000000040)) preadv(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)=""/201, 0x4}], 0x1, 0x0) close(r0) memfd_create(&(0x7f0000000180)='cgroup\x00A\xc6\x11\x8b\xd0\xb8pb\xa7\xa7:X>S\x1e\r5\x96\xf6\x82\"d\xa4M\xdf\x01\xd5\xc0\xaf\xafM\x05\xb23\xb1\xea\x89\xdd \xc7', 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) [ 208.073300][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 208.079146][ C1] protocol 88fb is buggy, dev hsr_slave_1 00:24:25 executing program 2: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000081, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x8000, 0x0) openat$random(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/urandom\x00', 0x800, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000080)={'nr0\x00', 0x200}) mkdir(&(0x7f00000002c0)='.\x00', 0x5) ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80e05411, &(0x7f0000000480)=""/4096) r2 = shmget(0x1, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x7e}], 0x1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_names\x00') perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r3, &(0x7f0000000480), 0x1000000000000237, 0x0) shmat(r2, &(0x7f0000ffc000/0x1000)=nil, 0x4000) mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='9p\x00', 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff03c}, {0x80000006}]}, 0x10) 00:24:25 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/btrfs-control\x00', 0x400000, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x1f, &(0x7f0000000140)={@mcast1, 0x0}, 0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x200000, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000002800)=ANY=[], 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000002c0)={@mcast1, @mcast1, @mcast1, 0x0, 0x0, 0x4, 0x0, 0x3, 0x10000000280, r2}) dup(r0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r3, 0x402c5342, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000380)='TIPC\x00') sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MON_SET(r4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbbf4, 0x0, 0xd}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x8, 0x11, [@generic="e2"]}]}, 0x1c}}, 0x0) 00:24:25 executing program 2: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000081, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x8000, 0x0) openat$random(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/urandom\x00', 0x800, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000080)={'nr0\x00', 0x200}) mkdir(&(0x7f00000002c0)='.\x00', 0x5) ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80e05411, &(0x7f0000000480)=""/4096) r2 = shmget(0x1, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x7e}], 0x1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_names\x00') perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r3, &(0x7f0000000480), 0x1000000000000237, 0x0) shmat(r2, &(0x7f0000ffc000/0x1000)=nil, 0x4000) mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='9p\x00', 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff03c}, {0x80000006}]}, 0x10) 00:24:25 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x4) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, 0x0, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x2f, @local, 0x4e21, 0x4, 'ovf\x00', 0x18, 0x5, 0x29}, 0x2c) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000340), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f00000001c0)=""/14, 0x180, 0x10000, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) 00:24:25 executing program 5: keyctl$setperm(0x5, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000080), &(0x7f0000000100)=0x4) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) getuid() ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) [ 208.642183][ T9791] IPVS: set_ctl: invalid protocol: 47 172.20.20.170:20001 00:24:25 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x43d) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x1000001c3) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000400)={0x0, 0x8d9c, 0x10002}, 0x14) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x4f3d1d6e) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x10005, 0x0) [ 208.714244][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 208.720688][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 209.409163][ T9802] IPVS: set_ctl: invalid protocol: 47 172.20.20.170:20001 00:24:28 executing program 0: keyctl$setperm(0x5, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000080), &(0x7f0000000100)=0x4) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:24:28 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x43d) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x1000001c3) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000400)={0x0, 0x8d9c, 0x10002}, 0x14) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x4f3d1d6e) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x10005, 0x0) 00:24:28 executing program 2: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000081, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x8000, 0x0) openat$random(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/urandom\x00', 0x800, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000080)={'nr0\x00', 0x200}) mkdir(&(0x7f00000002c0)='.\x00', 0x5) ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80e05411, &(0x7f0000000480)=""/4096) r2 = shmget(0x1, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x7e}], 0x1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_names\x00') perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r3, &(0x7f0000000480), 0x1000000000000237, 0x0) shmat(r2, &(0x7f0000ffc000/0x1000)=nil, 0x4000) mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='9p\x00', 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff03c}, {0x80000006}]}, 0x10) 00:24:28 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x4) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, 0x0, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x2f, @local, 0x4e21, 0x4, 'ovf\x00', 0x18, 0x5, 0x29}, 0x2c) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000340), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f00000001c0)=""/14, 0x180, 0x10000, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) 00:24:28 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x43d) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x1000001c3) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000400)={0x0, 0x8d9c, 0x10002}, 0x14) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x4f3d1d6e) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x10005, 0x0) [ 210.996678][ T9806] IPVS: set_ctl: invalid protocol: 47 172.20.20.170:20001 00:24:28 executing program 1: keyctl$setperm(0x5, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000080), &(0x7f0000000100)=0x4) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:24:28 executing program 4: pipe(0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x43d) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x1000001c3) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000400)={0x0, 0x8d9c, 0x10002}, 0x14) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x4f3d1d6e) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x10005, 0x0) [ 211.535733][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 211.541591][ C0] protocol 88fb is buggy, dev hsr_slave_1 00:24:28 executing program 4: pipe(0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x43d) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x1000001c3) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000400)={0x0, 0x8d9c, 0x10002}, 0x14) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x4f3d1d6e) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x10005, 0x0) 00:24:28 executing program 5: keyctl$setperm(0x5, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000080), &(0x7f0000000100)=0x4) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) getuid() write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:24:28 executing program 3: ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) setxattr$security_capability(&(0x7f0000000600)='./file0\x00', &(0x7f0000000240)='security.capability\x00', 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x5}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f00000000c0)={r3, 0x4, 0x4}, 0x8) 00:24:28 executing program 0: keyctl$setperm(0x5, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000080), &(0x7f0000000100)=0x4) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) getuid() ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:24:29 executing program 4: pipe(0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x43d) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x1000001c3) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000400)={0x0, 0x8d9c, 0x10002}, 0x14) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x4f3d1d6e) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x10005, 0x0) 00:24:29 executing program 2: keyctl$setperm(0x5, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000080), &(0x7f0000000100)=0x4) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:24:29 executing program 3: r0 = syz_open_dev$midi(&(0x7f0000000140)='/dev/midi#\x00', 0x9, 0x400) ioctl$KDENABIO(r0, 0x4b36) socketpair$unix(0x1, 0x1, 0x0, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x400000, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r1, 0xc0405519, &(0x7f0000000180)={0x1, 0x1, 0x9, 0x6, 'syz1\x00', 0x643}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1f, 0x0, 0x0) r2 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000002800)=ANY=[], 0x0) lsetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)=@known='trusted.syz\x00', &(0x7f00000001c0)='md5sum\x93\\posix_acl_accesseth1nodev.GPLcgroupppp1vmnet0#losystem\x02!\x00', 0x41, 0x3) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000380)='TIPC\x00') sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbbf4, 0xf0d8030000000000, 0xd}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1e000000220001000000000000000000000000002200000000000000"], 0x1c}}, 0x0) 00:24:29 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x43d) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x1000001c3) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000400)={0x0, 0x8d9c, 0x10002}, 0x14) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x4f3d1d6e) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 00:24:29 executing program 3: r0 = socket$kcm(0x10, 0x7, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="2e0000002e0005000000e0713c444d2401000000100003402e000000053582c137153e370000000000000000d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x2}, 0x1) set_thread_area(&(0x7f0000000000)={0x20, 0x20101800, 0x0, 0x3, 0x7, 0x7, 0x101, 0x9, 0x2, 0x400000000000}) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='smaps\x00') openat$cgroup_type(r1, &(0x7f0000000100)='cgroup.type\x00', 0x2, 0x0) 00:24:29 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, 0x0, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x20000, 0x1) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(0x0) r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) r4 = syz_genetlink_get_family_id$nbd(&(0x7f00000005c0)='nbd\x00') sendmsg$NBD_CMD_STATUS(r1, &(0x7f0000000880)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0x20, r4, 0x200, 0x70bd2b, 0x0, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x0) statfs(0x0, &(0x7f0000000780)=""/195) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40001) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) setsockopt$packet_int(r1, 0x107, 0xe, &(0x7f0000000000)=0x800, 0x4) [ 212.736025][ T9860] binder: 9859:9860 ioctl c0306201 0 returned -14 [ 212.752724][ T9860] binder: 9859:9860 ioctl c0306201 0 returned -14 [ 212.837190][ T9862] binder: BINDER_SET_CONTEXT_MGR already set [ 212.845683][ T9862] binder: 9859:9862 ioctl 40046207 0 returned -16 [ 212.858962][ T9860] binder_alloc: 9859: binder_alloc_buf, no vma [ 212.867903][ T9862] binder: 9859:9862 ioctl c0306201 0 returned -14 [ 212.875550][ T9860] binder: 9859:9860 transaction failed 29189/-3, size 24-8 line 3147 [ 212.885842][ T9862] binder: 9859:9862 ioctl c0306201 0 returned -14 [ 212.886755][ T7715] binder: send failed reply for transaction 9 to 9859:9860 [ 212.906876][ T7715] binder: undelivered TRANSACTION_ERROR: 29189 [ 212.915647][ T7715] binder: undelivered TRANSACTION_COMPLETE [ 212.928612][ T7715] binder: undelivered TRANSACTION_ERROR: 29189 00:24:31 executing program 1: keyctl$setperm(0x5, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000080), &(0x7f0000000100)=0x4) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:24:31 executing program 5: keyctl$setperm(0x5, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000080), &(0x7f0000000100)=0x4) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) getuid() write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:24:31 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, 0x0, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x20000, 0x1) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(0x0) r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) r4 = syz_genetlink_get_family_id$nbd(&(0x7f00000005c0)='nbd\x00') sendmsg$NBD_CMD_STATUS(r1, &(0x7f0000000880)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0x20, r4, 0x200, 0x70bd2b, 0x0, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x0) statfs(0x0, &(0x7f0000000780)=""/195) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40001) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) setsockopt$packet_int(r1, 0x107, 0xe, &(0x7f0000000000)=0x800, 0x4) 00:24:31 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x43d) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x1000001c3) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000400)={0x0, 0x8d9c, 0x10002}, 0x14) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x4f3d1d6e) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 214.435986][ T9870] binder: 9866:9870 ioctl c0306201 0 returned -14 [ 214.482098][ T9870] binder: 9866:9870 ioctl c0306201 0 returned -14 [ 214.527059][ T7715] binder: release 9866:9870 transaction 14 out, still active [ 214.543508][ T7715] binder: unexpected work type, 4, not freed 00:24:31 executing program 3: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = request_key(&(0x7f0000000140)='.request_key_auth\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000001c0)='posix_acl_access\x92]\x00', 0xfffffffffffffffb) keyctl$get_security(0x11, r0, &(0x7f0000000200)=""/105, 0x69) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x46, &(0x7f00000000c0)) sched_setaffinity(r1, 0x8, &(0x7f0000000000)=0x5c2) r2 = dup(0xffffffffffffffff) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000040)={0x0, @initdev, @loopback}, &(0x7f0000000080)=0xc) [ 214.579707][ T7715] binder: undelivered TRANSACTION_COMPLETE [ 214.613963][ T7715] binder: send failed reply for transaction 14, target dead 00:24:31 executing program 0: keyctl$setperm(0x5, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000080), &(0x7f0000000100)=0x4) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) getuid() ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:24:31 executing program 3: r0 = open(&(0x7f0000000040)='./file0\x00', 0x121000, 0x33) ftruncate(r0, 0xb979) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x802, 0x0) ioctl$FS_IOC_SETVERSION(r1, 0x40047602, &(0x7f00000001c0)=0x2) sendfile(r1, r0, 0x0, 0x80003e20) readlinkat(r0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=""/38, 0x26) readv(r1, &(0x7f0000000100)=[{&(0x7f0000000080)=""/4, 0x120}], 0x38d) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='./file0\x00') 00:24:32 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x1, 0x2) ioctl$FS_IOC_GETFLAGS(r0, 0x80046601, &(0x7f0000000100)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e23, 0xffffffffadc010ee, @remote, 0xc2}}, 0x3, 0x100000000}, &(0x7f0000000240)=0x88) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000280)={r2, 0x7f}, 0x8) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f0000000440)=r2, 0x4) ioctl$RTC_WKALM_SET(r1, 0x4028700f, &(0x7f0000000040)={0x1, 0x0, {0x33, 0xb, 0xc, 0xe, 0x3, 0x8, 0x4, 0x109}}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000480)={@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4239881e, 0x2, 0x2, 0x2, 0x1, 0x5}, 0x20) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/mcfilter\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x200081, 0x81) ioctl$EVIOCGUNIQ(r1, 0x80404508, &(0x7f00000004c0)=""/218) times(&(0x7f0000000140)) ioctl$PPPIOCGUNIT(r3, 0x80047456, &(0x7f00000000c0)) preadv(r3, &(0x7f0000000480), 0x10000000000002a1, 0x0) sendto$inet(r3, &(0x7f00000002c0)="95e91c57156e849dd97212c17069f868a23b3972a526bf9e083e1aca6a47f235b2362867c17a90fd7841e729eff80a0d45425904dda0ec205079adfadfd5388fc51c2ea00d5a886a5be06a78e0bcd3c10fd74af88e46c48a3c8aeea8420b21d1cc621927229041a45f6e35c331abe3a1a5b47b2562e3dd194e406661fa987bb1a1f9d93bd9eb1859efb697a62437258d1b1551747dabcc53f85127527e36cff58521bd4a9a2e65ef55d0028a346aa2b30d71d76caf4cd650bd5eac3f00f1a8ffc9762d164dfd5d", 0xc7, 0x50, &(0x7f00000003c0)={0x2, 0x4e23, @rand_addr=0x100000000}, 0x10) 00:24:32 executing program 3: keyctl$setperm(0x5, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000080), &(0x7f0000000100)=0x4) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) getuid() ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:24:32 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x43d) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x1000001c3) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000400)={0x0, 0x8d9c, 0x10002}, 0x14) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x4f3d1d6e) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 00:24:32 executing program 5: keyctl$setperm(0x5, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000080), &(0x7f0000000100)=0x4) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) getuid() write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:24:32 executing program 2: getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000340)=ANY=[@ANYBLOB="b6703c00", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000400)=0x10) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(&(0x7f00000004c0)=ANY=[], &(0x7f000000aff8)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, &(0x7f0000000000)) memfd_create(&(0x7f00000003c0)='ramfs\x00', 0x0) io_cancel(0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0xffffffffffff9f77, 0xffffffffffffffff, &(0x7f00000009c0)="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", 0x4c8, 0x71d100000, 0x0, 0x1}, 0x0) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) renameat2(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$DRM_IOCTL_FREE_BUFS(r0, 0x4008641a, &(0x7f0000000240)={0x4, &(0x7f0000000200)=[0x3, 0x0, 0x7, 0x100000000000]}) chdir(&(0x7f0000000080)='./file0\x00') r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000009740)=[{{0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}}], 0x400023f, 0x0, 0x0) fstatfs(r1, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x622, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000380)) r3 = open(&(0x7f0000000180)='./file0\x00', 0x40, 0xfffffffffffffffc) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000600), 0xffffffffffffffff) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000001c0)={'bpq0\x00'}) execve(&(0x7f0000000500)='./file0/file0\x00', &(0x7f0000000380), &(0x7f0000000780)=[&(0x7f0000000540)='/dev/swradio#\x00', &(0x7f0000000580)='/dev/swradio#\x00', &(0x7f00000005c0)='selinux\x00', &(0x7f0000000640)='*trusted}nodev\x00', &(0x7f0000000680)='&nodev^(\x00', &(0x7f00000006c0)='bpq0\x00', &(0x7f0000000700)='ppp1)\x00', &(0x7f0000000740)='wlan1:-+,\x00']) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r0, 0x8040ae9f, &(0x7f0000000480)) setsockopt$MISDN_TIME_STAMP(r3, 0x0, 0x1, &(0x7f0000000380), 0x4) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r4, 0x0, 0xfffffffffffffe05) 00:24:34 executing program 1: keyctl$setperm(0x5, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000080), &(0x7f0000000100)=0x4) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) getuid() write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:24:34 executing program 2: getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000340)=ANY=[@ANYBLOB="b6703c00", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000400)=0x10) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(&(0x7f00000004c0)=ANY=[], &(0x7f000000aff8)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, &(0x7f0000000000)) memfd_create(&(0x7f00000003c0)='ramfs\x00', 0x0) io_cancel(0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0xffffffffffff9f77, 0xffffffffffffffff, &(0x7f00000009c0)="4316150df9faa6e6535772fc033e1e7f0d7b95389694d7c558507ed15f2fe91f92ce545a377ed1ef1d847febb9cb876eebcb715fb86f1d80c712f897b8ddb961bdb842d3e148020367581d740cf07b1c97f5b319605989c9737d5c5c59c0733a4cbfe9c2a9e3c93a8b02ba177a8e075ec1d4d0309c0e82f2964ccc73a140b35dd0d6b74a68811d4ba18b5b3c4e33a3f2572a375df7e9192ed563c489775223ce1f616e7481e5c49deb9e0fae5db3a9978524f63308ea4beb54ab6251e7da8e0f897afef5eaeaae5b50add0a236ca0326f1ce8a6151adbdb063cfb5c1f431484d05c149a04371caaf7e4963595d4980fcc486e22c815e730dc370ccd885aad9df35cf8109a57ddcb3c3d5d2298f974d362c5894b49ce83bad7acda6fbb6170f488a5db59f58ed4bba49e47b79be4c9ffeb3f4f08755fdba3c90ebd1b14e570972916a1e07d721690f88b1226f29aa53ae3a7072b9833b71773cb6c2d5663c2020dc284d31c8ba1afc73a2b100c43babe48bf12fbaf727ffc32f1175ada22437cdba45def1e4f56d80ddf5f3bf94c801a4cdf5ef6b15044a3c6b0831570381067a06d1846f56e35f095db9605c5e12d44b9b0595b0263d936eef9ff9569d883fb79de526d6c702b26c7b9e957f75b9322f5023159d8a9c64abf34e2aa78f6533eb5924aee7f7ca9a53f290b3e4d84abdb4ea4a36fe25d18a20cdbfc0517b3453c1bd9ac84216567f87b596b0c1116e3f1d2a57ecc9bc9eefafca1ecfead0030d8f87c388ee3ab148eca9aa1fb877629b933e2f5232b64320e2e7f6ea526c4acbb406bc9ad825eb368e8c35331edb95e180f1ac0bc55873dcc94696223b11a72e96c54f7d6bb32921c5ceafb3c51384bc2d9c7261e3c59f80724df173112fad5b3eb2e04b6639c8161d48affc2e792a9323992ba5966002763492d58cac9c4d29be5d10c9d0b41708b195887c3e477f9e9e6fbaeae4c9dfacd287b916ba1cd24c200b84c83f93ef781f71a9b773e5a5e7018b6d15c2e549f548b9481236bf28160305076e7e1ea8e705364e8b79db32588b169181a6d011f86fb7b7192b37fc19dc1658bfb7e3ea6e76bedc6d1e0425cbd9e5b4ced12c6241d33317e7989b9f7dc997294dd6b46afa3f5c9bc105b4d32aff5e1224d99bf861acbb5e6b13eac0afa15488d096a480f29e2c4b4f479bed468f3ae9e91c3699f8faff580db8c9b475165072b6b04334269f9e19c0b2d25edd5aef5a041953eed79c9275aa69dd23cc468b5211b9d11159c956c86b315ecfab0e33a367a164f305a7091a604b86839d248db8337cb8ca11fee6b545b657f0fc632fcfc94c0c268f4568585ee37b68a07ac7bdebb29fe3dc207539badaf5c8b7d7123b3fc06793b3a731e6575a971c72a146695efab852cad23dad07a7fec1cde4f8f573838368e5530e68a68efae2ac5f5c9a01d889301a56291714783d0b48b4e2ab09e5f577585d16b7330ba644dc68be0b8a95d3dfcfbd72c9975d51cececeecadc6d8721815ed8e8743506ae8bf84240cf91ca3364c543c6f42435ea7749aeb8b86f6672fa1bf5eec9ccb7cefae042a022c0073b621ad90af191f2608d1a06e3c3b724f32e3f1be6d0391b6e0ee651d77483ecb9cda8046b12e22cb79b60b75de85c8fdf2f341c0411bd87b2983b2cbcd7b8d8c9a8292dc3c393ce167038ed1987e8bef9493589508f1575d8587c2b3ac3a7c762eeb5d", 0x4c8, 0x71d100000, 0x0, 0x1}, 0x0) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) renameat2(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$DRM_IOCTL_FREE_BUFS(r0, 0x4008641a, &(0x7f0000000240)={0x4, &(0x7f0000000200)=[0x3, 0x0, 0x7, 0x100000000000]}) chdir(&(0x7f0000000080)='./file0\x00') r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000009740)=[{{0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}}], 0x400023f, 0x0, 0x0) fstatfs(r1, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x622, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000380)) r3 = open(&(0x7f0000000180)='./file0\x00', 0x40, 0xfffffffffffffffc) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000600), 0xffffffffffffffff) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000001c0)={'bpq0\x00'}) execve(&(0x7f0000000500)='./file0/file0\x00', &(0x7f0000000380), &(0x7f0000000780)=[&(0x7f0000000540)='/dev/swradio#\x00', &(0x7f0000000580)='/dev/swradio#\x00', &(0x7f00000005c0)='selinux\x00', &(0x7f0000000640)='*trusted}nodev\x00', &(0x7f0000000680)='&nodev^(\x00', &(0x7f00000006c0)='bpq0\x00', &(0x7f0000000700)='ppp1)\x00', &(0x7f0000000740)='wlan1:-+,\x00']) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r0, 0x8040ae9f, &(0x7f0000000480)) setsockopt$MISDN_TIME_STAMP(r3, 0x0, 0x1, &(0x7f0000000380), 0x4) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r4, 0x0, 0xfffffffffffffe05) 00:24:34 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x0, &(0x7f0000000080)=0x1, 0x43d) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x1000001c3) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000400)={0x0, 0x8d9c, 0x10002}, 0x14) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x4f3d1d6e) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 00:24:34 executing program 5: keyctl$setperm(0x5, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000080), &(0x7f0000000100)=0x4) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:24:34 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x0, 0x0) r1 = dup2(r0, r0) ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000040)={0x1, @raw_data="4236feaa175479da5d81673748661f0e6875893a9d89d2c2cc270a8afecaedfe7a3fe8f8f85f271dcd4d15836842330e8ebfad714ee34433344d76fb1b330c2a8daf2134f178cef8f55eabf0003dd576b5646873cc6485fb9b9f09123c6dcc07d15d2d105903c44f308ea3a56ae4ca0633f0cf36c7847540cee20405ac72cd1d29c4a37b8f9e3fa77ab852d2d8523e9f29c5ccfee19c1dde1b6bb67279009b6df511e7055505e9708d2fd10acd9543fa6ed721d2c7cbf7f4a7db97ab6c4628bf29c53e31029fd146"}) 00:24:35 executing program 0: keyctl$setperm(0x5, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000080), &(0x7f0000000100)=0x4) getuid() ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:24:35 executing program 2: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffff9c, 0x0, 0x15, &(0x7f0000000100)='mime_typebdev/vmnet0\x00', 0xffffffffffffffff}, 0x30) perf_event_open(&(0x7f0000000080)={0x7, 0x70, 0x7fff, 0x9d88, 0x7, 0x3, 0x0, 0x7f, 0x48, 0x0, 0x79f, 0x0, 0x7, 0x0, 0x7, 0x400, 0xa7, 0xffffffff, 0x8, 0x3, 0x4, 0x9, 0x5, 0x2, 0x10000, 0x3, 0x1, 0x2, 0x8, 0x3, 0x3, 0x9a1f, 0x10, 0x4, 0x8, 0x8, 0x401, 0x80, 0x0, 0x7fffffff, 0x4, @perf_bp={&(0x7f0000000040), 0x4}, 0x2, 0x0, 0x9, 0x9, 0x10000, 0xf, 0xffffffffffffffe2}, r0, 0x7, 0xffffffffffffffff, 0x8) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x10000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x9, 0xffffffffffffffff, 0x0) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000240)=0xfffffffffffffffe, 0x1) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x5020}], 0x200000000000026b, 0x0, 0x0, 0xffffffffffffffb6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'veth0\x00', 0x0}) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f00000002c0)=r3) r4 = dup(r2) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) 00:24:35 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x0, &(0x7f0000000080)=0x1, 0x43d) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x1000001c3) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000400)={0x0, 0x8d9c, 0x10002}, 0x14) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x4f3d1d6e) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 00:24:35 executing program 3: keyctl$setperm(0x5, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000080), &(0x7f0000000100)=0x4) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) getuid() ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:24:35 executing program 2: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x80100, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 00:24:35 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffff9c, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x4, 0x1}, &(0x7f0000000040)=0x88) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffff9c, 0x84, 0x76, &(0x7f0000000180)={0x0, 0x88f7029}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000200)={r1, 0x0, 0x20, 0x20, 0x4, 0x1, 0x7, 0x0, {r2, @in6={{0xa, 0x4e24, 0x9afa, @rand_addr="ec7431b5a68c1011cd4b5709d634d6d6", 0x6}}, 0xffffffff, 0x5, 0xffffffff, 0x9, 0xb93}}, &(0x7f00000002c0)=0xb0) r3 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet_tcp_int(r3, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@window={0x3, 0x10001, 0xe263}, @sack_perm, @sack_perm, @window={0x3, 0x7, 0x6}], 0x4) 00:24:35 executing program 2: r0 = dup2(0xffffffffffffff9c, 0xffffffffffffffff) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000100)={{{@in6=@ipv4={[], [], @remote}, @in=@loopback}}, {{}, 0x0, @in=@dev}}, &(0x7f0000000240)=0xe8) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="100000000000000000000000774f69d5cd082e8ec70e850b8ab0494cab3f88c432ab8d325ebe0798c853b76ea0bb19d7900673bede43df0072c5abf80d8221dcc98c5a4a471d47bfc0eb1787167699c9224ef5b3837a22935c50b0fac39b86e35969dbde3b5d2456695f071cea330af13e958cfe8f53e1fe79d8acb0144587d15e3523d62d6289afeed6aa99604b8e831a41f408526df5a58076da8b65649f3b6d21eb12c82ae4656151fa071028e24afd9794d1aa93a872022a40e66007fd277aac7015ec4a0746adc2002ea1bd940ea3916adab15e65"], 0x10}, 0x0) syz_open_dev$mouse(&(0x7f0000000280)='/dev/input/mouse#\x00', 0x400, 0xc0) 00:24:35 executing program 1: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x100020045f) write$binfmt_elf32(r0, &(0x7f0000000140)=ANY=[@ANYRES16=r0], 0x2) close(r0) write$P9_RREADLINK(r0, &(0x7f00000000c0)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) mlockall(0x2) uselib(&(0x7f0000000100)='./file0\x00') 00:24:35 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000380)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_G_DV_TIMINGS(r0, 0xc0845658, &(0x7f0000000180)={0x0, @reserved}) 00:24:35 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000001480), 0x1000) write$FUSE_INTERRUPT(r0, &(0x7f0000000240)={0x10, 0x0, 0x2}, 0x10) lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='system.posix_acl_default\x00', 0x0, 0x0) 00:24:37 executing program 5: keyctl$setperm(0x5, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000080), &(0x7f0000000100)=0x4) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:24:37 executing program 2: r0 = socket(0x10, 0x80002, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x2c240, 0x0) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000080)={0x2, 0x0, [{0x7, 0x3, 0x0, 0x0, @adapter={0x4, 0x53, 0x3e, 0x9, 0x3}}, {0x3f, 0x2, 0x0, 0x0, @msi={0x4, 0x8001, 0x81}}]}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000140)=r1) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NET_DM_CMD_START(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={0x0}}, 0x0) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000200)=@tipc=@id, 0x80, 0x0}, 0x0) 00:24:37 executing program 0: keyctl$setperm(0x5, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000080), &(0x7f0000000100)=0x4) getuid() ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:24:37 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x0, &(0x7f0000000080)=0x1, 0x43d) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x1000001c3) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000400)={0x0, 0x8d9c, 0x10002}, 0x14) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x4f3d1d6e) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 00:24:37 executing program 1: keyctl$setperm(0x5, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000080), &(0x7f0000000100)=0x4) getuid() ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:24:38 executing program 3: keyctl$setperm(0x5, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000080), &(0x7f0000000100)=0x4) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:24:38 executing program 2: keyctl$setperm(0x5, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000080), &(0x7f0000000100)=0x4) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:24:38 executing program 0: keyctl$setperm(0x5, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000080), &(0x7f0000000100)=0x4) getuid() ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:24:38 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x1000001c3) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000400)={0x0, 0x8d9c, 0x10002}, 0x14) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x4f3d1d6e) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 00:24:38 executing program 5: keyctl$setperm(0x5, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000080), &(0x7f0000000100)=0x4) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:24:38 executing program 1: keyctl$setperm(0x5, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000080), &(0x7f0000000100)=0x4) getuid() ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:24:39 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x1000001c3) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000400)={0x0, 0x8d9c, 0x10002}, 0x14) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x4f3d1d6e) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 00:24:39 executing program 5: keyctl$setperm(0x5, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000080), &(0x7f0000000100)=0x4) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) getuid() ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:24:39 executing program 0: keyctl$setperm(0x5, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) getuid() ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:24:39 executing program 3: keyctl$setperm(0x5, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000080), &(0x7f0000000100)=0x4) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:24:39 executing program 2: keyctl$setperm(0x5, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000080), &(0x7f0000000100)=0x4) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:24:39 executing program 1: keyctl$setperm(0x5, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000080), &(0x7f0000000100)=0x4) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:24:40 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x1000001c3) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000400)={0x0, 0x8d9c, 0x10002}, 0x14) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x4f3d1d6e) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 00:24:40 executing program 5: keyctl$setperm(0x5, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000080), &(0x7f0000000100)=0x4) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) getuid() ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:24:40 executing program 0: keyctl$setperm(0x5, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) getuid() ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:24:40 executing program 2: keyctl$setperm(0x5, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000080), &(0x7f0000000100)=0x4) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:24:41 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000080), 0x43d) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x1000001c3) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000400)={0x0, 0x8d9c, 0x10002}, 0x14) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x4f3d1d6e) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 00:24:41 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000080), 0x43d) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x1000001c3) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000400)={0x0, 0x8d9c, 0x10002}, 0x14) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x4f3d1d6e) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 00:24:42 executing program 3: keyctl$setperm(0x5, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) getuid() ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:24:42 executing program 1: keyctl$setperm(0x5, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000080), &(0x7f0000000100)=0x4) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) getuid() ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:24:42 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000080), 0x43d) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x1000001c3) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000400)={0x0, 0x8d9c, 0x10002}, 0x14) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x4f3d1d6e) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 00:24:43 executing program 5: keyctl$setperm(0x5, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000080), &(0x7f0000000100)=0x4) getuid() ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:24:43 executing program 0: keyctl$setperm(0x5, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) getuid() ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:24:43 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x43d) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x1000001c3) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000400)={0x0, 0x8d9c, 0x10002}, 0x14) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x4f3d1d6e) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 00:24:43 executing program 2: keyctl$setperm(0x5, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000080), &(0x7f0000000100)=0x4) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:24:44 executing program 5: keyctl$setperm(0x5, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000080), &(0x7f0000000100)=0x4) getuid() ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:24:44 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x43d) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x1000001c3) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000400)={0x0, 0x8d9c, 0x10002}, 0x14) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x4f3d1d6e) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 00:24:44 executing program 2: keyctl$setperm(0x5, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000080), &(0x7f0000000100)=0x4) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:24:45 executing program 5: keyctl$setperm(0x5, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000080), &(0x7f0000000100)=0x4) getuid() ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:24:45 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x43d) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x1000001c3) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000400)={0x0, 0x8d9c, 0x10002}, 0x14) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x4f3d1d6e) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 00:24:45 executing program 3: keyctl$setperm(0x5, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000080), &(0x7f0000000100)=0x4) getuid() ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:24:45 executing program 1: keyctl$setperm(0x5, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) getuid() ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:24:45 executing program 2: keyctl$setperm(0x5, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000080), &(0x7f0000000100)=0x4) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:24:45 executing program 2: keyctl$setperm(0x5, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000080), &(0x7f0000000100)=0x4) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:24:46 executing program 0: keyctl$setperm(0x5, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000080), &(0x7f0000000100)=0x4) ioctl$int_in(0xffffffffffffffff, 0x800040c004500a, &(0x7f0000000040)=0x80000002) getuid() ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:24:46 executing program 5: keyctl$setperm(0x5, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) getuid() ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:24:46 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x43d) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000400)={0x0, 0x8d9c, 0x10002}, 0x14) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x4f3d1d6e) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 00:24:46 executing program 0: keyctl$setperm(0x5, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000080), &(0x7f0000000100)=0x4) ioctl$int_in(0xffffffffffffffff, 0x800040c004500a, &(0x7f0000000040)=0x80000002) getuid() ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:24:46 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000480)) unshare(0x22000c02) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x280040, 0x0) utimensat(r0, &(0x7f00000000c0)='./control/file0\x00', &(0x7f0000000100)={{0x0, 0x2710}}, 0x100) statx(0xffffffffffffffff, &(0x7f00000003c0)='./control/file0\x00', 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, 0x0, 0x0) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) mount(&(0x7f0000000040)=ANY=[@ANYBLOB="babc6923c258000000000000"], &(0x7f0000000380)='./control/file0\x00', 0x0, 0x1000, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r1, 0x8917, &(0x7f0000000140)={'irlan0\x00', {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}) unlink(&(0x7f0000000200)='./control/file0\x00') getsockopt$packet_buf(r0, 0x107, 0x2, &(0x7f0000000240)=""/157, &(0x7f0000000340)=0x9d) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f00000001c0), &(0x7f0000000300)=0x4) 00:24:46 executing program 0: keyctl$setperm(0x5, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000080), &(0x7f0000000100)=0x4) ioctl$int_in(0xffffffffffffffff, 0x800040c004500a, &(0x7f0000000040)=0x80000002) getuid() ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:24:46 executing program 3: r0 = msgget(0xffffffffffffffff, 0x4) msgrcv(r0, 0x0, 0xf6, 0x3, 0x1ffe) msgsnd(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x4, 0x0) msgrcv(r0, &(0x7f0000000000)={0x0, ""/38}, 0x2a, 0x3, 0x2000) io_setup(0x1, &(0x7f0000000040)=0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) io_pgetevents(r1, 0x4b6, 0x7, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f00000001c0)={r2, r3+30000000}, 0x0) 00:24:46 executing program 0: keyctl$setperm(0x5, 0x0, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000080), &(0x7f0000000100)=0x4) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) getuid() ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:24:46 executing program 3: openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000040)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000800)="585ccbc4ed83b836c1a6474914dc5500b66147b3c7218a91690000000042e3d35228f94d1cef9f7830897501f93191b076ac446ff0022b8753a1fa748c569f435fb3bae96efb74b50ec93c2db8eae3198a29e5c0cfc60000ce0637ce0080b4ec24c53d86571ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff33c1e8e036e5031949762d009d308bd73f477253900000000000000000000000000000000000000", 0xc0, r0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000300)='/dev/rtc0\x00', 0x3ffffc, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r2, 0x29, 0x2d, &(0x7f0000000140)={0x0, {{0xa, 0x4e21, 0x4, @local, 0x101}}}, 0x84) r3 = socket(0x22, 0x2, 0x4) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r3, 0x111, 0x1, 0x0, 0x4) renameat2(r2, &(0x7f0000000340)='./file0\x00', r2, &(0x7f0000000380)='./file0\x00', 0x4) ioctl$BLKIOMIN(r2, 0x1278, &(0x7f00000000c0)) r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r1, r1, r4}, &(0x7f0000000700)=""/243, 0xf3, &(0x7f0000000240)={&(0x7f0000000280)={'poly1305-simd\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x0f\x00@\x00\x00\x01\x00'}, &(0x7f0000000180)}) sched_setaffinity(0x0, 0x0, 0x0) read$rfkill(r2, &(0x7f00000003c0), 0x8) 00:24:48 executing program 1: openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000040)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000800)="585ccbc4ed83b836c1a6474914dc5500b66147b3c7218a91690000000042e3d35228f94d1cef9f7830897501f93191b076ac446ff0022b8753a1fa748c569f435fb3bae96efb74b50ec93c2db8eae3198a29e5c0cfc60000ce0637ce0080b4ec24c53d86571ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff33c1e8e036e5031949762d009d308bd73f477253900000000000000000000000000000000000000", 0xc0, r0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000300)='/dev/rtc0\x00', 0x3ffffc, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r2, 0x29, 0x2d, &(0x7f0000000140)={0x0, {{0xa, 0x4e21, 0x4, @local, 0x101}}}, 0x84) r3 = socket(0x22, 0x2, 0x4) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r3, 0x111, 0x1, 0x0, 0x4) renameat2(r2, &(0x7f0000000340)='./file0\x00', r2, &(0x7f0000000380)='./file0\x00', 0x4) ioctl$BLKIOMIN(r2, 0x1278, &(0x7f00000000c0)) r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r1, r1, r4}, &(0x7f0000000700)=""/243, 0xf3, &(0x7f0000000240)={&(0x7f0000000280)={'poly1305-simd\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x0f\x00@\x00\x00\x01\x00'}, &(0x7f0000000180)}) sched_setaffinity(0x0, 0x0, 0x0) read$rfkill(r2, &(0x7f00000003c0), 0x8) 00:24:48 executing program 3: openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000040)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000800)="585ccbc4ed83b836c1a6474914dc5500b66147b3c7218a91690000000042e3d35228f94d1cef9f7830897501f93191b076ac446ff0022b8753a1fa748c569f435fb3bae96efb74b50ec93c2db8eae3198a29e5c0cfc60000ce0637ce0080b4ec24c53d86571ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff33c1e8e036e5031949762d009d308bd73f477253900000000000000000000000000000000000000", 0xc0, r0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000300)='/dev/rtc0\x00', 0x3ffffc, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r2, 0x29, 0x2d, &(0x7f0000000140)={0x0, {{0xa, 0x4e21, 0x4, @local, 0x101}}}, 0x84) r3 = socket(0x22, 0x2, 0x4) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r3, 0x111, 0x1, 0x0, 0x4) renameat2(r2, &(0x7f0000000340)='./file0\x00', r2, &(0x7f0000000380)='./file0\x00', 0x4) ioctl$BLKIOMIN(r2, 0x1278, &(0x7f00000000c0)) r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r1, r1, r4}, &(0x7f0000000700)=""/243, 0xf3, &(0x7f0000000240)={&(0x7f0000000280)={'poly1305-simd\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x0f\x00@\x00\x00\x01\x00'}, &(0x7f0000000180)}) sched_setaffinity(0x0, 0x0, 0x0) read$rfkill(r2, &(0x7f00000003c0), 0x8) 00:24:48 executing program 2: keyctl$setperm(0x5, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000080), &(0x7f0000000100)=0x4) ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:24:48 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x43d) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000400)={0x0, 0x8d9c, 0x10002}, 0x14) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x4f3d1d6e) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 00:24:49 executing program 5: keyctl$setperm(0x5, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) getuid() ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:24:49 executing program 3: openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000040)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000800)="585ccbc4ed83b836c1a6474914dc5500b66147b3c7218a91690000000042e3d35228f94d1cef9f7830897501f93191b076ac446ff0022b8753a1fa748c569f435fb3bae96efb74b50ec93c2db8eae3198a29e5c0cfc60000ce0637ce0080b4ec24c53d86571ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff33c1e8e036e5031949762d009d308bd73f477253900000000000000000000000000000000000000", 0xc0, r0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000300)='/dev/rtc0\x00', 0x3ffffc, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r2, 0x29, 0x2d, &(0x7f0000000140)={0x0, {{0xa, 0x4e21, 0x4, @local, 0x101}}}, 0x84) r3 = socket(0x22, 0x2, 0x4) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r3, 0x111, 0x1, 0x0, 0x4) renameat2(r2, &(0x7f0000000340)='./file0\x00', r2, &(0x7f0000000380)='./file0\x00', 0x4) ioctl$BLKIOMIN(r2, 0x1278, &(0x7f00000000c0)) r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r1, r1, r4}, &(0x7f0000000700)=""/243, 0xf3, &(0x7f0000000240)={&(0x7f0000000280)={'poly1305-simd\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x0f\x00@\x00\x00\x01\x00'}, &(0x7f0000000180)}) sched_setaffinity(0x0, 0x0, 0x0) read$rfkill(r2, &(0x7f00000003c0), 0x8) 00:24:49 executing program 1: openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000040)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000800)="585ccbc4ed83b836c1a6474914dc5500b66147b3c7218a91690000000042e3d35228f94d1cef9f7830897501f93191b076ac446ff0022b8753a1fa748c569f435fb3bae96efb74b50ec93c2db8eae3198a29e5c0cfc60000ce0637ce0080b4ec24c53d86571ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff33c1e8e036e5031949762d009d308bd73f477253900000000000000000000000000000000000000", 0xc0, r0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000300)='/dev/rtc0\x00', 0x3ffffc, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r2, 0x29, 0x2d, &(0x7f0000000140)={0x0, {{0xa, 0x4e21, 0x4, @local, 0x101}}}, 0x84) r3 = socket(0x22, 0x2, 0x4) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r3, 0x111, 0x1, 0x0, 0x4) renameat2(r2, &(0x7f0000000340)='./file0\x00', r2, &(0x7f0000000380)='./file0\x00', 0x4) ioctl$BLKIOMIN(r2, 0x1278, &(0x7f00000000c0)) r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r1, r1, r4}, &(0x7f0000000700)=""/243, 0xf3, &(0x7f0000000240)={&(0x7f0000000280)={'poly1305-simd\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x0f\x00@\x00\x00\x01\x00'}, &(0x7f0000000180)}) sched_setaffinity(0x0, 0x0, 0x0) read$rfkill(r2, &(0x7f00000003c0), 0x8) 00:24:49 executing program 3: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000289000)={&(0x7f0000cf1ff4), 0xc, &(0x7f0000703000)={&(0x7f000023f000)=ANY=[@ANYBLOB="840000000000000000000000000000000046659a62290ffc380c2dbfc75e89e106ba4206274d760dfe0597260617e101000006000000001cb4e2bf501db1bb9427ecd8337f6d63cc87e2c2d7f271f069c29c4d91b00ffff0be48b748d3050bc1700612dbc3080c91125fa158cf0d70309f7f19007c8262d732940142ab1cf90b11e0"], 0x82}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f000023f000)=0xa, 0x20b) setsockopt$inet6_int(r0, 0x29, 0x0, &(0x7f0000000000)=0x8, 0x4) 00:24:49 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x10) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) syz_emit_ethernet(0x350, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaa01971d00000008004500001c000000000011907800000000e000000104004e2100089078"], 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x80200, 0x0) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r1, 0x111, 0x1, 0x9, 0x4) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0), 0x10) ioctl$FS_IOC_GETVERSION(r1, 0x80047601, &(0x7f0000000100)) 00:24:49 executing program 1: chdir(&(0x7f0000000080)='./control\x00') mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000340)='./file0\x00') mkdir(&(0x7f000000dff6)='./control\x00', 0x0) r0 = open(&(0x7f0000039000)='./control\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat(r0, &(0x7f0000025000)='./file0\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000040)='./control\x00', 0x0) renameat2(r1, &(0x7f0000bee000)='./control\x00', r0, &(0x7f000003a000)='./control\x00', 0x0) 00:24:49 executing program 0: keyctl$setperm(0x5, 0x0, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000080), &(0x7f0000000100)=0x4) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) getuid() ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:24:49 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x43d) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000400)={0x0, 0x8d9c, 0x10002}, 0x14) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x4f3d1d6e) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 00:24:49 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000015, &(0x7f0000d06000)=0x1, 0xfffffffffffffe5d) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) shutdown(r0, 0x1) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000014, &(0x7f00000000c0)=0x80000000002, 0x4) recvmmsg(r0, &(0x7f00000001c0), 0x460, 0xea225aec34b1dd0e, 0x0) 00:24:49 executing program 2: keyctl$setperm(0x5, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000080), &(0x7f0000000100)=0x4) ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:24:49 executing program 1: chdir(&(0x7f0000000080)='./control\x00') mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000340)='./file0\x00') mkdir(&(0x7f000000dff6)='./control\x00', 0x0) r0 = open(&(0x7f0000039000)='./control\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat(r0, &(0x7f0000025000)='./file0\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000040)='./control\x00', 0x0) renameat2(r1, &(0x7f0000bee000)='./control\x00', r0, &(0x7f000003a000)='./control\x00', 0x0) 00:24:50 executing program 3: keyctl$setperm(0x5, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000080), &(0x7f0000000100)=0x4) ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:24:52 executing program 5: keyctl$setperm(0x5, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) getuid() ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:24:52 executing program 1: r0 = openat$audio(0xffffffffffffff9c, 0x0, 0x40000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @dev}, 0x10) r2 = fcntl$getown(r0, 0x9) ptrace$cont(0x20, r2, 0x8, 0x1) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) ioctl$PPPIOCSCOMPRESS(r0, 0x400c744d) shmctl$SHM_LOCK(0x0, 0xb) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) 00:24:52 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x43d) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x1000001c3) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000400)={0x0, 0x8d9c, 0x10002}, 0x14) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x4f3d1d6e) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 00:24:52 executing program 2: keyctl$setperm(0x5, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000080), &(0x7f0000000100)=0x4) ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:24:52 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000000)={0x3, 0x8204, 0x70, 0x2, 0x0}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000000c0)={r1, 0x77b, 0x2000, 0x6}, 0x10) write$binfmt_aout(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x464) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001bc0)={'hsr0\x00', r2}) ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0) [ 235.539121][T10207] vivid-000: ================= START STATUS ================= [ 235.623856][T10207] vivid-000: Interlaced VBI Format: false [ 235.630065][T10207] vivid-000: ================== END STATUS ================== 00:24:52 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x43d) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x1000001c3) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000400)={0x0, 0x8d9c, 0x10002}, 0x14) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x4f3d1d6e) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 235.792085][T10217] vivid-000: ================= START STATUS ================= [ 235.843653][T10217] vivid-000: Interlaced VBI Format: false [ 235.849948][T10217] vivid-000: ================== END STATUS ================== 00:24:53 executing program 0: keyctl$setperm(0x5, 0x0, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000080), &(0x7f0000000100)=0x4) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) getuid() ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:24:53 executing program 1: keyctl$setperm(0x5, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) getuid() ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:24:53 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x43d) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x1000001c3) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000400)={0x0, 0x8d9c, 0x10002}, 0x14) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x4f3d1d6e) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 00:24:53 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xa, &(0x7f0000000040)=0x1, 0x4) fcntl$dupfd(r1, 0x0, r1) syz_open_pts(r0, 0x0) pipe(&(0x7f00000004c0)={0xffffffffffffffff}) pselect6(0x40, &(0x7f00000000c0)={0x3}, 0x0, &(0x7f0000000140)={0x1b7}, 0x0, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x80, r3, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1e4}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x100000001}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x45}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x3d}, @IPVS_SVC_ATTR_AF={0x8}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r2, 0x891c, &(0x7f0000000000)={'veth0_to_bridge\x00', {0x2, 0x4e20, @multicast2}}) 00:24:53 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x43d) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x1000001c3) connect$inet(r2, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000400)={0x0, 0x8d9c, 0x10002}, 0x14) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x4f3d1d6e) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 00:24:53 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cgroup.max.descendants\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x8) 00:24:53 executing program 5: keyctl$setperm(0x5, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000080), &(0x7f0000000100)=0x4) ioctl$int_in(0xffffffffffffffff, 0x800040c004500a, &(0x7f0000000040)=0x80000002) getuid() ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:24:53 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x43d) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x1000001c3) connect$inet(r2, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000400)={0x0, 0x8d9c, 0x10002}, 0x14) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x4f3d1d6e) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 00:24:53 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x7ff, 0xfffffffffffffffe) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) r3 = getgid() getgroups(0x3, &(0x7f00000001c0)=[r1, r2, r3]) r4 = syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0x3, 0x4000) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1) ioctl$int_out(r0, 0xa000005382, &(0x7f0000fd3ffc)) ioctl$NBD_SET_SOCK(r4, 0xab00, r4) 00:24:53 executing program 2: keyctl$setperm(0x5, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:24:53 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video35\x00', 0x2, 0x0) flock(r0, 0x1) r1 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$RNDADDTOENTCNT(r1, 0x40045201, &(0x7f00000000c0)=0x3) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x20, 0x2, 0x2}) ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000000)=0x2) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r1, 0x80845663, &(0x7f0000000140)) 00:24:53 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x43d) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x1000001c3) connect$inet(r2, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000400)={0x0, 0x8d9c, 0x10002}, 0x14) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x4f3d1d6e) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 00:24:56 executing program 0: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000080), &(0x7f0000000100)=0x4) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) getuid() ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:24:56 executing program 5: keyctl$setperm(0x5, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000080), &(0x7f0000000100)=0x4) ioctl$int_in(0xffffffffffffffff, 0x800040c004500a, &(0x7f0000000040)=0x80000002) getuid() ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:24:56 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x5432, 0x0) ioctl$int_out(r0, 0x5460, &(0x7f0000000000)) 00:24:56 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x43d) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x1000001c3) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000400)={0x0, 0x8d9c, 0x10002}, 0x14) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x4f3d1d6e) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 00:24:56 executing program 1: keyctl$setperm(0x5, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) getuid() ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:24:56 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) setsockopt$inet_tcp_int(r2, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0xfdf6) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff5d, 0x0, 0x0, 0x0) splice(r2, 0x0, r1, 0x0, 0x11000, 0x0) 00:24:56 executing program 5: keyctl$setperm(0x5, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000080), &(0x7f0000000100)=0x4) ioctl$int_in(0xffffffffffffffff, 0x800040c004500a, &(0x7f0000000040)=0x80000002) getuid() ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:24:56 executing program 5: keyctl$setperm(0x5, 0x0, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000080), &(0x7f0000000100)=0x4) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) getuid() ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:24:56 executing program 3: 00:24:56 executing program 2: keyctl$setperm(0x5, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(0xffffffffffffffff, 0x800040c004500a, &(0x7f0000000040)=0x80000002) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:24:56 executing program 3: 00:24:56 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = gettid() rt_sigprocmask(0x0, &(0x7f000003b000)={0xfffffffffffffffe}, 0x0, 0x8) prlimit64(0x0, 0xb, &(0x7f000002fff0), 0x0) rt_sigqueueinfo(r1, 0x21, &(0x7f0000000000)) 00:24:59 executing program 0: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000080), &(0x7f0000000100)=0x4) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) getuid() ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:24:59 executing program 2: keyctl$setperm(0x5, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(0xffffffffffffffff, 0x800040c004500a, &(0x7f0000000040)=0x80000002) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:24:59 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) 00:24:59 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x43d) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x1000001c3) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000400)={0x0, 0x8d9c, 0x10002}, 0x14) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x4f3d1d6e) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 00:24:59 executing program 1: r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000000)="c11400ffffff89", 0x7}], 0x1}, 0x0) 00:24:59 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000000)={@link_local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x34}, @rand_addr=0x80000000}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 00:24:59 executing program 2: keyctl$setperm(0x5, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(0xffffffffffffffff, 0x800040c004500a, &(0x7f0000000040)=0x80000002) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:24:59 executing program 5: keyctl$setperm(0x5, 0x0, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000080), &(0x7f0000000100)=0x4) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) getuid() ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:24:59 executing program 1: r0 = syz_open_dev$video(&(0x7f0000002d40)='/dev/video#\x00', 0x4, 0x0) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f0000000100)={0xa, {0xfffffffffffffffe}}) 00:24:59 executing program 3: syz_execute_func(&(0x7f00000002c0)="3666440f50f564ff0941c3c4e2c9975842c4c27d794e0066420fe2e33e0f1110c442019dccd3196f") clone(0x200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)) r1 = creat(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x109) r2 = dup2(r0, r1) execve(&(0x7f00000000c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x841, 0x0) clone(0x3102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f00000001c0)='./file1\x00', 0x0, 0x0) ioctl$VT_GETSTATE(r2, 0x5603, 0x0) 00:24:59 executing program 2: keyctl$setperm(0x5, 0x0, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:24:59 executing program 1: mknod(&(0x7f0000000180)='./file1\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_execute_func(&(0x7f0000000240)="3666440f50f564ff0941c3c4e2c9975842c4c27d794e00c48198558031782ab03e0f1110d319c4c2d1a8b600100000") mknod(&(0x7f0000000000)='./file0\x00', 0x1045, 0x0) execve(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000540)=""/11, 0x485) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)) r1 = creat(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x109) r2 = dup2(r0, r1) execve(&(0x7f00000000c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0) open$dir(&(0x7f00000001c0)='./file0\x00', 0x8000841, 0x0) clone(0x3102001ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000040)='./file1\x00', 0x0, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r2, 0x8935, 0x0) 00:25:02 executing program 0: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000080), &(0x7f0000000100)=0x4) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) getuid() ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:25:02 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000140)={@multicast2, @loopback, 0x0, 0x1, [@empty]}, 0x14) 00:25:02 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 00:25:02 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x43d) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x1000001c3) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000400)={0x0, 0x8d9c, 0x10002}, 0x14) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x4f3d1d6e) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 00:25:02 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='projid_map\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000237, 0x0) 00:25:02 executing program 3: 00:25:02 executing program 3: 00:25:02 executing program 2: keyctl$setperm(0x5, 0x0, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:25:02 executing program 5: keyctl$setperm(0x5, 0x0, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000080), &(0x7f0000000100)=0x4) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) getuid() ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:25:02 executing program 3: 00:25:02 executing program 3: 00:25:02 executing program 3: 00:25:05 executing program 3: 00:25:05 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x43d) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x1000001c3) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x4f3d1d6e) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 00:25:05 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000080), &(0x7f0000000100)=0x4) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) getuid() ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:25:05 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 00:25:05 executing program 3: 00:25:05 executing program 3: 00:25:05 executing program 3: 00:25:05 executing program 2: keyctl$setperm(0x5, 0x0, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:25:05 executing program 3: 00:25:05 executing program 5: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000080), &(0x7f0000000100)=0x4) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) getuid() ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:25:05 executing program 3: 00:25:05 executing program 3: 00:25:05 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000000)='m\x815\x1e9\xcf\xc2(\xa4\xa1r\x00', 0x0) flistxattr(r0, 0x0, 0x0) 00:25:06 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x43d) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x1000001c3) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x4f3d1d6e) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 00:25:08 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000080), &(0x7f0000000100)=0x4) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) getuid() ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:25:08 executing program 3: r0 = socket$kcm(0xa, 0x400922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000040)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0}, 0x0) 00:25:08 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 00:25:08 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x43d) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x1000001c3) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x4f3d1d6e) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 00:25:08 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x74, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x34c, 0x200007fd, &(0x7f0000000340)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000003c0)="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", 0x209, 0x0, 0x0, 0x0) 00:25:08 executing program 2: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:25:08 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000480)={&(0x7f0000000440)='./file0\x00'}, 0x10) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001240)="2e0000002a00815fe45ac187185095cf1200b0eba0b4d65cdbaa98cbb30007fff00000000000000051894d5d1dac", 0x2e}], 0x1}, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_subtree(r1, &(0x7f0000000180)='cgroup.subtree_control\x00', 0x2, 0x0) r2 = gettid() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r4 = perf_event_open(&(0x7f00000003c0)={0x0, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0x40042409, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={0xffffffffffffffff, 0x0, 0x0, 0x77, 0x0, &(0x7f0000000600)=""/119}, 0x28) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000740)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000840)=r2, 0xfffffffffffffe0e) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x10000) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r3, 0xc008240a, &(0x7f00000006c0)={0x1, 0x0, [0x0]}) 00:25:08 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000080), &(0x7f0000000100)=0x4) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) getuid() ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:25:08 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000480)={&(0x7f0000000440)='./file0\x00'}, 0x10) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001240)="2e0000002a00815fe45ac187185095cf1200b0eba0b4d65cdbaa98cbb30007fff00000000000000051894d5d1dac", 0x2e}], 0x1}, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_subtree(r1, &(0x7f0000000180)='cgroup.subtree_control\x00', 0x2, 0x0) r2 = gettid() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r4 = perf_event_open(&(0x7f00000003c0)={0x0, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0x40042409, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={0xffffffffffffffff, 0x0, 0x0, 0x77, 0x0, &(0x7f0000000600)=""/119}, 0x28) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000740)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000840)=r2, 0xfffffffffffffe0e) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x10000) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r3, 0xc008240a, &(0x7f00000006c0)={0x1, 0x0, [0x0]}) 00:25:08 executing program 3: sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x3ff, 0x2) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$evdev(r0, &(0x7f0000000080)=[{{0x0, 0x2710}, 0x2, 0x0, 0x2}], 0x314) 00:25:08 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000080)) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000000c0)) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r2, 0x4010ae68, &(0x7f0000000180)) 00:25:09 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xf7d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sysfs$2(0x2, 0x0, 0x0) 00:25:11 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000080), &(0x7f0000000100)=0x4) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) getuid() ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:25:11 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f0000000940)='mounts\x00\xbau\xb6\t\x1el\xe4YD\x7f}\xae\xbc\xf7`\xa6\"\r\r\\*\xe0(\xe3,\x17|\xe9\x91\xb9\x80\xbf\"D\x05\xfc$\xa3\x1dl\x127\xc1\xcb\xa1\x8b\xff\x9b\xf6\x11\x1aJ\x9fn\x82\x02%\xdc\x02\xf4\x85k\x8a\x11\x03B\x96\x1c\x11p\x7f\x9bqd\xd9\t\xd6\xd4v\x90sPo\x8cn\xbb\x04Jz\x8e<\x03\xa3,\xa1pi\xf3\xc2\x81\xd4(\xce{\x1f/?C\xc4\xf6}\x98\xc0\xf4n5u\xd3\x1d\xb1Y*\xc7\x10\x87\xba\x12Lr\x1fl\x03j\xb9L\x95H@>g~\xed\xb1u\xc4\xdal\xce\xe8\xb4\x16\xa4-\x88\x05\xddR\xc9\x1e\xb9\x85\xbf\x19\xee\xb4\x8c\xbf\x01~i\x8a\xb0f\xa6\xc4\x9eAf\x06\xd8\xd0Fy\x066\xad\\\xeeD\x84\al\xd8\x92\xe8~\x9c\xd0\xf7L\xd27\xb1\xf2\xb7\x8df\x87\xd6C\f\xe6\xbbH\x93\xad\b\xa9et\x8b\xca#\aU\xd0\x16\x1afI\x81\x842[v\xbd\xd3\xd1\x13\xd1\x97m\xbd\xdd\x9d_\xc0\xb1I\xf9_\xd1\xff\xfc\xd4{\x86\x96\xa1\xe3\xdb\xbb0\x16s\xc4\xdb\\fe:s\xcc\xd3\xab\xafc\x8a\x9b\x92\x17\x03E/\xb1T\xeb\xac\x1aiF\xfe\xcb\xff\x94C\xcd\x1e\xc3\'g\nu#0\x13\x8a<\xe0\xd3\xb7\xf6\x96\x12\x00\xbaLA\x8d\xef\x1b\xd6\xd0a\x94\x00<\xcc@\xd15(\x91\x83(\xe0\xe3\xbfm\tc\x1bJj\xa6\n5\xdb\xe3\x8eo\xef_\xe7@!r\x1b\x8a \x97>\\S\xef\xd6lz!\xb8\x9f\a\xd9\x88,k\xb9;@\x0e\x1e\x91\x8a,\xe7co4\xfc\xb4\xa6\xcdkK\xfe:1\xec5\xd4l+\xba\x95\xfd\x05\xed\x9d') r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") sendfile(r0, r1, 0x0, 0x800000080008002) 00:25:11 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x43d) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x1000001c3) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000400)={0x0, 0x0, 0x10002}, 0x14) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x4f3d1d6e) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 00:25:11 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 00:25:11 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0) 00:25:11 executing program 2: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:25:11 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'eql\x00\x00\x00\x05\x00\x00\x10\x00', 0x802}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x30a) ioctl$sock_ifreq(r0, 0x8914, &(0x7f00000000c0)={'eql\x00\x00\x00\xa9[\x00', @ifru_mtu=0x1}) 00:25:11 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000080), &(0x7f0000000100)=0x4) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) getuid() ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:25:12 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) getsockname$netlink(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = getpgrp(0x0) fcntl$lock(r1, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r3 = dup(r0) r4 = socket$nl_route(0x10, 0x3, 0x0) ptrace$peek(0x2, r2, &(0x7f00000001c0)) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) write$P9_RLCREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x18, 0xf, 0x0, {{0x0, 0x2, 0x3}, 0x9}}, 0x18) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r4, 0xc020660b, &(0x7f0000000780)) read(0xffffffffffffffff, &(0x7f0000000800)=""/69, 0x45) ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000940)) 00:25:12 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x3ff, 0x2) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$evdev(r0, &(0x7f0000000080)=[{{0x0, 0x2710}, 0x2, 0x0, 0x2}], 0x314) 00:25:12 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x43d) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x1000001c3) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000400)={0x0, 0x0, 0x10002}, 0x14) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x4f3d1d6e) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 00:25:12 executing program 3: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x20400040c2, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xf7d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0x7) 00:25:14 executing program 0: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000080), &(0x7f0000000100)=0x4) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) getuid() ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:25:14 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) gettid() fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000237, 0x0) 00:25:14 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 00:25:14 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x43d) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x1000001c3) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000400)={0x0, 0x0, 0x10002}, 0x14) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x4f3d1d6e) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 00:25:14 executing program 3: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) ioctl$int_out(r0, 0xc6cb305344fb8656, &(0x7f0000000200)) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000001380)="2f0629900cf0dc747d23c8d65bc91a6391dc483ea0641bfb1035b4b2782bb468b9da2439a7c00caf333d6b4579d9dc7d4d377a3a68c31a27ad81f04bdd235bf6f53b7d8af3ebb15e5e33b35c7994fd56dae708ccf59d9112df8fbc20046ba3fb7b3e42cc8130e133b319832903dd7f5b23f8e533325fac20c12293e222663ef63449e1aec6fdfea00e50") mkdir(0x0, 0x0) mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f00000001c0)='devtmpfs\x00', 0x0, 0x0) pipe(0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9a9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FIGETBSZ(r1, 0x2, &(0x7f00000000c0)) quotactl(0x2080000200, &(0x7f0000000340)='./file1\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x6d) r3 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) syz_emit_ethernet(0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="50001970d3dfb5669609000090780000"], 0x0) setsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000000), 0x4) recvmmsg(r2, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) getpgid(0x0) getpgid(0x0) chroot(&(0x7f0000000040)='./file1\x00') sendto$inet6(r2, &(0x7f0000000100)="b4", 0x1, 0x0, 0x0, 0x0) [ 257.489476][T10533] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 00:25:14 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000080), &(0x7f0000000100)=0x4) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) getuid() ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:25:14 executing program 2: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:25:15 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x43d) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x1000001c3) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000400)={0x0, 0x8d9c}, 0x14) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x4f3d1d6e) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 00:25:15 executing program 3: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20}, 0x1c) listen(r0, 0x5) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmmsg(r1, &(0x7f0000002300)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000005b80)=[{0x10, 0x10d}], 0x10}}], 0x1, 0x40) 00:25:15 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 00:25:15 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 00:25:15 executing program 3: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) gettid() creat(0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getuid() ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, 0x0) ioctl$TIOCSTI(r0, 0x40046f41, 0x907006) 00:25:17 executing program 0: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000080), &(0x7f0000000100)=0x4) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) getuid() ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:25:17 executing program 3: 00:25:17 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x43d) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x1000001c3) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000400)={0x0, 0x8d9c}, 0x14) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x4f3d1d6e) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 00:25:17 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 00:25:17 executing program 3: 00:25:17 executing program 5: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000080), &(0x7f0000000100)=0x4) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) getuid() ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:25:17 executing program 3: 00:25:17 executing program 2: keyctl$setperm(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:25:17 executing program 3: 00:25:17 executing program 3: 00:25:17 executing program 3: 00:25:17 executing program 3: 00:25:20 executing program 0: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000080), &(0x7f0000000100)=0x4) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) getuid() ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:25:20 executing program 3: 00:25:20 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x43d) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x1000001c3) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000400)={0x0, 0x8d9c}, 0x14) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x4f3d1d6e) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 00:25:20 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 00:25:20 executing program 3: 00:25:20 executing program 5: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000080), &(0x7f0000000100)=0x4) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) getuid() ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:25:20 executing program 3: 00:25:20 executing program 2: keyctl$setperm(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:25:20 executing program 3: 00:25:20 executing program 3: 00:25:20 executing program 3: clone(0x80003102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0x2, 0x238, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000440], 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="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"]}, 0x288) 00:25:20 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000080)={0x7a, 0x1004000000010, [0x3a], [0xc1]}) 00:25:23 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x27, 0x0) 00:25:23 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x43d) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x1000001c3) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000400)={0x0, 0x8d9c, 0x10002}, 0x14) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x4f3d1d6e) splice(r0, 0x0, r1, 0x0, 0x10005, 0x0) 00:25:23 executing program 0: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000080), &(0x7f0000000100)=0x4) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) getuid() ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:25:23 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 00:25:23 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) r1 = epoll_create1(0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x2eb, 0x0) dup3(r0, r1, 0x0) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) write$9p(r1, 0x0, 0x0) 00:25:23 executing program 5: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000080), &(0x7f0000000100)=0x4) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) getuid() ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:25:23 executing program 3: syz_execute_func(&(0x7f0000000080)="3666440f50f564ff0941c366440f56c9c4c27d794e0066420fe2e3f347aac442019dccd3196f") clone(0x3102001ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair(0x2, 0x2, 0xb36, 0x0) clone(0x1ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000001380)='threaded\x00', 0x585e510) ioctl$EVIOCSABS2F(r0, 0x401845ef, &(0x7f0000000040)={0x100000000, 0x4, 0x3, 0x8, 0x7}) lsetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)=@random={'osx.', 'security.capability\x00'}, 0x0, 0x0, 0x0) 00:25:23 executing program 2: keyctl$setperm(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:25:23 executing program 3: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:25:24 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x43d) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x1000001c3) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000400)={0x0, 0x8d9c, 0x10002}, 0x14) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x4f3d1d6e) splice(r0, 0x0, r1, 0x0, 0x10005, 0x0) 00:25:24 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 00:25:25 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x43d) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x1000001c3) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000400)={0x0, 0x8d9c, 0x10002}, 0x14) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x4f3d1d6e) splice(r0, 0x0, r1, 0x0, 0x10005, 0x0) 00:25:25 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x0, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 00:25:26 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x43d) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x1000001c3) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000400)={0x0, 0x8d9c, 0x10002}, 0x14) write$binfmt_misc(r1, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 00:25:26 executing program 0: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000080), &(0x7f0000000100)=0x4) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) getuid() ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:25:26 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x0, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 00:25:26 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x43d) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x1000001c3) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000400)={0x0, 0x8d9c, 0x10002}, 0x14) write$binfmt_misc(r1, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 00:25:26 executing program 5: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000080), &(0x7f0000000100)=0x4) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) getuid() ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:25:26 executing program 2: keyctl$setperm(0x5, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:25:26 executing program 3: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:25:27 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x0, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 00:25:27 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x43d) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x1000001c3) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000400)={0x0, 0x8d9c, 0x10002}, 0x14) write$binfmt_misc(r1, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 00:25:28 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 00:25:28 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x43d) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x1000001c3) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000400)={0x0, 0x8d9c, 0x10002}, 0x14) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0x4f3d1d6e) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x10005, 0x0) 00:25:29 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 00:25:29 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x43d) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x1000001c3) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000400)={0x0, 0x8d9c, 0x10002}, 0x14) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0x4f3d1d6e) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x10005, 0x0) 00:25:29 executing program 0: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000080), &(0x7f0000000100)=0x4) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) getuid() ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:25:29 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r1, 0x0, 0x10005, 0x0) 00:25:30 executing program 2: keyctl$setperm(0x5, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:25:30 executing program 5: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000080), &(0x7f0000000100)=0x4) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) getuid() ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:25:30 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$cgroup_int(r1, 0x0, 0x0) connect$netlink(0xffffffffffffffff, &(0x7f0000000440)=@proc={0x10, 0x0, 0x25dfdbfc, 0x42020}, 0xc) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x8, 0x80) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002a00)={&(0x7f00000000c0)=@kern={0x10, 0x0, 0x0, 0x3000400}, 0xc, &(0x7f0000002980)}, 0x20000080) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000180)) syz_genetlink_get_family_id$tipc(&(0x7f0000000680)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$KVM_SET_SREGS(r1, 0x4138ae84, &(0x7f0000000500)={{0x103000, 0x16004, 0xc, 0x0, 0x8, 0xfffffffffffffffb, 0x6, 0x10001, 0x3, 0x10000, 0x3}, {0xf002, 0x3000, 0x0, 0x8f, 0x800, 0xffffffffffffffff, 0x1, 0x400, 0xffffffff80000001, 0x1, 0x1, 0x8001}, {0xd004, 0x0, 0xd, 0x3, 0x0, 0x7a3, 0x1a44, 0xde, 0x9, 0x0, 0x1, 0x5}, {0x6000, 0x800000000000000, 0xd, 0x5, 0x0, 0x4, 0x10000, 0x6, 0x5, 0x80000001, 0xfffffffffffffffd, 0x7}, {0xd000, 0x2001, 0x4, 0x10000, 0x0, 0x7, 0x80000000, 0x100000000, 0x6, 0xf0, 0x0, 0x6}, {0x7000, 0x10004, 0x0, 0x6, 0x4, 0x100000004, 0xc12, 0x66, 0x9, 0x7, 0x9, 0x200}, {0x10000, 0xf000, 0xd, 0x2, 0x9, 0x3, 0xfe, 0x9, 0x7, 0x9, 0xff, 0x3}, {0x0, 0x2000, 0x4, 0x768, 0x6, 0x7fffffff, 0x9, 0x1, 0x2, 0x1, 0xffffffff, 0x8}, {0x0, 0x3000}, {0x2, 0x2}, 0x40012, 0x0, 0x3007, 0x0, 0x8, 0x3800, 0x16000, [0xd4ae, 0x8000, 0x0, 0x4]}) write$binfmt_misc(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="52777a715f8bfb1a4753f7c82a7b07"], 0xf) io_setup(0x101, &(0x7f0000000040)=0x0) io_submit(r4, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x0, 0x0, 0xd, 0x0, 0x0, r2, &(0x7f0000000000), 0xfffffce4}]) gettid() r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg(r5, &(0x7f000000ac80)=[{{0x0, 0x0, &(0x7f0000002bc0), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="200000002914bc46ea6bfbddc1c033095e77697c73149cd6a3b1d249"], 0x1c}}], 0x1, 0x0) ioctl$SG_GET_LOW_DMA(r1, 0x227a, &(0x7f0000000200)) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x100040, 0x0, 0x0, 0xfffffffffffffffd}, {0x80000006}]}, 0x10) r6 = socket$inet6(0xa, 0x2, 0xfffffffffffffbfa) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x21}, 0x6}, 0x1c) sendmmsg(r6, &(0x7f000000ac80), 0x66, 0x0) 00:25:30 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x43d) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x1000001c3) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000400)={0x0, 0x8d9c, 0x10002}, 0x14) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0x4f3d1d6e) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x10005, 0x0) [ 273.193318][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 273.199297][ C0] protocol 88fb is buggy, dev hsr_slave_1 00:25:30 executing program 3: socketpair(0x28, 0x1, 0x0, &(0x7f00000000c0)) r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x80000001, 0x40000) timerfd_settime(r0, 0x0, &(0x7f0000000040)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, &(0x7f0000000080)) 00:25:30 executing program 3: ioctl(0xffffffffffffffff, 0x0, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) write$binfmt_script(0xffffffffffffffff, 0x0, 0x12e26c9f51c5df96) getpid() r0 = syz_open_dev$ndb(&(0x7f00000000c0)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) name_to_handle_at(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=ANY=[], &(0x7f0000000340), 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0401273, &(0x7f0000000100)={[0x40000000, 0x40000000], 0x0, 0x10000, 0xb}) 00:25:30 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x2) r1 = socket$unix(0x1, 0x1, 0x0) r2 = dup2(r0, r1) syz_open_procfs(0x0, &(0x7f00000002c0)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0x80000001) 00:25:30 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r1, 0x0, 0x10005, 0x0) 00:25:30 executing program 3: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video2\x00', 0x2, 0x0) dup3(r0, r1, 0x0) 00:25:30 executing program 3: listxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=""/118, 0x76) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x8, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x2, 0x1, 0x24}]}, &(0x7f0000f6bffb)='\a\x00\x00\x00', 0xfffffefffffffffd, 0x24a, &(0x7f00001a7f05)=""/251}, 0x48) 00:25:32 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000000)={0x53, 0x0, 0xf6, 0x3f, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000040)="764fe79d62f2273002ab374d94a66d4e790a540000002bd8a4a4b2a998730000001bf644b6919b3b6bb90a137dbe46132881cd18", 0x0, 0x1000100, 0x0, 0x3, &(0x7f0000001600)}) 00:25:32 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x43d) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x1000001c3) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000400)={0x0, 0x8d9c, 0x10002}, 0x14) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x4f3d1d6e) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x10005, 0x0) [ 275.596469][ C0] sd 0:0:1:0: [sg0] tag#8048 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 275.605991][ C0] sd 0:0:1:0: [sg0] tag#8048 CDB: opcode=0x76 (reserved) [ 275.613040][ C0] sd 0:0:1:0: [sg0] tag#8048 CDB[00]: 76 4f e7 9d 62 f2 27 30 02 ab 37 4d 94 a6 6d 4e [ 275.622664][ C0] sd 0:0:1:0: [sg0] tag#8048 CDB[10]: 79 0a 54 00 00 00 2b d8 a4 a4 b2 a9 98 73 00 00 [ 275.632263][ C0] sd 0:0:1:0: [sg0] tag#8048 CDB[20]: 00 1b f6 44 b6 91 9b 3b 6b b9 0a 13 7d be 46 13 [ 275.641898][ C0] sd 0:0:1:0: [sg0] tag#8048 CDB[30]: 28 81 cd 18 00 00 00 00 00 00 00 00 00 00 00 00 [ 275.651490][ C0] sd 0:0:1:0: [sg0] tag#8048 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 275.661087][ C0] sd 0:0:1:0: [sg0] tag#8048 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 275.670687][ C0] sd 0:0:1:0: [sg0] tag#8048 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 275.680440][ C0] sd 0:0:1:0: [sg0] tag#8048 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 275.690046][ C0] sd 0:0:1:0: [sg0] tag#8048 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 275.699660][ C0] sd 0:0:1:0: [sg0] tag#8048 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 275.709290][ C0] sd 0:0:1:0: [sg0] tag#8048 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 275.718892][ C0] sd 0:0:1:0: [sg0] tag#8048 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 275.728504][ C0] sd 0:0:1:0: [sg0] tag#8048 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 275.738126][ C0] sd 0:0:1:0: [sg0] tag#8048 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 275.747733][ C0] sd 0:0:1:0: [sg0] tag#8048 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 275.757347][ C0] sd 0:0:1:0: [sg0] tag#8048 CDB[f0]: 00 00 00 00 00 00 00:25:33 executing program 2: keyctl$setperm(0x5, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:25:33 executing program 5: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000080), &(0x7f0000000100)=0x4) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) getuid() ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:25:33 executing program 0: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000080), &(0x7f0000000100)=0x4) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) getuid() ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:25:33 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r1, 0x0, 0x10005, 0x0) 00:25:33 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0xfffffffffffffffa, 0x4000) ioctl$VIDIOC_ENUMAUDOUT(r0, 0x4020565a, &(0x7f0000000000)={0x0, "552c8e6ba8eb61b0ddd681ec512d57329f686a898ca222cb41c12ad633604f58"}) 00:25:33 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = open(0x0, 0x0, 0x19) write$P9_ROPEN(r1, 0x0, 0x0) tee(0xffffffffffffffff, r0, 0xfe, 0x9) getrandom(&(0x7f0000000300)=""/162, 0x84, 0xb) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'gretap0\x00'}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) seccomp(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000240)=[{0x6, 0x0, 0x0, 0xffffffff}]}) rmdir(&(0x7f0000000000)='./file0\x00') pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f00000006c0), &(0x7f0000000700)=0x14) r3 = getpid() bind$inet6(r1, &(0x7f0000000740)={0xa, 0x0, 0x5, @remote}, 0x1c) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000280)={0x0, @broadcast, 0x0, 0x3, 'wrr\x00', 0x21, 0x0, 0x7c}, 0x2c) socketpair$tipc(0x1e, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@mcast2, 0xb3, 0x1, 0x3, 0x8, 0x55, 0x3}, 0x20) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') iopl(0x100003) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000680)={0x0, 0x0, 0x101, 0x2b11, r3}) seccomp(0x1, 0x0, &(0x7f0000007ff0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x50000}]}) syz_execute_func(&(0x7f0000000400)="660ff4cc2d2d05090065670f688b0c00004b0f6400920092899e0f4caf5c5acd00c4e1fc5b8b00000000660fe2df8c31c4e2c18e1d000000000f71e600c1e39d0f69c6adb85d5d00c4c275acc4c1f970d226a6c4c161d9f8c4c2692990f0ffff1fc3f2a5") [ 276.152473][ T26] audit: type=1326 audit(1553387133.174:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=10806 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=40000003 syscall=265 compat=1 ip=0xf7f04869 code=0xffff0000 00:25:33 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x43d) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x1000001c3) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000400)={0x0, 0x8d9c, 0x10002}, 0x14) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x4f3d1d6e) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x10005, 0x0) 00:25:33 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 00:25:34 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = open(0x0, 0x0, 0x19) write$P9_ROPEN(r1, 0x0, 0x0) tee(0xffffffffffffffff, r0, 0xfe, 0x9) getrandom(&(0x7f0000000300)=""/162, 0x84, 0xb) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'gretap0\x00'}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) seccomp(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000240)=[{0x6, 0x0, 0x0, 0xffffffff}]}) rmdir(&(0x7f0000000000)='./file0\x00') pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f00000006c0), &(0x7f0000000700)=0x14) r3 = getpid() bind$inet6(r1, &(0x7f0000000740)={0xa, 0x0, 0x5, @remote}, 0x1c) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000280)={0x0, @broadcast, 0x0, 0x3, 'wrr\x00', 0x21, 0x0, 0x7c}, 0x2c) socketpair$tipc(0x1e, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@mcast2, 0xb3, 0x1, 0x3, 0x8, 0x55, 0x3}, 0x20) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') iopl(0x100003) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000680)={0x0, 0x0, 0x101, 0x2b11, r3}) seccomp(0x1, 0x0, &(0x7f0000007ff0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x50000}]}) syz_execute_func(&(0x7f0000000400)="660ff4cc2d2d05090065670f688b0c00004b0f6400920092899e0f4caf5c5acd00c4e1fc5b8b00000000660fe2df8c31c4e2c18e1d000000000f71e600c1e39d0f69c6adb85d5d00c4c275acc4c1f970d226a6c4c161d9f8c4c2692990f0ffff1fc3f2a5") [ 277.021729][ T26] audit: type=1326 audit(1553387134.044:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=10806 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=40000003 syscall=265 compat=1 ip=0xf7f04869 code=0xffff0000 [ 277.081496][ T26] audit: type=1326 audit(1553387134.104:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=10822 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=40000003 syscall=265 compat=1 ip=0xf7f04869 code=0xffff0000 00:25:34 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x43d) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x1000001c3) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000400)={0x0, 0x8d9c, 0x10002}, 0x14) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x4f3d1d6e) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x10005, 0x0) 00:25:34 executing program 3: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x2000) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000340)=0x1000) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000015c0)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0xb) fremovexattr(0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000004c0)='IPVS\x00') r3 = dup2(r2, r2) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x0, 0xfffffffd}, 0xc, &(0x7f0000000140)={&(0x7f0000000800)=ANY=[@ANYBLOB="4500b091e5fb000000000000000032e1686ec7ad5269a445251954d4895f2b460900006602899f17bf3243d03db2717aeb5719ee70dd179b0300000000000000eab8d6efefa19fbc9994b538b6dfbd9a444a0a5faf2b7b097d23b2529aa0f02f2a2dba77fb970044de7191c085dc05cf52d7335bf8410d79557dc5b326159900000000000000000000000000000000"], 0x1}}, 0x44801) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000000)) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000380), 0xfdf5) sendto$inet(r2, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0x0) ioctl$FIDEDUPERANGE(r2, 0xc0189436, 0x0) mincore(&(0x7f0000ffb000/0x4000)=nil, 0x4000, &(0x7f00000003c0)=""/67) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000440)='/dev/sequencer\x00', 0x10000200000, 0x0) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000500), 0x4) openat$cgroup_procs(r3, &(0x7f0000000140)='9group.procs\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, r4) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x3, &(0x7f0000c91000)=@framed={{0xffffff85, 0x0, 0x2, 0x0, 0x0, 0x57}}, 0x0, 0x1, 0x99, &(0x7f0000000180)=""/153}, 0x48) 00:25:35 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 00:25:36 executing program 2: keyctl$setperm(0x5, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:25:36 executing program 5: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000080), &(0x7f0000000100)=0x4) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) getuid() ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:25:36 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x43d) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x1000001c3) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000400)={0x0, 0x8d9c, 0x10002}, 0x14) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x4f3d1d6e) splice(r0, 0x0, r2, 0x0, 0x0, 0x0) 00:25:36 executing program 3: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x2000) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000340)=0x1000) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000015c0)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0xb) fremovexattr(0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000004c0)='IPVS\x00') r3 = dup2(r2, r2) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x0, 0xfffffffd}, 0xc, &(0x7f0000000140)={&(0x7f0000000800)=ANY=[@ANYBLOB="4500b091e5fb000000000000000032e1686ec7ad5269a445251954d4895f2b460900006602899f17bf3243d03db2717aeb5719ee70dd179b0300000000000000eab8d6efefa19fbc9994b538b6dfbd9a444a0a5faf2b7b097d23b2529aa0f02f2a2dba77fb970044de7191c085dc05cf52d7335bf8410d79557dc5b326159900000000000000000000000000000000"], 0x1}}, 0x44801) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000000)) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000380), 0xfdf5) sendto$inet(r2, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0x0) ioctl$FIDEDUPERANGE(r2, 0xc0189436, 0x0) mincore(&(0x7f0000ffb000/0x4000)=nil, 0x4000, &(0x7f00000003c0)=""/67) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000440)='/dev/sequencer\x00', 0x10000200000, 0x0) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000500), 0x4) openat$cgroup_procs(r3, &(0x7f0000000140)='9group.procs\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, r4) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x3, &(0x7f0000c91000)=@framed={{0xffffff85, 0x0, 0x2, 0x0, 0x0, 0x57}}, 0x0, 0x1, 0x99, &(0x7f0000000180)=""/153}, 0x48) 00:25:36 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x10005, 0x0) 00:25:36 executing program 0: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000080), &(0x7f0000000100)=0x4) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) getuid() ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:25:36 executing program 3: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x2000) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000340)=0x1000) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000015c0)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0xb) fremovexattr(0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000004c0)='IPVS\x00') r3 = dup2(r2, r2) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x0, 0xfffffffd}, 0xc, &(0x7f0000000140)={&(0x7f0000000800)=ANY=[@ANYBLOB="4500b091e5fb000000000000000032e1686ec7ad5269a445251954d4895f2b460900006602899f17bf3243d03db2717aeb5719ee70dd179b0300000000000000eab8d6efefa19fbc9994b538b6dfbd9a444a0a5faf2b7b097d23b2529aa0f02f2a2dba77fb970044de7191c085dc05cf52d7335bf8410d79557dc5b326159900000000000000000000000000000000"], 0x1}}, 0x44801) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000000)) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000380), 0xfdf5) sendto$inet(r2, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0x0) ioctl$FIDEDUPERANGE(r2, 0xc0189436, 0x0) mincore(&(0x7f0000ffb000/0x4000)=nil, 0x4000, &(0x7f00000003c0)=""/67) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000440)='/dev/sequencer\x00', 0x10000200000, 0x0) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000500), 0x4) openat$cgroup_procs(r3, &(0x7f0000000140)='9group.procs\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, r4) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x3, &(0x7f0000c91000)=@framed={{0xffffff85, 0x0, 0x2, 0x0, 0x0, 0x57}}, 0x0, 0x1, 0x99, &(0x7f0000000180)=""/153}, 0x48) 00:25:36 executing program 3: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x2000) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000340)=0x1000) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000015c0)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0xb) fremovexattr(0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000004c0)='IPVS\x00') r3 = dup2(r2, r2) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x0, 0xfffffffd}, 0xc, &(0x7f0000000140)={&(0x7f0000000800)=ANY=[@ANYBLOB="4500b091e5fb000000000000000032e1686ec7ad5269a445251954d4895f2b460900006602899f17bf3243d03db2717aeb5719ee70dd179b0300000000000000eab8d6efefa19fbc9994b538b6dfbd9a444a0a5faf2b7b097d23b2529aa0f02f2a2dba77fb970044de7191c085dc05cf52d7335bf8410d79557dc5b326159900000000000000000000000000000000"], 0x1}}, 0x44801) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000000)) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000380), 0xfdf5) sendto$inet(r2, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0x0) ioctl$FIDEDUPERANGE(r2, 0xc0189436, 0x0) mincore(&(0x7f0000ffb000/0x4000)=nil, 0x4000, &(0x7f00000003c0)=""/67) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000440)='/dev/sequencer\x00', 0x10000200000, 0x0) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000500), 0x4) openat$cgroup_procs(r3, &(0x7f0000000140)='9group.procs\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, r4) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x3, &(0x7f0000c91000)=@framed={{0xffffff85, 0x0, 0x2, 0x0, 0x0, 0x57}}, 0x0, 0x1, 0x99, &(0x7f0000000180)=""/153}, 0x48) 00:25:36 executing program 3: r0 = add_key(&(0x7f0000000000)='syzkaller\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f00000000c0)="d1cbe228468d3d88de8c077141759abcd1432720bf193508f7073a3f2d2e5b05030e9dfb5666c0152da92eed9cd037a58043d2db021d64b27876e6146c4de325699cfb48f4bc1edf37df7f1c667f9416d27e209387676f25010930287bacc7cc3b348f998c1b57a267fc09d29f87e0e0079fa8346bf06776f65f231414a696bfe38960583cf403c8ba35421b48bf0f", 0x8f, 0x0) add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$unlink(0x9, r0, r0) keyctl$assume_authority(0x10, r0) r1 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) r2 = add_key(&(0x7f00000001c0)='blacklist\x00', &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x115, r1) keyctl$get_keyring_id(0x0, r2, 0x20) keyctl$unlink(0x16, r1, 0x0) 00:25:36 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000001c0)='/dev/snd/seq\x00', 0x0, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1, 0x200002) ioctl$SG_SET_COMMAND_Q(r1, 0x2271, &(0x7f0000000040)=0x1) clock_adjtime(0x7, &(0x7f0000000080)={0x2, 0x4, 0xa80, 0x9, 0x5, 0x401, 0x9, 0x7fff, 0x9, 0x8, 0x100000001, 0x3, 0x8001, 0x9, 0x8, 0x30da1fdc, 0x100, 0x5, 0x4, 0x401, 0x100, 0x800, 0x7, 0x80, 0x100000001, 0x3}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40505331, &(0x7f0000000140)={{}, {0x80}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) 00:25:36 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000240)={0x2, 0xd, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0xffff0020, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@loopback, @in=@remote}}, @sadb_address={0x3, 0x5, 0x0, 0xffff0020, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0) gettid() r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x3, 0x2) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r1, 0xc04c5349, &(0x7f00000002c0)={0xdc9c, 0x7, 0x6}) r2 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x80000001, 0xb0100) ioctl$DRM_IOCTL_AUTH_MAGIC(r2, 0x40046411, &(0x7f0000000180)=0x6) ioctl$VIDIOC_G_AUDOUT(r1, 0x80345631, &(0x7f0000000340)) ioctl$VIDIOC_SUBDEV_G_EDID(r2, 0xc0245628, &(0x7f00000003c0)={0x0, 0x6846, 0x3, [], &(0x7f0000000380)=0x4}) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="021300004d2d00000000000000000000"], 0x10}}, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000200)='/dev/zero\x00', 0x100, 0x0) sendto(r0, &(0x7f0000000000)="05273020649be3c093f85cfb2d37e81e1b3068ae3831479209d212f8a5a912", 0x1f, 0x4000000, 0x0, 0x0) 00:25:36 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f00000013c0)='./file0\x00', &(0x7f0000001340)='ramfs\x00', 0x800, 0x0) r0 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x9, 0x400) read(r0, &(0x7f0000000140)=""/42, 0x2a) r1 = open(&(0x7f0000000040)='./control\x00', 0x4000, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000240)=0x10) chdir(&(0x7f0000000100)='./file0\x00') mkdir(&(0x7f0000000340)='./control\x00', 0x0) r2 = open(&(0x7f0000000380)='./control\x00', 0x0, 0x0) fcntl$setsig(r1, 0xa, 0x38) mknod(&(0x7f0000000080)='./control\x00', 0x1, 0x4) getdents64(r2, &(0x7f0000000280)=""/80, 0x50) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f00000001c0)={r3, 0x80000, r0}) 00:25:39 executing program 2: keyctl$setperm(0x5, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:25:39 executing program 5: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000080), &(0x7f0000000100)=0x4) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) getuid() ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:25:39 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r1, 0xc040564a, &(0x7f0000000100)={0x7fffffff, 0x0, 0x1001, 0x2, 0x95c, 0x6, 0x8}) ioctl$BLKTRACESETUP(r0, 0x5421, &(0x7f0000000080)) 00:25:39 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x43d) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x1000001c3) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000400)={0x0, 0x8d9c, 0x10002}, 0x14) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x4f3d1d6e) splice(r0, 0x0, r2, 0x0, 0x0, 0x0) 00:25:39 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x10005, 0x0) 00:25:39 executing program 0: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000080), &(0x7f0000000100)=0x4) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) getuid() ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:25:39 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000180)={0xfff, 0xe, 0x3, 0x1000000}, 0x8) sendto$inet6(r0, &(0x7f0000000040)="f5", 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e22, 0x2, @mcast1, 0xfffffffffffffff9}}, 0xd6af, 0x7, 0x40, 0x9, 0x10000}, &(0x7f0000000140)=0x98) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000280)={r1, 0x7, 0xc, "0dc7a5b808d67b066770c8c6"}, 0x14) r2 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x1, 0x2) ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f0000000100)={0x100000001, 0x7fff}) 00:25:39 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000180)={0xfff, 0xe, 0x3, 0x1000000}, 0x8) sendto$inet6(r0, &(0x7f0000000040)="f5", 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e22, 0x2, @mcast1, 0xfffffffffffffff9}}, 0xd6af, 0x7, 0x40, 0x9, 0x10000}, &(0x7f0000000140)=0x98) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000280)={r1, 0x7, 0xc, "0dc7a5b808d67b066770c8c6"}, 0x14) r2 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x1, 0x2) ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f0000000100)={0x100000001, 0x7fff}) 00:25:39 executing program 3: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, 0x0, 0x0) mknod(&(0x7f0000000100)='./file0\x00', 0x103f, 0x0) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e23, 0x21, @rand_addr="173b6169e18c87a64a963dfaf8c649b0", 0x1}, 0x1c) sendmsg$kcm(r1, &(0x7f0000000380)={&(0x7f0000000280)=@x25={0x9, @null=' \x00'}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000300)="bd3ba8f0bda42342a3c9c83c4028ad5c33a88d0aeab2474709c3ae4c8034", 0x1e}], 0x1}, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl(r0, 0x7, &(0x7f0000000400)="8aed2ac7883eb0249b253b3a") mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8000, &(0x7f00000003c0)=0x8c, 0x800, 0x1) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) process_vm_readv(r2, &(0x7f0000000480)=[{&(0x7f0000000580)=""/143, 0x8f}], 0x1, &(0x7f0000001540)=[{&(0x7f0000001400)=""/90, 0x5a}], 0x1, 0x0) tkill(r2, 0x1000000000014) bind$inet6(0xffffffffffffffff, 0x0, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, 0x0, &(0x7f0000000180)) ioctl$KDSETKEYCODE(r0, 0x4b4d, 0x0) pkey_free(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x0) r3 = inotify_init() inotify_add_watch(r3, &(0x7f00000000c0)='./file0\x00', 0x20000000) syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') 00:25:39 executing program 3: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, 0x0, 0x0) mknod(&(0x7f0000000100)='./file0\x00', 0x103f, 0x0) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e23, 0x21, @rand_addr="173b6169e18c87a64a963dfaf8c649b0", 0x1}, 0x1c) sendmsg$kcm(r1, &(0x7f0000000380)={&(0x7f0000000280)=@x25={0x9, @null=' \x00'}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000300)="bd3ba8f0bda42342a3c9c83c4028ad5c33a88d0aeab2474709c3ae4c8034", 0x1e}], 0x1}, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl(r0, 0x7, &(0x7f0000000400)="8aed2ac7883eb0249b253b3a") mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8000, &(0x7f00000003c0)=0x8c, 0x800, 0x1) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) process_vm_readv(r2, &(0x7f0000000480)=[{&(0x7f0000000580)=""/143, 0x8f}], 0x1, &(0x7f0000001540)=[{&(0x7f0000001400)=""/90, 0x5a}], 0x1, 0x0) tkill(r2, 0x1000000000014) bind$inet6(0xffffffffffffffff, 0x0, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, 0x0, &(0x7f0000000180)) ioctl$KDSETKEYCODE(r0, 0x4b4d, 0x0) pkey_free(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x0) r3 = inotify_init() inotify_add_watch(r3, &(0x7f00000000c0)='./file0\x00', 0x20000000) syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') 00:25:40 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0xfffffffffffffdbe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) r1 = socket$vsock_dgram(0x28, 0x2, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000081, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000015c0)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0xb) fremovexattr(0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000004c0)='IPVS\x00') r3 = dup2(r2, r1) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x0, 0xfffffffd}, 0xc, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="b37a59b6adbad98b38c42dc79b9286086260b70dcedb9d2267cda3"], 0x1}}, 0x44801) syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x48804) sendmsg$FOU_CMD_DEL(r3, &(0x7f0000000040)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[]}}, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) sendto$inet(r2, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0x0) ioctl$FIDEDUPERANGE(r2, 0xc0189436, &(0x7f0000000800)=ANY=[@ANYBLOB="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"]) mincore(&(0x7f0000ffb000/0x3000)=nil, 0x3000, &(0x7f00000003c0)=""/67) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000007c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000500), 0x4) openat$cgroup_procs(r4, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, r5, 0x800, 0x70bd2c, 0x25dfdbfb, {{}, 0x0, 0x5, 0x0, {0x14, 0x19, {0x1, 0x7, 0x9, 0x2}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x801) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000680)=ANY=[], 0x0) 00:25:40 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x10005, 0x0) 00:25:42 executing program 2: keyctl$setperm(0x5, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:25:42 executing program 5: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000080), &(0x7f0000000100)=0x4) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) getuid() ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:25:42 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x43d) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x1000001c3) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000400)={0x0, 0x8d9c, 0x10002}, 0x14) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x4f3d1d6e) splice(r0, 0x0, r2, 0x0, 0x0, 0x0) 00:25:42 executing program 3: setxattr$trusted_overlay_opaque(&(0x7f0000000280)='./file0\x00', &(0x7f00000004c0)='trusted.overlay.opaque\x00', &(0x7f0000000240)='y\x00', 0x357, 0x2) r0 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0xd, &(0x7f0000000680)=0xfffffffffffffffc, 0x4) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[]}}, 0x0) r1 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0xffd, 0x0) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000100)={0x1, @raw_data="4bb6ad47942dd8b747523136f77d33b9babd6e90787ab8be16a56096a2aaa244eb0a9542401547a54c1774940faf9f5c0fa7ebec00ccfacbcaf16066b101bade48102791791b6893cfb75c00fd1e1f7a3df7440add077023df680d10de814a30ede2af3ab647f8c9261feb180e13108d2853c2c6a3261453860b8ffd36c583412d03e339763d9d003308d5f9f17e95b4e92cf55cfadbbe40e9fceb792957300d8b38d2f29b9a232c001ed37a970aecf220e70eb36bd50a7ee9176615c3779fdfd5cc3e757ab3cb87"}) sendmsg$key(r0, &(0x7f00000040c0)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000000e80)=ANY=[@ANYBLOB="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"], 0x1a2}}, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setpipe(r2, 0x407, 0x5) r3 = socket$l2tp(0x18, 0x1, 0x1) getsockopt$IP_VS_SO_GET_DAEMON(r3, 0x0, 0x487, &(0x7f00000001c0), &(0x7f00000003c0)=0x30) connect$l2tp(r0, &(0x7f0000000480)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e21}, 0x1, 0x2, 0x2, 0x1}}, 0x26) ioctl$sock_SIOCBRDELBR(r2, 0x89a1, &(0x7f0000000600)='bridge_slave_0\x00') time(&(0x7f0000000640)) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x1, 0x800000000000000a}, {}, {0x0, 0x0, 0x2}, 0x0, 0x0, 0x1}, {{@in=@multicast1, 0x0, 0x2b}, 0x2, @in, 0x0, 0x4}}, 0xe8) mkdir(&(0x7f0000000540)='./file0\x00', 0x8) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000400)={'vcan0\x00'}) bind(r3, &(0x7f0000000580)=@nfc={0x27, 0x0, 0x0, 0x2}, 0x80) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r5, 0x11b, 0x3, &(0x7f00000000c0)=0x2, 0x4) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x2000, 0x1000, 0x800}, 0x34a) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f00000008c0)=0x8, 0x4) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000500)={0x0, 0x1}, &(0x7f00000006c0)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000700)={r6, 0x31c}, 0x8) ioctl$PPPIOCGMRU(r1, 0x80047453, &(0x7f0000000780)) mbind(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000100)=0x1, 0x9, 0x2) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000440)) setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f00000002c0)=0x80, 0x4) 00:25:42 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x10005, 0x0) 00:25:42 executing program 0: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000080), &(0x7f0000000100)=0x4) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) getuid() ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:25:42 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x10005, 0x0) 00:25:42 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x10005, 0x0) 00:25:42 executing program 1: pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x10005, 0x0) 00:25:42 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) clone(0x800002502000ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x0, 0x0) mount(&(0x7f00000001c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, 0x0) 00:25:42 executing program 1: pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x10005, 0x0) 00:25:42 executing program 3: sched_setaffinity(0x0, 0x2, &(0x7f00000001c0)=0x40000000000009) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/ip_tables_matches\x00') ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f0000000280)={{0x3f, 0x2, 0x0, 0x8, 0x2, 0x8e}, 0x92}) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup/syz0\x00', 0x200002, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f00000000c0), 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(0xffffffffffffffff, 0x0) ioctl$VIDIOC_S_OUTPUT(r2, 0xc004562f, &(0x7f0000000100)=0x63) r3 = dup(r1) sendmsg$nl_netfilter(r3, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000500)={0x12c8, 0x4, 0x2, 0x310, 0x70bd27, 0x25dfdbfb, {0x3, 0x0, 0x3}, [@generic="53cc5f911e085f69c3a5e6deb711ab8f661e173765d5a609ffe1ca081dc812ca82f8fb66137e089e4723768aee77af4fb17d01c31247c713cd7b729052ee322ec3ba9c49d42d3ebac0f6cf12846b43e5ccc97da94acd93423472c98beae79b5a8f986307f9bc617b4dff9e66342a307a55204ce616fab024a53fe3224f783237c1b1e03df54205bc7912db55cc763c356102ebc527902a177456eea5c29d9355665a", @generic="46f007557365088d8394b5d0fe056b8a936e0ea7627759e768ce80bb279e147955679f0f6b2afe6e3bd31691266eae380390104619f7d1cee084a24ca2f3e8cab77224556b125898b653e1cd9b3beae628f690eafa7b9d3a6ebc7f80ebfdfee1a9494f818d799b33223fb2b694eb6d9ac1341f2837", @nested={0x10, 0x8f, [@typed={0x4, 0x69}, @typed={0x8, 0x1, @u32=0x100000001}]}, @nested={0x118c, 0x74, [@generic="aa3508063101e5e719387c77d99ac6d5f50080a9bf68999524e3d9b23aecb53c9b00bdecb080b76f3de724a40cea3594cba782e28ed73536496cbfb209f29c2ea7a759070b0ecd4d596af74237fdcf5a6277d91dfa24", @typed={0x18, 0x35, @str=':nodev^/mime_type\x00'}, @typed={0x1004, 0x25, @binary="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"}, @generic="0cfbfedd9fe7fe80985876f86f687a5dc111dfd0db64ac22a7628315968192985d57e3dd50bc9dd78548c35427de62c17e91e758ff2e712f12e5c3f204db85c9e67d8253058d1617b1c8ee165506478119af5645e0cbb618699ee41b17a38e0a38ab5417e0104d610726ae588548e856bb73e456f881678ff98b241f007e69807d7f34fef81ed30a9265bda2572947f34538870c09c58b5c4e4d00959fd0f13c567c79e5dce2818da1b8bf733957db7ed25b6f39a89cdd1919162d3bcd539a1217dda6d9dc43dcc079200efdd9377535868543159fc38db8cbbc", @typed={0x8, 0x19, @fd=r2}, @typed={0x4, 0x4d}, @typed={0x8, 0x19, @u32=0x100000000}, @generic="b7c668b2e38af6bfc808cf8fd5ec7c2226b10931c633dd98f2fc59323592f287cfdf4f4a7f"]}]}, 0x12c8}, 0x1, 0x0, 0x0, 0x1}, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, &(0x7f0000000280), 0x0, 0x20000004, 0x0, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000340), 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000040000)) tkill(r5, 0x401104000000016) 00:25:45 executing program 2: keyctl$setperm(0x5, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:25:45 executing program 5: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000080), &(0x7f0000000100)=0x4) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) getuid() ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:25:45 executing program 1: pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x10005, 0x0) 00:25:45 executing program 3: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0xb, &(0x7f00000000c0), 0x4) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c8b2, 0xffffffffffffffff, 0x0) utime(0x0, &(0x7f0000000040)) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000740)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x16}}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000480)="01", 0x1}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r1 = socket(0xb, 0x7, 0x5) fcntl$setsig(r1, 0xa, 0x11) read$alg(r1, &(0x7f0000000000)=""/64, 0x40) 00:25:45 executing program 4 (fault-call:7 fault-nth:0): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x43d) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x1000001c3) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000400)={0x0, 0x8d9c, 0x10002}, 0x14) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x4f3d1d6e) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 00:25:45 executing program 3: r0 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x28, 0x6, 0x0, &(0x7f0000000000)) r1 = fcntl$dupfd(r0, 0x0, r0) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000300), 0xfffffffffffffffe) ioctl$VIDIOC_DQEVENT(r1, 0x80785659, &(0x7f00000001c0)={0x0, @frame_sync}) r2 = semget$private(0x0, 0x3, 0x82) semctl$GETZCNT(r2, 0x1, 0xf, &(0x7f0000000440)=""/212) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f0000000080)='y\x00', 0x2, 0x2) semctl$GETNCNT(r2, 0x1, 0xe, &(0x7f0000000240)=""/177) 00:25:45 executing program 0: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(0x0, 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000080), &(0x7f0000000100)=0x4) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) getuid() ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:25:45 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r1, 0x0, 0x10005, 0x0) [ 288.278439][T10990] FAULT_INJECTION: forcing a failure. [ 288.278439][T10990] name failslab, interval 1, probability 0, space 0, times 1 [ 288.342453][T10990] CPU: 1 PID: 10990 Comm: syz-executor.4 Not tainted 5.1.0-rc1+ #34 [ 288.350508][T10990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 288.360669][T10990] Call Trace: [ 288.364125][T10990] dump_stack+0x172/0x1f0 [ 288.368465][T10990] should_fail.cold+0xa/0x15 [ 288.373063][T10990] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 288.378883][T10990] ? ___might_sleep+0x163/0x280 [ 288.383744][T10990] __should_failslab+0x121/0x190 [ 288.388695][T10990] should_failslab+0x9/0x14 [ 288.393198][T10990] kmem_cache_alloc_node+0x264/0x710 [ 288.398483][T10990] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 288.404727][T10990] ? tcp_established_options+0x29d/0x4d0 [ 288.410545][T10990] __alloc_skb+0xd5/0x5e0 [ 288.414885][T10990] ? skb_trim+0x190/0x190 [ 288.419214][T10990] ? process_measurement+0x19a/0x1570 [ 288.424602][T10990] sk_stream_alloc_skb+0xc8/0x860 [ 288.429808][T10990] do_tcp_sendpages+0xb00/0x1b80 [ 288.434935][T10990] ? mark_held_locks+0xf0/0xf0 00:25:45 executing program 3: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000080), &(0x7f0000000100)=0x4) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) getuid() ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) [ 288.439720][T10990] ? sk_stream_alloc_skb+0x860/0x860 [ 288.445026][T10990] ? __local_bh_enable_ip+0x15a/0x270 [ 288.450429][T10990] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 288.456173][T10990] tcp_sendpage_locked+0x84/0xd0 [ 288.456231][T10990] tcp_sendpage+0x3f/0x60 [ 288.456243][T10990] ? tcp_sendpage_locked+0xd0/0xd0 [ 288.456257][T10990] inet_sendpage+0x16b/0x630 [ 288.456276][T10990] kernel_sendpage+0x95/0xf0 [ 288.456284][T10990] ? inet_sendmsg+0x5d0/0x5d0 [ 288.456297][T10990] sock_sendpage+0x8b/0xc0 [ 288.456312][T10990] ? pipe_lock+0x6e/0x80 [ 288.456329][T10990] pipe_to_sendpage+0x299/0x370 [ 288.456340][T10990] ? kernel_sendpage+0xf0/0xf0 [ 288.456351][T10990] ? direct_splice_actor+0x1a0/0x1a0 [ 288.456367][T10990] ? minstrel_ht_get_rate+0x1b8/0x1710 [ 288.465839][T10990] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 288.465857][T10990] ? splice_from_pipe_next.part.0+0x255/0x2f0 [ 288.465876][T10990] __splice_from_pipe+0x395/0x7d0 [ 288.465889][T10990] ? direct_splice_actor+0x1a0/0x1a0 [ 288.465907][T10990] ? direct_splice_actor+0x1a0/0x1a0 [ 288.465920][T10990] splice_from_pipe+0x108/0x170 [ 288.465937][T10990] ? splice_shrink_spd+0xd0/0xd0 [ 288.551768][T10990] ? apparmor_file_permission+0x25/0x30 [ 288.557331][T10990] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 288.563594][T10990] ? security_file_permission+0x94/0x380 [ 288.569254][T10990] generic_splice_sendpage+0x3c/0x50 [ 288.574651][T10990] ? splice_from_pipe+0x170/0x170 [ 288.579774][T10990] do_splice+0x70a/0x13c0 [ 288.584117][T10990] ? opipe_prep.part.0+0x2d0/0x2d0 [ 288.589235][T10990] ? __fget_light+0x1a9/0x230 [ 288.593920][T10990] __ia32_sys_splice+0x2c4/0x330 [ 288.598869][T10990] do_fast_syscall_32+0x281/0xc98 [ 288.603908][T10990] entry_SYSENTER_compat+0x70/0x7f [ 288.609041][T10990] RIP: 0023:0xf7f52869 [ 288.613119][T10990] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 288.632728][T10990] RSP: 002b:00000000f5d2d0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000139 [ 288.641150][T10990] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 288.649124][T10990] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000010005 [ 288.657096][T10990] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 288.665069][T10990] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 288.673047][T10990] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 00:25:45 executing program 0: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(0x0, 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000080), &(0x7f0000000100)=0x4) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) getuid() ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:25:45 executing program 0: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(0x0, 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000080), &(0x7f0000000100)=0x4) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) getuid() ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:25:45 executing program 0: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x0, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000080), &(0x7f0000000100)=0x4) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) getuid() ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:25:48 executing program 2: keyctl$setperm(0x5, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:25:48 executing program 5: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000080), &(0x7f0000000100)=0x4) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) getuid() ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:25:48 executing program 0: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x0, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000080), &(0x7f0000000100)=0x4) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) getuid() ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:25:48 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x43d) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x1000001c3) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000400)={0x0, 0x8d9c, 0x10002}, 0x14) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x4f3d1d6e) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 00:25:48 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r1, 0x0, 0x10005, 0x0) 00:25:48 executing program 0: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x0, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000080), &(0x7f0000000100)=0x4) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) getuid() ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:25:48 executing program 0: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x0) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000080), &(0x7f0000000100)=0x4) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) getuid() ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:25:48 executing program 0: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x0) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000080), &(0x7f0000000100)=0x4) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) getuid() ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:25:48 executing program 3: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000080), &(0x7f0000000100)=0x4) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) getuid() ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:25:48 executing program 0: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x0) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000080), &(0x7f0000000100)=0x4) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) getuid() ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:25:48 executing program 0: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000080), &(0x7f0000000100)=0x4) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) getuid() ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:25:49 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r1, 0x0, 0x10005, 0x0) 00:25:51 executing program 2: keyctl$setperm(0x5, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:25:51 executing program 5: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(0x0, 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000080), &(0x7f0000000100)=0x4) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) getuid() ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:25:51 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x43d) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x1000001c3) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000400)={0x0, 0x8d9c, 0x10002}, 0x14) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x4f3d1d6e) splice(r0, 0x0, r2, 0x0, 0x10008, 0x0) 00:25:51 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 00:25:51 executing program 5: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(0x0, 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000080), &(0x7f0000000100)=0x4) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) getuid() ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:25:51 executing program 5: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(0x0, 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000080), &(0x7f0000000100)=0x4) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) getuid() ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:25:51 executing program 5: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x0, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000080), &(0x7f0000000100)=0x4) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) getuid() ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:25:51 executing program 5: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x0, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000080), &(0x7f0000000100)=0x4) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) getuid() ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:25:51 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'veth1_to_bridge\x00', 0x0}) shutdown(r0, 0x0) bind$packet(r0, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r0, &(0x7f0000000140)="030300000300600000000100fff55b4202938207295f2c27398d5375ffff000001040000000000000000f5a581ee876ad7bf9857f2f8a7ec83bbcfe606f6925cbf34658ea111797b1a8fc84a7f000000f851282c40cee9ae9134d50eb47b4200000010000000faffffff0202", 0x6c, 0x0, 0x0, 0x0) 00:25:51 executing program 5: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x0, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000080), &(0x7f0000000100)=0x4) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) getuid() ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:25:51 executing program 0: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000080), &(0x7f0000000100)=0x4) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) getuid() ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:25:51 executing program 5: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x0) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000080), &(0x7f0000000100)=0x4) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) getuid() ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:25:54 executing program 2: keyctl$setperm(0x5, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:25:54 executing program 5: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x0) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000080), &(0x7f0000000100)=0x4) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) getuid() ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:25:54 executing program 3: r0 = dup2(0xffffffffffffff9c, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$midi(0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r1, &(0x7f0000000000)={0x80000000}) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x1, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, @perf_config_ext, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget$private(0x0, 0x1000, 0x20, &(0x7f0000ffe000/0x1000)=nil) shmctl$IPC_INFO(r2, 0x3, &(0x7f00000001c0)=""/248) 00:25:54 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 00:25:54 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x43d) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x1000001c3) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000400)={0x0, 0x8d9c, 0x10002}, 0x14) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x4f3d1d6e) splice(r0, 0x0, r2, 0x0, 0x10009, 0x0) 00:25:54 executing program 5: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x0) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000080), &(0x7f0000000100)=0x4) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) getuid() ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:25:54 executing program 3: unshare(0x24020400) mknod(&(0x7f00000056c0)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000f8aff8)='./file0\x00', 0x0, 0x0) r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f000000d000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000008ff8)=0x3f) r3 = getpid() r4 = eventfd2(0x0, 0x0) read$eventfd(r4, &(0x7f0000000040), 0x8) execve(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) r5 = dup3(r1, r4, 0x0) fcntl$setown(r4, 0x8, r3) fcntl$setsig(r1, 0xa, 0x12) r6 = dup2(r1, r2) tkill(r0, 0x16) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r5, 0x110, 0x5, &(0x7f00000002c0)=[0x2, 0x3], 0x2) getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f00000000c0)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@broadcast}}, &(0x7f0000000000)=0xe8) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f0000000340)={{0xa, 0x6, 0x8, 0x3, 'syz0\x00', 0x5}, 0x3, 0x8, 0x3, r0, 0x1, 0x800, 'syz1\x00', &(0x7f0000000300)=['\x00'], 0x1, [], [0x1, 0x4, 0x7b0, 0x8]}) getgroups(0xa, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xee00, 0xffffffffffffffff, 0xee00]) write$FUSE_ENTRY(r5, &(0x7f0000000200)={0x90, 0x0, 0x5, {0x3, 0x0, 0x0, 0x80, 0x6, 0x5ea5, {0x3, 0x8, 0x8, 0x1, 0x1, 0x7000000000000, 0x1, 0x7d0, 0x3ff, 0x3, 0xff, r7, r8, 0x8001, 0xfffffffffffffffa}}}, 0x90) 00:25:54 executing program 5: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000080), &(0x7f0000000100)=0x4) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) getuid() ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:25:54 executing program 0: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000080), &(0x7f0000000100)=0x4) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) getuid() ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:25:55 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 00:25:55 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x43d) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x1000001c3) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000400)={0x0, 0x8d9c, 0x10002}, 0x14) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x4f3d1d6e) splice(r0, 0x0, r2, 0x0, 0x1000a, 0x0) 00:25:55 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'\x00\x00\x04\x00\x00\x00\x06\x00\x00\x00\x00\x80\x00', 0x4006}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000000)) 00:25:57 executing program 2: keyctl$setperm(0x5, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:25:57 executing program 3: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x2, 0x0) sendmsg$alg(r0, &(0x7f0000002340)={0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000000040)="e99055f04ae5878cf259b2747c09d6c2820332e624a5ef9c375e0d9c1f656d9c2b8bf8d49c7728c03a1657148b87d56fadc3e5b67d100f96ad50f7b8b6a6d03ef8f7c8346441222ee9eee08e77d40cde7618e7308303b1224db91d10b55f06a7e530c4ed17fd74233603a0563fc42f55778f21799377ec013f246893a8f89c52c7928ef9b8fbc6f6428998ed0706ccbf4bedd037cffce36a8a1cfab0b48b767a12545e6219b515cf3ac22461e49ab9a76e3dbd14cace277fddc03c370a041c65cf25ea669652aa4a819439f66ed84d630eb94cad2f0642509b24f696c468de0e18864e1f6dc8b4ca40a48acb1dedeaaf4a0fd2e06c7e7139113935590b0c2324d3d6493301376e54699eb20cee164310ee295d544aeffb9a131eaccb5c6bd595f58e5ec26e49a4d37be51bda51bef4893cae2db23f397e25e0bfc6ff22211e76ab8ba3099bae169e55607b24929d3fd2acee5667e2ab5b03f29d2be84593647e185e3d4601a83f35ed2afabc688196c5d2cb525bc9c1e4a1071a918288ccc549a83b64fcdababb92f1cfce7c641803ba79ed5937bac34c4ba738ee5370f796e43f0b2f0adeb6b939375f386529b3f2fbad63dec7b72e518ab16a001e2709d7a3c775087a3608400345f96593794133f24b0ca14b33bd7a4369ef52d359edf6d503284c33451ec76ba54c9cd74099ebb0cc5f1c80fb146a25a991cd322b52c1dde9eeb0a42fe7eddba8f98bbf401dba7e3e2e6b381cc6b941005fa5eddd5edebe339174870cf2577bcbd328fc3a4cd9e0b5f4fee759a829099cafdd1079f3ab4595606b2305d0ef93ef3bc049ff5dd670f761d2df7ff53d92256c1b50ba6e99296301dea04d69384e5da512a7f21c56e7824a4561ebf0447793fbc61921d51dc151cb9fefd3f1811fb85e2e1c0a5d3b720d8df2e20dea5068e2e98884223457fcb14121be79dcf1353a87c666287dd50dfc263bb30d90d907f3546feec4305bd72c7151f6c52c52888d52c040e3575e4f33e9ef9cf223097f28ae8c0d8c1694fa85d9055a47fab4bccd02dd59d925ac42c3d35f1c2f28885187a0fc5163b613fd042ac2353511e4a4e8cef3b2cce5f9301aa6027a725766cb9ce43196c45c8289a42994028ac6113ad6395613c62ac2ec777f3ea48e4f43f39fc169ed64185af16703136baf0d7369ae267bfbfe64a3f5556840d7a1760901cd2595cc562381aa474094d417ed49a730d7790966fe7e8753c056299048044b6c09706e13c8b24b76e00db3ab90c3c05cafd618d7165f59707e7edf29511762de7f5d503e28d4e6fdb0968d902388a6c95e0e1a21620703eb08a9036ad5e0e4d366700bf98dfcee6c396c3d5b4dc5c631ed11d86f5af62ea37ecd1bb7a9ce59a31fd5480da8a0078b98e5c956adb5fb4ef62af0268fd00de7de10bf1d93455bf4bb564e50700aeb4ef3dd3ed3e861bfb1c005260555b2c161e2f27964879b960fe8ed1abba489c1a522203982b25aacc40178aad7f74fcd964575c8c0050a7a2a290daf01bc00c515c4b284c255bae83f3c99aa864fc8275083830f801a321cfb7b59a74dc0418ce4050c70bf8f52b1fa59e5d5e910a1c0d8b379b19ad02f4907d5c5566845bcb219c748631ce8c4d01e9506abbbeca8673f74c8665bd49960703abf4f0c835cf5badba183af18e5079d9fc85cad1499cb47cf901682ceb5ae12e4afc888bb8b6a05c9a9f76da2233e89e50d632850747e39b19b582da0c459c2f80633ae8d1c47f9426da00d39c986b7d13bdfa6481aae957e7af2b4a71698e5d77b4d257d8c824f099c899b0ec980e3ba217ecb267e06128aa6ebcfacef541420afc957612dde32b3d9b7a5b61029e8cf29d0721af3bcaa94bf125c8c32835b510f04c16bf2d4a79b9fbdc275c1d77d0782e7d5aeffc39975e1e2ac4aa742893c8efc609a4dcd5213b8b92165be1aebee2d258c46f05c32e6807ec7265bee962cefa9326c9a45ea6db60477ab0b06835de98b802b313332586bd6b25fdb649288826bc316dd0f6b53e07774cf3e4887ec35bdb4af79b15dfbb343fab91ab32d336b1e802fbfe00cdca3a803cc75e5868bee16c60743de2b5bf3394071ed8f47fa54212bda9beb5f466447e8f16021089811de490ee68cc6772296f2259ba705142279087a2f185f2b0b0a163c4ee0f6f3f19caf2c80778af90d075e7cf39de654c61b0bc714ea3f7fc701389473214225f91e244d8fd05dffce9161730fb348bd18367813227f55905e16c011888179864235949179dab3b85abc5008d1b693d356d357df9a4db677b4b4cb0e0958038e629351135bafb0448c1d41bcfcce03d809e9ca1508967f5320033022d21ff00ed7c7a1813a308a5f3676098126352f910deb4880f147f8e5dd2e2b6d481ba02b3209bb8c3d2e93ee636191a6ec39c3e093827df53c5db7696b72d24c6b150c1208542e21f09793858d3e7932167cbb4be1575b83b95da573be102204410b244ea6100dd442db6027acc01c8251d15bc8e81d62a603a06868fad1afd72c3946ce71d08ea14677e8ef428ed9cceb60c5a5bc7a583a97854134f17aa982ba7d82f4b8ef6b80464d9bdbd8f4a1fdee361a4858a7ac40958812caa0dbca2bfac784849dbf7f93c1b7fdcf8312bdd7aa6d58f5d368b32114c9e35042f6cb1a89b570b55122fad5e5acd75c628361bb631e79b258b9f47ef28e6389fc32d351e6e59d2da97b04bed2b22b3e667c8f63a52e71ff1398339356e1cb2a1cf9eccb59a33db278e29947438abcd9c78978d3afd1582e2793a309598f424ca884c750c1d728f1061fc96e526f4437e732992d3b0141fcbc3ac0c866da05498a05ea843899daa5d762828cb6ecb51149716ffe68d394a7b96926ebe4ad2e409e218f5acad8bd90869ccddc57609b1cabf58bc98b596cb2ecf1ff4d8152538c97455b4eb271ecb4bb83829b18c3e1356d31ec96110278d715e4c9076ba5940022c1e5021ef6ce2b27a2b592cc5cff3460920065d200dba6fea539aeab20e309da994f0bb7a0614a91829533989fc3f057a172bfb76f0937d05de90fbf252c9e5e9b17d5dca54372d17c07844e4f8d311a5ea6e2042fa3b663228f263d27438954268e18e41fb4b335a729ac6d0a9925e76d01bd81ec779385d0c13395fa01708e9298822cb260bbc279a6ffb809d4ce69e941c31ec5b031dbd035d104d1c2643b18556b4d2b1018c45dbcfaf8f1393bc0938710ba682be79020e273d3afd1923f75deb71909ffc6b074f6631a779c92a230c77b948eb85113039209390ec9078f7d41f6de976c74061b13efe515d8e1ca107871cb6dbdce0b16063bf8be36a04590352da236501ee723b80be2cbcc41c13e4436d37abeb6488a49b83335c4fa06106a2d9e19ce4d768c46802594102598b3663b6c7d451dc4eabd2cb9d9d3b46a00232c3c3a63c1263cdd305d5b010492ff98060bf6ee9c1a7dbd9d0c61192d0de489a0a988b34075e3b551de3bf7c69c12fd38853c14881ce8c83e76505adc1cb2888b72f2a2c9b57fa6a7e06c5664f3ef4dfca0a565b875b7f7988d1b93d1013c3b28a9bcf259addf8e07842f1028e1ca7bfa9abe2b24b0f7f012dcc41c5634ac5fe0b4f71aa3c9296826fe9088981cb7498e8972382759547d4ff35cc3441769808953bc7fbf70dc72e4797e46b03928ab7df81f9428afc7e47ac9ea5e62e6b495b10ba51395308ea3bd27aed08011b58e9d0136de09880d0e9db8100c6b6251990e0f910b44531566a018cf5170ef91d9f5870accbb3f76dac8d37920a86af30218ac593101a04686d6ef9b0f41e55697342eb41278a6f04349d5f15c23c67801b7fcda21163fcf108af90c967ac00e4a5ca0852fb1e5af916172c144d260ec1eb5d9e786a60bb11c61dd3941b27d8e723ffa7b2972269f8e66cd0d0ab5ff0bc52aa1e41836357c3b46e81b4dad30a71f3f574c72567b3c06cc2ec7b9644f70e35f194f7261cbdaa45d1d76ea03c33669e0cd2b8a9f738b5dfd20ff00162bb53a7541e92dfaa000533659c82b2d2e582d9e4e04ee5a8fa6ae76b63be381c98e94f8a9093758856bc2dd6c03261ef66dc54f19368ca3b51302776cf9410ff6f06da7a701fd8e7d7e71291554a3ae9b2acd2d9dc8e21e48e51fa0afe1d6e0ed3188b78df37fd3d65366bfddab5aebb9e365cd866a273d18a6827f95263b54d11a84396b7ed3f99c5ffb2514a2321d620aafd532bb916aa0888844bfbe079c8a2a3be9766ed3a63e2c2fb7f582e6dd86c6278a321f044b90c8ded63bb0edabb3a0bbae7a5e3d50af04cfebc1ce129db49811d121908032b4f21a48a701495b92b947c9c80a8ce739318ee407268e56774ca8699c2ed78e4994181aae775206b64bc1dbd26ff43f1f19323e697764f30679b1db1aa6a2a2b29899e151ec9a2c696980d75a405e9c3a1ead32a6c664c44c44892eb6d42de850767e9ea188595bcb554e794633da56cd1d390007f4915ec73f7ff61adf2856e2fbcd6585d999ba181cb320ea1d8753fbbaca981ef692100899ae80d7211c2f9abbcd2faa3c0e419f4e94717399ff58ccbb63aa2d65a64d095fb8867049885b07aafcb436210e946efb19be663d00e4800628a013102ef62d641fc3f4422a131d18f40231152b51d188dfd4e36420a592169fcd714af1d2024ad5e9638cd7e440f24da5dd1df2d816b6500eab43a6c001c47c13543e7c0969dc16e84ff8bc7297cb9200a54cf8ef439502825023d4e34065f6f553ef29cf94288bbc57fce21adfae7f004b742c63ffcca353bf33ddd81feede81fc9f99cad388a9d823cd96d9d940ebdbfa602bb3352fa4a37d2935f9c2f4d49b158c8b1c9134361ca4d1d34de12b1a5900080bbd1302b5c0e047d9c8563631272eb106c81346bb0124d87817f9a93180d401785b9f9c9158890f7aa29b5d993933d05a04af649eada7ff3db56bce32cfa36f749d3e76075f876dd806d979d41109d9d0a9be3b29b687485c49caa0a6d882eaf01c28b51cacb77415016683d8d1ae8c00e4353656653f0ba1384c159534f4ac9ec3ed87844168368673433c1862470f3b54e3c58c82c93cad464889083bd15cda0733a5c68c57229ffa9ec78387828c2a7eb66a2035a1556e65ac1e3b31a6419bdd7050d6051a954c921fae9a41ce5e12e1fc109dc5e3406592ca3936868345fa2c841b5271e2b0b5d00b6724f30189b6a200de9941d155b87f8edb0f8213679241685310098c9811f367146984d165fb1136c5ddd06782e98c61f0178313c8dd6f32941d16428275b235a6dcd84738c6c4a029ca482cb7f7cb1819fc3ac18c2c265afddee5e181550ad2a4cf3ac435cd3cddbd6d213eb0c4ba01a6df5aeba394e8c6725c13d30e9b58049438c5ce15fbf9b5d736f3ced3a3b0bc33b3830dbccda033c9a7c9fe3e636ef3b0bfc3999bfaa822a60ef58af0918e1e3ff14f8455a4a950fc84f2bfc9202e4c712a1c4cff53086b5268bacf8136bc1392c9b49daedefb06953f039ac1fa017c4bebad7c98149e2745393992f1798d846d53775fc03628984c1e48088a006756474c8bc4ff4e63099a03a16a9f224c9b9d67ca40fa79f9380360e964a638f8e584d063723d372769f31068056eb3f0a1e714b5f9fdc9fbdeda189c03455b087a40711322ad93b1f8db6c41e3d95c4ef32182d73873ecfbf444cc487162b0b9bfecb511c64ca8bd5b901982b6b5cf3736edfed042cff2e03e927d4d6818791bf133ce0d0bf16ba72f817381ec4c25940135150dc646", 0x1000}, {&(0x7f0000001040)="462fc00249753e0d556de65368c17c05d2774fc83cf4ce3c267f63320e38381f2a06966262f66a07f251fa2854ff63e57ab30c3b1c12ebcef349ad073d1c7bbe87ff202ee4829c40ec6478409d9213315dfb7e0f3cf94716117fe05a1b5b0226ac86a1701865bcc99dcf9b879a1519ee24cee884b6d048f15f831ee79f068109cf275ac4099ac0131f25ea576a782f645838013fd30b", 0x96}, {&(0x7f0000001100)="b677a40d1aa7773ff92afe5200d29e3b28e3130bdfc50c7b9ffcdc68d72542b0c6f4591dd917cd4a4d4ff198a968b517148460ef15edd98d869e9d2ae23e94cf6fc979598e10116b99a61bc7a8364ba072cf353ee129a61b62e5d052a4da0b08b6e1d6e9619e3c4d97b60461fe5b3bde0e5d468d0b11c4618e5c77f9148e5809902f727f8e1b7ae3b758d11e46c6720c614499ff4b16f58c4b4546261df811e64c3c9ebd3dc5d5418d861ad674178007b818c20237d152f47bcef3d1953fd0f36f71340e3ec6dcd926fabd72aaedf7d5d5197b54c37ea834a1119201a683fcbaec54f12b43661673178eb2a5e41dba1b7cd01e3aa772d4728af6dcfac5ad52ddd4c29835657fc5a45cd2c239d4883002ce320fb9ab42edb1798b1c78df8540f2b388a44a3478112ac3a886dcd02e6d8e3b8bf4a781e3b1d0ecb7ee13e545061de2547ed9e84ef03977ea45d622c7c36532e106b081f70421d49f14ceb84a1e60556bcdfe39bf03beb8652a2b5b1f1a7c1bd98f699b5a79a88e7a8f60aff17cbdb546d03288005691a900bf27b3d47b0e1b577c1b3de9ac94666e0da0567db471dca3148ce089a873d9b45ebf410e2bdff4582e0a656c4649c27ad2406b764c96147f5f339dcd1781b57d186910a2953ddac3daf68b43985428ef36b141e61477390827b48de2a9afca0474896cae754eb515a8f08e28e0c98053abc591b31003c8830d3ab566fad492b8db5f96069ab65515602b4996dcc1236b0ebc80ea9ab0e2284d6bbbd2ee7353eaa48135a9230f8e3a22b964239de013485e5625c18ef0ad232bfb298ab2d92bb0c088d4f8652b0739bef6094da6293ab6be51bb39e879ddd7ef2158f837fd4cd2f115a1578647436976adc4453ba3bb94ce02519dcfe17174f6688068a4c7f77f1339c9650991411535e620618edc2f472aa16648a4ebd794b10a2c4f55463a8136b6d7a11d264012e2f6b586a50b59a907039a4d17e1c1ca418fa8a1badeffc6dcd19ca6545bf35a0c6b44622ea6de2c772cf868ac256c4c43681205264facf90e7d78b4f275bbd20773ca836ef5f4112a91817e94c28b53d2e5b6646a6e509a291fdc11bac91c8a86440b085b75a3868a709e66f909288a239ef1266f03bbe0deb8aa78c06fc95d7c11ea64069084e5eb4b0531630f647f65661f7b97b46fc5ed4374dfdc0ac0cb5dd36dfefd3ccf08aa863626d639eea06f2376cff203fbfdf092d9eb3bb6abed909b6345a9b188694ad19be14939cfe7b4ab25d670fe4b41719e30be2c0b6d651c774c3239907ee693f87ecf83ebe5c0ef1e34119b05c7741d4d6829add6ccdd443201307129e64f50ee00f50273920e111cb5b9455e7183d56322b5c932bb5033dce9224948588f278bc3186409a1c38d946b9bf3d7a79d542a017476c77de9688152bf998cbeba9a64fa2d25cf19cf5fe8fd72f648a953d16ca0ac5d891ab95e3852fdad2ce823db959629a7ce487cbe2311238a10f3bbef9a1333a4d3cc0281aee28a7a98f2f2921f9fbeeffa77f1120af49313d094f86e58f97a8019250c70f48e004417071a8a7ef685e3a58ece05133968d38ff5aa67408cd0dd2c4e4fccb8ba5290156e0ab9717d739b1ddef9584b6d52b8fc9b2deb7f7abef1d874f1a119cec2b68347a9989760bfafd92e98604502fe0b64413f6e67f1e4fa8b25a4b6f86cdb3ad6bb85c5d88651a28badbbff9c2a392ebdfcd764f245873c46dd09bbd561f15c00f23f862601f1973ba7b1b9b4448ee941c86cc8f0f1ccaaa51fd7a9aef6f977231fd13eba72a55f4d5b2ef394d0a805d30ef4717106175466e2fbc5146fa27d50f2b1566bb9b78e1f535b4906d90cdbadf3c4f4773cea849a2954e8038540ca683d6ae8e803bf591120106b93b309d92691016f0bd39234aacd7f64dc8d638808e2bf8af0d68e3d0b6df8f22658f96e94b231396690b04e00301413111b95dd76157f1b05a786da06b672edbdde2a564bf64dc363e93ee2657b5b0b43af73e33de28778f0b1dece5557d957c1946677264934ed0c763cc970a58b6cce44ff3bdb6cebc5a58ec81de92b94c82dc75ede36d3ab189fc4c1074e783d5662e1d4eab72646a900d48fc00b2d91b4e0abd2efa74264deb6e52dfc04a0c42905e77e1f67275b6547bf74b88f660ff6debf92ff3e973c1fa7e4207c2b2ba060f5c541d1eb225ee27267088ae674f3177bceb400eed3c714782183ea496f863833282355343c1b50b790a0f4265eb7e9539e791771059195ea5c7987d6fa8891be524d9597e12b656938f9624e7a2c68614e84ab325bb32c2b9d341757c5cb304524062657b78dc7d08f377f967cee372534a6a5d131051a2e394c5aa7083720d04758c2483e896c6222d8385a568d65ffd6c344783651df716b31f7f362c8cee6c1d87d7f40d3b3e3915ae2573eaa9fa536178f3086d42c52766cf46b38f74c828058734d418d1d951260dfe648d188c4b59ad186e412c623bfc66734fdcfab83a362563651dbfb3e7594072b9d010a2c03f2e360a696c2562bbaffdd341c0762b9f968bbc45d15a5f887ab29e72a3c8b2ef3fecdc3875027f9a44e67ef2fc8796c2ab5f32e5aee156ab8bf92fb283b7dc212641da0040c42843a4614fd0765df4d159c3643444c078fbbc7e205ee1d61665820a48c529d6b818d5f444a4040d704ccd49de3b21fe6e32b536ab20fd20952ffb3191cac0503ba14d2a9ea64f1bd65fe0ee23b1aed1dee925e7bb774cbd4d9217e544aad9440f5578305dabb69f3625fcc2637c141b600a83d64eb54ee27df306d2fb07a3a4494e05a126b52bcbb3a148da4b0a1d9d3d95072aade26b52aadd6a46a9a04f106d3f4c55b425314383798d8b40d5c0277018d1bbf0e54903fe91a88a06b3ee8727b3f05acb709cf4e2c3fce504b6c3c501e48a42b72fc4acfc0982f3c67dcfdd96700d524673e8d1e6019ab25146c8724b7b9b07cf9a410734c5cd2f7580d10d44367bc5f56252e22fbe1798c78054cccb73dcaac23f3e524714c54347362eb31280ce7f28266e3e2a3374443026ec404740c73d33762bc0f8c05bba865f82a4069cd75c3f1eb42fa2ca733ef346c6496a4af3a3060d3b88f367d6f1474d0044a977569590348321d226eb9607faf17cd3957a5fd31421db8770e9127da64ecdeea17ff02301c9a132d058724bd784aca7b1376d701a377f061e0e5bfaacbd0122034f87be2fef6fd826f1fe2f3076714df0c4f1ce8a852ebfb7c100e05edce6ea8f9817e87dc3b52186799c8731f2279cc5e97445756af0666bb6f542477bfb2bc12b4dc23be7eca2734e570c984720f3a46e71df5ef0242b932a08f37da9047ea1eeead4ba428b3d5a39324d2544c86694b925a6161513215de4220233b5c7786b71bfec92b569f1eda0718928907e4b8d335ce1dbff112d6a10507cb5296bea8c3746303ffdb283941f9ea02540e94f8296071eb2c68050d91c5d3f440afe8d1eac33837c5b306a5d3b4b258c1d894055e586e4721aa9876431245b31c1b985a989bef3d721922854bac75daf94acf0a3e81b2120225ec12e01fa3d1c37c05de4dbc613bf361dcef70c320d998e9bea47eafb0efaed3cf1f01c3698f87485c6b621129d8529bb54ac7a348d046a4ce16e65e6cd376031a8285974a42ae63b65a267002961311ea1af36020f5fd4b98032fbd9202d9e92ca0cb9e8075ba8a4504ffa12a710a283ada91e6adec3a5192d406ddfc02dce412cd5d43ff63bac7c7c66ef8496431b07d71e32e8e8d5f8b7bc02ae28dfa13fa17374d166ef58f636ee58ef79c0caade522c82c7197453774d77583f6d08147228850c3952f7132852fbb588b7961a4f63e7861e3dd9410c66259c97e62c1dea2553f907271543f200a0ec51dbd42b034dd0ba8615b478218fa4ce6cd251f981a62841f4116e0439b49d8001739d55fd529445d05310355a20b4197e1d35f48298595f8438f1dde280340dd8b2f922ccf53ed9624318a65582b3105f426bf50b13c3dcef7dacbc258ee516e88e886d8931200aaa55c28d78dfcad0fd72a60d0473cb00b30aebc5106cccfbaaa091f9d66b9bbfad9188dcce6951531c8ad2c3f523b6eba0eb9bbba8fa8b558465d93d2efc796726b71f853493265db24fa014371639e13752064c12488e7507064b79dd224b1dbee0f3679e9db5cdabed8c0fec9884cc11fff4059a626b66068b1230c748cb19300ca6439a919d8e10ea18e84c644229a7417935b9931d409b601182bd08ff5b1299b11c28aad4d5bb6f9bc53ddaefd5c252684a36ca5218326fd22d22bbe7212bf6657c9932ddfef1eda0065a0ae45919c494bf1d2c0b7851b5e2e8fa286b0d12dcf9c971e8df8d7c1fd3a3bb4239511f1560333faf1b4f009db58518915f6f52c977f68c30cd67c9fb90ae599b113fae7b193f92572d8732396508e9f4e38e218ca3d584b5ea7cac9a4f65c8f66d5f283d19d1393acb637df4dd6e7840eb593370323f89bfe1e9c258dcdd57b18211b16965833c8eba97604863b2fe520999012d5052e516774b080adf35a67dede99e349b7dada29c57f71cf7b449c72a6a7afe3946976e6849630868f64395a50f1993c76e0b60ff95d7741bc866bd4870b834a104b079be00ce96740c99f55616ca0728148b0d38cb72c8197a186a5cb7ef36a5df97ae2392863b844456a8c7217422098ece95e866b58807ef6941910297f205a12643c8a25e7dd3cd0e4d2272352720ebca11d53168504ad7f18bfcbf66d38d81c3e37e87215297362b40d25381c0ceb1aa2ab0cedb67508e01eee1e193bfb1735f4770aba4672ee8a0435467c712698656b9c3c32fa5bc1b5b07cfcfa241e36e53ed4a2ba6e9e9e8813c1ddbd7df2d58ce6fd6c9774bc5650e77bb2d6674f6de63065fb80906566825ca52bca4edf360beb21121ec9a03b6a0413d9b7b26106ae7fff6b8e1c9e0edd800b3ca5616b9e24122c4edaf3d4596f3bcfccbc63819fc0131bdb2e5788853df9f9e7fc3be80b44d3eefc5061a10522ee41215f6bd6fc6b141dae4b8ffd706129c366eb6e43c3f420314291e996b4b8d21c2f72d1b65a31f6b23f850ce705354ab6b38441027be354384640370ff91d50da9340be64448969ee791a0041688b2e061be11cf1dc44c16fcb0f7f37fbaf21362fd49e73d67e38729a1bb7b6daa98e547faa6277ecea06abfc261874f28100b516643c0dcdb6f36473fe20348775d9458eee50274221d6e3c4bc95b6e0279e0ab6fa44ed6ba889bd79fc508f91f0120b669a97fb38935908e91f26f0e405c0858734948c27716a92ebebc3b00cbad0ea065d894f749a4b36273adbf38592dc45ae63b885543a1220c86458b1b9c4776ceae352bbc558abcc81dfb482a87a6e839a0ac141066cac48af8cfe64fb6cf1cceb049913b1c684e98d101b0b421ce3c07b06df02ad3aeaa4d7731868fafe03330db8bf48971041f01fb6c6c97d6119d1c236ce515d838f44452fa787d99862c24733c33fad055cf695a59ba7e2ef20f9851f5b7afb5726fa883eb7b38d562b935d61f53750bfdcbeede2ac36bd7ec29e8deecacc9a512680d1d3f35545e76327e878e63aca6ed4467b08f2dda3a035a54bfc2728438069cf55e9d60929a424b342c3073ff80e5386ab3061596fa0de30249285af313d0a63c32f82057af83b0702086b3ce1931d96c5d6378575bd27cde43a6bc024b36efdf085c97a7ba954b9f31c669e124b378ec84d10bf1291403a434222b091f5cea74d22451", 0x1000}], 0x3, &(0x7f0000002140)=[@iv={0xf0, 0x117, 0x2, 0xdd, "8da075ce18dce67792d39df0f70db84ad75afb221c5f077a9be29d8d2281075dc726d26bf67298fcb4761d836cddfff714a4f08aa3c2d2e673f4c07675af1ce0e1ed99621628ba4a6c0acaac7d98411a30acfaac1130b4225a31c090cb297e4e3531f6f1b98698c71c57c7c6f724b162f185f7957720c33ead9a16c08357612cee146affe996cc118e3fc62a6b1f678a6dd2ac4244d5d608b4a6b68d1a6419668edf36d04e034ded521d1a84aea4487e136ddbe2080eda262e74c02ee054dda871a729937e8f689db9484868bbd517b3e0628e3d4f78184e60abf0b5f0"}, @op={0x10, 0x117, 0x3, 0x1}, @op={0x10, 0x117, 0x3, 0x1}, @iv={0xb8, 0x117, 0x2, 0xa8, "64cb99219a41bb447f9c2369c08a17b18ccb2af24acb6d4db4d6b43fafea7c664133910e58aa6cef2550188b78479aa2b3939e4afe987290decea49fd67fd2b439d43bcb517c6742e61c6a748e02f9de88cf1365fa3a8b3422d0fa7b476ce0cd2f9e7c665fae50c9f4f2546327a1208a31bcc09ac84c498aac6bc963faaa02b5d20e538ecdd2daeb3e5f05a59c06fdca4eac06a8f928003c577af7fcb4781b30ab4470275d9f7ace"}, @op={0x10, 0x117, 0x3, 0x1}, @op={0x10, 0x117, 0x3, 0x1}], 0x1e8, 0x8000}, 0x40) r1 = getpgid(0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000002400)={0xffffffffffffffff, r0, 0x0, 0x16, &(0x7f00000023c0)=')eth1md5sum(+$,cpuset\x00', 0xffffffffffffffff}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000002440)={r1, r0, 0x0, 0x1, &(0x7f0000002380)='\x00', r3}, 0x30) getsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000002480), 0x2) fsetxattr$security_evm(r5, &(0x7f00000024c0)='security.evm\x00', &(0x7f0000002500)=@v2={0x5, 0x1, 0x9, 0xfffffffffffffffa, 0x96, "a7a7e984e6ec1c758698e315bfc8caf3a2f4694964e4a5fd1b0aef71c7dcdc194de11ada8fb5882f4be18ed116f0ad2eabc7411dec7a86cae979f927689e6eae5f2cef5666bb3e041fe0edcd5f058cde6969c16c400e18b35dceacb7a7809620e4a88ee5c201249d97709c7510d42fa11111cbfb173503b2406c307285f81f14e048059abe865f8f256bbbe6d77a805cbcac6603ccad"}, 0xa0, 0x3) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000002800)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000027c0)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000002840)={0x5, 0x10, 0xfa00, {&(0x7f00000025c0), r6, 0x3}}, 0x18) ptrace$setregs(0xd, r1, 0x7, &(0x7f0000002880)="c4cf4d5058bfdd4f32c9005729ab790d6d9ca1ea0a9d23f4237b1480b54c8158926125177d506c928651a68cb3f4863ed13a67144f89d6becf009eebd67caa553031b9c27d3305a90bbfdf9d329f22352d02d44ec95decfae4022912d1342dcacf3101a8042b1396146b44f2d6eb2284146c9f41e2217f38") ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc00c64b5, &(0x7f0000002940)={&(0x7f0000002900)=[0x0, 0x0, 0x0], 0x3}) tkill(r1, 0x1c) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000029c0)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000002ac0)={&(0x7f0000002980), 0xc, &(0x7f0000002a80)={&(0x7f0000002a00)={0x74, r7, 0x108, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x44, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}, @TIPC_NLA_SOCK={0x10, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x20000080}, 0x4) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000002b00)={0xa, @output={0x1000, 0x1, {0x4000, 0x9}, 0x30, 0x8}}) kcmp(r4, r1, 0x7, r2, r0) sendmsg$can_raw(r0, &(0x7f0000002cc0)={&(0x7f0000002c00), 0x10, &(0x7f0000002c80)={&(0x7f0000002c40)=@can={{0x2, 0x6, 0x800, 0x7fff}, 0x7, 0x3, 0x0, 0x0, "5e57a8181bc6ae0e"}, 0x10}, 0x1, 0x0, 0x0, 0x8000}, 0x4040041) setsockopt$sock_void(r0, 0x1, 0x24, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000002f80)={&(0x7f0000002d00)={0x10, 0x0, 0x0, 0x28000000}, 0xc, &(0x7f0000002f40)={&(0x7f0000002d40)={0x1f0, r7, 0x700, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x40, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x100}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}]}, @TIPC_NLA_BEARER={0x7c, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x673}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x9, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x401, @local, 0x4}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_LINK={0xac, 0x4, [@TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6768}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe3b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MON={0x44, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x20}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK={0x10, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x800}, 0x8004) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000002fc0)={0x0, 0x3}, &(0x7f0000003000)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000003040)={r8, 0x10000, 0x2, 0x2}, &(0x7f0000003080)=0x10) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f00000030c0)) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000003140)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000003200)={&(0x7f0000003100), 0xc, &(0x7f00000031c0)={&(0x7f0000003180)={0x2c, r9, 0x100, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x44040) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000003280)='TIPC\x00') sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000003340)={&(0x7f0000003240)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000003300)={&(0x7f00000032c0)={0x24, r10, 0x100, 0x70bd28, 0x25dfdbfd, {{}, 0x0, 0x800b, 0x0, {0x8, 0x2, 0x8001}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4080}, 0x4) readahead(r0, 0x8, 0x5) keyctl$clear(0x7, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000003500)={&(0x7f0000003380)={0x10, 0x0, 0x0, 0x8808}, 0xc, &(0x7f00000034c0)={&(0x7f00000033c0)={0xf8, r9, 0x700, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x20, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bond_slave_0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bcsh0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x10001}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr="3c723155f41ced8019276150098f331d"}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}]}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6e}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x88}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x3a}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'fo\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast1}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x28, 0x20}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x30, 0x18}}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x5c}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x20008811}, 0x0) ioctl$KVM_SIGNAL_MSI(r0, 0x4020aea5, &(0x7f0000003540)={0x0, 0x3000, 0x2, 0x5, 0x81}) 00:25:57 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 00:25:57 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x43d) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x1000001c3) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000400)={0x0, 0x8d9c, 0x10002}, 0x14) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x4f3d1d6e) splice(r0, 0x0, r2, 0x0, 0x10011, 0x0) 00:25:57 executing program 3: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/pid\x00') fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = dup2(r0, r0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) fsync(r1) fcntl$setown(r0, 0x8, 0x0) eventfd2(0x7, 0x0) clock_getres(0x0, 0x0) shmget$private(0x0, 0x3000, 0xa08, &(0x7f0000ffa000/0x3000)=nil) modify_ldt$write2(0x11, 0x0, 0x0) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0) 00:25:57 executing program 5: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000080), &(0x7f0000000100)=0x4) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) getuid() ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:25:57 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'eql\x00\x00\x00\x05\x00\x00\x10\x00', 0x802}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x339) ioctl$sock_ifreq(r0, 0x8914, &(0x7f00000000c0)={'eql\x00\x00\x00\xa9[\x00', @ifru_mtu=0x1}) 00:25:57 executing program 3: socket$inet(0x2, 0x80000, 0xb) getpid() pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) write$UHID_INPUT2(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') r1 = memfd_create(&(0x7f0000000040)='/dev/loop#\x00', 0x0) sendfile(r1, r0, 0x0, 0x2000005) 00:25:57 executing program 0: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, 0x0, &(0x7f0000000100)) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) getuid() ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:25:58 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") syslog(0x2, &(0x7f0000000180)=""/92, 0x5c) 00:25:58 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000000c0), 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000380)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) bind$packet(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x11, &(0x7f0000000100)={@remote, @dev, [], {@llc_tr={0x11, {@llc={0x0, 0x0, "c4"}}}}}, 0x0) 00:25:58 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 301.123291][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 301.129130][ C0] protocol 88fb is buggy, dev hsr_slave_1 00:26:00 executing program 2: keyctl$setperm(0x5, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:26:00 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x43d) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x1000001c3) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000400)={0x0, 0x8d9c, 0x10002}, 0x14) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x4f3d1d6e) splice(r0, 0x0, r2, 0x0, 0x1012c, 0x0) 00:26:00 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000000c0), 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000380)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) bind$packet(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x11, &(0x7f0000000100)={@remote, @dev, [], {@llc_tr={0x11, {@llc={0x0, 0x0, "c4"}}}}}, 0x0) 00:26:00 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 00:26:00 executing program 5: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000080), &(0x7f0000000100)=0x4) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) getuid() ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:26:00 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000000c0), 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000380)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) bind$packet(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x11, &(0x7f0000000100)={@remote, @dev, [], {@llc_tr={0x11, {@llc={0x0, 0x0, "c4"}}}}}, 0x0) 00:26:00 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000000c0), 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000380)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) bind$packet(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x11, &(0x7f0000000100)={@remote, @dev, [], {@llc_tr={0x11, {@llc={0x0, 0x0, "c4"}}}}}, 0x0) 00:26:00 executing program 0: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, 0x0, 0x0) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) getuid() ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) [ 303.753308][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 303.759171][ C1] protocol 88fb is buggy, dev hsr_slave_1 00:26:00 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000000c0), 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000380)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) syz_emit_ethernet(0x11, &(0x7f0000000100)={@remote, @dev, [], {@llc_tr={0x11, {@llc={0x0, 0x0, "c4"}}}}}, 0x0) 00:26:01 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000000c0), 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) syz_emit_ethernet(0x11, &(0x7f0000000100)={@remote, @dev, [], {@llc_tr={0x11, {@llc={0x0, 0x0, "c4"}}}}}, 0x0) 00:26:01 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000000c0), 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) syz_emit_ethernet(0x11, &(0x7f0000000100)={@remote, @dev, [], {@llc_tr={0x11, {@llc={0x0, 0x0, "c4"}}}}}, 0x0) 00:26:01 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 00:26:03 executing program 2: keyctl$setperm(0x5, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(0x0, 0x1, 0x2) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:26:03 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000000c0), 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) syz_emit_ethernet(0x11, &(0x7f0000000100)={@remote, @dev, [], {@llc_tr={0x11, {@llc={0x0, 0x0, "c4"}}}}}, 0x0) 00:26:03 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x43d) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x1000001c3) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000400)={0x0, 0x8d9c, 0x10002}, 0x14) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x4f3d1d6e) splice(r0, 0x0, r2, 0x0, 0x101a0, 0x0) 00:26:03 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 00:26:03 executing program 5: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, 0x0, &(0x7f0000000100)) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) getuid() ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:26:03 executing program 2: keyctl$setperm(0x5, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(0x0, 0x1, 0x2) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:26:03 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000000c0), 0x4) bind$packet(r0, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) syz_emit_ethernet(0x11, &(0x7f0000000100)={@remote, @dev, [], {@llc_tr={0x11, {@llc={0x0, 0x0, "c4"}}}}}, 0x0) 00:26:03 executing program 2: keyctl$setperm(0x5, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(0x0, 0x1, 0x2) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:26:03 executing program 0: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, 0x0, 0x0) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) getuid() ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:26:03 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000000c0), 0x4) bind$packet(r0, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) syz_emit_ethernet(0x11, &(0x7f0000000100)={@remote, @dev, [], {@llc_tr={0x11, {@llc={0x0, 0x0, "c4"}}}}}, 0x0) 00:26:03 executing program 2: keyctl$setperm(0x5, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x0, 0x2) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:26:03 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000000c0), 0x4) bind$packet(r0, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) syz_emit_ethernet(0x11, &(0x7f0000000100)={@remote, @dev, [], {@llc_tr={0x11, {@llc={0x0, 0x0, "c4"}}}}}, 0x0) 00:26:03 executing program 2: keyctl$setperm(0x5, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x0, 0x2) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:26:04 executing program 2: keyctl$setperm(0x5, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x0, 0x2) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:26:04 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x43d) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x1000001c3) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000400)={0x0, 0x8d9c, 0x10002}, 0x14) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x4f3d1d6e) splice(r0, 0x0, r2, 0x0, 0x10c00, 0x0) 00:26:04 executing program 2: keyctl$setperm(0x5, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:26:06 executing program 5: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, 0x0, &(0x7f0000000100)) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) getuid() ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:26:06 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000380)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @dev}, 0x14) syz_emit_ethernet(0x11, &(0x7f0000000100)={@remote, @dev, [], {@llc_tr={0x11, {@llc={0x0, 0x0, "c4"}}}}}, 0x0) 00:26:06 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 00:26:06 executing program 2: keyctl$setperm(0x5, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:26:06 executing program 0: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, 0x0, 0x0) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) getuid() ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:26:06 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x43d) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x1000001c3) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000400)={0x0, 0x8d9c, 0x10002}, 0x14) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x4f3d1d6e) splice(r0, 0x0, r2, 0x0, 0x1200b, 0x0) 00:26:06 executing program 2: keyctl$setperm(0x5, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:26:06 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000380)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @dev}, 0x14) syz_emit_ethernet(0x11, &(0x7f0000000100)={@remote, @dev, [], {@llc_tr={0x11, {@llc={0x0, 0x0, "c4"}}}}}, 0x0) 00:26:06 executing program 2: keyctl$setperm(0x5, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(0xffffffffffffffff, 0x800040c004500a, &(0x7f0000000040)=0x80000002) ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:26:07 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000380)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @dev}, 0x14) syz_emit_ethernet(0x11, &(0x7f0000000100)={@remote, @dev, [], {@llc_tr={0x11, {@llc={0x0, 0x0, "c4"}}}}}, 0x0) [ 310.073315][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 310.079278][ C0] protocol 88fb is buggy, dev hsr_slave_1 00:26:07 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000000c0), 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000380)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @dev}, 0x14) syz_emit_ethernet(0x11, &(0x7f0000000100)={@remote, @dev, [], {@llc_tr={0x11, {@llc={0x0, 0x0, "c4"}}}}}, 0x0) 00:26:07 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000000c0), 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000380)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @dev}, 0x14) syz_emit_ethernet(0x11, &(0x7f0000000100)={@remote, @dev, [], {@llc_tr={0x11, {@llc={0x0, 0x0, "c4"}}}}}, 0x0) 00:26:09 executing program 5: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, 0x0, 0x0) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) getuid() ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:26:09 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 00:26:09 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000000c0), 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000380)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @dev}, 0x14) syz_emit_ethernet(0x11, &(0x7f0000000100)={@remote, @dev, [], {@llc_tr={0x11, {@llc={0x0, 0x0, "c4"}}}}}, 0x0) 00:26:09 executing program 2: keyctl$setperm(0x5, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(0xffffffffffffffff, 0x800040c004500a, &(0x7f0000000040)=0x80000002) ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:26:09 executing program 0: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, 0x0, &(0x7f0000000100)) ioctl$int_in(0xffffffffffffffff, 0x800040c004500a, &(0x7f0000000040)=0x80000002) getuid() ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:26:09 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x43d) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x1000001c3) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000400)={0x0, 0x8d9c, 0x10002}, 0x14) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x4f3d1d6e) splice(r0, 0x0, r2, 0x0, 0x13005, 0x0) 00:26:09 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0), 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @dev}, 0x14) syz_emit_ethernet(0x11, &(0x7f0000000100)={@remote, @dev, [], {@llc_tr={0x11, {@llc={0x0, 0x0, "c4"}}}}}, 0x0) 00:26:10 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0), 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @dev}, 0x14) syz_emit_ethernet(0x11, &(0x7f0000000100)={@remote, @dev, [], {@llc_tr={0x11, {@llc={0x0, 0x0, "c4"}}}}}, 0x0) 00:26:10 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0), 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @dev}, 0x14) syz_emit_ethernet(0x11, &(0x7f0000000100)={@remote, @dev, [], {@llc_tr={0x11, {@llc={0x0, 0x0, "c4"}}}}}, 0x0) 00:26:10 executing program 3: r0 = socket$packet(0x11, 0x0, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000000c0), 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000380)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) syz_emit_ethernet(0x11, &(0x7f0000000100)={@remote, @dev, [], {@llc_tr={0x11, {@llc={0x0, 0x0, "c4"}}}}}, 0x0) 00:26:10 executing program 2: keyctl$setperm(0x5, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(0xffffffffffffffff, 0x800040c004500a, &(0x7f0000000040)=0x80000002) ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:26:10 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 00:26:12 executing program 5: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, 0x0, 0x0) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) getuid() ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:26:12 executing program 3: r0 = socket$packet(0x11, 0x0, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000000c0), 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000380)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) syz_emit_ethernet(0x11, &(0x7f0000000100)={@remote, @dev, [], {@llc_tr={0x11, {@llc={0x0, 0x0, "c4"}}}}}, 0x0) 00:26:12 executing program 0: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, 0x0, &(0x7f0000000100)) ioctl$int_in(0xffffffffffffffff, 0x800040c004500a, &(0x7f0000000040)=0x80000002) getuid() ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:26:12 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x43d) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x1000001c3) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000400)={0x0, 0x8d9c, 0x10002}, 0x14) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x4f3d1d6e) splice(r0, 0x0, r2, 0x0, 0x1400f, 0x0) 00:26:12 executing program 2: keyctl$setperm(0x5, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x0, &(0x7f0000000040)=0x80000002) ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:26:12 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 00:26:12 executing program 3: r0 = socket$packet(0x11, 0x0, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000000c0), 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000380)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) syz_emit_ethernet(0x11, &(0x7f0000000100)={@remote, @dev, [], {@llc_tr={0x11, {@llc={0x0, 0x0, "c4"}}}}}, 0x0) 00:26:13 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000000c0), 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000380)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) syz_emit_ethernet(0x11, &(0x7f0000000100)={@remote, @dev, [], {@llc_tr={0x11, {@llc={0x0, 0x0, "c4"}}}}}, 0x0) 00:26:13 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000000c0), 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000380)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) syz_emit_ethernet(0x11, &(0x7f0000000100)={@remote, @dev, [], {@llc_tr={0x11, {@llc={0x0, 0x0, "c4"}}}}}, 0x0) 00:26:13 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000000c0), 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000380)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) syz_emit_ethernet(0x11, &(0x7f0000000100)={@remote, @dev, [], {@llc_tr={0x11, {@llc={0x0, 0x0, "c4"}}}}}, 0x0) 00:26:13 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 00:26:13 executing program 0: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, 0x0, &(0x7f0000000100)) ioctl$int_in(0xffffffffffffffff, 0x800040c004500a, &(0x7f0000000040)=0x80000002) getuid() ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:26:15 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x43d) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x1000001c3) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000400)={0x0, 0x8d9c, 0x10002}, 0x14) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x4f3d1d6e) splice(r0, 0x0, r2, 0x0, 0x10005, 0x2) 00:26:15 executing program 2: keyctl$setperm(0x5, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x0, &(0x7f0000000040)=0x80000002) ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:26:15 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000000c0), 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000380)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @dev}, 0x14) syz_emit_ethernet(0x11, &(0x7f0000000100)={@remote, @dev, [], {@llc_tr={0x11, {@llc={0x0, 0x0, "c4"}}}}}, 0x0) 00:26:15 executing program 5: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, 0x0, 0x0) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) getuid() ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:26:15 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 00:26:15 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000000c0), 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000380)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @dev}, 0x14) syz_emit_ethernet(0x11, &(0x7f0000000100)={@remote, @dev, [], {@llc_tr={0x11, {@llc={0x0, 0x0, "c4"}}}}}, 0x0) [ 318.953933][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 318.960730][ C0] protocol 88fb is buggy, dev hsr_slave_1 00:26:16 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000000c0), 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000380)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @dev}, 0x14) syz_emit_ethernet(0x11, &(0x7f0000000100)={@remote, @dev, [], {@llc_tr={0x11, {@llc={0x0, 0x0, "c4"}}}}}, 0x0) 00:26:16 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000380)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) syz_emit_ethernet(0x11, &(0x7f0000000100)={@remote, @dev, [], {@llc_tr={0x11, {@llc={0x0, 0x0, "c4"}}}}}, 0x0) 00:26:16 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000380)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) syz_emit_ethernet(0x11, &(0x7f0000000100)={@remote, @dev, [], {@llc_tr={0x11, {@llc={0x0, 0x0, "c4"}}}}}, 0x0) 00:26:16 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 00:26:16 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x43d) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x1000001c3) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000400)={0x0, 0x8d9c, 0x10002}, 0x14) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x4f3d1d6e) splice(r0, 0x0, r2, 0x0, 0x10005, 0x3) 00:26:16 executing program 0: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, 0x0, &(0x7f0000000100)) ioctl$int_in(r0, 0x0, &(0x7f0000000040)=0x80000002) getuid() ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:26:16 executing program 2: keyctl$setperm(0x5, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x0, &(0x7f0000000040)=0x80000002) ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:26:16 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000380)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) syz_emit_ethernet(0x11, &(0x7f0000000100)={@remote, @dev, [], {@llc_tr={0x11, {@llc={0x0, 0x0, "c4"}}}}}, 0x0) [ 319.834035][ C0] protocol 88fb is buggy, dev hsr_slave_0 00:26:16 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000000c0), 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000380)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) syz_emit_ethernet(0x11, &(0x7f0000000100)={@remote, @dev, [], {@llc_tr={0x11, {@llc={0x0, 0x0, "c4"}}}}}, 0x0) 00:26:18 executing program 5: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, 0x0, &(0x7f0000000100)) ioctl$int_in(0xffffffffffffffff, 0x800040c004500a, &(0x7f0000000040)=0x80000002) getuid() ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:26:18 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000000c0), 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000380)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) syz_emit_ethernet(0x11, &(0x7f0000000100)={@remote, @dev, [], {@llc_tr={0x11, {@llc={0x0, 0x0, "c4"}}}}}, 0x0) 00:26:18 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 00:26:18 executing program 2: keyctl$setperm(0x5, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800040c004500a, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:26:18 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x43d) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x1000001c3) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000400)={0x0, 0x8d9c, 0x10002}, 0x14) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x4f3d1d6e) splice(r0, 0x0, r2, 0x0, 0x10005, 0x4) 00:26:18 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000000c0), 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000380)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) syz_emit_ethernet(0x11, &(0x7f0000000100)={@remote, @dev, [], {@llc_tr={0x11, {@llc={0x0, 0x0, "c4"}}}}}, 0x0) [ 321.914803][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 321.921538][ C0] protocol 88fb is buggy, dev hsr_slave_1 00:26:19 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000000c0), 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) bind$packet(r0, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) syz_emit_ethernet(0x11, &(0x7f0000000100)={@remote, @dev, [], {@llc_tr={0x11, {@llc={0x0, 0x0, "c4"}}}}}, 0x0) 00:26:19 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000000c0), 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) bind$packet(r0, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) syz_emit_ethernet(0x11, &(0x7f0000000100)={@remote, @dev, [], {@llc_tr={0x11, {@llc={0x0, 0x0, "c4"}}}}}, 0x0) 00:26:19 executing program 2: keyctl$setperm(0x5, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800040c004500a, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:26:19 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000000c0), 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) bind$packet(r0, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) syz_emit_ethernet(0x11, &(0x7f0000000100)={@remote, @dev, [], {@llc_tr={0x11, {@llc={0x0, 0x0, "c4"}}}}}, 0x0) 00:26:19 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 00:26:19 executing program 0: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, 0x0, &(0x7f0000000100)) ioctl$int_in(r0, 0x0, &(0x7f0000000040)=0x80000002) getuid() ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:26:21 executing program 5: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, 0x0, &(0x7f0000000100)) ioctl$int_in(0xffffffffffffffff, 0x800040c004500a, &(0x7f0000000040)=0x80000002) getuid() ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:26:21 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x43d) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x1000001c3) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000400)={0x0, 0x8d9c, 0x10002}, 0x14) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x4f3d1d6e) splice(r0, 0x0, r2, 0x0, 0x10005, 0x5) 00:26:21 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000000c0), 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) syz_emit_ethernet(0x11, &(0x7f0000000100)={@remote, @dev, [], {@llc_tr={0x11, {@llc={0x0, 0x0, "c4"}}}}}, 0x0) 00:26:21 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 00:26:21 executing program 2: keyctl$setperm(0x5, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800040c004500a, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:26:21 executing program 0: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, 0x0, &(0x7f0000000100)) ioctl$int_in(r0, 0x0, &(0x7f0000000040)=0x80000002) getuid() ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:26:21 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000000c0), 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) syz_emit_ethernet(0x11, &(0x7f0000000100)={@remote, @dev, [], {@llc_tr={0x11, {@llc={0x0, 0x0, "c4"}}}}}, 0x0) 00:26:22 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000000c0), 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) syz_emit_ethernet(0x11, &(0x7f0000000100)={@remote, @dev, [], {@llc_tr={0x11, {@llc={0x0, 0x0, "c4"}}}}}, 0x0) [ 325.193989][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 325.200869][ C0] protocol 88fb is buggy, dev hsr_slave_1 00:26:22 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000000c0), 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) bind$packet(r0, 0x0, 0x0) syz_emit_ethernet(0x11, &(0x7f0000000100)={@remote, @dev, [], {@llc_tr={0x11, {@llc={0x0, 0x0, "c4"}}}}}, 0x0) 00:26:22 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000000c0), 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) bind$packet(r0, 0x0, 0x0) syz_emit_ethernet(0x11, &(0x7f0000000100)={@remote, @dev, [], {@llc_tr={0x11, {@llc={0x0, 0x0, "c4"}}}}}, 0x0) 00:26:22 executing program 2: keyctl$setperm(0x5, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)) ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:26:22 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 00:26:22 executing program 5: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, 0x0, &(0x7f0000000100)) ioctl$int_in(0xffffffffffffffff, 0x800040c004500a, &(0x7f0000000040)=0x80000002) getuid() ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:26:22 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x43d) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x1000001c3) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000400)={0x0, 0x8d9c, 0x10002}, 0x14) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x4f3d1d6e) splice(r0, 0x0, r2, 0x0, 0x10005, 0x7) 00:26:22 executing program 0: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, 0x0, &(0x7f0000000100)) ioctl$int_in(r0, 0x800040c004500a, 0x0) getuid() ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:26:22 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000000c0), 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) bind$packet(r0, 0x0, 0x0) syz_emit_ethernet(0x11, &(0x7f0000000100)={@remote, @dev, [], {@llc_tr={0x11, {@llc={0x0, 0x0, "c4"}}}}}, 0x0) 00:26:22 executing program 2: keyctl$setperm(0x5, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)) ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:26:22 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000000c0), 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) bind$packet(r0, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) syz_emit_ethernet(0x11, &(0x7f0000000100)={@remote, @dev, [], {@llc_tr={0x11, {@llc={0x0, 0x0, "c4"}}}}}, 0x0) 00:26:23 executing program 2: keyctl$setperm(0x5, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)) ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:26:23 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000000c0), 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) bind$packet(r0, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) syz_emit_ethernet(0x11, &(0x7f0000000100)={@remote, @dev, [], {@llc_tr={0x11, {@llc={0x0, 0x0, "c4"}}}}}, 0x0) 00:26:23 executing program 2: keyctl$setperm(0x5, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:26:23 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000000c0), 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) bind$packet(r0, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) syz_emit_ethernet(0x11, &(0x7f0000000100)={@remote, @dev, [], {@llc_tr={0x11, {@llc={0x0, 0x0, "c4"}}}}}, 0x0) 00:26:23 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(r2, 0x0, 0x0) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 00:26:23 executing program 0: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, 0x0, &(0x7f0000000100)) ioctl$int_in(r0, 0x800040c004500a, 0x0) getuid() ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:26:25 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000000c0), 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000380)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) syz_emit_ethernet(0x0, 0x0, 0x0) 00:26:25 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x43d) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x1000001c3) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000400)={0x0, 0x8d9c, 0x10002}, 0x14) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x4f3d1d6e) splice(r0, 0x0, r2, 0x0, 0x10005, 0x9) 00:26:25 executing program 2: keyctl$setperm(0x5, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:26:25 executing program 0: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, 0x0, &(0x7f0000000100)) ioctl$int_in(r0, 0x800040c004500a, 0x0) getuid() ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:26:25 executing program 5: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, 0x0, &(0x7f0000000100)) ioctl$int_in(r0, 0x0, &(0x7f0000000040)=0x80000002) getuid() ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:26:25 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(r2, 0x0, 0x0) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 328.794223][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 328.801236][ C0] protocol 88fb is buggy, dev hsr_slave_1 00:26:25 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000000c0), 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000380)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) syz_emit_ethernet(0x0, 0x0, 0x0) 00:26:26 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000000c0), 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000380)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) syz_emit_ethernet(0x0, 0x0, 0x0) 00:26:26 executing program 3: r0 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r0, &(0x7f0000000640)={&(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1}}}, 0x10, 0x0}, 0x0) 00:26:26 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) r1 = memfd_create(&(0x7f0000000000)='\xac\x00\x00', 0x4) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, 0x0) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf10001, 0xeffffdef) close(0xffffffffffffffff) rt_sigqueueinfo(0x0, 0x21, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000080)}, 0x10) 00:26:26 executing program 2: keyctl$setperm(0x5, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:26:26 executing program 5: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, 0x0, &(0x7f0000000100)) ioctl$int_in(r0, 0x0, &(0x7f0000000040)=0x80000002) getuid() ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:26:26 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x43d) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x1000001c3) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000400)={0x0, 0x8d9c, 0x10002}, 0x14) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x4f3d1d6e) splice(r0, 0x0, r2, 0x0, 0x10005, 0xa) 00:26:26 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(r2, 0x0, 0x0) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 00:26:27 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000002c0)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip6_flowlabel\x00') preadv(r0, &(0x7f0000000700), 0x31f, 0x0) 00:26:28 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) recvmsg(r0, &(0x7f00000007c0)={&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, 0x0}, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, 0x0) r4 = fcntl$getown(r3, 0x9) wait4(r4, 0x0, 0x0, 0x0) dup3(r1, r3, 0x0) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, 0x0) timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) timer_create(0x0, 0x0, &(0x7f0000000240)) timer_settime(0x0, 0x0, 0x0, 0x0) semget$private(0x0, 0x0, 0x0) semctl$GETVAL(0x0, 0x3, 0xc, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000580)='\x00') mkdirat(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000280)={@in6={{0xa, 0x0, 0x0, @dev}}, 0x0, 0x0, 0x0, "32a078e976239c4c62791e467929eeec0a0d95ed164733dae1743537ba5533552a965b2ed20b4ee94c518b0f5da53e14fa1915a31ab14b6e34e895c9b1bd35fab8d51d3e0671b81c3a24f68f04be4647"}, 0xd8) 00:26:28 executing program 2: keyctl$setperm(0x5, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) ioctl$int_in(r0, 0x0, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:26:28 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x43d) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x1000001c3) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000400)={0x0, 0x8d9c, 0x10002}, 0x14) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x4f3d1d6e) splice(r0, 0x0, r2, 0x0, 0x10005, 0xe) 00:26:28 executing program 0: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, 0x0, &(0x7f0000000100)) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)) getuid() ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:26:28 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 00:26:28 executing program 0: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, 0x0, &(0x7f0000000100)) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)) getuid() ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:26:29 executing program 0: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, 0x0, &(0x7f0000000100)) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)) getuid() ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:26:29 executing program 0: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, 0x0, &(0x7f0000000100)) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) getuid() ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:26:29 executing program 5: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, 0x0, &(0x7f0000000100)) ioctl$int_in(r0, 0x0, &(0x7f0000000040)=0x80000002) getuid() ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:26:29 executing program 2: keyctl$setperm(0x5, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) ioctl$int_in(r0, 0x0, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:26:29 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 00:26:29 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 00:26:29 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x43d) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x1000001c3) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000400)={0x0, 0x8d9c, 0x10002}, 0x14) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x4f3d1d6e) splice(r0, 0x0, r2, 0x0, 0x10005, 0x11) 00:26:30 executing program 3: clone(0x2102001dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000100)='asymmetric\x00', &(0x7f00000007c0)={'exz'}, &(0x7f00000003c0)='fu\xb3\xa9{Q\x02sePG4+\x88\'\x99(\xd4FG\xf1\\\xea\xbb\x81U\x04=\xb38\x81|\xaa\t\xdd*\xc0\xc9a{\xf5h1\x1dF07m\x86\xcaH\x13>4\xc3\x1c\x00\xc7\xe2\rp\x92\xfa1]\x15,NI\xb0\xb1\xcd\x8c\x84\xfaO\x93[\xb7\xbeSY\x01\x05\x1aZg\xdc\xa3\xa3s1f\x18\x17:\xb2\xe4\x95\xc0\x9c\xce\aUS\x1e\xe8\xddw\xdb\xb0\xaa]|\xd56zd\xb9\r\xef\x9fzy9\x13n\x04\xc5\xef3\x15\xdbYm\x85\x1dwU\xbe\xaf\xc3Y\x90y\xe1e\xa3\xba\x1bP`Rm\x04B\x7f\xdf\x92\xb8\xf5B\xe3X\x1bw\'\xe4?\nC\xc3\x1f\xa3\xe3\x01\xc5\xfc\x9d\x8eo\x18\xf3\xc6\xc7\xa8\xc8\xe7\x7fWK\xb0\xa4\xed\x84\xcb\xb2\xa8\x1b {\xfc\xdc%\xc4\x8e\xc8;\x93\xdd\na\x11\x13O\x85', 0xfffffffffffffffe) write$P9_RXATTRWALK(0xffffffffffffffff, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x20c080, 0x0) 00:26:30 executing program 0: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, 0x0, &(0x7f0000000100)) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) getuid() ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:26:30 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="2fc3"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, &(0x7f0000001040)="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") ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:26:30 executing program 3: keyctl$setperm(0x5, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) ioctl$int_in(r0, 0x0, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:26:30 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 00:26:30 executing program 5: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, 0x0, &(0x7f0000000100)) ioctl$int_in(r0, 0x800040c004500a, 0x0) getuid() ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:26:30 executing program 2: keyctl$setperm(0x5, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) ioctl$int_in(r0, 0x0, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:26:30 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x43d) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x1000001c3) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000400)={0x0, 0x8d9c, 0x10002}, 0x14) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x4f3d1d6e) splice(r0, 0x0, r2, 0x0, 0x10005, 0x24) 00:26:31 executing program 0: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, 0x0, &(0x7f0000000100)) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) getuid() ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:26:31 executing program 3: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, 0x0, &(0x7f0000000100)) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) getuid() ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:26:31 executing program 5: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, 0x0, &(0x7f0000000100)) ioctl$int_in(r0, 0x800040c004500a, 0x0) getuid() ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:26:31 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r2, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 00:26:31 executing program 2: keyctl$setperm(0x5, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) ioctl$int_in(r0, 0x5421, 0x0) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:26:31 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x43d) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x1000001c3) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000400)={0x0, 0x8d9c, 0x10002}, 0x14) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x4f3d1d6e) splice(r0, 0x0, r2, 0x0, 0x10005, 0x30) 00:26:31 executing program 0: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, 0x0, &(0x7f0000000100)) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) getuid() ioctl$int_in(r0, 0x0, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:26:32 executing program 3: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, 0x0, &(0x7f0000000100)) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) getuid() ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:26:32 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r2, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 00:26:32 executing program 2: keyctl$setperm(0x5, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) ioctl$int_in(r0, 0x5421, 0x0) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:26:32 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x43d) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x1000001c3) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000400)={0x0, 0x8d9c, 0x10002}, 0x14) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x4f3d1d6e) splice(r0, 0x0, r2, 0x0, 0x10005, 0x60) 00:26:32 executing program 0: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, 0x0, &(0x7f0000000100)) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) getuid() ioctl$int_in(r0, 0x0, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:26:33 executing program 3: keyctl$setperm(0x5, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) ioctl$int_in(r0, 0x0, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:26:33 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r2, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 00:26:34 executing program 5: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, 0x0, &(0x7f0000000100)) ioctl$int_in(r0, 0x800040c004500a, 0x0) getuid() ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:26:34 executing program 2: keyctl$setperm(0x5, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) ioctl$int_in(r0, 0x5421, 0x0) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:26:34 executing program 0: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, 0x0, &(0x7f0000000100)) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) getuid() ioctl$int_in(r0, 0x0, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:26:34 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x43d) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x1000001c3) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000400)={0x0, 0x8d9c, 0x10002}, 0x14) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x4f3d1d6e) splice(r0, 0x0, r2, 0x0, 0x10005, 0xb4) 00:26:34 executing program 3: keyctl$setperm(0x5, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) ioctl$int_in(r0, 0x5421, 0x0) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:26:34 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x10005, 0x0) 00:26:35 executing program 2: keyctl$setperm(0x5, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) ioctl$int_in(r0, 0x5421, &(0x7f0000000200)) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:26:35 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x10005, 0x0) 00:26:35 executing program 0: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, 0x0, &(0x7f0000000100)) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) getuid() ioctl$int_in(r0, 0x5421, 0x0) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:26:35 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x43d) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x1000001c3) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000400)={0x0, 0x8d9c, 0x10002}, 0x14) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x4f3d1d6e) splice(r0, 0x0, r2, 0x0, 0x10005, 0xf0) 00:26:35 executing program 3: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, 0x0, &(0x7f0000000100)) ioctl$int_in(r0, 0x800040c004500a, 0x0) getuid() ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:26:36 executing program 2: keyctl$setperm(0x5, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) ioctl$int_in(r0, 0x5421, &(0x7f0000000200)) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:26:37 executing program 5: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, 0x0, &(0x7f0000000100)) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)) getuid() ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:26:37 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x10005, 0x0) 00:26:37 executing program 0: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, 0x0, &(0x7f0000000100)) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) getuid() ioctl$int_in(r0, 0x5421, 0x0) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:26:37 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x43d) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x1000001c3) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000400)={0x0, 0x8d9c, 0x10002}, 0x14) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x4f3d1d6e) splice(r0, 0x0, r2, 0x0, 0x10005, 0x180) 00:26:37 executing program 2: keyctl$setperm(0x5, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) ioctl$int_in(r0, 0x5421, &(0x7f0000000200)) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:26:37 executing program 5: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, 0x0, &(0x7f0000000100)) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)) getuid() ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:26:38 executing program 5: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, 0x0, &(0x7f0000000100)) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)) getuid() ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:26:38 executing program 5: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, 0x0, &(0x7f0000000100)) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) getuid() ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:26:38 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x10005, 0x0) 00:26:38 executing program 2: keyctl$setperm(0x5, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:26:38 executing program 3: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, 0x0, &(0x7f0000000100)) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) getuid() ioctl$int_in(r0, 0x5421, 0x0) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:26:38 executing program 0: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, 0x0, &(0x7f0000000100)) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) getuid() ioctl$int_in(r0, 0x5421, 0x0) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:26:38 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x43d) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x1000001c3) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000400)={0x0, 0x8d9c, 0x10002}, 0x14) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x4f3d1d6e) splice(r0, 0x0, r2, 0x0, 0x10005, 0x240) 00:26:38 executing program 2: keyctl$setperm(0x5, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:26:38 executing program 2: keyctl$setperm(0x5, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:26:38 executing program 2: keyctl$setperm(0x5, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, 0x0, 0x0) 00:26:39 executing program 2: keyctl$setperm(0x5, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, 0x0, 0x0) 00:26:39 executing program 5: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, 0x0, &(0x7f0000000100)) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) getuid() ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:26:39 executing program 2: keyctl$setperm(0x5, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, 0x0, 0x0) 00:26:39 executing program 2: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, 0x0, &(0x7f0000000100)) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) getuid() ioctl$int_in(r0, 0x5421, 0x0) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:26:39 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x10005, 0x0) 00:26:39 executing program 0: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, 0x0, &(0x7f0000000100)) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) getuid() ioctl$int_in(r0, 0x5421, &(0x7f0000000200)) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:26:39 executing program 3: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, 0x0, &(0x7f0000000100)) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) getuid() ioctl$int_in(r0, 0x5421, 0x0) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:26:39 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x43d) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x1000001c3) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000400)={0x0, 0x8d9c, 0x10002}, 0x14) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x4f3d1d6e) splice(r0, 0x0, r2, 0x0, 0x10005, 0x300) 00:26:39 executing program 5: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, 0x0, &(0x7f0000000100)) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) getuid() ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:26:40 executing program 2: keyctl$setperm(0x5, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:26:40 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x10005, 0x0) 00:26:40 executing program 0: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, 0x0, &(0x7f0000000100)) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) getuid() ioctl$int_in(r0, 0x5421, &(0x7f0000000200)) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:26:40 executing program 3: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(r2, 0x0, 0x0) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 00:26:40 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x43d) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x1000001c3) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000400)={0x0, 0x8d9c, 0x10002}, 0x14) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x4f3d1d6e) splice(r0, 0x0, r2, 0x0, 0x10005, 0x500) 00:26:40 executing program 5: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, 0x0, &(0x7f0000000100)) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) getuid() ioctl$int_in(r0, 0x0, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:26:41 executing program 2: keyctl$setperm(0x5, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:26:41 executing program 0: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, 0x0, &(0x7f0000000100)) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) getuid() ioctl$int_in(r0, 0x5421, &(0x7f0000000200)) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:26:41 executing program 3: keyctl$setperm(0x5, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)) ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:26:41 executing program 3: keyctl$setperm(0x5, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)) ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:26:41 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x0, 0x0) 00:26:41 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x43d) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x1000001c3) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000400)={0x0, 0x8d9c, 0x10002}, 0x14) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x4f3d1d6e) splice(r0, 0x0, r2, 0x0, 0x10005, 0x700) 00:26:41 executing program 5: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, 0x0, &(0x7f0000000100)) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) getuid() ioctl$int_in(r0, 0x0, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:26:41 executing program 3: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, 0x0, &(0x7f0000000100)) ioctl$int_in(0xffffffffffffffff, 0x800040c004500a, &(0x7f0000000040)=0x80000002) getuid() ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:26:41 executing program 2: keyctl$setperm(0x5, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800040c004500a, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:26:42 executing program 0: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, 0x0, &(0x7f0000000100)) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) getuid() ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:26:42 executing program 0: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, 0x0, &(0x7f0000000100)) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) getuid() ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:26:42 executing program 0: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, 0x0, &(0x7f0000000100)) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) getuid() ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:26:42 executing program 0: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, 0x0, &(0x7f0000000100)) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) getuid() ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, 0x0, 0x0) 00:26:42 executing program 5: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, 0x0, &(0x7f0000000100)) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) getuid() ioctl$int_in(r0, 0x0, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:26:42 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x0, 0x0) 00:26:42 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x43d) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x1000001c3) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000400)={0x0, 0x8d9c, 0x10002}, 0x14) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x4f3d1d6e) splice(r0, 0x0, r2, 0x0, 0x10005, 0x900) 00:26:42 executing program 0: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, 0x0, &(0x7f0000000100)) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) getuid() ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, 0x0, 0x0) 00:26:42 executing program 2: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, 0x0, &(0x7f0000000100)) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) getuid() ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, 0x0, 0x0) 00:26:42 executing program 0: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, 0x0, &(0x7f0000000100)) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) getuid() ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, 0x0, 0x0) 00:26:44 executing program 3: keyctl$setperm(0x5, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x0, &(0x7f0000000040)=0x80000002) ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:26:44 executing program 2: keyctl$setperm(0x5, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800040c004500a, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:26:44 executing program 0: keyctl$setperm(0x5, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800040c004500a, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:26:44 executing program 5: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, 0x0, &(0x7f0000000100)) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) getuid() ioctl$int_in(r0, 0x5421, 0x0) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:26:44 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x0, 0x0) 00:26:44 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x43d) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x1000001c3) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000400)={0x0, 0x8d9c, 0x10002}, 0x14) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x4f3d1d6e) splice(r0, 0x0, r2, 0x0, 0x10005, 0xa00) 00:26:45 executing program 5: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, 0x0, &(0x7f0000000100)) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) getuid() ioctl$int_in(r0, 0x5421, 0x0) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:26:45 executing program 1: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, 0x0, &(0x7f0000000100)) ioctl$int_in(0xffffffffffffffff, 0x800040c004500a, &(0x7f0000000040)=0x80000002) getuid() ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:26:45 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x43d) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x1000001c3) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000400)={0x0, 0x8d9c, 0x10002}, 0x14) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x4f3d1d6e) splice(r0, 0x0, r2, 0x0, 0x10005, 0xe00) 00:26:45 executing program 0: keyctl$setperm(0x5, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800040c004500a, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:26:46 executing program 2: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, 0x0, 0x0) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) getuid() ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:26:46 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000000c0), 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000380)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @dev}, 0x14) syz_emit_ethernet(0x11, &(0x7f0000000100)={@remote, @dev, [], {@llc_tr={0x11, {@llc={0x0, 0x0, "c4"}}}}}, 0x0) 00:26:46 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000000c0), 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000380)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @dev}, 0x14) syz_emit_ethernet(0x11, &(0x7f0000000100)={@remote, @dev, [], {@llc_tr={0x11, {@llc={0x0, 0x0, "c4"}}}}}, 0x0) 00:26:46 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000000c0), 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000380)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @dev}, 0x14) syz_emit_ethernet(0x11, &(0x7f0000000100)={@remote, @dev, [], {@llc_tr={0x11, {@llc={0x0, 0x0, "c4"}}}}}, 0x0) 00:26:46 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000000c0), 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) syz_emit_ethernet(0x11, &(0x7f0000000100)={@remote, @dev, [], {@llc_tr={0x11, {@llc={0x0, 0x0, "c4"}}}}}, 0x0) 00:26:46 executing program 5: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, 0x0, &(0x7f0000000100)) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) getuid() ioctl$int_in(r0, 0x5421, 0x0) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:26:46 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000000c0), 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) syz_emit_ethernet(0x11, &(0x7f0000000100)={@remote, @dev, [], {@llc_tr={0x11, {@llc={0x0, 0x0, "c4"}}}}}, 0x0) 00:26:46 executing program 1: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, 0x0, &(0x7f0000000100)) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) getuid() ioctl$int_in(r0, 0x5421, 0x0) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:26:46 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x43d) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x1000001c3) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000400)={0x0, 0x8d9c, 0x10002}, 0x14) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x4f3d1d6e) splice(r0, 0x0, r2, 0x0, 0x10005, 0x1100) 00:26:46 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000000c0), 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) syz_emit_ethernet(0x11, &(0x7f0000000100)={@remote, @dev, [], {@llc_tr={0x11, {@llc={0x0, 0x0, "c4"}}}}}, 0x0) 00:26:47 executing program 0: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, 0x0, 0x0) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) getuid() ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:26:47 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000000c0), 0x4) bind$packet(r0, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) syz_emit_ethernet(0x11, &(0x7f0000000100)={@remote, @dev, [], {@llc_tr={0x11, {@llc={0x0, 0x0, "c4"}}}}}, 0x0) 00:26:49 executing program 2: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, 0x0, &(0x7f0000000100)) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) getuid() ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:26:49 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000000c0), 0x4) bind$packet(r0, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) syz_emit_ethernet(0x11, &(0x7f0000000100)={@remote, @dev, [], {@llc_tr={0x11, {@llc={0x0, 0x0, "c4"}}}}}, 0x0) 00:26:49 executing program 5: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, 0x0, &(0x7f0000000100)) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) getuid() ioctl$int_in(r0, 0x5421, &(0x7f0000000200)) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:26:49 executing program 1: keyctl$setperm(0x5, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:26:49 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x43d) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x1000001c3) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000400)={0x0, 0x8d9c, 0x10002}, 0x14) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x4f3d1d6e) splice(r0, 0x0, r2, 0x0, 0x10005, 0x2000) 00:26:49 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000000c0), 0x4) bind$packet(r0, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) syz_emit_ethernet(0x11, &(0x7f0000000100)={@remote, @dev, [], {@llc_tr={0x11, {@llc={0x0, 0x0, "c4"}}}}}, 0x0) 00:26:49 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000380)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @dev}, 0x14) syz_emit_ethernet(0x11, &(0x7f0000000100)={@remote, @dev, [], {@llc_tr={0x11, {@llc={0x0, 0x0, "c4"}}}}}, 0x0) 00:26:49 executing program 3: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, r0, 0x1, 0x0, 0x6, @dev}, 0x14) syz_emit_ethernet(0x11, &(0x7f0000000100)={@remote, @dev, [], {@llc_tr={0x11, {@llc={0x0, 0x0, "c4"}}}}}, 0x0) 00:26:49 executing program 3: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, r0, 0x1, 0x0, 0x6, @dev}, 0x14) syz_emit_ethernet(0x11, &(0x7f0000000100)={@remote, @dev, [], {@llc_tr={0x11, {@llc={0x0, 0x0, "c4"}}}}}, 0x0) 00:26:49 executing program 3: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, r0, 0x1, 0x0, 0x6, @dev}, 0x14) syz_emit_ethernet(0x11, &(0x7f0000000100)={@remote, @dev, [], {@llc_tr={0x11, {@llc={0x0, 0x0, "c4"}}}}}, 0x0) 00:26:50 executing program 0: keyctl$setperm(0x5, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:26:50 executing program 3: r0 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000380)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @dev}, 0x14) syz_emit_ethernet(0x11, &(0x7f0000000100)={@remote, @dev, [], {@llc_tr={0x11, {@llc={0x0, 0x0, "c4"}}}}}, 0x0) 00:26:52 executing program 2 (fault-call:6 fault-nth:0): pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 00:26:52 executing program 5: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, 0x0, &(0x7f0000000100)) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) getuid() ioctl$int_in(r0, 0x5421, &(0x7f0000000200)) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:26:52 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x43d) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x1000001c3) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000400)={0x0, 0x8d9c, 0x10002}, 0x14) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x4f3d1d6e) splice(r0, 0x0, r2, 0x0, 0x10005, 0x2400) 00:26:52 executing program 3: r0 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000380)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @dev}, 0x14) syz_emit_ethernet(0x11, &(0x7f0000000100)={@remote, @dev, [], {@llc_tr={0x11, {@llc={0x0, 0x0, "c4"}}}}}, 0x0) 00:26:52 executing program 1: keyctl$setperm(0x5, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:26:52 executing program 3: r0 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000380)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @dev}, 0x14) syz_emit_ethernet(0x11, &(0x7f0000000100)={@remote, @dev, [], {@llc_tr={0x11, {@llc={0x0, 0x0, "c4"}}}}}, 0x0) [ 355.195955][T12135] FAULT_INJECTION: forcing a failure. [ 355.195955][T12135] name failslab, interval 1, probability 0, space 0, times 0 [ 355.218090][T12135] CPU: 1 PID: 12135 Comm: syz-executor.2 Not tainted 5.1.0-rc1+ #34 [ 355.226118][T12135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 355.236187][T12135] Call Trace: [ 355.239507][T12135] dump_stack+0x172/0x1f0 [ 355.243879][T12135] should_fail.cold+0xa/0x15 [ 355.248497][T12135] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 355.254333][T12135] ? kasan_check_read+0x11/0x20 [ 355.259228][T12135] __should_failslab+0x121/0x190 [ 355.264193][T12135] should_failslab+0x9/0x14 [ 355.268701][T12135] kmem_cache_alloc+0x47/0x6f0 [ 355.273475][T12135] ? __lock_acquire+0x548/0x3fb0 [ 355.278426][T12135] dst_alloc+0x10e/0x200 [ 355.282686][T12135] rt_dst_alloc+0x83/0x3f0 [ 355.287112][T12135] ip_route_output_key_hash_rcu+0x97d/0x30e0 [ 355.293281][T12135] ? ip_route_input_noref+0x280/0x280 [ 355.298663][T12135] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 355.304907][T12135] ? kasan_check_read+0x11/0x20 [ 355.309762][T12135] ip_route_output_key_hash+0x212/0x380 [ 355.315317][T12135] ? ip_route_output_key_hash_rcu+0x30e0/0x30e0 [ 355.321564][T12135] ? udp_sendmsg+0x6c9/0x2820 [ 355.326255][T12135] ? lock_downgrade+0x880/0x880 [ 355.331196][T12135] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 355.337466][T12135] ip_route_output_flow+0x28/0xc0 [ 355.342493][T12135] udp_sendmsg+0x1aec/0x2820 [ 355.347092][T12135] ? find_held_lock+0x35/0x130 [ 355.351872][T12135] ? ip_reply_glue_bits+0xc0/0xc0 [ 355.356909][T12135] ? udp4_lib_lookup_skb+0x440/0x440 [ 355.362200][T12135] ? up_write+0x1c/0x150 [ 355.366442][T12135] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 355.372797][T12135] ? process_measurement+0x19a/0x1570 [ 355.378190][T12135] ? __lock_acquire+0x548/0x3fb0 [ 355.383128][T12135] ? __lock_acquire+0x548/0x3fb0 [ 355.388083][T12135] udp_sendpage+0x136/0x480 [ 355.392588][T12135] ? udp_sendpage+0x136/0x480 [ 355.397269][T12135] ? udp_sendmsg+0x2820/0x2820 [ 355.402047][T12135] ? udp_sendmsg+0x2820/0x2820 [ 355.406815][T12135] inet_sendpage+0x16b/0x630 [ 355.411421][T12135] kernel_sendpage+0x95/0xf0 [ 355.416018][T12135] ? inet_sendmsg+0x5d0/0x5d0 [ 355.420719][T12135] sock_sendpage+0x8b/0xc0 [ 355.425163][T12135] ? pipe_lock+0x6e/0x80 [ 355.429427][T12135] pipe_to_sendpage+0x299/0x370 [ 355.434285][T12135] ? kernel_sendpage+0xf0/0xf0 [ 355.439031][T12135] ? direct_splice_actor+0x1a0/0x1a0 [ 355.444302][T12135] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 355.450540][T12135] ? splice_from_pipe_next.part.0+0x255/0x2f0 [ 355.456606][T12135] __splice_from_pipe+0x395/0x7d0 [ 355.462232][T12135] ? direct_splice_actor+0x1a0/0x1a0 [ 355.467498][T12135] ? direct_splice_actor+0x1a0/0x1a0 [ 355.472819][T12135] splice_from_pipe+0x108/0x170 [ 355.477660][T12135] ? splice_shrink_spd+0xd0/0xd0 [ 355.482592][T12135] ? apparmor_file_permission+0x25/0x30 [ 355.488132][T12135] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 355.494368][T12135] ? security_file_permission+0x94/0x380 [ 355.499996][T12135] generic_splice_sendpage+0x3c/0x50 [ 355.505276][T12135] ? splice_from_pipe+0x170/0x170 [ 355.510280][T12135] do_splice+0x70a/0x13c0 [ 355.514593][T12135] ? opipe_prep.part.0+0x2d0/0x2d0 [ 355.519686][T12135] ? __fget_light+0x1a9/0x230 [ 355.524372][T12135] __ia32_sys_splice+0x2c4/0x330 [ 355.529333][T12135] do_fast_syscall_32+0x281/0xc98 [ 355.534383][T12135] entry_SYSENTER_compat+0x70/0x7f [ 355.539559][T12135] RIP: 0023:0xf7f27869 [ 355.543612][T12135] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 355.563375][T12135] RSP: 002b:00000000f5d020cc EFLAGS: 00000296 ORIG_RAX: 0000000000000139 [ 355.571791][T12135] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 355.579762][T12135] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000010005 [ 355.587711][T12135] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 00:26:52 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000380)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @dev}, 0x14) syz_emit_ethernet(0x11, &(0x7f0000000100)={@remote, @dev, [], {@llc_tr={0x11, {@llc={0x0, 0x0, "c4"}}}}}, 0x0) [ 355.595769][T12135] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 355.603833][T12135] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 00:26:52 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000380)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @dev}, 0x14) syz_emit_ethernet(0x11, &(0x7f0000000100)={@remote, @dev, [], {@llc_tr={0x11, {@llc={0x0, 0x0, "c4"}}}}}, 0x0) 00:26:52 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000380)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @dev}, 0x14) syz_emit_ethernet(0x11, &(0x7f0000000100)={@remote, @dev, [], {@llc_tr={0x11, {@llc={0x0, 0x0, "c4"}}}}}, 0x0) 00:26:52 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) bind$packet(r0, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) syz_emit_ethernet(0x11, &(0x7f0000000100)={@remote, @dev, [], {@llc_tr={0x11, {@llc={0x0, 0x0, "c4"}}}}}, 0x0) 00:26:53 executing program 0 (fault-call:6 fault-nth:0): perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, 0x0, &(0x7f0000000100)) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) getuid() ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:26:53 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) bind$packet(r0, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) syz_emit_ethernet(0x11, &(0x7f0000000100)={@remote, @dev, [], {@llc_tr={0x11, {@llc={0x0, 0x0, "c4"}}}}}, 0x0) 00:26:53 executing program 5: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, 0x0, &(0x7f0000000100)) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) getuid() ioctl$int_in(r0, 0x5421, &(0x7f0000000200)) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:26:53 executing program 2 (fault-call:6 fault-nth:1): pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 00:26:53 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x43d) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x1000001c3) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000400)={0x0, 0x8d9c, 0x10002}, 0x14) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x4f3d1d6e) splice(r0, 0x0, r2, 0x0, 0x10005, 0x3000) 00:26:53 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) bind$packet(r0, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) syz_emit_ethernet(0x11, &(0x7f0000000100)={@remote, @dev, [], {@llc_tr={0x11, {@llc={0x0, 0x0, "c4"}}}}}, 0x0) [ 356.188748][T12164] FAULT_INJECTION: forcing a failure. [ 356.188748][T12164] name failslab, interval 1, probability 0, space 0, times 0 [ 356.202867][T12164] CPU: 0 PID: 12164 Comm: syz-executor.0 Not tainted 5.1.0-rc1+ #34 [ 356.210874][T12164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 356.221350][T12165] FAULT_INJECTION: forcing a failure. [ 356.221350][T12165] name failslab, interval 1, probability 0, space 0, times 0 [ 356.221886][T12164] Call Trace: [ 356.237883][T12164] dump_stack+0x172/0x1f0 [ 356.242250][T12164] should_fail.cold+0xa/0x15 [ 356.246874][T12164] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 356.252706][T12164] ? ___might_sleep+0x163/0x280 [ 356.257580][T12164] __should_failslab+0x121/0x190 [ 356.262548][T12164] should_failslab+0x9/0x14 [ 356.267071][T12164] kmem_cache_alloc_trace+0x2d1/0x760 [ 356.272476][T12164] snd_pcm_oss_change_params_locked+0x1a7/0x3750 [ 356.278819][T12164] ? __mutex_lock+0x3cd/0x1310 [ 356.283585][T12164] ? aa_file_perm+0x432/0xeb0 [ 356.288259][T12164] ? retint_kernel+0x2d/0x2d [ 356.292936][T12164] ? __fget+0x35a/0x550 [ 356.297706][T12164] ? _snd_pcm_hw_param_set.constprop.0+0x590/0x590 [ 356.304216][T12164] ? mutex_trylock+0x1e0/0x1e0 [ 356.308982][T12164] ? lock_release+0x4c1/0xa00 [ 356.313755][T12164] ? lock_downgrade+0x880/0x880 [ 356.318616][T12164] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 356.324952][T12164] snd_pcm_oss_make_ready_locked+0xbc/0x130 [ 356.330847][T12164] snd_pcm_oss_write+0x42b/0x8f0 [ 356.335793][T12164] ? apparmor_file_permission+0x25/0x30 [ 356.341350][T12164] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 356.341377][T12164] __vfs_write+0x8d/0x110 [ 356.351918][T12164] ? snd_pcm_oss_ioctl_compat+0x30/0x30 [ 356.357488][T12164] vfs_write+0x20c/0x580 [ 356.362601][T12164] ksys_write+0xea/0x1f0 [ 356.362620][T12164] ? __ia32_sys_read+0xb0/0xb0 [ 356.362643][T12164] ? do_fast_syscall_32+0xd1/0xc98 [ 356.362661][T12164] ? entry_SYSENTER_compat+0x70/0x7f [ 356.362673][T12164] ? do_fast_syscall_32+0xd1/0xc98 [ 356.362693][T12164] __ia32_sys_write+0x71/0xb0 [ 356.391917][T12164] do_fast_syscall_32+0x281/0xc98 [ 356.396970][T12164] entry_SYSENTER_compat+0x70/0x7f [ 356.402086][T12164] RIP: 0023:0xf7f8c869 [ 356.406167][T12164] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 356.425785][T12164] RSP: 002b:00000000f5d880cc EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 356.434207][T12164] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000200000c0 [ 356.442534][T12164] RDX: 00000000fffffefd RSI: 0000000000000000 RDI: 0000000000000000 [ 356.450515][T12164] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 356.458494][T12164] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 356.466471][T12164] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 356.476684][T12165] CPU: 0 PID: 12165 Comm: syz-executor.2 Not tainted 5.1.0-rc1+ #34 [ 356.485035][T12165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 356.495110][T12165] Call Trace: [ 356.498444][T12165] dump_stack+0x172/0x1f0 [ 356.502805][T12165] should_fail.cold+0xa/0x15 [ 356.507429][T12165] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 356.513252][T12165] ? ___might_sleep+0x163/0x280 [ 356.518119][T12165] __should_failslab+0x121/0x190 [ 356.523082][T12165] should_failslab+0x9/0x14 [ 356.527608][T12165] kmem_cache_alloc_node+0x264/0x710 [ 356.532921][T12165] ? save_stack+0xa9/0xd0 [ 356.532943][T12165] __alloc_skb+0xd5/0x5e0 [ 356.532960][T12165] ? skb_trim+0x190/0x190 [ 356.545912][T12165] ? pipe_to_sendpage+0x299/0x370 [ 356.545926][T12165] ? __splice_from_pipe+0x395/0x7d0 [ 356.545938][T12165] ? splice_from_pipe+0x108/0x170 [ 356.545950][T12165] ? generic_splice_sendpage+0x3c/0x50 [ 356.545963][T12165] ? do_splice+0x70a/0x13c0 [ 356.545976][T12165] ? __ia32_sys_splice+0x2c4/0x330 [ 356.545995][T12165] ? do_fast_syscall_32+0x281/0xc98 [ 356.546021][T12165] alloc_skb_with_frags+0x93/0x580 [ 356.546039][T12165] ? rt_add_uncached_list+0x147/0x1a0 [ 356.546059][T12165] sock_alloc_send_pskb+0x72d/0x8a0 [ 356.546079][T12165] ? lockdep_hardirqs_on+0x418/0x5d0 [ 356.546094][T12165] ? trace_hardirqs_on+0x67/0x230 [ 356.546113][T12165] ? rt_add_uncached_list+0x147/0x1a0 [ 356.613330][T12165] ? sock_wmalloc+0x120/0x120 [ 356.618058][T12165] ? _raw_spin_unlock_bh+0x31/0x40 [ 356.623167][T12165] ? rt_add_uncached_list+0x147/0x1a0 [ 356.628544][T12165] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 356.634793][T12165] ? rt_set_nexthop.constprop.0+0x4ab/0x11c0 [ 356.640776][T12165] sock_alloc_send_skb+0x32/0x40 [ 356.645720][T12165] __ip_append_data.isra.0+0x19a4/0x2dd0 [ 356.651356][T12165] ? ip_reply_glue_bits+0xc0/0xc0 [ 356.656382][T12165] ? __lock_acquire+0x548/0x3fb0 [ 356.661320][T12165] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 356.667560][T12165] ? xfrm_lookup_with_ifid+0x579/0x1ce0 [ 356.673120][T12165] ? __ip_flush_pending_frames.isra.0+0x2d0/0x2d0 [ 356.679535][T12165] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 356.685779][T12165] ? ip_setup_cork+0x53b/0x870 [ 356.690539][T12165] ? ip_reply_glue_bits+0xc0/0xc0 [ 356.695557][T12165] ip_append_data.part.0+0xf2/0x170 [ 356.700762][T12165] ? ip_reply_glue_bits+0xc0/0xc0 [ 356.705796][T12165] ip_append_data+0x6e/0x90 [ 356.710301][T12165] udp_sendmsg+0x11b3/0x2820 [ 356.714899][T12165] ? find_held_lock+0x35/0x130 [ 356.719656][T12165] ? ip_reply_glue_bits+0xc0/0xc0 [ 356.724684][T12165] ? udp4_lib_lookup_skb+0x440/0x440 [ 356.729969][T12165] ? up_write+0x1c/0x150 [ 356.734209][T12165] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 356.740544][T12165] ? process_measurement+0x19a/0x1570 [ 356.745932][T12165] ? __lock_acquire+0x548/0x3fb0 [ 356.750869][T12165] ? __lock_acquire+0x548/0x3fb0 [ 356.755805][T12165] udp_sendpage+0x136/0x480 [ 356.760297][T12165] ? udp_sendpage+0x136/0x480 [ 356.764970][T12165] ? udp_sendmsg+0x2820/0x2820 [ 356.769740][T12165] ? udp_sendmsg+0x2820/0x2820 [ 356.774489][T12165] inet_sendpage+0x16b/0x630 [ 356.779070][T12165] kernel_sendpage+0x95/0xf0 [ 356.783661][T12165] ? inet_sendmsg+0x5d0/0x5d0 [ 356.788447][T12165] sock_sendpage+0x8b/0xc0 [ 356.792861][T12165] ? pipe_lock+0x6e/0x80 [ 356.797097][T12165] pipe_to_sendpage+0x299/0x370 [ 356.801962][T12165] ? kernel_sendpage+0xf0/0xf0 [ 356.806741][T12165] ? direct_splice_actor+0x1a0/0x1a0 [ 356.812730][T12165] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 356.818979][T12165] ? splice_from_pipe_next.part.0+0x255/0x2f0 [ 356.825056][T12165] __splice_from_pipe+0x395/0x7d0 [ 356.830078][T12165] ? direct_splice_actor+0x1a0/0x1a0 [ 356.835359][T12165] ? direct_splice_actor+0x1a0/0x1a0 [ 356.840628][T12165] splice_from_pipe+0x108/0x170 [ 356.845473][T12165] ? splice_shrink_spd+0xd0/0xd0 [ 356.850428][T12165] ? apparmor_file_permission+0x25/0x30 [ 356.856151][T12165] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 356.862398][T12165] ? security_file_permission+0x94/0x380 [ 356.868038][T12165] generic_splice_sendpage+0x3c/0x50 [ 356.873332][T12165] ? splice_from_pipe+0x170/0x170 [ 356.878524][T12165] do_splice+0x70a/0x13c0 [ 356.882856][T12165] ? opipe_prep.part.0+0x2d0/0x2d0 [ 356.887979][T12165] ? __fget_light+0x1a9/0x230 [ 356.892674][T12165] __ia32_sys_splice+0x2c4/0x330 [ 356.897619][T12165] do_fast_syscall_32+0x281/0xc98 [ 356.902643][T12165] entry_SYSENTER_compat+0x70/0x7f [ 356.907751][T12165] RIP: 0023:0xf7f27869 [ 356.911826][T12165] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 356.931428][T12165] RSP: 002b:00000000f5d020cc EFLAGS: 00000296 ORIG_RAX: 0000000000000139 [ 356.939832][T12165] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 356.947809][T12165] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000010005 [ 356.955792][T12165] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 356.963761][T12165] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 356.971725][T12165] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 00:26:55 executing program 1: keyctl$setperm(0x5, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:26:55 executing program 0 (fault-call:6 fault-nth:1): perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, 0x0, &(0x7f0000000100)) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) getuid() ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:26:55 executing program 5: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, 0x0, &(0x7f0000000100)) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) getuid() ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:26:55 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @dev}, 0x14) syz_emit_ethernet(0x11, &(0x7f0000000100)={@remote, @dev, [], {@llc_tr={0x11, {@llc={0x0, 0x0, "c4"}}}}}, 0x0) 00:26:55 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 00:26:55 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x43d) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x1000001c3) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000400)={0x0, 0x8d9c, 0x10002}, 0x14) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x4f3d1d6e) splice(r0, 0x0, r2, 0x0, 0x10005, 0x3f00) 00:26:55 executing program 5: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, 0x0, &(0x7f0000000100)) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) getuid() ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) [ 358.181383][T12179] FAULT_INJECTION: forcing a failure. [ 358.181383][T12179] name failslab, interval 1, probability 0, space 0, times 0 [ 358.250449][T12179] CPU: 1 PID: 12179 Comm: syz-executor.0 Not tainted 5.1.0-rc1+ #34 [ 358.258495][T12179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 358.268571][T12179] Call Trace: [ 358.271894][T12179] dump_stack+0x172/0x1f0 [ 358.276433][T12179] should_fail.cold+0xa/0x15 [ 358.281048][T12179] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 358.286882][T12179] ? ___might_sleep+0x163/0x280 [ 358.292011][T12179] __should_failslab+0x121/0x190 00:26:55 executing program 5: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, 0x0, &(0x7f0000000100)) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) getuid() ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) [ 358.296984][T12179] should_failslab+0x9/0x14 [ 358.301513][T12179] kmem_cache_alloc_trace+0x2d1/0x760 [ 358.306929][T12179] snd_pcm_oss_change_params_locked+0x1df/0x3750 [ 358.313470][T12179] ? __mutex_lock+0x3cd/0x1310 [ 358.318277][T12179] ? _snd_pcm_hw_param_set.constprop.0+0x590/0x590 [ 358.324895][T12179] ? mutex_trylock+0x1e0/0x1e0 [ 358.329681][T12179] ? find_held_lock+0x35/0x130 [ 358.334462][T12179] ? __fget+0x35a/0x550 [ 358.338633][T12179] ? lock_downgrade+0x880/0x880 [ 358.343491][T12179] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 358.349759][T12179] snd_pcm_oss_make_ready_locked+0xbc/0x130 [ 358.356465][T12179] snd_pcm_oss_write+0x42b/0x8f0 [ 358.361547][T12179] ? apparmor_file_permission+0x25/0x30 [ 358.367131][T12179] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 358.373403][T12179] __vfs_write+0x8d/0x110 [ 358.377841][T12179] ? snd_pcm_oss_ioctl_compat+0x30/0x30 [ 358.383406][T12179] vfs_write+0x20c/0x580 [ 358.387668][T12179] ksys_write+0xea/0x1f0 [ 358.391939][T12179] ? __ia32_sys_read+0xb0/0xb0 00:26:55 executing program 5: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, 0x0, &(0x7f0000000100)) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) getuid() ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, 0x0, 0x0) [ 358.396811][T12179] ? do_fast_syscall_32+0xd1/0xc98 [ 358.402023][T12179] ? entry_SYSENTER_compat+0x70/0x7f [ 358.407318][T12179] ? do_fast_syscall_32+0xd1/0xc98 [ 358.412452][T12179] __ia32_sys_write+0x71/0xb0 [ 358.417150][T12179] do_fast_syscall_32+0x281/0xc98 [ 358.422204][T12179] entry_SYSENTER_compat+0x70/0x7f [ 358.427341][T12179] RIP: 0023:0xf7f8c869 [ 358.431426][T12179] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 00:26:55 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @dev}, 0x14) syz_emit_ethernet(0x11, &(0x7f0000000100)={@remote, @dev, [], {@llc_tr={0x11, {@llc={0x0, 0x0, "c4"}}}}}, 0x0) 00:26:55 executing program 5: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, 0x0, &(0x7f0000000100)) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) getuid() ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, 0x0, 0x0) [ 358.451214][T12179] RSP: 002b:00000000f5d880cc EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 358.459652][T12179] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000200000c0 [ 358.467636][T12179] RDX: 00000000fffffefd RSI: 0000000000000000 RDI: 0000000000000000 [ 358.475634][T12179] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 358.483716][T12179] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 358.491807][T12179] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 00:26:55 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @dev}, 0x14) syz_emit_ethernet(0x11, &(0x7f0000000100)={@remote, @dev, [], {@llc_tr={0x11, {@llc={0x0, 0x0, "c4"}}}}}, 0x0) 00:26:58 executing program 5: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, 0x0, &(0x7f0000000100)) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) getuid() ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, 0x0, 0x0) 00:26:58 executing program 0 (fault-call:6 fault-nth:2): perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, 0x0, &(0x7f0000000100)) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) getuid() ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:26:58 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) bind$packet(r0, 0x0, 0x0) syz_emit_ethernet(0x11, &(0x7f0000000100)={@remote, @dev, [], {@llc_tr={0x11, {@llc={0x0, 0x0, "c4"}}}}}, 0x0) 00:26:58 executing program 1: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, 0x0, &(0x7f0000000100)) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) getuid() ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, 0x0, 0x0) 00:26:58 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x43d) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x1000001c3) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000400)={0x0, 0x8d9c, 0x10002}, 0x14) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x4f3d1d6e) splice(r0, 0x0, r2, 0x0, 0x10005, 0x4000) 00:26:58 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x3) [ 361.262660][T12217] FAULT_INJECTION: forcing a failure. [ 361.262660][T12217] name failslab, interval 1, probability 0, space 0, times 0 [ 361.298100][T12217] CPU: 1 PID: 12217 Comm: syz-executor.0 Not tainted 5.1.0-rc1+ #34 [ 361.306137][T12217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 361.316206][T12217] Call Trace: [ 361.319522][T12217] dump_stack+0x172/0x1f0 [ 361.323885][T12217] should_fail.cold+0xa/0x15 [ 361.328500][T12217] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 361.334435][T12217] ? ___might_sleep+0x163/0x280 [ 361.339304][T12217] __should_failslab+0x121/0x190 [ 361.344259][T12217] should_failslab+0x9/0x14 [ 361.344278][T12217] kmem_cache_alloc_trace+0x2d1/0x760 [ 361.344310][T12217] snd_pcm_oss_change_params_locked+0x217/0x3750 [ 361.344333][T12217] ? __mutex_lock+0x3cd/0x1310 [ 361.344353][T12217] ? _snd_pcm_hw_param_set.constprop.0+0x590/0x590 [ 361.344371][T12217] ? mutex_trylock+0x1e0/0x1e0 [ 361.354225][T12217] ? find_held_lock+0x35/0x130 [ 361.354243][T12217] ? __fget+0x35a/0x550 [ 361.354268][T12217] ? lock_downgrade+0x880/0x880 [ 361.354283][T12217] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 361.354304][T12217] snd_pcm_oss_make_ready_locked+0xbc/0x130 [ 361.354321][T12217] snd_pcm_oss_write+0x42b/0x8f0 [ 361.354342][T12217] ? apparmor_file_permission+0x25/0x30 [ 361.412899][T12217] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 361.419237][T12217] __vfs_write+0x8d/0x110 [ 361.423562][T12217] ? snd_pcm_oss_ioctl_compat+0x30/0x30 [ 361.429098][T12217] vfs_write+0x20c/0x580 [ 361.433330][T12217] ksys_write+0xea/0x1f0 [ 361.437690][T12217] ? __ia32_sys_read+0xb0/0xb0 [ 361.442434][T12217] ? do_fast_syscall_32+0xd1/0xc98 [ 361.447525][T12217] ? entry_SYSENTER_compat+0x70/0x7f [ 361.452787][T12217] ? do_fast_syscall_32+0xd1/0xc98 [ 361.457898][T12217] __ia32_sys_write+0x71/0xb0 [ 361.462569][T12217] do_fast_syscall_32+0x281/0xc98 [ 361.467579][T12217] entry_SYSENTER_compat+0x70/0x7f [ 361.472667][T12217] RIP: 0023:0xf7f8c869 [ 361.476725][T12217] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 361.496595][T12217] RSP: 002b:00000000f5d880cc EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 361.505005][T12217] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000200000c0 00:26:58 executing program 1 (fault-call:5 fault-nth:0): keyctl$setperm(0x5, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) [ 361.512997][T12217] RDX: 00000000fffffefd RSI: 0000000000000000 RDI: 0000000000000000 [ 361.520965][T12217] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 361.528953][T12217] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 361.536933][T12217] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 00:26:58 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) bind$packet(r0, 0x0, 0x0) syz_emit_ethernet(0x11, &(0x7f0000000100)={@remote, @dev, [], {@llc_tr={0x11, {@llc={0x0, 0x0, "c4"}}}}}, 0x0) [ 361.574508][T12233] FAULT_INJECTION: forcing a failure. [ 361.574508][T12233] name failslab, interval 1, probability 0, space 0, times 0 [ 361.609287][T12233] CPU: 1 PID: 12233 Comm: syz-executor.1 Not tainted 5.1.0-rc1+ #34 [ 361.617299][T12233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 361.617306][T12233] Call Trace: [ 361.617333][T12233] dump_stack+0x172/0x1f0 [ 361.617356][T12233] should_fail.cold+0xa/0x15 [ 361.617380][T12233] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 361.645425][T12233] ? ___might_sleep+0x163/0x280 [ 361.650288][T12233] __should_failslab+0x121/0x190 [ 361.650310][T12233] should_failslab+0x9/0x14 [ 361.650328][T12233] kmem_cache_alloc_trace+0x2d1/0x760 [ 361.650346][T12233] ? preempt_schedule+0x4b/0x60 00:26:58 executing program 0 (fault-call:6 fault-nth:3): perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, 0x0, &(0x7f0000000100)) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) getuid() ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) [ 361.650364][T12233] ? preempt_schedule_common+0x4f/0xe0 [ 361.675453][T12233] snd_pcm_oss_change_params_locked+0x1a7/0x3750 [ 361.681797][T12233] ? __mutex_lock+0xec4/0x1310 [ 361.686571][T12233] ? aa_file_perm+0x432/0xeb0 [ 361.686597][T12233] ? _snd_pcm_hw_param_set.constprop.0+0x590/0x590 [ 361.686610][T12233] ? mutex_trylock+0x1e0/0x1e0 [ 361.686623][T12233] ? find_held_lock+0x35/0x130 [ 361.686643][T12233] ? __fget+0x35a/0x550 [ 361.711534][T12233] ? lock_downgrade+0x880/0x880 [ 361.716412][T12233] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 361.722691][T12233] snd_pcm_oss_make_ready_locked+0xbc/0x130 [ 361.728618][T12233] snd_pcm_oss_write+0x42b/0x8f0 [ 361.733577][T12233] ? apparmor_file_permission+0x25/0x30 [ 361.739147][T12233] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 361.740815][T12239] FAULT_INJECTION: forcing a failure. [ 361.740815][T12239] name failslab, interval 1, probability 0, space 0, times 0 [ 361.745404][T12233] __vfs_write+0x8d/0x110 [ 361.745427][T12233] ? snd_pcm_oss_ioctl_compat+0x30/0x30 [ 361.745444][T12233] vfs_write+0x20c/0x580 [ 361.745462][T12233] ksys_write+0xea/0x1f0 [ 361.745479][T12233] ? __ia32_sys_read+0xb0/0xb0 [ 361.745498][T12233] ? do_fast_syscall_32+0xd1/0xc98 [ 361.745520][T12233] ? entry_SYSENTER_compat+0x70/0x7f [ 361.791505][T12233] ? do_fast_syscall_32+0xd1/0xc98 [ 361.796627][T12233] __ia32_sys_write+0x71/0xb0 [ 361.801307][T12233] do_fast_syscall_32+0x281/0xc98 [ 361.806337][T12233] entry_SYSENTER_compat+0x70/0x7f [ 361.811445][T12233] RIP: 0023:0xf7f9a869 [ 361.815511][T12233] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 361.835111][T12233] RSP: 002b:00000000f5d960cc EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 361.843522][T12233] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000200000c0 [ 361.851582][T12233] RDX: 00000000fffffefd RSI: 0000000000000000 RDI: 0000000000000000 [ 361.859557][T12233] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 361.867527][T12233] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 361.875501][T12233] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 361.883516][T12239] CPU: 0 PID: 12239 Comm: syz-executor.0 Not tainted 5.1.0-rc1+ #34 [ 361.891588][T12239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 361.901951][T12239] Call Trace: [ 361.905280][T12239] dump_stack+0x172/0x1f0 [ 361.909638][T12239] should_fail.cold+0xa/0x15 [ 361.914249][T12239] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 361.920076][T12239] ? ___might_sleep+0x163/0x280 [ 361.924951][T12239] __should_failslab+0x121/0x190 [ 361.929894][T12239] should_failslab+0x9/0x14 [ 361.934392][T12239] __kmalloc+0x2dc/0x740 [ 361.938635][T12239] ? constrain_params_by_rules+0x118/0x1180 [ 361.944527][T12239] constrain_params_by_rules+0x118/0x1180 [ 361.950294][T12239] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 361.955916][T12239] ? lockdep_hardirqs_on+0x418/0x5d0 [ 361.961233][T12239] ? trace_hardirqs_on_caller+0x6a/0x220 [ 361.966860][T12239] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 361.972308][T12239] ? snd_pcm_mmap_status_fault+0x240/0x240 [ 361.978104][T12239] ? retint_kernel+0x2d/0x2d [ 361.982684][T12239] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 361.988405][T12239] ? snd_interval_refine+0x42a/0x720 [ 361.993698][T12239] snd_pcm_hw_refine+0xbf9/0xf20 [ 361.998657][T12239] ? trace_hardirqs_on_caller+0x6a/0x220 [ 362.004301][T12239] ? constrain_params_by_rules+0x1180/0x1180 [ 362.010283][T12239] ? retint_kernel+0x2d/0x2d [ 362.014893][T12239] ? memcmp+0xf/0xc0 [ 362.018793][T12239] snd_pcm_oss_change_params_locked+0x6c2/0x3750 [ 362.025125][T12239] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 362.030589][T12239] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 362.036326][T12239] ? lockdep_hardirqs_on+0x418/0x5d0 [ 362.041616][T12239] ? _snd_pcm_hw_param_set.constprop.0+0x590/0x590 [ 362.048134][T12239] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 362.053636][T12239] snd_pcm_oss_make_ready_locked+0xbc/0x130 [ 362.059530][T12239] snd_pcm_oss_write+0x42b/0x8f0 [ 362.065649][T12239] __vfs_write+0x8d/0x110 [ 362.069983][T12239] ? snd_pcm_oss_ioctl_compat+0x30/0x30 [ 362.075521][T12239] vfs_write+0x20c/0x580 [ 362.079839][T12239] ksys_write+0xea/0x1f0 [ 362.084254][T12239] ? __ia32_sys_read+0xb0/0xb0 [ 362.090939][T12239] __ia32_sys_write+0x71/0xb0 [ 362.095701][T12239] ? do_fast_syscall_32+0x106/0xc98 [ 362.100907][T12239] do_fast_syscall_32+0x281/0xc98 [ 362.105959][T12239] entry_SYSENTER_compat+0x70/0x7f [ 362.111452][T12239] RIP: 0023:0xf7f8c869 [ 362.115528][T12239] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 362.135133][T12239] RSP: 002b:00000000f5d880cc EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 362.143542][T12239] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000200000c0 [ 362.151524][T12239] RDX: 00000000fffffefd RSI: 0000000000000000 RDI: 0000000000000000 [ 362.159770][T12239] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 362.167755][T12239] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 00:26:59 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x43d) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x1000001c3) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000400)={0x0, 0x8d9c, 0x10002}, 0x14) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x4f3d1d6e) splice(r0, 0x0, r2, 0x0, 0x10005, 0x4002) 00:26:59 executing program 1 (fault-call:5 fault-nth:1): keyctl$setperm(0x5, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) [ 362.175745][T12239] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 00:26:59 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) bind$packet(r0, 0x0, 0x0) syz_emit_ethernet(0x11, &(0x7f0000000100)={@remote, @dev, [], {@llc_tr={0x11, {@llc={0x0, 0x0, "c4"}}}}}, 0x0) 00:26:59 executing program 0 (fault-call:6 fault-nth:4): perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, 0x0, &(0x7f0000000100)) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) getuid() ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:26:59 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0xc) [ 362.255480][T12249] FAULT_INJECTION: forcing a failure. [ 362.255480][T12249] name failslab, interval 1, probability 0, space 0, times 0 [ 362.320081][T12257] FAULT_INJECTION: forcing a failure. [ 362.320081][T12257] name failslab, interval 1, probability 0, space 0, times 0 [ 362.321081][T12249] CPU: 0 PID: 12249 Comm: syz-executor.1 Not tainted 5.1.0-rc1+ #34 [ 362.340690][T12249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 362.350753][T12249] Call Trace: [ 362.354066][T12249] dump_stack+0x172/0x1f0 [ 362.358405][T12249] should_fail.cold+0xa/0x15 [ 362.362994][T12249] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 362.368803][T12249] ? ___might_sleep+0x163/0x280 [ 362.373655][T12249] __should_failslab+0x121/0x190 [ 362.378599][T12249] should_failslab+0x9/0x14 [ 362.383117][T12249] kmem_cache_alloc_trace+0x2d1/0x760 [ 362.388499][T12249] snd_pcm_oss_change_params_locked+0x1df/0x3750 [ 362.394846][T12249] ? __mutex_lock+0x3cd/0x1310 [ 362.399619][T12249] ? _snd_pcm_hw_param_set.constprop.0+0x590/0x590 [ 362.406119][T12249] ? mutex_trylock+0x1e0/0x1e0 [ 362.410879][T12249] ? retint_kernel+0x2d/0x2d [ 362.415513][T12249] ? snd_pcm_oss_write+0x174/0x8f0 [ 362.420645][T12249] snd_pcm_oss_make_ready_locked+0xbc/0x130 [ 362.426649][T12249] snd_pcm_oss_write+0x42b/0x8f0 [ 362.431607][T12249] ? apparmor_file_permission+0x25/0x30 [ 362.437160][T12249] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 362.443408][T12249] __vfs_write+0x8d/0x110 [ 362.447739][T12249] ? snd_pcm_oss_ioctl_compat+0x30/0x30 [ 362.453284][T12249] vfs_write+0x20c/0x580 [ 362.457537][T12249] ksys_write+0xea/0x1f0 [ 362.461776][T12249] ? __ia32_sys_read+0xb0/0xb0 [ 362.466540][T12249] ? do_fast_syscall_32+0xd1/0xc98 [ 362.472082][T12249] ? entry_SYSENTER_compat+0x70/0x7f [ 362.477380][T12249] ? do_fast_syscall_32+0xd1/0xc98 [ 362.482505][T12249] __ia32_sys_write+0x71/0xb0 [ 362.487198][T12249] do_fast_syscall_32+0x281/0xc98 [ 362.492259][T12249] entry_SYSENTER_compat+0x70/0x7f [ 362.497376][T12249] RIP: 0023:0xf7f9a869 [ 362.501459][T12249] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 362.521068][T12249] RSP: 002b:00000000f5d960cc EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 362.529478][T12249] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000200000c0 [ 362.537546][T12249] RDX: 00000000fffffefd RSI: 0000000000000000 RDI: 0000000000000000 [ 362.545514][T12249] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 362.553479][T12249] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 362.561454][T12249] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 362.571128][T12257] CPU: 1 PID: 12257 Comm: syz-executor.0 Not tainted 5.1.0-rc1+ #34 [ 362.579141][T12257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 362.589382][T12257] Call Trace: [ 362.592957][T12257] dump_stack+0x172/0x1f0 [ 362.597399][T12257] should_fail.cold+0xa/0x15 [ 362.602014][T12257] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 362.607847][T12257] ? ___might_sleep+0x163/0x280 [ 362.612731][T12257] __should_failslab+0x121/0x190 00:26:59 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) bind$packet(r0, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) syz_emit_ethernet(0x11, &(0x7f0000000100)={@remote, @dev, [], {@llc_tr={0x11, {@llc={0x0, 0x0, "c4"}}}}}, 0x0) [ 362.617695][T12257] should_failslab+0x9/0x14 [ 362.622424][T12257] kmem_cache_alloc_trace+0x2d1/0x760 [ 362.627825][T12257] ? memset+0x32/0x40 [ 362.631882][T12257] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 362.638132][T12257] ? _snd_pcm_hw_param_min+0x29d/0x560 [ 362.643580][T12257] snd_pcm_oss_change_params_locked+0x75c/0x3750 [ 362.649939][T12257] ? __mutex_lock+0x3cd/0x1310 [ 362.654692][T12257] ? _snd_pcm_hw_param_set.constprop.0+0x590/0x590 [ 362.661202][T12257] ? mutex_trylock+0x1e0/0x1e0 [ 362.665959][T12257] ? find_held_lock+0x35/0x130 [ 362.670720][T12257] ? lock_downgrade+0x880/0x880 [ 362.675646][T12257] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 362.681905][T12257] snd_pcm_oss_make_ready_locked+0xbc/0x130 [ 362.687978][T12257] snd_pcm_oss_write+0x42b/0x8f0 [ 362.693014][T12257] ? apparmor_file_permission+0x25/0x30 [ 362.698554][T12257] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 362.705423][T12257] __vfs_write+0x8d/0x110 [ 362.710175][T12257] ? snd_pcm_oss_ioctl_compat+0x30/0x30 [ 362.716253][T12257] vfs_write+0x20c/0x580 [ 362.720492][T12257] ksys_write+0xea/0x1f0 [ 362.724735][T12257] ? __ia32_sys_read+0xb0/0xb0 [ 362.729492][T12257] ? do_fast_syscall_32+0xd1/0xc98 [ 362.734677][T12257] ? entry_SYSENTER_compat+0x70/0x7f [ 362.739970][T12257] ? do_fast_syscall_32+0xd1/0xc98 [ 362.745070][T12257] __ia32_sys_write+0x71/0xb0 [ 362.750167][T12257] do_fast_syscall_32+0x281/0xc98 [ 362.755179][T12257] entry_SYSENTER_compat+0x70/0x7f [ 362.760269][T12257] RIP: 0023:0xf7f8c869 [ 362.764420][T12257] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 362.784228][T12257] RSP: 002b:00000000f5d880cc EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 362.792626][T12257] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000200000c0 [ 362.800579][T12257] RDX: 00000000fffffefd RSI: 0000000000000000 RDI: 0000000000000000 [ 362.808543][T12257] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 00:26:59 executing program 1 (fault-call:5 fault-nth:2): keyctl$setperm(0x5, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) [ 362.816518][T12257] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 362.824472][T12257] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 00:26:59 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) bind$packet(r0, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) syz_emit_ethernet(0x11, &(0x7f0000000100)={@remote, @dev, [], {@llc_tr={0x11, {@llc={0x0, 0x0, "c4"}}}}}, 0x0) [ 362.894392][T12267] FAULT_INJECTION: forcing a failure. [ 362.894392][T12267] name failslab, interval 1, probability 0, space 0, times 0 [ 362.910204][T12267] CPU: 1 PID: 12267 Comm: syz-executor.1 Not tainted 5.1.0-rc1+ #34 [ 362.918237][T12267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 362.928331][T12267] Call Trace: [ 362.931651][T12267] dump_stack+0x172/0x1f0 [ 362.936025][T12267] should_fail.cold+0xa/0x15 [ 362.940623][T12267] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 362.946423][T12267] ? ___might_sleep+0x163/0x280 [ 362.951282][T12267] __should_failslab+0x121/0x190 [ 362.956219][T12267] should_failslab+0x9/0x14 [ 362.960701][T12267] kmem_cache_alloc_trace+0x2d1/0x760 [ 362.966094][T12267] snd_pcm_oss_change_params_locked+0x217/0x3750 [ 362.972424][T12267] ? __mutex_lock+0x3cd/0x1310 [ 362.977258][T12267] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 362.982716][T12267] ? lockdep_hardirqs_on+0x418/0x5d0 [ 362.988003][T12267] ? _snd_pcm_hw_param_set.constprop.0+0x590/0x590 [ 362.994503][T12267] ? mutex_trylock+0x1e0/0x1e0 [ 362.999247][T12267] ? find_held_lock+0x35/0x130 [ 363.003991][T12267] ? __fget+0x35a/0x550 [ 363.008131][T12267] ? lock_downgrade+0x880/0x880 [ 363.012965][T12267] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 363.019199][T12267] snd_pcm_oss_make_ready_locked+0xbc/0x130 [ 363.025075][T12267] snd_pcm_oss_write+0x42b/0x8f0 [ 363.030014][T12267] ? apparmor_file_permission+0x25/0x30 [ 363.035538][T12267] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 363.041781][T12267] __vfs_write+0x8d/0x110 [ 363.046146][T12267] ? snd_pcm_oss_ioctl_compat+0x30/0x30 [ 363.051685][T12267] vfs_write+0x20c/0x580 [ 363.055909][T12267] ksys_write+0xea/0x1f0 [ 363.060134][T12267] ? __ia32_sys_read+0xb0/0xb0 [ 363.064909][T12267] ? do_fast_syscall_32+0xd1/0xc98 [ 363.070009][T12267] ? entry_SYSENTER_compat+0x70/0x7f [ 363.075274][T12267] ? do_fast_syscall_32+0xd1/0xc98 [ 363.080388][T12267] __ia32_sys_write+0x71/0xb0 [ 363.085069][T12267] do_fast_syscall_32+0x281/0xc98 [ 363.094850][T12267] entry_SYSENTER_compat+0x70/0x7f [ 363.099942][T12267] RIP: 0023:0xf7f9a869 [ 363.103991][T12267] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 363.123764][T12267] RSP: 002b:00000000f5d960cc EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 363.132163][T12267] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000200000c0 00:27:00 executing program 1 (fault-call:5 fault-nth:3): keyctl$setperm(0x5, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) [ 363.140115][T12267] RDX: 00000000fffffefd RSI: 0000000000000000 RDI: 0000000000000000 [ 363.148087][T12267] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 363.156392][T12267] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 363.164814][T12267] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 00:27:00 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) bind$packet(r0, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) syz_emit_ethernet(0x11, &(0x7f0000000100)={@remote, @dev, [], {@llc_tr={0x11, {@llc={0x0, 0x0, "c4"}}}}}, 0x0) [ 363.241928][T12272] FAULT_INJECTION: forcing a failure. [ 363.241928][T12272] name failslab, interval 1, probability 0, space 0, times 0 [ 363.255542][T12272] CPU: 1 PID: 12272 Comm: syz-executor.1 Not tainted 5.1.0-rc1+ #34 [ 363.263549][T12272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 363.273603][T12272] Call Trace: [ 363.273634][T12272] dump_stack+0x172/0x1f0 [ 363.273663][T12272] should_fail.cold+0xa/0x15 [ 363.273680][T12272] ? fault_create_debugfs_attr+0x1e0/0x1e0 00:27:00 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x43d) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x1000001c3) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000400)={0x0, 0x8d9c, 0x10002}, 0x14) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x4f3d1d6e) splice(r0, 0x0, r2, 0x0, 0x10005, 0x6000) [ 363.273701][T12272] ? ___might_sleep+0x163/0x280 [ 363.273724][T12272] __should_failslab+0x121/0x190 [ 363.301545][T12272] should_failslab+0x9/0x14 [ 363.306066][T12272] __kmalloc+0x2dc/0x740 [ 363.310421][T12272] ? constrain_params_by_rules+0x118/0x1180 [ 363.316316][T12272] constrain_params_by_rules+0x118/0x1180 [ 363.316338][T12272] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 363.316359][T12272] ? retint_kernel+0x2d/0x2d [ 363.332115][T12272] ? snd_pcm_mmap_status_fault+0x240/0x240 [ 363.332143][T12272] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 363.343394][T12272] ? retint_kernel+0x2d/0x2d [ 363.349587][T12272] snd_pcm_hw_refine+0xbf9/0xf20 [ 363.354551][T12272] ? retint_kernel+0x2d/0x2d [ 363.359184][T12272] ? constrain_params_by_rules+0x1180/0x1180 [ 363.365193][T12272] ? retint_kernel+0x2d/0x2d [ 363.369833][T12272] snd_pcm_oss_change_params_locked+0x6c2/0x3750 [ 363.376178][T12272] ? __mutex_lock+0x3cd/0x1310 [ 363.380941][T12272] ? _snd_pcm_hw_param_set.constprop.0+0x590/0x590 [ 363.387453][T12272] ? mutex_trylock+0x1e0/0x1e0 [ 363.392215][T12272] ? find_held_lock+0x35/0x130 [ 363.396968][T12272] ? lockdep_hardirqs_on+0x418/0x5d0 [ 363.402236][T12272] ? retint_kernel+0x2d/0x2d [ 363.406834][T12272] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 363.412511][T12272] snd_pcm_oss_make_ready_locked+0xbc/0x130 [ 363.418398][T12272] snd_pcm_oss_write+0x42b/0x8f0 [ 363.423327][T12272] ? snd_pcm_oss_ioctl_compat+0x30/0x30 [ 363.428877][T12272] __vfs_write+0x8d/0x110 [ 363.433214][T12272] ? snd_pcm_oss_ioctl_compat+0x30/0x30 [ 363.438755][T12272] vfs_write+0x20c/0x580 [ 363.442981][T12272] ksys_write+0xea/0x1f0 [ 363.447205][T12272] ? __ia32_sys_read+0xb0/0xb0 [ 363.451968][T12272] ? do_fast_syscall_32+0xd1/0xc98 [ 363.457066][T12272] ? entry_SYSENTER_compat+0x70/0x7f [ 363.462346][T12272] ? do_fast_syscall_32+0xd1/0xc98 [ 363.467453][T12272] __ia32_sys_write+0x71/0xb0 [ 363.472118][T12272] do_fast_syscall_32+0x281/0xc98 [ 363.477134][T12272] entry_SYSENTER_compat+0x70/0x7f [ 363.482232][T12272] RIP: 0023:0xf7f9a869 [ 363.486293][T12272] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 363.505906][T12272] RSP: 002b:00000000f5d960cc EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 363.514319][T12272] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000200000c0 [ 363.522278][T12272] RDX: 00000000fffffefd RSI: 0000000000000000 RDI: 0000000000000000 [ 363.530229][T12272] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 00:27:00 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x11) 00:27:00 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000380)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @dev}, 0x14) syz_emit_ethernet(0x0, 0x0, 0x0) [ 363.538181][T12272] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 363.546149][T12272] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 00:27:00 executing program 1 (fault-call:5 fault-nth:4): keyctl$setperm(0x5, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) [ 363.662999][T12292] FAULT_INJECTION: forcing a failure. [ 363.662999][T12292] name failslab, interval 1, probability 0, space 0, times 0 [ 363.676372][T12292] CPU: 0 PID: 12292 Comm: syz-executor.1 Not tainted 5.1.0-rc1+ #34 [ 363.684362][T12292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 363.694430][T12292] Call Trace: [ 363.697740][T12292] dump_stack+0x172/0x1f0 [ 363.702076][T12292] should_fail.cold+0xa/0x15 [ 363.706680][T12292] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 363.712478][T12292] ? ___might_sleep+0x163/0x280 [ 363.717343][T12292] __should_failslab+0x121/0x190 [ 363.722271][T12292] should_failslab+0x9/0x14 [ 363.726786][T12292] kmem_cache_alloc_trace+0x2d1/0x760 [ 363.732155][T12292] ? snd_pcm_oss_change_params_locked+0x4ab/0x3750 [ 363.738650][T12292] snd_pcm_oss_change_params_locked+0x75c/0x3750 [ 363.744981][T12292] ? __mutex_lock+0x3cd/0x1310 [ 363.749747][T12292] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 363.755224][T12292] ? _snd_pcm_hw_param_set.constprop.0+0x590/0x590 [ 363.761724][T12292] ? mutex_trylock+0x1e0/0x1e0 [ 363.766490][T12292] ? retint_kernel+0x2d/0x2d [ 363.771074][T12292] snd_pcm_oss_make_ready_locked+0xbc/0x130 [ 363.777048][T12292] snd_pcm_oss_write+0x42b/0x8f0 [ 363.781971][T12292] ? snd_pcm_oss_ioctl_compat+0x30/0x30 [ 363.787512][T12292] __vfs_write+0x8d/0x110 [ 363.791849][T12292] ? snd_pcm_oss_ioctl_compat+0x30/0x30 [ 363.797400][T12292] vfs_write+0x20c/0x580 [ 363.801643][T12292] ksys_write+0xea/0x1f0 [ 363.805886][T12292] ? __ia32_sys_read+0xb0/0xb0 [ 363.810651][T12292] ? do_fast_syscall_32+0xd1/0xc98 [ 363.815780][T12292] ? entry_SYSENTER_compat+0x70/0x7f [ 363.821068][T12292] ? do_fast_syscall_32+0xd1/0xc98 [ 363.826195][T12292] __ia32_sys_write+0x71/0xb0 [ 363.830991][T12292] do_fast_syscall_32+0x281/0xc98 [ 363.836033][T12292] entry_SYSENTER_compat+0x70/0x7f [ 363.841155][T12292] RIP: 0023:0xf7f9a869 00:27:00 executing program 5 (fault-call:6 fault-nth:0): perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, 0x0, &(0x7f0000000100)) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) getuid() ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) [ 363.845231][T12292] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 363.864847][T12292] RSP: 002b:00000000f5d960cc EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 363.865098][T12296] FAULT_INJECTION: forcing a failure. [ 363.865098][T12296] name failslab, interval 1, probability 0, space 0, times 0 [ 363.873272][T12292] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000200000c0 [ 363.873281][T12292] RDX: 00000000fffffefd RSI: 0000000000000000 RDI: 0000000000000000 [ 363.873288][T12292] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 363.873294][T12292] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 363.873301][T12292] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 363.931216][T12296] CPU: 1 PID: 12296 Comm: syz-executor.5 Not tainted 5.1.0-rc1+ #34 [ 363.939313][T12296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 363.949374][T12296] Call Trace: [ 363.952674][T12296] dump_stack+0x172/0x1f0 [ 363.957011][T12296] should_fail.cold+0xa/0x15 [ 363.961608][T12296] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 363.967507][T12296] ? ___might_sleep+0x163/0x280 [ 363.972371][T12296] __should_failslab+0x121/0x190 [ 363.977313][T12296] should_failslab+0x9/0x14 [ 363.981818][T12296] kmem_cache_alloc_trace+0x2d1/0x760 [ 363.987205][T12296] snd_pcm_oss_change_params_locked+0x1a7/0x3750 [ 363.993637][T12296] ? __mutex_lock+0x3cd/0x1310 [ 363.998402][T12296] ? aa_file_perm+0x432/0xeb0 [ 364.003094][T12296] ? _snd_pcm_hw_param_set.constprop.0+0x590/0x590 [ 364.009621][T12296] ? mutex_trylock+0x1e0/0x1e0 [ 364.014479][T12296] ? find_held_lock+0x35/0x130 [ 364.019292][T12296] ? __fget+0x35a/0x550 [ 364.023467][T12296] ? lock_downgrade+0x880/0x880 [ 364.028326][T12296] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 364.034606][T12296] snd_pcm_oss_make_ready_locked+0xbc/0x130 [ 364.040503][T12296] snd_pcm_oss_write+0x42b/0x8f0 [ 364.045446][T12296] ? apparmor_file_permission+0x25/0x30 [ 364.051915][T12296] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 364.058156][T12296] __vfs_write+0x8d/0x110 [ 364.062472][T12296] ? snd_pcm_oss_ioctl_compat+0x30/0x30 [ 364.067999][T12296] vfs_write+0x20c/0x580 [ 364.072236][T12296] ksys_write+0xea/0x1f0 [ 364.076459][T12296] ? __ia32_sys_read+0xb0/0xb0 [ 364.081207][T12296] ? do_fast_syscall_32+0xd1/0xc98 [ 364.089843][T12296] ? entry_SYSENTER_compat+0x70/0x7f [ 364.095124][T12296] ? do_fast_syscall_32+0xd1/0xc98 [ 364.100224][T12296] __ia32_sys_write+0x71/0xb0 [ 364.105924][T12296] do_fast_syscall_32+0x281/0xc98 [ 364.110936][T12296] entry_SYSENTER_compat+0x70/0x7f [ 364.116053][T12296] RIP: 0023:0xf7fdf869 [ 364.120122][T12296] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 364.139986][T12296] RSP: 002b:00000000f5ddb0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 364.148397][T12296] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000200000c0 [ 364.156795][T12296] RDX: 00000000fffffefd RSI: 0000000000000000 RDI: 0000000000000000 [ 364.164756][T12296] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 364.172722][T12296] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 364.180680][T12296] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 00:27:02 executing program 0 (fault-call:6 fault-nth:5): perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, 0x0, &(0x7f0000000100)) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) getuid() ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:27:02 executing program 5 (fault-call:6 fault-nth:1): perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, 0x0, &(0x7f0000000100)) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) getuid() ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:27:02 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000380)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @dev}, 0x14) syz_emit_ethernet(0x0, 0x0, 0x0) 00:27:02 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x43d) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x1000001c3) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000400)={0x0, 0x8d9c, 0x10002}, 0x14) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x4f3d1d6e) splice(r0, 0x0, r2, 0x0, 0x10005, 0xb400) 00:27:02 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x70) [ 365.368805][T12313] FAULT_INJECTION: forcing a failure. [ 365.368805][T12313] name failslab, interval 1, probability 0, space 0, times 0 [ 365.389115][T12313] CPU: 0 PID: 12313 Comm: syz-executor.5 Not tainted 5.1.0-rc1+ #34 [ 365.397142][T12313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 365.407382][T12313] Call Trace: [ 365.410693][T12313] dump_stack+0x172/0x1f0 00:27:02 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000380)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @dev}, 0x14) syz_emit_ethernet(0x0, 0x0, 0x0) [ 365.415041][T12313] should_fail.cold+0xa/0x15 [ 365.419663][T12313] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 365.425498][T12313] ? ___might_sleep+0x163/0x280 [ 365.430361][T12313] __should_failslab+0x121/0x190 [ 365.430381][T12313] should_failslab+0x9/0x14 [ 365.430402][T12313] kmem_cache_alloc_trace+0x2d1/0x760 [ 365.445204][T12313] snd_pcm_oss_change_params_locked+0x1df/0x3750 [ 365.445229][T12313] ? __mutex_lock+0x3cd/0x1310 [ 365.445252][T12313] ? finish_task_switch+0x118/0x780 [ 365.461524][T12313] ? _snd_pcm_hw_param_set.constprop.0+0x590/0x590 [ 365.468569][T12313] ? mutex_trylock+0x1e0/0x1e0 [ 365.469697][T12321] FAULT_INJECTION: forcing a failure. [ 365.469697][T12321] name failslab, interval 1, probability 0, space 0, times 0 [ 365.473345][T12313] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 365.473360][T12313] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 365.473377][T12313] ? lockdep_hardirqs_on+0x418/0x5d0 [ 365.473393][T12313] ? retint_kernel+0x2d/0x2d [ 365.473408][T12313] ? trace_hardirqs_on_caller+0x6a/0x220 [ 365.473425][T12313] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 365.473448][T12313] snd_pcm_oss_make_ready_locked+0xbc/0x130 [ 365.473466][T12313] snd_pcm_oss_write+0x42b/0x8f0 [ 365.473488][T12313] ? snd_pcm_oss_ioctl_compat+0x30/0x30 [ 365.534194][T12313] __vfs_write+0x8d/0x110 [ 365.538532][T12313] ? snd_pcm_oss_ioctl_compat+0x30/0x30 [ 365.544075][T12313] vfs_write+0x20c/0x580 [ 365.548319][T12313] ksys_write+0xea/0x1f0 [ 365.552562][T12313] ? __ia32_sys_read+0xb0/0xb0 [ 365.557322][T12313] ? do_fast_syscall_32+0xd1/0xc98 [ 365.562430][T12313] ? entry_SYSENTER_compat+0x70/0x7f [ 365.567709][T12313] ? do_fast_syscall_32+0xd1/0xc98 [ 365.572823][T12313] __ia32_sys_write+0x71/0xb0 [ 365.577497][T12313] do_fast_syscall_32+0x281/0xc98 [ 365.582526][T12313] entry_SYSENTER_compat+0x70/0x7f [ 365.587639][T12313] RIP: 0023:0xf7fdf869 [ 365.591705][T12313] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 365.611312][T12313] RSP: 002b:00000000f5ddb0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 365.619827][T12313] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000200000c0 [ 365.627815][T12313] RDX: 00000000fffffefd RSI: 0000000000000000 RDI: 0000000000000000 [ 365.635803][T12313] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 365.643772][T12313] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 365.651739][T12313] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 365.659733][T12321] CPU: 1 PID: 12321 Comm: syz-executor.0 Not tainted 5.1.0-rc1+ #34 [ 365.667808][T12321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 365.677960][T12321] Call Trace: [ 365.681267][T12321] dump_stack+0x172/0x1f0 [ 365.685629][T12321] should_fail.cold+0xa/0x15 [ 365.690247][T12321] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 365.696066][T12321] ? ___might_sleep+0x163/0x280 [ 365.696090][T12321] __should_failslab+0x121/0x190 [ 365.696109][T12321] should_failslab+0x9/0x14 [ 365.696124][T12321] __kmalloc+0x2dc/0x740 [ 365.696146][T12321] ? __save_stack_trace+0x99/0x100 [ 365.705924][T12321] ? constrain_params_by_rules+0x118/0x1180 [ 365.705943][T12321] constrain_params_by_rules+0x118/0x1180 [ 365.705970][T12321] ? save_stack+0xa9/0xd0 [ 365.705991][T12321] ? save_stack+0x45/0xd0 [ 365.737747][T12324] FAULT_INJECTION: forcing a failure. [ 365.737747][T12324] name failslab, interval 1, probability 0, space 0, times 0 [ 365.740116][T12321] ? kmem_cache_alloc_trace+0x151/0x760 [ 365.740139][T12321] ? snd_pcm_oss_change_params_locked+0x75c/0x3750 [ 365.740163][T12321] ? snd_pcm_mmap_status_fault+0x240/0x240 [ 365.770555][T12321] ? vfs_write+0x20c/0x580 [ 365.775167][T12321] ? ksys_write+0xea/0x1f0 [ 365.779761][T12321] ? __ia32_sys_write+0x71/0xb0 [ 365.784627][T12321] ? do_fast_syscall_32+0x281/0xc98 [ 365.789828][T12321] ? entry_SYSENTER_compat+0x70/0x7f [ 365.795123][T12321] ? __lock_acquire+0x548/0x3fb0 [ 365.800065][T12321] ? is_bpf_text_address+0xac/0x170 [ 365.805277][T12321] ? fs_reclaim_acquire.part.0+0x30/0x30 [ 365.810909][T12321] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 365.817155][T12321] ? snd_interval_refine+0x42a/0x720 [ 365.822450][T12321] snd_pcm_hw_refine+0xbf9/0xf20 [ 365.827398][T12321] ? constrain_params_by_rules+0x1180/0x1180 [ 365.833402][T12321] ? snd_interval_refine+0x42a/0x720 [ 365.838699][T12321] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 365.844953][T12321] ? _snd_pcm_hw_param_set.constprop.0+0x282/0x590 [ 365.851459][T12321] ? snd_pcm_oss_change_params_locked+0x75c/0x3750 [ 365.857964][T12321] ? rcu_read_lock_sched_held+0x110/0x130 [ 365.863688][T12321] ? snd_pcm_oss_open+0x60/0x60 [ 365.868543][T12321] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 365.874797][T12321] ? _snd_pcm_hw_param_min+0x29d/0x560 [ 365.880272][T12321] snd_pcm_oss_change_params_locked+0xc99/0x3750 [ 365.886641][T12321] ? _snd_pcm_hw_param_set.constprop.0+0x590/0x590 [ 365.893153][T12321] ? mutex_trylock+0x1e0/0x1e0 [ 365.898088][T12321] ? find_held_lock+0x35/0x130 [ 365.902861][T12321] ? lock_downgrade+0x880/0x880 [ 365.907724][T12321] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 365.913980][T12321] snd_pcm_oss_make_ready_locked+0xbc/0x130 [ 365.919879][T12321] snd_pcm_oss_write+0x42b/0x8f0 [ 365.924915][T12321] ? apparmor_file_permission+0x25/0x30 [ 365.930465][T12321] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 365.936715][T12321] __vfs_write+0x8d/0x110 [ 365.941043][T12321] ? snd_pcm_oss_ioctl_compat+0x30/0x30 [ 365.946596][T12321] vfs_write+0x20c/0x580 [ 365.950847][T12321] ksys_write+0xea/0x1f0 [ 365.955236][T12321] ? __ia32_sys_read+0xb0/0xb0 [ 365.960018][T12321] ? do_fast_syscall_32+0xd1/0xc98 [ 365.965145][T12321] ? entry_SYSENTER_compat+0x70/0x7f [ 365.970465][T12321] ? do_fast_syscall_32+0xd1/0xc98 [ 365.975598][T12321] __ia32_sys_write+0x71/0xb0 [ 365.980279][T12321] do_fast_syscall_32+0x281/0xc98 [ 365.985312][T12321] entry_SYSENTER_compat+0x70/0x7f [ 365.990506][T12321] RIP: 0023:0xf7f8c869 [ 365.994584][T12321] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 00:27:02 executing program 5 (fault-call:6 fault-nth:2): perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, 0x0, &(0x7f0000000100)) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) getuid() ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) [ 366.014184][T12321] RSP: 002b:00000000f5d880cc EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 366.022597][T12321] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000200000c0 [ 366.030575][T12321] RDX: 00000000fffffefd RSI: 0000000000000000 RDI: 0000000000000000 [ 366.038543][T12321] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 366.047308][T12321] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 366.055270][T12321] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 366.063283][T12324] CPU: 0 PID: 12324 Comm: syz-executor.5 Not tainted 5.1.0-rc1+ #34 [ 366.071354][T12324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 366.081425][T12324] Call Trace: [ 366.085709][T12324] dump_stack+0x172/0x1f0 [ 366.092052][T12324] should_fail.cold+0xa/0x15 [ 366.096660][T12324] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 366.102488][T12324] ? ___might_sleep+0x163/0x280 [ 366.107365][T12324] __should_failslab+0x121/0x190 [ 366.112331][T12324] should_failslab+0x9/0x14 [ 366.116868][T12324] kmem_cache_alloc_trace+0x2d1/0x760 [ 366.122802][T12324] snd_pcm_oss_change_params_locked+0x217/0x3750 [ 366.129166][T12324] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 366.134659][T12324] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 366.140133][T12324] ? lockdep_hardirqs_on+0x418/0x5d0 [ 366.145428][T12324] ? _snd_pcm_hw_param_set.constprop.0+0x590/0x590 [ 366.151931][T12324] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 366.157413][T12324] ? retint_kernel+0x2d/0x2d [ 366.162022][T12324] snd_pcm_oss_make_ready_locked+0xbc/0x130 [ 366.167927][T12324] snd_pcm_oss_write+0x42b/0x8f0 [ 366.172871][T12324] ? apparmor_file_permission+0x25/0x30 [ 366.178544][T12324] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 366.184820][T12324] __vfs_write+0x8d/0x110 [ 366.189170][T12324] ? snd_pcm_oss_ioctl_compat+0x30/0x30 [ 366.194736][T12324] vfs_write+0x20c/0x580 [ 366.198969][T12324] ksys_write+0xea/0x1f0 [ 366.203202][T12324] ? __ia32_sys_read+0xb0/0xb0 [ 366.207961][T12324] ? do_fast_syscall_32+0xd1/0xc98 [ 366.213055][T12324] ? entry_SYSENTER_compat+0x70/0x7f [ 366.219211][T12324] ? do_fast_syscall_32+0xd1/0xc98 [ 366.224349][T12324] __ia32_sys_write+0x71/0xb0 [ 366.229140][T12324] do_fast_syscall_32+0x281/0xc98 [ 366.234190][T12324] entry_SYSENTER_compat+0x70/0x7f [ 366.239297][T12324] RIP: 0023:0xf7fdf869 [ 366.243353][T12324] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 366.262949][T12324] RSP: 002b:00000000f5ddb0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000004 00:27:03 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0xd8) 00:27:03 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x43d) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x1000001c3) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000400)={0x0, 0x8d9c, 0x10002}, 0x14) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x4f3d1d6e) splice(r0, 0x0, r2, 0x0, 0x10005, 0xf000) [ 366.271560][T12324] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000200000c0 [ 366.279519][T12324] RDX: 00000000fffffefd RSI: 0000000000000000 RDI: 0000000000000000 [ 366.287485][T12324] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 366.295442][T12324] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 366.303399][T12324] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 00:27:03 executing program 5 (fault-call:6 fault-nth:3): perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, 0x0, &(0x7f0000000100)) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) getuid() ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) [ 366.417349][T12341] FAULT_INJECTION: forcing a failure. [ 366.417349][T12341] name failslab, interval 1, probability 0, space 0, times 0 [ 366.430555][T12341] CPU: 1 PID: 12341 Comm: syz-executor.5 Not tainted 5.1.0-rc1+ #34 [ 366.438634][T12341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 366.448951][T12341] Call Trace: [ 366.452260][T12341] dump_stack+0x172/0x1f0 [ 366.456644][T12341] should_fail.cold+0xa/0x15 [ 366.461251][T12341] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 366.467099][T12341] ? ___might_sleep+0x163/0x280 [ 366.471945][T12341] __should_failslab+0x121/0x190 [ 366.476874][T12341] should_failslab+0x9/0x14 [ 366.481390][T12341] __kmalloc+0x2dc/0x740 [ 366.485626][T12341] ? __save_stack_trace+0x99/0x100 [ 366.490733][T12341] ? constrain_params_by_rules+0x118/0x1180 [ 366.496740][T12341] constrain_params_by_rules+0x118/0x1180 [ 366.502465][T12341] ? save_stack+0xa9/0xd0 [ 366.506792][T12341] ? save_stack+0x45/0xd0 [ 366.511103][T12341] ? kmem_cache_alloc_trace+0x151/0x760 [ 366.516640][T12341] ? snd_pcm_oss_change_params_locked+0x217/0x3750 [ 366.523129][T12341] ? snd_pcm_mmap_status_fault+0x240/0x240 [ 366.528922][T12341] ? vfs_write+0x20c/0x580 [ 366.533367][T12341] ? ksys_write+0xea/0x1f0 [ 366.537773][T12341] ? __ia32_sys_write+0x71/0xb0 [ 366.542627][T12341] ? do_fast_syscall_32+0x281/0xc98 [ 366.547822][T12341] ? entry_SYSENTER_compat+0x70/0x7f [ 366.553130][T12341] ? __lock_acquire+0x548/0x3fb0 [ 366.558069][T12341] ? is_bpf_text_address+0xac/0x170 [ 366.563273][T12341] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 366.568993][T12341] ? snd_interval_refine+0x42a/0x720 [ 366.574276][T12341] snd_pcm_hw_refine+0xbf9/0xf20 [ 366.579218][T12341] ? constrain_params_by_rules+0x1180/0x1180 [ 366.585194][T12341] ? snd_pcm_oss_change_params_locked+0x217/0x3750 [ 366.591684][T12341] ? rcu_read_lock_sched_held+0x110/0x130 [ 366.597392][T12341] ? memset+0x32/0x40 [ 366.601382][T12341] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 366.607618][T12341] ? _snd_pcm_hw_param_min+0x29d/0x560 [ 366.613061][T12341] snd_pcm_oss_change_params_locked+0x6c2/0x3750 [ 366.619402][T12341] ? __mutex_lock+0x3cd/0x1310 [ 366.624160][T12341] ? _snd_pcm_hw_param_set.constprop.0+0x590/0x590 [ 366.630647][T12341] ? mutex_trylock+0x1e0/0x1e0 [ 366.635522][T12341] ? find_held_lock+0x35/0x130 [ 366.640301][T12341] ? lock_downgrade+0x880/0x880 [ 366.645421][T12341] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 366.651680][T12341] snd_pcm_oss_make_ready_locked+0xbc/0x130 [ 366.657598][T12341] snd_pcm_oss_write+0x42b/0x8f0 [ 366.662559][T12341] ? apparmor_file_permission+0x25/0x30 [ 366.668134][T12341] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 366.674397][T12341] __vfs_write+0x8d/0x110 [ 366.678744][T12341] ? snd_pcm_oss_ioctl_compat+0x30/0x30 [ 366.684314][T12341] vfs_write+0x20c/0x580 [ 366.688586][T12341] ksys_write+0xea/0x1f0 [ 366.692841][T12341] ? __ia32_sys_read+0xb0/0xb0 [ 366.697702][T12341] ? do_fast_syscall_32+0xd1/0xc98 [ 366.702855][T12341] ? entry_SYSENTER_compat+0x70/0x7f [ 366.708158][T12341] ? do_fast_syscall_32+0xd1/0xc98 [ 366.711922][T12345] FAULT_INJECTION: forcing a failure. [ 366.711922][T12345] name failslab, interval 1, probability 0, space 0, times 0 [ 366.713374][T12341] __ia32_sys_write+0x71/0xb0 [ 366.713397][T12341] do_fast_syscall_32+0x281/0xc98 [ 366.713421][T12341] entry_SYSENTER_compat+0x70/0x7f [ 366.713431][T12341] RIP: 0023:0xf7fdf869 [ 366.713446][T12341] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 00:27:03 executing program 1 (fault-call:5 fault-nth:5): keyctl$setperm(0x5, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:27:03 executing program 3 (fault-call:3 fault-nth:0): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000380)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @dev}, 0x14) syz_emit_ethernet(0x11, &(0x7f0000000100)={@remote, @dev, [], {@llc_tr={0x11, {@llc={0x0, 0x0, "c4"}}}}}, 0x0) [ 366.713454][T12341] RSP: 002b:00000000f5ddb0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 366.713467][T12341] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000200000c0 [ 366.713475][T12341] RDX: 00000000fffffefd RSI: 0000000000000000 RDI: 0000000000000000 [ 366.713481][T12341] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 366.713497][T12341] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 366.804950][T12341] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 366.813071][T12345] CPU: 0 PID: 12345 Comm: syz-executor.1 Not tainted 5.1.0-rc1+ #34 [ 366.821061][T12345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 366.831119][T12345] Call Trace: [ 366.834431][T12345] dump_stack+0x172/0x1f0 [ 366.838861][T12345] should_fail.cold+0xa/0x15 [ 366.843463][T12345] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 366.849294][T12345] ? ___might_sleep+0x163/0x280 [ 366.854169][T12345] __should_failslab+0x121/0x190 [ 366.859119][T12345] should_failslab+0x9/0x14 [ 366.863605][T12345] __kmalloc+0x2dc/0x740 [ 366.867836][T12345] ? constrain_params_by_rules+0x118/0x1180 [ 366.873722][T12345] constrain_params_by_rules+0x118/0x1180 [ 366.879527][T12345] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 366.884993][T12345] ? retint_kernel+0x2d/0x2d [ 366.889563][T12345] ? snd_pcm_mmap_status_fault+0x240/0x240 [ 366.895511][T12345] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 366.900958][T12345] ? retint_kernel+0x2d/0x2d [ 366.905641][T12345] ? snd_pcm_hw_refine+0x78e/0xf20 [ 366.910741][T12345] snd_pcm_hw_refine+0xbf9/0xf20 [ 366.915694][T12345] ? constrain_params_by_rules+0x1180/0x1180 [ 366.921654][T12345] ? snd_interval_refine+0x42a/0x720 [ 366.927178][T12345] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 366.933441][T12345] ? _snd_pcm_hw_param_set.constprop.0+0x282/0x590 [ 366.939958][T12345] ? snd_pcm_oss_open+0x60/0x60 [ 366.944792][T12345] ? snd_pcm_oss_change_params_locked+0x922/0x3750 [ 366.951279][T12345] ? snd_pcm_oss_change_params_locked+0x92c/0x3750 [ 366.957768][T12345] snd_pcm_oss_change_params_locked+0xc99/0x3750 [ 366.964092][T12345] ? lockdep_hardirqs_on+0x407/0x5d0 [ 366.969367][T12345] ? _snd_pcm_hw_param_set.constprop.0+0x590/0x590 [ 366.975856][T12345] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 366.981405][T12345] snd_pcm_oss_make_ready_locked+0xbc/0x130 [ 366.987295][T12345] snd_pcm_oss_write+0x42b/0x8f0 [ 366.992233][T12345] ? apparmor_file_permission+0x25/0x30 [ 366.997778][T12345] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 367.004027][T12345] __vfs_write+0x8d/0x110 [ 367.008364][T12345] ? snd_pcm_oss_ioctl_compat+0x30/0x30 [ 367.013920][T12345] vfs_write+0x20c/0x580 [ 367.018161][T12345] ksys_write+0xea/0x1f0 [ 367.022909][T12345] ? __ia32_sys_read+0xb0/0xb0 [ 367.027666][T12345] ? do_fast_syscall_32+0xd1/0xc98 [ 367.032775][T12345] ? entry_SYSENTER_compat+0x70/0x7f [ 367.038072][T12345] ? do_fast_syscall_32+0xd1/0xc98 [ 367.043200][T12345] __ia32_sys_write+0x71/0xb0 [ 367.047869][T12345] do_fast_syscall_32+0x281/0xc98 [ 367.052878][T12345] entry_SYSENTER_compat+0x70/0x7f [ 367.057973][T12345] RIP: 0023:0xf7f9a869 [ 367.062033][T12345] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 367.081717][T12345] RSP: 002b:00000000f5d960cc EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 367.090123][T12345] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000200000c0 [ 367.098086][T12345] RDX: 00000000fffffefd RSI: 0000000000000000 RDI: 0000000000000000 [ 367.106046][T12345] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 367.114009][T12345] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 367.122077][T12345] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 00:27:05 executing program 0 (fault-call:6 fault-nth:6): perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, 0x0, &(0x7f0000000100)) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) getuid() ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:27:05 executing program 5 (fault-call:6 fault-nth:4): perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, 0x0, &(0x7f0000000100)) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) getuid() ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 00:27:05 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000380)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @dev}, 0x14) syz_emit_ethernet(0x11, &(0x7f0000000100)={@remote, @dev, [], {@llc_tr={0x11, {@llc={0x0, 0x0, "c4"}}}}}, 0x0) 00:27:05 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x43d) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x1000001c3) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000400)={0x0, 0x8d9c, 0x10002}, 0x14) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x4f3d1d6e) splice(r0, 0x0, r2, 0x0, 0x10005, 0xff00) 00:27:05 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x140) [ 368.196142][T12358] FAULT_INJECTION: forcing a failure. [ 368.196142][T12358] name failslab, interval 1, probability 0, space 0, times 0 [ 368.211480][T12358] CPU: 0 PID: 12358 Comm: syz-executor.5 Not tainted 5.1.0-rc1+ #34 [ 368.215855][T12367] FAULT_INJECTION: forcing a failure. [ 368.215855][T12367] name failslab, interval 1, probability 0, space 0, times 0 [ 368.220537][T12358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 368.220544][T12358] Call Trace: [ 368.220579][T12358] dump_stack+0x172/0x1f0 [ 368.220602][T12358] should_fail.cold+0xa/0x15 [ 368.220625][T12358] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 368.261384][T12358] ? ___might_sleep+0x163/0x280 [ 368.266322][T12358] __should_failslab+0x121/0x190 [ 368.271257][T12358] should_failslab+0x9/0x14 [ 368.275759][T12358] kmem_cache_alloc_trace+0x2d1/0x760 [ 368.281137][T12358] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 368.287951][T12358] ? _snd_pcm_hw_param_min+0x29d/0x560 [ 368.293419][T12358] snd_pcm_oss_change_params_locked+0x75c/0x3750 [ 368.299856][T12358] ? __mutex_lock+0x3cd/0x1310 [ 368.304630][T12358] ? _snd_pcm_hw_param_set.constprop.0+0x590/0x590 [ 368.311126][T12358] ? mutex_trylock+0x1e0/0x1e0 [ 368.315928][T12358] ? find_held_lock+0x35/0x130 [ 368.320710][T12358] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 368.326255][T12358] ? lockdep_hardirqs_on+0x418/0x5d0 [ 368.331561][T12358] snd_pcm_oss_make_ready_locked+0xbc/0x130 [ 368.337728][T12358] snd_pcm_oss_write+0x42b/0x8f0 [ 368.342704][T12358] __vfs_write+0x8d/0x110 [ 368.347035][T12358] ? snd_pcm_oss_ioctl_compat+0x30/0x30 [ 368.352580][T12358] vfs_write+0x20c/0x580 [ 368.356826][T12358] ksys_write+0xea/0x1f0 [ 368.361076][T12358] ? __ia32_sys_read+0xb0/0xb0 [ 368.365848][T12358] ? do_fast_syscall_32+0xd1/0xc98 [ 368.370956][T12358] ? entry_SYSENTER_compat+0x70/0x7f [ 368.376239][T12358] ? do_fast_syscall_32+0xd1/0xc98 [ 368.381373][T12358] __ia32_sys_write+0x71/0xb0 [ 368.386073][T12358] do_fast_syscall_32+0x281/0xc98 [ 368.391098][T12358] entry_SYSENTER_compat+0x70/0x7f [ 368.396381][T12358] RIP: 0023:0xf7fdf869 [ 368.400447][T12358] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 368.420046][T12358] RSP: 002b:00000000f5ddb0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 368.428567][T12358] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000200000c0 [ 368.436537][T12358] RDX: 00000000fffffefd RSI: 0000000000000000 RDI: 0000000000000000 [ 368.444687][T12358] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 368.452652][T12358] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 368.460620][T12358] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 368.468616][T12367] CPU: 1 PID: 12367 Comm: syz-executor.0 Not tainted 5.1.0-rc1+ #34 [ 368.476728][T12367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 368.486875][T12367] Call Trace: [ 368.490183][T12367] dump_stack+0x172/0x1f0 [ 368.494521][T12367] should_fail.cold+0xa/0x15 [ 368.499119][T12367] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 368.504937][T12367] ? ___might_sleep+0x163/0x280 [ 368.509811][T12367] __should_failslab+0x121/0x190 [ 368.514752][T12367] should_failslab+0x9/0x14 [ 368.519264][T12367] kmem_cache_alloc_trace+0x2d1/0x760 [ 368.524756][T12367] snd_pcm_hw_param_near.constprop.0+0xec/0x890 [ 368.531009][T12367] ? mark_held_locks+0xa4/0xf0 [ 368.535785][T12367] ? snd_pcm_oss_change_params_locked+0x2b1c/0x3750 [ 368.542385][T12367] ? snd_pcm_oss_release_file.part.0+0xa0/0xa0 [ 368.548546][T12367] ? snd_pcm_oss_change_params_locked+0x2b1c/0x3750 [ 368.555150][T12367] snd_pcm_oss_change_params_locked+0xa0a/0x3750 [ 368.561508][T12367] ? _snd_pcm_hw_param_set.constprop.0+0x590/0x590 [ 368.568017][T12367] ? mutex_trylock+0x1e0/0x1e0 [ 368.572787][T12367] ? find_held_lock+0x35/0x130 [ 368.577679][T12367] ? lock_downgrade+0x880/0x880 [ 368.582801][T12367] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 368.589061][T12367] snd_pcm_oss_make_ready_locked+0xbc/0x130 [ 368.594964][T12367] snd_pcm_oss_write+0x42b/0x8f0 [ 368.599912][T12367] ? apparmor_file_permission+0x25/0x30 [ 368.605459][T12367] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 368.611718][T12367] __vfs_write+0x8d/0x110 [ 368.616058][T12367] ? snd_pcm_oss_ioctl_compat+0x30/0x30 [ 368.621616][T12367] vfs_write+0x20c/0x580 [ 368.625879][T12367] ksys_write+0xea/0x1f0 [ 368.630134][T12367] ? __ia32_sys_read+0xb0/0xb0 [ 368.634908][T12367] ? do_fast_syscall_32+0xd1/0xc98 [ 368.640023][T12367] ? entry_SYSENTER_compat+0x70/0x7f [ 368.645445][T12367] ? do_fast_syscall_32+0xd1/0xc98 [ 368.650569][T12367] __ia32_sys_write+0x71/0xb0 [ 368.655261][T12367] do_fast_syscall_32+0x281/0xc98 [ 368.660296][T12367] entry_SYSENTER_compat+0x70/0x7f [ 368.665418][T12367] RIP: 0023:0xf7f8c869 [ 368.669484][T12367] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 368.689087][T12367] RSP: 002b:00000000f5d880cc EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 368.697501][T12367] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000200000c0 [ 368.705496][T12367] RDX: 00000000fffffefd RSI: 0000000000000000 RDI: 0000000000000000 [ 368.713565][T12367] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 368.721549][T12367] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 368.729516][T12367] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 368.746365][T12367] ================================================================== [ 368.754860][T12367] BUG: KASAN: slab-out-of-bounds in default_write_copy_kernel+0xdc/0x130 [ 368.763272][T12367] Read of size 64 at addr ffff88809a2cb140 by task syz-executor.0/12367 [ 368.771572][T12367] [ 368.773983][T12367] CPU: 1 PID: 12367 Comm: syz-executor.0 Not tainted 5.1.0-rc1+ #34 [ 368.781991][T12367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 368.792047][T12367] Call Trace: [ 368.795350][T12367] dump_stack+0x172/0x1f0 [ 368.799679][T12367] ? default_write_copy_kernel+0xdc/0x130 [ 368.805416][T12367] print_address_description.cold+0x7c/0x20d [ 368.811398][T12367] ? default_write_copy_kernel+0xdc/0x130 [ 368.817135][T12367] ? default_write_copy_kernel+0xdc/0x130 [ 368.822872][T12367] kasan_report.cold+0x1b/0x40 [ 368.827679][T12367] ? snd_pcm_stream_unlock_irq+0x20/0xc0 [ 368.833327][T12367] ? default_write_copy_kernel+0xdc/0x130 [ 368.839083][T12367] check_memory_region+0x123/0x190 [ 368.844194][T12367] memcpy+0x24/0x50 [ 368.848080][T12367] default_write_copy_kernel+0xdc/0x130 [ 368.853706][T12367] ? __bpf_trace_applptr+0x40/0x40 [ 368.858823][T12367] interleaved_copy+0xd0/0x100 [ 368.863597][T12367] __snd_pcm_lib_xfer+0xea3/0x1cfa [ 368.868732][T12367] ? snd_pcm_hw_rule_step+0x440/0x440 [ 368.874189][T12367] ? __bpf_trace_applptr+0x40/0x40 [ 368.879290][T12367] ? pcm_lib_apply_appl_ptr+0x440/0x440 [ 368.884849][T12367] ? memcpy+0x46/0x50 [ 368.888823][T12367] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 368.894563][T12367] ? linear_transfer+0x74f/0x970 [ 368.899520][T12367] snd_pcm_oss_write3+0xee/0x230 [ 368.904462][T12367] io_playback_transfer+0x280/0x330 [ 368.909675][T12367] snd_pcm_plug_write_transfer+0x30c/0x400 [ 368.915509][T12367] ? snd_pcm_plug_client_channels_buf+0x450/0x450 [ 368.921947][T12367] ? snd_pcm_format_physical_width+0x75/0x90 [ 368.927932][T12367] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 368.933750][T12367] ? snd_pcm_plug_client_channels_buf+0x212/0x450 [ 368.940176][T12367] snd_pcm_oss_write2+0x250/0x410 [ 368.945219][T12367] ? snd_pcm_oss_write3+0x230/0x230 [ 368.950433][T12367] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 368.956682][T12367] ? snd_pcm_oss_prepare+0x118/0x150 [ 368.961970][T12367] snd_pcm_oss_write+0x6c2/0x8f0 [ 368.966921][T12367] ? apparmor_file_permission+0x25/0x30 [ 368.972471][T12367] __vfs_write+0x8d/0x110 [ 368.976809][T12367] ? snd_pcm_oss_ioctl_compat+0x30/0x30 [ 368.982366][T12367] vfs_write+0x20c/0x580 [ 368.986599][T12367] ksys_write+0xea/0x1f0 [ 368.990843][T12367] ? __ia32_sys_read+0xb0/0xb0 [ 368.995680][T12367] ? do_fast_syscall_32+0xd1/0xc98 [ 369.000791][T12367] ? entry_SYSENTER_compat+0x70/0x7f [ 369.006157][T12367] ? do_fast_syscall_32+0xd1/0xc98 [ 369.011348][T12367] __ia32_sys_write+0x71/0xb0 [ 369.016034][T12367] do_fast_syscall_32+0x281/0xc98 [ 369.021045][T12367] entry_SYSENTER_compat+0x70/0x7f [ 369.026142][T12367] RIP: 0023:0xf7f8c869 [ 369.030199][T12367] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 369.049800][T12367] RSP: 002b:00000000f5d880cc EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 369.058198][T12367] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000200000c0 [ 369.066244][T12367] RDX: 00000000fffffefd RSI: 0000000000000000 RDI: 0000000000000000 [ 369.074293][T12367] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 369.082249][T12367] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 369.090204][T12367] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 369.098266][T12367] [ 369.100585][T12367] Allocated by task 12367: [ 369.104995][T12367] save_stack+0x45/0xd0 [ 369.109229][T12367] __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 369.114857][T12367] kasan_kmalloc+0x9/0x10 [ 369.119184][T12367] __kmalloc_node+0x4e/0x70 [ 369.123771][T12367] kvmalloc_node+0x68/0x100 [ 369.128291][T12367] snd_pcm_plugin_alloc+0x585/0x770 [ 369.133470][T12367] snd_pcm_plug_alloc+0x212/0x330 [ 369.138489][T12367] snd_pcm_oss_change_params_locked+0x2118/0x3750 [ 369.144886][T12367] snd_pcm_oss_make_ready_locked+0xbc/0x130 [ 369.150764][T12367] snd_pcm_oss_write+0x42b/0x8f0 [ 369.155683][T12367] __vfs_write+0x8d/0x110 [ 369.159996][T12367] vfs_write+0x20c/0x580 [ 369.164220][T12367] ksys_write+0xea/0x1f0 [ 369.168453][T12367] __ia32_sys_write+0x71/0xb0 [ 369.173125][T12367] do_fast_syscall_32+0x281/0xc98 [ 369.178143][T12367] entry_SYSENTER_compat+0x70/0x7f [ 369.183230][T12367] [ 369.185548][T12367] Freed by task 9136: [ 369.189533][T12367] save_stack+0x45/0xd0 [ 369.193672][T12367] __kasan_slab_free+0x102/0x150 [ 369.198610][T12367] kasan_slab_free+0xe/0x10 [ 369.203095][T12367] kfree+0xcf/0x230 [ 369.206890][T12367] batadv_mcast_mla_update+0x94e/0x1ec0 [ 369.212421][T12367] process_one_work+0x98e/0x1790 [ 369.217804][T12367] worker_thread+0x98/0xe40 [ 369.222301][T12367] kthread+0x357/0x430 [ 369.226366][T12367] ret_from_fork+0x3a/0x50 [ 369.230756][T12367] [ 369.233070][T12367] The buggy address belongs to the object at ffff88809a2cb140 [ 369.233070][T12367] which belongs to the cache kmalloc-32 of size 32 [ 369.246935][T12367] The buggy address is located 0 bytes inside of [ 369.246935][T12367] 32-byte region [ffff88809a2cb140, ffff88809a2cb160) [ 369.259929][T12367] The buggy address belongs to the page: [ 369.265568][T12367] page:ffffea000268b2c0 count:1 mapcount:0 mapping:ffff88812c3f01c0 index:0xffff88809a2cbfc1 [ 369.275704][T12367] flags: 0x1fffc0000000200(slab) [ 369.280648][T12367] raw: 01fffc0000000200 ffffea0002859408 ffff88812c3f1238 ffff88812c3f01c0 [ 369.289231][T12367] raw: ffff88809a2cbfc1 ffff88809a2cb000 0000000100000029 0000000000000000 [ 369.297791][T12367] page dumped because: kasan: bad access detected [ 369.304183][T12367] [ 369.306511][T12367] Memory state around the buggy address: [ 369.312129][T12367] ffff88809a2cb000: fb fb fb fb fc fc fc fc fb fb fb fb fc fc fc fc [ 369.320185][T12367] ffff88809a2cb080: fb fb fb fb fc fc fc fc 00 00 fc fc fc fc fc fc [ 369.328245][T12367] >ffff88809a2cb100: fb fb fb fb fc fc fc fc 00 00 00 00 fc fc fc fc [ 369.336292][T12367] ^ [ 369.343477][T12367] ffff88809a2cb180: 00 00 fc fc fc fc fc fc fb fb fb fb fc fc fc fc 00:27:06 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000380)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @dev}, 0x14) syz_emit_ethernet(0xd, &(0x7f0000000100)={@remote, @dev, [], {@llc_tr={0x11, {@llc={0x0, 0x0, "c4"}}}}}, 0x0) [ 369.351528][T12367] ffff88809a2cb200: fb fb fb fb fc fc fc fc fb fb fb fb fc fc fc fc [ 369.359566][T12367] ================================================================== [ 369.367614][T12367] Disabling lock debugging due to kernel taint [ 369.385450][T12367] Kernel panic - not syncing: panic_on_warn set ... [ 369.392086][T12367] CPU: 0 PID: 12367 Comm: syz-executor.0 Tainted: G B 5.1.0-rc1+ #34 [ 369.400046][ T3876] kobject: 'loop3' (00000000fcd42a63): kobject_uevent_env [ 369.401444][T12367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 369.401449][T12367] Call Trace: [ 369.401473][T12367] dump_stack+0x172/0x1f0 [ 369.401496][T12367] panic+0x2cb/0x65c [ 369.418645][ T3876] kobject: 'loop3' (00000000fcd42a63): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 369.418759][T12367] ? __warn_printk+0xf3/0xf3 [ 369.445807][T12367] ? default_write_copy_kernel+0xdc/0x130 [ 369.451588][T12367] ? preempt_schedule+0x4b/0x60 [ 369.456464][T12367] ? ___preempt_schedule+0x16/0x18 [ 369.461567][T12367] ? trace_hardirqs_on+0x5e/0x230 [ 369.466592][T12367] ? default_write_copy_kernel+0xdc/0x130 [ 369.472291][T12367] end_report+0x47/0x4f [ 369.476461][T12367] ? default_write_copy_kernel+0xdc/0x130 [ 369.482193][T12367] kasan_report.cold+0xe/0x40 [ 369.486877][T12367] ? snd_pcm_stream_unlock_irq+0x20/0xc0 [ 369.492502][T12367] ? default_write_copy_kernel+0xdc/0x130 [ 369.498218][T12367] check_memory_region+0x123/0x190 [ 369.503325][T12367] memcpy+0x24/0x50 [ 369.507130][T12367] default_write_copy_kernel+0xdc/0x130 [ 369.512677][T12367] ? __bpf_trace_applptr+0x40/0x40 [ 369.517956][T12367] interleaved_copy+0xd0/0x100 [ 369.522703][T12367] __snd_pcm_lib_xfer+0xea3/0x1cfa [ 369.527801][T12367] ? snd_pcm_hw_rule_step+0x440/0x440 [ 369.533180][T12367] ? __bpf_trace_applptr+0x40/0x40 [ 369.538293][T12367] ? pcm_lib_apply_appl_ptr+0x440/0x440 [ 369.543832][T12367] ? memcpy+0x46/0x50 [ 369.547875][T12367] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 369.553589][T12367] ? linear_transfer+0x74f/0x970 [ 369.558547][T12367] snd_pcm_oss_write3+0xee/0x230 [ 369.563505][T12367] io_playback_transfer+0x280/0x330 [ 369.568694][T12367] snd_pcm_plug_write_transfer+0x30c/0x400 [ 369.574493][T12367] ? snd_pcm_plug_client_channels_buf+0x450/0x450 [ 369.580898][T12367] ? snd_pcm_format_physical_width+0x75/0x90 [ 369.586861][T12367] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 369.592560][T12367] ? snd_pcm_plug_client_channels_buf+0x212/0x450 [ 369.599064][T12367] snd_pcm_oss_write2+0x250/0x410 [ 369.604162][T12367] ? snd_pcm_oss_write3+0x230/0x230 [ 369.609359][T12367] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 369.615603][T12367] ? snd_pcm_oss_prepare+0x118/0x150 [ 369.620964][T12367] snd_pcm_oss_write+0x6c2/0x8f0 [ 369.625894][T12367] ? apparmor_file_permission+0x25/0x30 [ 369.631429][T12367] __vfs_write+0x8d/0x110 [ 369.635742][T12367] ? snd_pcm_oss_ioctl_compat+0x30/0x30 [ 369.641300][T12367] vfs_write+0x20c/0x580 [ 369.645546][T12367] ksys_write+0xea/0x1f0 [ 369.649777][T12367] ? __ia32_sys_read+0xb0/0xb0 [ 369.654536][T12367] ? do_fast_syscall_32+0xd1/0xc98 [ 369.659663][T12367] ? entry_SYSENTER_compat+0x70/0x7f [ 369.664934][T12367] ? do_fast_syscall_32+0xd1/0xc98 [ 369.670032][T12367] __ia32_sys_write+0x71/0xb0 [ 369.675054][T12367] do_fast_syscall_32+0x281/0xc98 [ 369.680090][T12367] entry_SYSENTER_compat+0x70/0x7f [ 369.685327][T12367] RIP: 0023:0xf7f8c869 [ 369.689380][T12367] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 369.708965][T12367] RSP: 002b:00000000f5d880cc EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 369.717361][T12367] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000200000c0 [ 369.725323][T12367] RDX: 00000000fffffefd RSI: 0000000000000000 RDI: 0000000000000000 [ 369.733290][T12367] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 369.741261][T12367] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 369.749211][T12367] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 369.758153][T12367] Kernel Offset: disabled [ 369.762493][T12367] Rebooting in 86400 seconds..