0x0, 0x10005, 0x6)

11:38:04 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0x2}, 0x0)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:38:04 executing program 4:
setitimer(0x2, 0x0, &(0x7f00000001c0))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$cgroup_ro(r1, &(0x7f0000000480)='cgroup.stat\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = dup(r5)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000100)={'batadv0\x00'})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00')
sendmsg$BATADV_CMD_GET_MESH(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)={0x2c, r9, 0xf, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x66}]}, 0x2c}}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
dup(r10)
ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000740)={0xf000000, 0x5, 0x5, <r11=>r10, 0x0, &(0x7f0000000700)={0x990900, 0x0, [], @value64}})
io_submit(0x0, 0x7, &(0x7f00000007c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x3, 0x5, 0xffffffffffffffff, &(0x7f0000000040)="4b4c706c87fb2fc06d480b76301051708d3465240f25b49136c9207884f498b3db19e437d13fcc05b8a2887bf27079d25d134624e2eb381095064a02530f83cf145f80", 0x43, 0x24}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0xff, 0xffffffffffffffff, &(0x7f0000000100)="64d5ec2cbedbc56cd79c71a9e6e6cdd4b9917c5538800e040975f85571a3997c1800c12b502ec9e30621e33a671b0cba6c6edeaf90c1a5caef8ac95769812ff44414db97cb7a0392aacb90ffba89697fe5f256170f878f9ad84a94c896b8b65d9663e330f02c38c215b23a7c27c5bfcc6ba87f0542f139e54585d81dd65c41c869513fb6be2ad20bc12f0c2a0cef71a4d0762e8c", 0x94, 0x5}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x6, 0x0, 0xffffffffffffffff, &(0x7f00000002c0)="61b5ca406c", 0x5, 0x8, 0x0, 0x3}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0xf, 0x1f, 0xffffffffffffffff, &(0x7f0000000340)="ddad19af409dddc7104ad66f2ec53610578d692f09a46f14032f27d4faeb14988701b3e4a5390446f9ecfb033246982c2873e3f7a08383e7cf7efb86c870e174a969af0e8e30979dc9483f67a6d3f6fcd80e1565158fa4389ee5d50d1111e4ce55253e38cbf037983010c0ad2ae041b32d73ef0f1e6eb0be0d8edb2086895b1b", 0x80, 0x8, 0x0, 0x1}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3, 0x7e, 0xffffffffffffffff, &(0x7f0000000400)="fbfa0b5df7f9673148de8c01b51972924867da7543ec9cad58b0e18c86a03e06fb2e172ad9eac01c1658e494bb5b18632e417e320b4ed71d6e76f7f64e4d836f5895468d733762fa5d043bba24", 0x4d, 0x9, 0x0, 0x3, r2}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x2, 0x6, r4, &(0x7f0000000500)="58e81156ecb3cfb9476b115ce3b8b559f6d1d054272a344d289841af68a708bb911ad14ca890a64081523d65a281654a1987b4c63275052ee973ec73c29c367b080e6adc69866c194699acfe8feb109109ce48b4e6d23cdcc6fe1bbf1c661ea50cb7182f5a04ede9f4d25cde3d07fe4c6c5ced63982c878b4a69f15c2340a8135ebdde409945a6d51a435a325293ab13658df57ba024dfe9faa5869f8e9f19e5e04c2dbf1e9cd319a8c1ba63c52617", 0xaf, 0x7ff, 0x0, 0x2, r6}, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x5, r8, &(0x7f0000000600)="636a9687302e6797198dc3cace64a7e9314334a0cafac770e4ae68e6fff110ea62d343d545749e8d735049c075f2b3ad6dd9198eeebdd877599b9596fdda020e7cabd9bc91aba291f3d6c3209cf23fbf5607d4a092e37bd96de2adea23733d120e822df3520da55c4e15d695c6542eb880bce889326f6696f51b7facd5bec007f31c6c653094cded9661afa6551bc6fc71af3cb106506c8652bf40c11b91b89d43cd8e2471a8d775102e8287ff664b5445f24ba7e2a00232ddb1a5c9c45164a2485ca0ad4d99e685c10023e88603445d51dc0dfd38ac577867dd761a547d735bfd52aad0430912ee817282483eca12", 0xef, 0x80000000, 0x0, 0x1, r11}])

11:38:04 executing program 0:
syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0)
syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x10000000}, 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xbd, 0x970, 0x1, 0x5})
socket$nl_route(0x10, 0x3, 0x0)

11:38:05 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0x3}, 0x0)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:38:05 executing program 4:
setitimer(0x0, 0x0, &(0x7f00000001c0))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040)='devlink\x00')
sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xa8, r2, 0xa02, 0x70bd28, 0x25dfdbfb, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x8}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x8f}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x400000}}]}, 0xa8}, 0x1, 0x0, 0x0, 0x50000}, 0x4)

11:38:05 executing program 3:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x7, 0x0, &(0x7f0000000040)="b9010360e000f0", 0x0, 0x0, 0xa000000, 0x0, 0x0, 0x0, 0x0}, 0x40)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
r1 = socket(0x11, 0x0, 0x0)
bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r1, 0x0, &(0x7f0000000040))
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x6db6e559)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x9)

11:38:05 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0x4}, 0x0)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:38:05 executing program 4:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x4)
setitimer(0x2, 0x0, &(0x7f00000001c0))
r2 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_control\x00', 0x2, 0x0)
ioctl$FITHAW(r2, 0xc0045878)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
write$uinput_user_dev(r4, &(0x7f0000000200)={'syz1\x00', {0x9, 0x0, 0x3, 0x9}, 0x4c, [0x40, 0x0, 0x0, 0x6, 0x1, 0x8327, 0x1, 0x5, 0x5abb871d, 0x1f, 0x3, 0x40, 0x9, 0x275, 0x57, 0x1, 0x1, 0x5e0, 0x0, 0xff, 0xfffffa43, 0x100, 0x1, 0x5cf9, 0x0, 0x5, 0x1ff, 0xc7, 0xffffffff, 0x6, 0x8b, 0x101, 0x5, 0x7ff, 0x1ff, 0x3, 0x0, 0x81, 0x1, 0x5, 0x668d, 0x2, 0x2, 0x5, 0x9, 0x80000000, 0x8e, 0x7f, 0x19d, 0x5, 0x8, 0x3, 0x5, 0x4, 0x0, 0x200, 0x2, 0x1, 0x1, 0xffffffff, 0x1cc7, 0x4, 0x80, 0x9], [0x8, 0x40, 0x3, 0x8, 0x6, 0x3, 0x4, 0x2a, 0xfffffff8, 0x3, 0x1ff, 0x9, 0x0, 0x2, 0x800, 0x0, 0x8, 0x1ff, 0x6, 0x7fffffff, 0x7fff, 0x8d, 0x101, 0x0, 0x7, 0x0, 0x3, 0x5, 0x3, 0x101, 0x280153ae, 0x0, 0x2, 0x7fffffff, 0x5, 0x40, 0x5a6, 0x4, 0x6, 0x80000001, 0x7, 0x6, 0x4, 0x8, 0xe7, 0x7c92, 0x649, 0x162bfe50, 0x3, 0x1fa, 0x0, 0xffff6284, 0x200, 0x5896c7cc, 0x6, 0x7b2f, 0x101, 0x5fc3, 0x40, 0xfffffe00, 0x200, 0x7, 0x7, 0x6], [0x7fff, 0x0, 0x7, 0x1, 0x1, 0x80, 0x194d, 0x8000, 0xffffffff, 0x6, 0x1, 0x1, 0x6, 0x8, 0x421, 0x0, 0x4, 0x4, 0x1f4, 0x55de, 0xb7e6, 0x2, 0x5, 0x0, 0x1, 0x80, 0x0, 0x3, 0xc97, 0x80000000, 0x72, 0x8, 0x4, 0x0, 0x7fff, 0x1ff, 0x0, 0x200, 0xf5bf, 0x7f, 0x4c2, 0x4a6bcc93, 0x5, 0x7, 0xfff, 0xc7a, 0x9c5a, 0x6, 0x5, 0x9, 0x9, 0xff, 0x1, 0x7, 0x40, 0x0, 0x8, 0x8, 0x10000, 0x1d, 0x4, 0x5, 0x8b, 0x7], [0xfff, 0xffff, 0x8, 0x3, 0x7fffffff, 0x0, 0xe5, 0x2, 0x6, 0x7, 0x7ff, 0x7ff, 0x6, 0x0, 0x2, 0x8, 0x1, 0x7, 0x200, 0x1b2, 0x8, 0xfffffff8, 0x6, 0xfb7, 0x0, 0x4, 0x1ff, 0x40, 0x200, 0xfffffffa, 0x1, 0x7, 0x40b, 0x0, 0x100, 0x400, 0xc95f1b, 0xd4dd, 0x2, 0x70, 0x2, 0x6, 0x9, 0x3, 0x7, 0x0, 0x2, 0xdc03, 0x5, 0x511f, 0x9, 0xfffffc00, 0xfffffffa, 0x200, 0x20, 0x1, 0x3, 0x20, 0x7, 0x4, 0x9, 0xb6, 0xfffffffc, 0xfff]}, 0x45c)
r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @dev, 0xc}, @in={0x2, 0x0, @loopback}], 0x2c)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f00000000c0)={0x1, [<r6=>0x0]}, &(0x7f000095dffc)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f0000000280)={r6, @in={{0x2, 0x0, @empty}}}, 0x90)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000000c0)={r6, 0x3}, 0x8)

[ 1912.876713][ T2463] binder: 2461:2463 ioctl 40305652 20000140 returned -22
11:38:05 executing program 0:
syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0)
syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x64000000}, 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xbd, 0x970, 0x1, 0x5})
socket$nl_route(0x10, 0x3, 0x0)

11:38:05 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0x5}, 0x0)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:38:05 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0x8}, 0x0)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:38:06 executing program 5:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
close(r4)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732})
r6 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@multicast, @multicast, @val={@void}, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @private=0xa010101}, {0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x2e)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8)
splice(r0, 0x0, r4, 0x0, 0x10005, 0x7)

11:38:06 executing program 0:
syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0)
syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x6a070000}, 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xbd, 0x970, 0x1, 0x5})
socket$nl_route(0x10, 0x3, 0x0)

11:38:06 executing program 3:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x7, 0x0, &(0x7f0000000040)="b9010360e000f0", 0x0, 0x0, 0xa000000, 0x0, 0x0, 0x0, 0x0}, 0x40)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
r1 = socket(0x11, 0x0, 0x0)
bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r1, 0x0, &(0x7f0000000040))
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x6db6e559)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x9)

11:38:06 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0x9}, 0x0)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:38:06 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0xe}, 0x0)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:38:07 executing program 4:
setitimer(0x0, 0x0, &(0x7f00000001c0))
r0 = creat(&(0x7f0000000000)='./file0\x00', 0x44)
socketpair$unix(0x1, 0x80003, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r3=>0x0}, &(0x7f0000cab000)=0xc)
setregid(0x0, r3)
sendmmsg$unix(r1, &(0x7f00000041c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000001800)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r3}}}], 0x20, 0x4000000}], 0x1, 0x0)
r4 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r5=>0x0, <r6=>0x0}, &(0x7f0000000340)=0xc)
keyctl$chown(0x4, 0x0, r5, r6)
syz_open_dev$ttys(0xc, 0x2, 0x1)
syz_mount_image$exfat(&(0x7f0000000180)='exfat\x00', &(0x7f0000000200)='./file0\x00', 0x40, 0x7, &(0x7f0000001640)=[{&(0x7f0000000240)="22e1be19b77e03daa6b9221f5635723ed4a0baaf7f82d95ed362b1c8d0f7160093c5fdd59b0b07ac6b6f5131b747d2fb95fa1536e92c23148e0fa7fbfbcef43f2883780fe3798cd7936700826a9ecf951748a2effb570abb1c5da648dfcd766209", 0x61, 0x4f7}, {&(0x7f00000002c0)="f6ed4410f5bece2ac415dcce66bd3e862ad513e3b0f905af84fdde1a5f15cc8f552b0e290fd310210fdeaaa876225f426c7e3e64e617d583b318e79c0765aae83157df51138890bbaf8cb92c58ff5808377f575978dba805d4551635a74acd6793fee0715db3bf", 0x67, 0xfff8000000000000}, {&(0x7f0000000340)="8c58b86161fe6d4d50ecb6a5e390744e3cf84d3ec4f8d9b5366df2780cbe83826b0dda828f47ca801c522f15c845e63ab85463c71755abb2d67a54ff1c57ef8789f5c7d5aa47a71730ddcd624ad4f71da0278781a0f505a59c925e947b0283a42f0503bc567d73109ad22abc18d04db9e55bb0318bd0ad21e0c2c6ea057036680e980de203d44a4334fdf37edda19ed3a8c97ff5f738bb0b5e", 0x99, 0x376}, {&(0x7f0000000400)="8fdf87eee95bc3291d92cf96c5bacaa9673088af2d0631624df61296ab447df44da668c530e2639bfbb7a9cb1812600a53594da32e119359bdb4a26fd216db1cc201861175d576567bef0d61403fcb794ec3ebecb85e90dfaf54c3fb94e5168a8483603a2e27777f4d9dfe282351cc0da6a66f39c2b0f5c154f5f6df9709cbe05cecde3ba11de66ec51e9a2ad4df19a3", 0x90, 0x9}, {&(0x7f00000004c0)="658c0b484c602953e26f70a0aa1225f181e55292c256a13f9a66e71a3d94a16a181daa4e48e300f62f8ac5c40159fd7d2078abbc9bc94a5c44660049c0002ff4ca3ea5c4f9951b073c6f4a424fb1fc867be9095ba5a8a6e339c791825724a20860a446ad99b5d33b8e7dca9344c3b8c97ebfdc5e1f1eb56f45a6c6c8b311feead2d0188e9e8b04e34d227714013b059a9862cf61b065415bc5963da2bfd0ecfec142449677417a1c1b210f669c", 0xad}, {&(0x7f0000000580)="90b3e20c99ebecc69bee433c34940119e27423efc57ffd47e8cbd2bda6ac3faaee09bef5ea9aa5933ee4d69d99df8f0a7d678838e4e32a5a88215fb85a6b3d274dbfe81d5470189b6bf4cd76e5c6ce551a822e58f54b52b7e9b1f1baf832f49f472dd18606a133ef9e154d72f174aa762c4fae5aa0fb6555678d81580ffcae1e9d84db4d34f3839e7937c7eff62c372f3f07d725dfd4aecacadd525e0992838cffb1ea7fce54c5f6f5252b", 0xab, 0x9}, {&(0x7f0000000640)="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", 0x1000, 0x8000}], 0x20, &(0x7f0000001700)={[{@errors_continue='errors=continue'}, {@utf8='utf8'}, {@namecase='namecase=1'}, {@dmask={'dmask', 0x3d, 0x1d}}, {@gid={'gid', 0x3d, r3}}, {@uid={'uid', 0x3d, r5}}, {@utf8='utf8'}, {@iocharset={'iocharset', 0x3d, 'macceltic'}}], [{@smackfsroot={'smackfsroot', 0x3d, '-/\n@X:'}}, {@smackfsroot={'smackfsroot', 0x3d, '$--'}}]})
read$hidraw(r0, &(0x7f0000000080)=""/98, 0x62)
ioctl$IMHOLD_L1(r0, 0x80044948, &(0x7f0000000040)=0x6)
r7 = socket$inet_mptcp(0x2, 0x1, 0x106)
fcntl$F_GET_FILE_RW_HINT(r7, 0x40d, &(0x7f00000017c0))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
r9 = dup(r8)
ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r9, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x7fff}, &(0x7f0000000140)=0xc)

11:38:07 executing program 0:
syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0)
syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0xff000000}, 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xbd, 0x970, 0x1, 0x5})
socket$nl_route(0x10, 0x3, 0x0)

11:38:07 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0xf}, 0x0)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:38:07 executing program 4:
r0 = eventfd2(0x101, 0x1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000040)=r0)
setitimer(0x2, 0x0, &(0x7f0000000000))
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bsg\x00', 0x400000, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f00000000c0))
r4 = gettid()
ptrace$setopts(0x4206, r4, 0x0, 0x0)
tkill(r4, 0x40)
ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r4, 0x0, 0x0)
r5 = syz_open_procfs(r4, &(0x7f0000000100)='net/ip_mr_cache\x00')
ioctl$CAPI_NCCI_GETUNIT(r5, 0x80044327, &(0x7f0000000180)=0x1)

11:38:07 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0x60}, 0x0)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:38:07 executing program 4:
setitimer(0x0, 0x0, &(0x7f00000001c0))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4)

[ 1915.116579][ T2564] binder: 2561:2564 ioctl 40305652 20000140 returned -22
11:38:07 executing program 0:
syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0)
syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x1000000000000}, 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xbd, 0x970, 0x1, 0x5})
socket$nl_route(0x10, 0x3, 0x0)

11:38:08 executing program 5:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
close(r4)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732})
r6 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@multicast, @multicast, @val={@void}, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @private=0xa010101}, {0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x2e)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8)
splice(r0, 0x0, r4, 0x0, 0x10005, 0x8)

11:38:08 executing program 3:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x7, 0x0, &(0x7f0000000040)="b9010360e000f0", 0x0, 0x0, 0xa000000, 0x0, 0x0, 0x0, 0x0}, 0x40)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
r1 = socket(0x11, 0x0, 0x0)
bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r1, 0x0, &(0x7f0000000040))
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x6db6e559)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x9)

11:38:08 executing program 0:
syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0)
syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x100000000000000}, 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xbd, 0x970, 0x1, 0x5})
socket$nl_route(0x10, 0x3, 0x0)

11:38:08 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0xf0}, 0x0)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:38:08 executing program 4:
setitimer(0x0, 0x0, &(0x7f0000000000))

11:38:08 executing program 4:
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000200)={0x7fffffff, 0x36314d59, 0x1, @stepwise={0x3, 0x3bd, 0x8, 0x7f, 0x2}})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x2c, 0x3, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}}, 0x0)
setitimer(0x0, 0x0, &(0x7f00000001c0))

11:38:08 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0x300}, 0x0)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:38:09 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0x500}, 0x0)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:38:09 executing program 4:
setitimer(0x2, 0x0, &(0x7f00000001c0))
getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @private}, &(0x7f00000000c0)=0x10)

11:38:09 executing program 0:
syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0)
syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x800000000000000}, 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xbd, 0x970, 0x1, 0x5})
socket$nl_route(0x10, 0x3, 0x0)

11:38:09 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0x900}, 0x0)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:38:09 executing program 4:
setitimer(0x1, 0x0, &(0x7f0000000000))

11:38:10 executing program 5:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
close(r4)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732})
r6 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@multicast, @multicast, @val={@void}, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @private=0xa010101}, {0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x2e)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8)
splice(r0, 0x0, r4, 0x0, 0x10005, 0xd)

11:38:10 executing program 3:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x7, 0x0, &(0x7f0000000040)="b9010360e000f0", 0x0, 0x0, 0xa000000, 0x0, 0x0, 0x0, 0x0}, 0x40)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
r1 = socket(0x11, 0x800000003, 0x0)
bind(0xffffffffffffffff, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r1, 0x0, &(0x7f0000000040))
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x6db6e559)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x9)

11:38:10 executing program 4:
r0 = creat(&(0x7f0000000000)='./file0\x00', 0x61)
ioctl$SIOCNRDECOBS(r0, 0x89e2)
setitimer(0x0, 0x0, &(0x7f00000001c0))
lookup_dcookie(0x5, &(0x7f0000000040)=""/49, 0x31)

11:38:10 executing program 0:
syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0)
syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x900000000000000}, 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xbd, 0x970, 0x1, 0x5})
socket$nl_route(0x10, 0x3, 0x0)

11:38:10 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0xe00}, 0x0)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:38:10 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0xf00}, 0x0)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:38:10 executing program 4:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000080)={0x9b0000, 0x4, 0x7e8, <r2=>0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x990902, 0xfffffff8, [], @p_u32=&(0x7f0000000000)=0x8}})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
setxattr$trusted_overlay_opaque(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='trusted.overlay.opaque\x00', &(0x7f0000000280)='y\x00', 0x2, 0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = dup(r5)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
ioctl$VIDIOC_G_EXT_CTRLS(r6, 0xc0205647, &(0x7f0000000180)={0xfffffff, 0x200, 0x5, <r7=>r2, 0x0, &(0x7f0000000100)={0x3035c, 0x10000, [], @string=&(0x7f00000000c0)=0x1}})
ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r2)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x61, &(0x7f00000002c0)={'filter\x00', 0x4}, 0x68)
setitimer(0x1, 0x0, &(0x7f00000001c0))

11:38:10 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0x1cfb}, 0x0)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:38:10 executing program 0:
syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0)
syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x1000000000000000}, 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xbd, 0x970, 0x1, 0x5})
socket$nl_route(0x10, 0x3, 0x0)

11:38:10 executing program 4:
setitimer(0x0, 0x0, &(0x7f00000001c0))
prctl$PR_GET_TIMERSLACK(0x1e)

11:38:10 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0x3f00}, 0x0)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:38:11 executing program 2:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000}, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$packet(0x11, 0x0, 0x300)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc0100002)
r2 = semget$private(0x0, 0x3, 0x0)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semop(r2, &(0x7f0000000100), 0x2d)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
semctl$IPC_RMID(r2, 0x0, 0x0)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000004, 0x10031, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r3, 0x0, 0x0, 0x0)
r4 = syz_io_uring_complete(r3)
ioctl$ASHMEM_SET_PROT_MASK(r4, 0x40087705, &(0x7f0000000000)={0x3f, 0x4})
r5 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000040)='NET_DM\x00')
sendmsg$NET_DM_CMD_START(r4, &(0x7f0000000140)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r5, 0x800, 0x70bd2a, 0x25dfdbfe, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x40)
semget$private(0x0, 0x20000000102, 0x0)

11:38:11 executing program 5:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
close(r4)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732})
r6 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@multicast, @multicast, @val={@void}, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @private=0xa010101}, {0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x2e)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8)
splice(r0, 0x0, r4, 0x0, 0x10005, 0x10)

11:38:11 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sysfs$2(0x2, 0x4, &(0x7f0000000040)=""/123)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)={'batadv0\x00'})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000140), &(0x7f0000000180)=0x14)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000000)=0x4, 0x4)
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x86602, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00')
sendmsg$ETHTOOL_MSG_PAUSE_SET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x2c, r5, 0x247544e0c8925827, 0x0, 0x0, {}, [@ETHTOOL_A_PAUSE_HEADER={0x3, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}]}]}, 0x2c}}, 0x0)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r3, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x18, r5, 0x720, 0x70bd27, 0x25dfdbfb, {}, [@ETHTOOL_A_PAUSE_HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4005}, 0x20000000)

11:38:11 executing program 3:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x7, 0x0, &(0x7f0000000040)="b9010360e000f0", 0x0, 0x0, 0xa000000, 0x0, 0x0, 0x0, 0x0}, 0x40)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
r1 = socket(0x11, 0x800000003, 0x0)
bind(0xffffffffffffffff, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r1, 0x0, &(0x7f0000000040))
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x6db6e559)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x9)

11:38:11 executing program 2:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0xffffffffffff0001}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$packet(0x11, 0x0, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$KVM_RUN(r1, 0xae80, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup2(r2, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r4 = pidfd_getfd(r1, 0xffffffffffffffff, 0x0)
ioctl$SNDCTL_DSP_GETOSPACE(r4, 0x8010500c, &(0x7f0000000000))
futex(0x0, 0x3, 0x0, 0x0, 0x0, 0x1)
r5 = semget$private(0x0, 0x3, 0x0)
semctl$SETALL(r5, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semop(r5, &(0x7f0000000040), 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
semctl$IPC_RMID(r5, 0x0, 0x0)
semget$private(0x0, 0x20000000102, 0x0)

11:38:11 executing program 0:
syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0)
syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x6400000000000000}, 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xbd, 0x970, 0x1, 0x5})
socket$nl_route(0x10, 0x3, 0x0)

11:38:11 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0x4000}, 0x0)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

[ 1918.937135][ T2709] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
11:38:11 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0x6000}, 0x0)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:38:11 executing program 2:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$packet(0x11, 0x0, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc0100002)
r2 = semget$private(0x0, 0x3, 0x0)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semop(r2, &(0x7f0000000100), 0x2d)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @dev, 0xc}, @in={0x2, 0x0, @loopback}], 0x2c)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000040)=ANY=[@ANYBLOB="0100007d3d1f8cff034be06322e8b36f9b0024c455205e7e5b5d63a97d58c0", @ANYRES32=<r4=>0x0], &(0x7f000095dffc)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000280)={r4, @in={{0x2, 0x0, @empty}}}, 0x90)
setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f0000000000)={r4, 0x8}, 0x8)
semctl$IPC_RMID(r2, 0x0, 0x0)
semget$private(0x0, 0x20000000102, 0x0)

11:38:11 executing program 4:
umount2(&(0x7f0000000000)='./file0\x00', 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @dev, 0xc}, @in={0x2, 0x0, @loopback}], 0x2c)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f00000000c0)={0x1, [<r3=>0x0]}, &(0x7f000095dffc)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000280)={r3, @in={{0x2, 0x0, @empty}}}, 0x90)
setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f00000000c0)={r3, 0x1, 0x0, 0xffffffab}, 0x10)
setitimer(0x0, 0x0, &(0x7f0000000080))
set_mempolicy(0x0, &(0x7f0000000040)=0x5, 0xfbb)

[ 1919.253230][ T2735] futex_atomic_op_inuser: 1 callbacks suppressed
[ 1919.253241][ T2735] futex_wake_op: syz-executor.2 tries to shift op by 256; fix this program
11:38:12 executing program 2:
r0 = gettid()
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x40)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r0, 0x0, 0x0)
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0)
socket$packet(0x11, 0x0, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup2(r1, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc0100002)
r3 = semget$private(0x0, 0x3, 0x0)
semctl$SETALL(r3, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semop(r3, &(0x7f0000000100), 0x2d)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
semctl$IPC_RMID(r3, 0x0, 0x0)
semget$private(0x0, 0x20000000102, 0x0)

11:38:12 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0xf000}, 0x0)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:38:12 executing program 0:
syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0)
syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x6a07000000000000}, 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xbd, 0x970, 0x1, 0x5})
socket$nl_route(0x10, 0x3, 0x0)

11:38:12 executing program 5:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
close(r4)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732})
r6 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@multicast, @multicast, @val={@void}, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @private=0xa010101}, {0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x2e)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8)
splice(r0, 0x0, r4, 0x0, 0x10005, 0x14)

11:38:12 executing program 2:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$packet(0x11, 0x0, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc0100002)
r2 = semget$private(0x0, 0x3, 0x0)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semop(r2, &(0x7f0000000100), 0x2d)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
semctl$IPC_RMID(r2, 0x0, 0x0)
semget$private(0x0, 0x20000000102, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x7)
ioctl$VIDIOC_DBG_G_CHIP_INFO(r4, 0xc0c85666, &(0x7f00000000c0)={{0x2, @addr=0x400}, "1ea4240bd41fc1b1d299320bf311f4ae6b4b91509d6a4ee95f091a6a48ec5f25"})
write$char_usb(r4, &(0x7f0000000240)="8bd9c703e35c93e4588102cd643564a27186f32734079c77e05027a3f315aeb198229331d48625d34743a4f683bbb9953ea533816e91054ea240fe5b3ae7077bf460cc4c8e360a4212c8fac5908bd65a7cc43dac71f4a70bf9cb80cf7b2dd06984da8570e810c2b2cb2ea4cdfdc2caf603afcff4447dddadf7cbbe1c142f1a3afbcc660755cc5db47d888cb9f938", 0x8e)

11:38:12 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0xfb1c}, 0x0)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:38:12 executing program 3:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x7, 0x0, &(0x7f0000000040)="b9010360e000f0", 0x0, 0x0, 0xa000000, 0x0, 0x0, 0x0, 0x0}, 0x40)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
r1 = socket(0x11, 0x800000003, 0x0)
bind(0xffffffffffffffff, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r1, 0x0, &(0x7f0000000040))
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x6db6e559)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x9)

11:38:12 executing program 0:
syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0)
syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0xff00000000000000}, 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xbd, 0x970, 0x1, 0x5})
socket$nl_route(0x10, 0x3, 0x0)

11:38:12 executing program 4:
setitimer(0x2, 0x0, &(0x7f0000000040))

[ 1920.408771][ T2772] futex_wake_op: syz-executor.2 tries to shift op by 256; fix this program
[ 1920.468190][ T2778] futex_wake_op: syz-executor.2 tries to shift op by 256; fix this program
11:38:13 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0x30000}, 0x0)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:38:13 executing program 2:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$packet(0x11, 0x0, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0xc449)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc0100002)
r2 = semget$private(0x0, 0x3, 0x0)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000080)=[0x200])
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000000)={0x5, 0x0, [{0x64e, 0x0, 0x5}, {0x2ad, 0x0, 0x80000001}, {0x843, 0x0, 0xfff}, {0x2f7, 0x0, 0x80000000}, {0xb8c, 0x0, 0xe5}]})
semop(r2, &(0x7f0000000100), 0x2d)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
semctl$IPC_RMID(r2, 0x0, 0x0)
semget$private(0x0, 0x20000000102, 0x0)

11:38:13 executing program 4:
setitimer(0x0, 0x0, &(0x7f00000001c0))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
perf_event_open(&(0x7f0000000040)={0x3, 0x70, 0x7, 0x1f, 0x8, 0x3, 0x0, 0xc0000, 0x1a9, 0x6, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7, 0xfc3}, 0x0, 0x40, 0x100, 0x5, 0x80000000, 0x6, 0x2}, 0x0, 0xa, r1, 0x0)
ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f0000000200)={{0x3, 0x3b}, 'port1\x00', 0x20, 0xb143b, 0x6, 0x1, 0x1, 0x1000, 0xfffffff7, 0x0, 0x7, 0x8})
openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x20400, 0x0)

11:38:13 executing program 2:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$packet(0x11, 0x0, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc0100002)
r2 = semget$private(0x0, 0x3, 0x0)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semop(r2, &(0x7f0000000000)=[{0x3, 0xd61e, 0x1000}, {0x0, 0xb7}, {0x5, 0x2}, {0x0, 0x3ff}], 0x4)
memfd_create(&(0x7f0000000040)='>\\![)-\x00', 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
ioctl$VFIO_SET_IOMMU(r1, 0x3b66, 0x5)
semctl$IPC_RMID(r2, 0x0, 0x0)
semget$private(0x0, 0x20000000102, 0x0)

[ 1920.712910][ T2795] futex_wake_op: syz-executor.2 tries to shift op by 256; fix this program
[ 1920.743633][ T2768] binder: 2765:2768 ioctl 40305652 20000140 returned -22
11:38:13 executing program 0:
syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0)
syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x8}, 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xbd, 0x970, 0x1, 0x5})
socket$nl_route(0x10, 0x3, 0x0)

11:38:13 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0x34000}, 0x0)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

[ 1920.922912][ T2804] futex_wake_op: syz-executor.2 tries to shift op by 256; fix this program
[ 1920.943451][ T2806] futex_wake_op: syz-executor.2 tries to shift op by 256; fix this program
11:38:14 executing program 5:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
close(r4)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732})
r6 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@multicast, @multicast, @val={@void}, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @private=0xa010101}, {0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x2e)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8)
splice(r0, 0x0, r4, 0x0, 0x10005, 0x60)

11:38:14 executing program 4:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = accept$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14)
ioctl$sock_inet_SIOCGIFPFLAGS(r2, 0x8935, &(0x7f0000000180)={'erspan0\x00', 0x7})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
getpeername$llc(r4, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000080)=0x10)
setitimer(0x0, 0x0, &(0x7f00000000c0))

11:38:14 executing program 2:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$packet(0x11, 0x0, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup2(r1, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc0100002)
r3 = semget$private(0x0, 0x3, 0x0)
semctl$SETALL(r3, 0x0, 0x11, &(0x7f0000000080)=[0x200])
getsockopt$packet_int(r0, 0x107, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0x4)
semop(r3, &(0x7f0000000100), 0x2d)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
semctl$IPC_RMID(r3, 0x0, 0x0)
semget$private(0x0, 0x20000000102, 0x0)

11:38:14 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0x400300}, 0x0)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:38:14 executing program 3:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x7, 0x0, &(0x7f0000000040)="b9010360e000f0", 0x0, 0x0, 0xa000000, 0x0, 0x0, 0x0, 0x0}, 0x40)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
r1 = socket(0x11, 0x800000003, 0x0)
bind(r1, 0x0, 0x0)
getsockname$packet(r1, 0x0, &(0x7f0000000040))
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x6db6e559)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x9)

11:38:14 executing program 0:
syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0)
syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x9}, 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xbd, 0x970, 0x1, 0x5})
socket$nl_route(0x10, 0x3, 0x0)

[ 1921.919327][ T2840] futex_wake_op: syz-executor.2 tries to shift op by 256; fix this program
11:38:14 executing program 4:
setitimer(0x0, 0x0, &(0x7f00000001c0))

11:38:14 executing program 2:
perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x3)
socket$packet(0x11, 0x0, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc0100002)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
getsockopt$netrom_NETROM_T1(r3, 0x103, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4)
r4 = semget$private(0x0, 0x3, 0x0)
semctl$SETALL(r4, 0x0, 0x11, &(0x7f0000000080)=[0x200])
setsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, &(0x7f00000000c0)=0x1, 0x4)
ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, &(0x7f0000000240))
semop(r4, &(0x7f0000000100), 0x2d)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
semctl$IPC_RMID(r4, 0x0, 0x0)
semget$private(0x0, 0x20000000102, 0x0)

11:38:14 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0xf0ffff}, 0x0)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

[ 1922.230704][ T2855] futex_wake_op: syz-executor.2 tries to shift op by 256; fix this program
11:38:15 executing program 4:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendto$l2tp6(r1, &(0x7f0000000000)="364321db5b5362f2453ada89308b9e4268b32fd1", 0x14, 0x5, &(0x7f0000000080)={0xa, 0x0, 0x8, @rand_addr=' \x01\x00', 0x20, 0x1}, 0x20)
setitimer(0x1, 0x0, &(0x7f0000000040))

11:38:15 executing program 2:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$packet(0x11, 0x0, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc0100002)
r2 = semget$private(0x0, 0x3, 0x0)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semop(r2, &(0x7f0000000100), 0x2d)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
semctl$IPC_RMID(r2, 0x0, 0x0)
semget$private(0x0, 0x20000000102, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @dev, 0xc}, @in={0x2, 0x0, @loopback}], 0x2c)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f00000000c0)={0x1, [<r4=>0x0]}, &(0x7f000095dffc)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000280)={r4, @in={{0x2, 0x0, @empty}}}, 0x90)
setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000000)={r4, 0xe776, 0x5, [0x4000, 0xd34, 0x2b1c, 0x9fae, 0x800]}, 0x12)

11:38:15 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0x1000000}, 0x0)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

[ 1922.550959][ T2867] futex_wake_op: syz-executor.2 tries to shift op by 256; fix this program
[ 1922.570557][ T2867] futex_wake_op: syz-executor.2 tries to shift op by 256; fix this program
11:38:15 executing program 5:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
close(r4)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732})
r6 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@multicast, @multicast, @val={@void}, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @private=0xa010101}, {0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x2e)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8)
splice(r0, 0x0, r4, 0x0, 0x10005, 0xe0)

11:38:15 executing program 4:
r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x341c0, 0x0)
ioctl$TIOCVHANGUP(r0, 0x5437, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$TUNGETSNDBUF(r2, 0x800454d3, &(0x7f0000000000))
setitimer(0x0, 0x0, &(0x7f00000001c0))

11:38:15 executing program 2:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$packet(0x11, 0x0, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc0100002)
r2 = semget$private(0x0, 0x3, 0x0)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semop(r2, &(0x7f0000000100), 0x2d)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x8)
semctl$IPC_RMID(r2, 0x0, 0x0)
semget$private(0x0, 0x20000000102, 0x0)

11:38:15 executing program 3:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x7, 0x0, &(0x7f0000000040)="b9010360e000f0", 0x0, 0x0, 0xa000000, 0x0, 0x0, 0x0, 0x0}, 0x40)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
r1 = socket(0x11, 0x800000003, 0x0)
bind(r1, 0x0, 0x0)
getsockname$packet(r1, 0x0, &(0x7f0000000040))
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x6db6e559)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x9)

11:38:15 executing program 0:
syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0)
syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x10}, 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xbd, 0x970, 0x1, 0x5})
socket$nl_route(0x10, 0x3, 0x0)

11:38:15 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0x2000000}, 0x0)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:38:15 executing program 2:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$packet(0x11, 0x0, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc0100002)
r2 = semget$private(0x0, 0x3, 0x0)
ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000000))
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semop(r2, &(0x7f0000000100), 0x2d)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
semctl$IPC_RMID(r2, 0x0, 0x0)
sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)={0x2c, 0x0, 0xf, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x66}]}, 0x2c}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000003c0)='devlink\x00')
sendmsg$DEVLINK_CMD_TRAP_GET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x50, r4, 0x3d, 0x0, 0x0, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}}]}, 0x50}}, 0x0)
sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0xd4, r4, 0xb10, 0x70bd2a, 0x25dfdbfd, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1ff}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x401}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x9}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xa1}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x20008090}, 0x8000)
semget$private(0x0, 0x20000000102, 0x0)

11:38:15 executing program 4:
setxattr(&(0x7f0000003800)='./file0\x00', &(0x7f0000003840)=@random={'btrfs.', 'nfs\x00'}, &(0x7f0000003880)='nfs\x00', 0x4, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000200)=ANY=[], 0xe3f629)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000080))
r2 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
syz_read_part_table(0x3, 0x7, &(0x7f0000001340)=[{&(0x7f0000000000)="5d6241cf46ef747f35dcc1c94d96f6a618d5f91bd363f1c5b783e8dbb8d81038e6c04167fd44fc4f3a5654bb061961d8e2020d41a2f99f99f7460fffd899c7850878682d6af1abf0d41c32f9d42796103b5315af43ae07", 0x57, 0x8}, {&(0x7f0000000080)="be2412cbd036b426451f5ec88967dd03d5677de6f804c578867134c3b475eea7b546943657c4703bef1d804369fa34e7f88eda1b24677b47db632fe9ad2d6357b4b72f584764c22a3b7cc39e6c8eb4ff31861f54c57d9447b9bdd397ea52ca4acadd89f2a954cb8d", 0x68, 0xffffffff}, {&(0x7f0000000200)="d7e2c7fa64e2fa4d4f0d8494b7623dc1a6ed46fb4bb1ec6804c3f794dcca4652baf602e9e20a845a385c853dab14b85e2a238c4ed700f4218129ae968dbddb91d13179e7dc82e9ec69186f0fd3eb5467245059c3d705eb39c91ac6e66ce8", 0x5e, 0x9}, {&(0x7f0000000280)="154bfe72e8510a99920ec25208ff01dc3e1183941647e78391a61a2eb04ec3fb06abfd497ec38873643e7ca3324a7c14f5231bec30e023e003f503f45bb4ae74c0d8beb2ca0952b0781f9306c2eab8afeaf733ee305bfbe5ca272167ab678040e09317f0f8a10cd93efeb9a8541e653d7933b79bd01983141fba15320c27432c0cd072c9ab99f8983067334538606d25", 0x90, 0x3}, {&(0x7f0000000340)="3558726e80e1c14f638cab5d53a26495303f78a07d106e4a14f42ad2679a3fda52753c7107a5102b2e2f027cba22760458206b8bce8ee5d5b266a9f930bc4becef87027f7b04e86aa1d416566003244950932870e8669406abc7cbabacd1772d6b3d2b233e33afd974cf0345be9a8d012c0fc126aa5ac594133c12e8934f428f971e3dc845a336898a6a436bb7ac809d777187fe7890f21e0aea7b2b32253f8dd60a5be494792c664f78e6e9d26f18bcdbb8142deab59d1bacb8bd28f9081fc558cad9f77609d02c5aa889902a353f5bd47f92ac29df1394eb318c83ec0d2a9ae001d40ef4fc6acda8ec81c0846c225c0c7ddddf28fddc5df85252efd1913401d59b05ceb12b3065329d6ee81768082a17dc0db802b63986c09e7cc9dd970b5fca1738067a9935d6c55bcf8e0250476c3da929f4a15fed74ee586a7f40588e04b85851f1aa23546369fa2066ccc7a69db63a52e0086eae3d362fa8db7caeab73b772f20052b061f9e8a5141bb931652e90a9fed111852efb8a61370809b52f6acc73627c1dac44a89f98974b44188ceea4507c67ebd1f10e897e8bc49466430e5b52035930f178cea0f3d7e444a23513782a727f34ee3d046c3ab2b003995685a50ac8ea3adb222e31f7b72f104b13b857668d2cff750aac6a6c2b1ea7711cc2ed7b9ac15c78a30e9b972fd601af959eff1e7d78413f787ec2cc076ef0659002600281d23bdcac501ed11104badbe3e579f42f0b919ce3df502ad05d187264eef53efe75636a37796753b66dc17fa3e49dc8d0e15b98ff7350f9126b5e1cd35c8bf8bf5c00c8a21981becb332ad9512734208c97290b91794be0dcc5bb82f0dbf529a8d3c2cabd11cae28cfc7ee143dbb32f127011c1fb76ed13787bb5f80bb8a3cd1a057721b05d2a8dddf22a80ba888b37fe310b0381f60e4991c70790057c76a7cff86cd43c93e2a0d4ecc7b9af93a283c3ecc0c4f823956b9f84b6bbd0a050a44db1b2e4c7b1d37080704a919a839566317245ff70366b44e04b7e53dbaad7942ed3cf36ff9417aed7e3ca270f9334747912524f96adf916c261fb413c6ca85a0212f26ea6c8f7a9b5dadd09216cbb74306b87d8f85909dbfa0a0dd9a03baf52eca51462c83d87d9bbfb9258ce386e88ea285477ff22aaf3d6a27aec1983e572d7c5dec566a75fd1b997d88078e0d969d7e759dc269b6cd3ae9cc55eda27c239ef3ec25a70c317bac9f32ec4ad08b803e1ab8afb507db047ab6a9489410df3ec368d0a4697c1d2bda17accfc644962cdc1bb6464959eb5940c1d4bb98572e1dc29a8556066ebf02eb05e8fae2dbcb6c988d8661a1273c28b7c519b722d66069483159d22bde1c9aa8658b61bea604a4e755e36e1df51120b788a267afc66f6f7e34e1f89a710ce038f24640b427ffb54fb1aa4c0458912a3726c490e356ae638cea904ca1d36a1d0fb07043154b4961ada370130721203aa59b973348fc676845f6a47aa072951c10a0b552092f8a23d7eec1b1f0e33aab3f8626caf1bbcb3084947a0f8859abadacad852108b19a263eb1804574429736740a9fc6883d9e25b3b12c4062d446d7dd86977a843541cf24580daa639c0eee717e16693b3a346b7784515c175b8d166b46de9376eded6c3cd912609b9e7bae428ff97a058f0412129c184077e175d80c837f69ce0b9936d7452b3e6dab2cbcdf46be1808923e55e9c4aa2242cdc554f87fa33df4ee196180494d79898abf442263b50c1d38d2d6453ed7fe73e09dfeffda30ae002879ef428ee52a17fb65960cb97b56988b827cb4d67efe154272ae78f3925f8a1d8eeaa248e6dfceeb2a24054b1c2d4d2a558e3cc8d1bc8e14682831ba44b0eb7242da7f7a46ab8e1736d310c895e31cb6a8cd1104e231ab326e18196c38a7c4250302c1b9b9637a67fb17c3cc6198e7c3373a575dd87aa1f3cd329411eb31dd53f4d13c7c3ebbc60371f6787e64218e4f3a708975ae2a3e4c19aa9e2a93a35cb222b31dfcdbd14e420aca7082f5a03bb5350ad88ab578db119b9737c00800f8032591809839eaaa3ebeb0c1d8d96d1c3a3f382ac37ac24aaf16c95c023308f884227c70a2746f3a2dc2301b91b8474ec41cdcda60fdb6f5a6a6896bcf238b50b355aef20b8521586f49eec0d495c8f53e364c79d7d4fb98c70e509bf5a45e2263e81afa3b382015416b3a7382bac525fa76c72bfc2b02bdeb85c29990acdac341cf3ce42026ffb1af451fb0e411e4775ae1c11f6162e12c8b076fd567194a1b0c7be88ecb50f68a4c6c953eddfd1c0e72988ffd61f65b36d4750ac8340f76e43134e4edd760df9bd22e62ce3b55242e44cc3ac7d0e6ef3e5b1f82a72dd07d410873026f5b279f1d68e74920b4f5855f17f2a747880c643af9efa767f5a40e51c5db73bc68d029bb62480f91d786904e9638d952bce8acbee1068c3759436da25df95390287dde6e498d9837727b7e432cff9a00d1fe8bbab7342d86ea353f252c3059a5fcc189556144f9196539390a54c5784b0a4bfd12ce475662303e53d49e651d81a5164296b583dda75a1dacf060b9d1efa46d8aeddaa663aa26b0afb33f6c07106975a48d7d3fa8264e9cca13a628147bcc2eaad05f9e44f9e182221cf13a2450049b8adc8221142940bdb1c59d8920bf0db966390cead598d13d87398d5d3ad8d431c53660f88a55e4614ca139cf71adbf83fef3f3fa601d12ec3096612f4bb51e8c74f6653e205b3d10ed33e9d58417418cd2d18b8100b5696cc9ba522ac460f0fb76cc2601b363c99e9bd1990032c194d3822d7894ec217d0963e4336765459168aea030d77f0aab8ac1acdcce82c93e52ac2a77f42bc2db15c83065d00d86dca34cddc571a4b07c9a60e46a3708e46b659c9ae1088cb92166313c3ff6560074e4e62bc18f092f4b9d5a9e03d68fd0fc7750e1ad7edfefea63063112ed2a74540397a8a01ab1f5626dff73d01c36680e206b4b34069b6759d9fd8d69551a2ff0fd770a2a3e6f198fba8750533db3fc34f02451eae2cd19cdaee015bdb8835bf73dceb7a4375e5843965381b0447936f3d6ffa0cc33822b02cf349e7076b391d4bf45ae4913ab443f07638b88323ead17ffa9000dd5038774872bf9afd2645f6838171f4e10cfdeb2756b4c52e21826575c324b4120d9f7634082dd068dee0a32747f544beb631776a127a8b07e3f463c709709bfc37eaceb28dbda2fef3dedf0dd701511c114d0c86064d0231d27958330de36bd6ce9aa548aec26cfdde371c495210ee2f0aa644fb1a4c775194902e911a3d7324db66272a93fa8975766b85edad5aa7f45b6425b58a62320bcedfc62efce5eecdd919c2aa1832ba429c223399775dc902d1ff0a082d44252e190246bfe00454170a09f57e38f25b570cf59027786d9d5b88a27277a9f50cf8f9827b9821ba95e07e17518f35992edb764e2bca8646cd06459d0c7dcd2dab684e28fb07f8f954c9e0d9cd6511454c5ac823338a2dc3b2111fe5445265cc982c0917208ce71140a23b9910c49bee8a99dbaec681c929343db76ce58bfe1bcac782bad9e2178635eabf87603a74798d7fc235dc2a1770c37e02ebbcdc85cc5afa3f67f7ad3bf0b9612868e4d821ac6faf77e28910a0cf43860d0a348f05c852702af885546b2a9a3cf12276da3a5e83eea5eda7b97c1d4aea15861ed34561c772a20951afb055d9e9b08816813890c033e43baafbfbd83c0918e1e369b95ed52bd1e2d98d62266d52ce63166e1cf1438a8f215195229c1c45aafec3ca28182fc4551bbc063693458b5a8649a3dabb23dfa03ec2b512acbc4000d53e3086729bf142f631317f398637bdbb3bab55a4c2fd0a4e37d3779b9c3aba79d475da1778279a8b7235cf4b71dfe2bcbf3253c0a72062c98afd776254b588c0d376fcb6f3d12c4bec357cd5ec6d5f6898d8d4e6233600a005cd3cfb18709f0277d6732cfdb06a94b4d7bb174d13b679332f9c1fca814035eb781e2fd1c55f14903a8ce7da9032dc574c3455e25126843e3cbdd5303151cd1fcc4ab0e8506e688c8955c56567e209b5b029171a82d5e338ac91e75fba50811729b00172eb37bc0e1dcf3bc192ad3d6fb7de67af0aa3be29922b265cb462ed2b2b9d515678f8125f31bb9442d81bbdb36bd295c1f8abd12857c5b18ea530da096a60dd87a0f07f3cd3060dc7f1bf676cbf9a0179965ac37f576240b43714758fa88e483c5836c7c469ef7ad2dcff510d17d7ccb3a743b0f80d68366e841d2bb3eba36ca7fa825433692760b9a0a2de61abb80c43d3cdd94f08102a9169205815727c49db320b6be56606804f715efca7fec790c4f84a6c67891bc086c5d49e1ee29a6d286df8fbcc98fb344cd39860c2d38a5ed10d5e70d82b291680b63ff85e217669929abd0b0f3d58879db3eb2ab03652809aa8d8cfa30103e244279cbf34cc21ed951c6e92c0bd78ece29e22472f52196a639b531b9530c93eea3975364d108722eebc15d84d2f5a7e9686ace7429756388d479b6eec998f3f82e8c6c2772f891d7fd67ecaa56eb88d2330af8289b9c039c7382906017464c640ab2d69626897d70a92773d2c38b5386b8519ee03f2cffc9a0abb4d36e05a330561fd50e62fb4f4115da5077a202697fac4a0da31e97fe8f80181cbf80e244b4059df64937458744d43a80b0ad57aab1cd460518994ab028098ee46163a0ac87d59c095d01f9963ca7f721fe242a194e8215146d3ed2d0c4d0b29b82d2059a354ae9c225e3935de145acd31e7d4e11ce8ad022b2edaf662d6f10256e4e3247bbd9e53f1f8ed326af13aaa50a5172d0093afbb5196efe46e014c95a1c15cdd426d22d40dc04d82eb2fc3afe3552117a4cf1c15cc8281656a73144054140b048ab0e754ccb38c473e88fcb028f8425ff4a665f17b73a146a3a055bab7763655184874b2c7ab3abb3224fef43723d0af2659ede89d2140cf47e2ae50a1cf585f12ecce72451aa0432575921c1a7ef2749c0c201fb1bcb9c475ecbc2fce5e40d1b43d2b9eaa4491c70789e881bd9efe1beb3cffc04c232e75d10aa70627626d152ee3314af0fa18dde85ab760b2af06b5dda57cabceada7eb4d0b0e2f6a2c4a781018064c0532775ad506cf605d2155801243f78cfece164678b2e1331c3af8ff73860905189daa24d295e25de8bcea6473ed1b9afbf0bf7ef6633ba612dac1d8b4c5674dd933315d0ddcfa47613abd912916058296e14aac54f98e34870f7f38985b0f1574eef8ebf704311f50926d92a13e9c120402060de2e661cb5429fb24a41c43242648948edcc00ee77a75ef2237b76abce11ac5a41fcd78198a68ed0f9a5fce2336ada863bd04f7869ed029d6f59898b6b5dd70d8d16d100109b40d31f684d2e397e045d6444c6b87d43c16cdf5e4edad286304cb8e3fb2ef823102c45b976a6922b4bb057f6482e4326018a581b4fc1f4de2ca1478f216049792093aba3ea3cd92fd619cfcaab115aa8a52e273d4b9e07defb16053d7879a586b45a0c16b235c2072268a93bc5aed3df1b4a31b48e65b8fad49ada56b83287422c6b3e1ccadb16a1a89234876d65a88557b55c0d517ae21c7613eaa1806b275819360e6d7b328e1d01629c1aec6c01b5cf09b21465d3a434fe45bc2e907870433b6e84f40918d0bf13571fe1c91b1716b56fbb853d795bb152d038f2856afa8d7523290598b787c2f9db1d4e27c5c6fac8091deb6759ba6b81312d6d1454c9ba9d5b487dded646a4224ae61ce1d38f94b1302d85b76", 0x1000, 0xfffffffffffffffc}, {&(0x7f0000000100)="23fe0b922e15", 0x6, 0x1}, {&(0x7f0000000180)="f08c34ea1252e1291e4980078a638303e72db424b38bbf2b9150274239ed25ef8a0b0f31838907a646da5e54894bc2d789b9da7f74ea", 0x36, 0x86d6}])
ioctl$VIDIOC_S_PRIORITY(r2, 0x40045644, 0x2)
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000036c0)='/dev/autofs\x00', 0x84080, 0x0)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000037c0)={r3, &(0x7f0000003700)="96f529c17366a6c257b7ca0aad33b9d463040e928d6f4a63a5f6c0d7f2fa0ddd86f3ac31c49481407af3f0bb334be8bb5bfb768123d1bee1dcf416a9f7db6e7a18c7df055a3d4ab62a0d1ff3b27e547b3e1e144174cac3e3681ef23357611714b1c35d8ae17d29fc183ffe993ec4d03bfc8d58513e3ef93c7a5359c755a341fcc4ee81726c14840ae1f5bd71ee72885e01b5b3b0f6581c0a"}, 0x20)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
syz_mount_image$nfs(&(0x7f0000002400)='nfs\x00', &(0x7f0000002440)='./file0\x00', 0x3, 0x4, &(0x7f0000003600)=[{&(0x7f0000002480)="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", 0x1000, 0x8}, {&(0x7f0000003480)="5b9f84f0f6021734f9602ce7d185d74c16a5130a811280182f01c9eb28f3f60d911428387b683419a72fb7717e858db645afc48e41bc412cca54dc24901b8bedc6e1fa5fab22936346eceb7906168ce3662882a918b68238133da3ca99dd9a6289de8a518864afc861ea7726391fb128812978a597d8d363ccb256cee76fedbb806ebcbdfba304d32eab0dcb8df50ee48e5e09309d5f59d64adc4d72e90c16fd96139843c9e31f209667ca73cf476b0aa080f6130e3b3f2ab038857eab16bf41ee", 0xc1, 0x1ce7}, {&(0x7f0000003580)="e09df833ee6f5381854fa9d0cb22cb4429c09d50d2340cb03d7d2ebf693c7850820e0f481a602e2b38a4eb8983b747da5dfe255b0ce3", 0x36, 0x2}, {&(0x7f00000035c0)="75de0c2608d9c17aa7457aa3f28f0b928c7ed96f3984c4", 0x17, 0x9}], 0x80040, &(0x7f0000003680)='\x00')
dup(r4)
ioctl$sock_proto_private(r4, 0x89e3, &(0x7f0000001400)="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")
setitimer(0x0, 0x0, &(0x7f00000001c0))

11:38:15 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0x3000000}, 0x0)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:38:16 executing program 2:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x4000000000000}, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$packet(0x11, 0x0, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc0100002)
r2 = semget$private(0x0, 0x3, 0x0)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semop(r2, &(0x7f0000000100), 0x2d)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
semctl$IPC_RMID(r2, 0x0, 0x0)
semget$private(0x0, 0x20000000102, 0x0)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00')
sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, r3, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4ef}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x40}]}, 0x50}, 0x1, 0x0, 0x0, 0x20040001}, 0x4000)

11:38:16 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0x4000000}, 0x0)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:38:16 executing program 2:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$packet(0x11, 0x0, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc0100002)
r2 = semget$private(0x0, 0x3, 0x0)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semop(r2, &(0x7f0000000100), 0x2d)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
semctl$IPC_RMID(r2, 0x0, 0x0)
semget$private(0x0, 0x20000000102, 0x0)
r3 = getpgrp(0xffffffffffffffff)
tkill(r3, 0x17)
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x7f, 0xa, &(0x7f0000001600)=[{&(0x7f00000000c0)="e94c3391a2f827ab8b45fd5eccd14cf7d36a41a30145ea93c89cdbc08a9bd05c643460", 0x23, 0x1a2}, {&(0x7f0000000240)="7166fb5e2accf1ae222548d199d2b10fde17011c592c593c9d7277e918cc9466ec2ef84d159b8146b13b6b350e72e0e65ed79ddf54ddd5e4ec76f57a58b7b1ee50566791faaff771d9a52032e0c518e057dc3a8bd89054e10076ea027ea6e47b9f19ed6ead549e9be12e3b52753d4342a9f88a4504ee17c6f95bdf023e612c5c93619884bbd8e217836ccaa5f947fe0f6eb4fb73d980af72ad5b36c78387bac48c94a8992070709f8b10e48be8bc25d087c646b826e941f65f4126580f30a0544b229a1b82ef01ff447a22b25de2dfdf299f86c6000797428e4cb101407b97da50279c", 0xe3, 0x800000000000}, {&(0x7f0000000100)="201b7fa0060d0c6e4436d3b528a609c1e416079b6e12f4f7cff997e3a87c3150", 0x20, 0x81}, {&(0x7f0000000340)="1c49bfc90dbb8cbecde8271c4275a3c5307d280c333cbb41989cdd4ae41ee6c521d18c1fcdc5d429ddf75499e75b5112e673e31fdc5af56331eed53ad000e9d55b137a16461f35e52f8d0465df4c80d87f38b56ba419ac2ef9b9cd8366a5556e8d8b356ec01593d6db33dc7ccfa8f5d720ba30a241ede34ed4e6ee00bd9ccd00bf09248d198966574a621f60a5ec1928dabe28ecabd2c63a6498a62d48d984d8", 0xa0, 0x4}, {&(0x7f0000000400)="56201f906d269b4066d78702d9e847bd65ccbb204c2505a518a647d906f0479946481098190334823a02e34feef554d2c19c9e874cd3ed3b8e873f060d8b80aba8713e6874911e261072883e8e9e194d7c05791d8c0dd684da3bc69bf27f97815cbf2356d91128d5a621a1fc41fda96aa1417fb8c33f2cc2d757d37550b8be81b9a0656e2942b7882769221777b29561afea689224f54b8fb1f7e5c91c102293419d14603c352e2bb6c70a359f5f17b808963e6b1b67fca6ac32bbd527e28e3179c35fa5fb7cb4bbf0efd33c71daf52306b7c292b31aaefdd2ad05a6a698bc459affc33644674e967cf731e2c9ae4c6a2c702ab9fb9a31c4aa7cbbbf9fd6ad506c1fe038c01bb787d977d2908d5dba802a9a63c888f76c9f2e7d9e805eb8ea851f91284f81e4a9c07dfbbeca45d09640e044587f4d14760d02e97491ab25bdd85a7c602a1cf56d0eabff27cb17f1166968ce42c62ebb4a440f5168e780b5f7297e1c5ac53f27285974db3b0b161432f4643b9e4df560d729dc3e632f48f2ffeae5391bcfdf60e88d891c53c14629d9df9c39406b7b35b0fcbefa1f4bbd80747a78b786d6a518ec1b8948da8d454d604f387a1a984002dbcf47ff86d4435bebd686f1bd5bae910bc1d6295bc809639ed0c915a0aa8919627adcc17cf30936af1f01fd0b5b7a0e6bc1e346902483018e1f7689d5fe07455124f28f714728e8e43199b9749098471a0a44e2312763b883db4925ec639e6670251464ac4151a3f1915c5e76e09831ec43bfe8ae40c24b9c385a057f280d1eb2a980861f4be4ce37ed8b4363b825392e9ee8c012613c7debf73cf2228e73f67945465b5e493321de6d8a875fafeccafbb01b965442cfc8735cf53a3da6ea45cc41ffbbb441fc5dad783c74d3b7502ae2122bc08d52259dc5c08684c167a2cd9b7715c823614dc7d58251dba1b5fc995bc06e4639ade9d7cef180f1d412e47b9cc75650e4cd0ddccebc0e5cd0f4a968d781f1e8fcc8d1edc58d1705a9819ada53e219a99fac81c8e557702e83caec41a28ae4fed8f3a59f985e0a698f2f50c59e1cb8c90fac35a594d0bc8be91134357007ebfcc511a740a1ecc8d82590f795edc63c00b7590af2e9fc9fa9cae8e053216115e8a11e1b47c7f7481ef12afa462ebff1c48f55d97e9136381e3cc4905cb42fa0b169e9f93039635eb6fd5f5356fed81aa37fb137e9ce58171c2be3a92a7d52bc18ececa7eda20907ed4fe8a6596a292eba17b2fbba4e92ed1d8abf8b9406493cbe85f911929e8ebd95f420ccc737e5fba0513977e375203de7aedd5c0fdb47763d943a5263313d5193a1d07047de6b12d72dba63e1014c0ddab614390dd410a2915bfbe13fd032f8aca9c6548191b4bf551844bbd0d7abc732d589e18368ddff6d6be6d55ba78190b19aff009c3d6085034a96731a1a1016904034483de12865935755fa96f4cd4ad7242a140f05b70772d1086c921727dd8533d3210256c4f097c9c1bca8c3b3123f54540243cdfd2391dbab55ca67c9f454796b396507120581e91256679e08c00d1d4309e180a7bf12f992d2de62d31dd34696a76d6043ba4ccae36abbc5187d0480c9491a5091b7695a3d90987eff677ecde819939c2912dcfbdafe97f3a8986c4697dd3e3d86d05c0969c8498029d1204d195afa661fa60e018db763dab113607522d3d65521a3d587c75c31d0bcc5b0428e9a6bf8fa026719fd82d63df6864a80a05a064ed4cc57d357588fb80da7cb64faf03793bd744da73ee281915d2f889a78577dfa7ea622ceb8adabddf85d326697985c5daca6bfb1346e410b9a02eaa225b0e50438784a606432c953032a1bcbcd92ec91f6a0033aa2f531202e2d8707ceae75e5706d8f434a89a10034e195094095a4cdb1fcfc84814bee2971338484ca31d882bfdb152e1fb7eb375a94a91f517979e86ca38424a0d373ca2aab42633e2b95349d4372a5d5d653b764c148ec601c6b7b657a58887685588fc71d59a9c82e47528eeea131d45890cd2bc7d431d6f3926dde373a45039a02acdee0cf7fa07059d380c326bf397785bbf1ce3e431f4c5129123a8fc22eb4ff3bd8a91599e9e7049526b41a1a14b8d0682a14100a0c3460508a925151e4eaf61e76a39cec31c2281c8f5dc5871f2157a1ce45de65f78832c571bb3a5d211bdfe92e8cfe03d7de77c77083d4791415708e1974b9ffdc3285f6a7cad44542a403fc4bb0d4e1204f24a0514bb948f673cddde7610310e9511652e5ddd97519a5302391e57c9409ddd30553b54693f89c65ff400173b9cc081201e853326a28b5acb88232b8d334617e31f0df748d9033ea9ba8b0de168541825924340c33627d9a07c9a4159cefa4ea689ef65504dd41ec21841c97c4e22d365a580fd8b4883bf6988d39e4183ab774392df131cc17e1fcd5c9b22765260ed19c8dcd8e0a2af43d9d39f54e088d399de3e07b95cd53c633fea35677fdb27c842ea703aff419abab7900975aa8e74a72e621e69cbb192e6a20f096f1b6472c2848c29d5e533e83fc09b52ebb0039cddd5468464201b952ec9baedfcf8d9d42d671cad89dd2fcea52661464f55a59e2805ac2fe9d2c9ed25d11a31714ced257e2e1149ef3f82a77042b0c6ffb7b68664b94f908ac9123c5832980c44c132d663a7fab12667a023aa8ff012aa39969b10d4a7a33b3969cf108b0e39dfd856620f274d2f3191783c25319c92fb7acc4fb26f2c7b47857bd047ecee95fae563294719c659b7bd64fcc6a5d5408a062f5bbb0f6356d3ef76c7373512d37593691b4a0e1ddb115d29f8bac27800c156590bb426edf007363e07eaca15f81e2af25f8b5025d39040b52ab56fb1cfcff402bfacf121d4935834daa79d741d5c8309c7ab7511e5b2c9f551bda4900bf169126a0ffa90be95d97cac33feed8f372db4d8bf7ef8ff70971b5b88ec445c478b874a2d8fd25e4f2b28acc537d7a256e018eb9320aec144f821695f0d3b440034591fb74723fda26131a8219d370ead5f2039b2bbc503365cdad02aeb2b57fc723f1a42eab03808b7b9072c8c174ba2a80cbefa7b4144e78f53b9fed5360b77f1ed58bc044c08c3b108a509f3b7acc40a1fedb4e0bd0a02992fded2710b465f4b8330599c551ac2e7373b4cbaa5ec8c16d6b07bc984967d866ad182cf583e50b8d9810e590c0523fa6058a2654d75f229ba6121567a3ec34d5e17b857646751ed2530f6154f9b33de24c3fccda17b4c0e26d62542722f6fdbdbf4443071126ee03e710b3e4424f27448152f0a4fb28243da0f73c8d769af3888b076178e426fcff14ea6ed86b24c45c38e9b7311bbdc12b34f9d18000d5d80c5e36465414d5cd564c01a053f189cf69b081b6e06aa5f64a71b94336109d2d6496168bce022cea0fc0e1ef930393341f20999d5d91840c6566c815f883a1528766e2d8dc266a1483624b496ab3b17b17c898b0916a75865175b76cd5e3b38466878f7bacab7548a907496f47147c314d578017a8d40078211e6e8545d7b82630ad1bb4ccd502612b1f785136cbfcfe7558b5c90f92816b71ae8b84b883da69c26859a3f0848f0be797cd05dc1b1b43f1d95f496ed5f4cb5067c5acc6ef74898caeb79c21e3b816b59e1d588a9560ee69303295703f6b5c7fb788f290965822c7cf2d7971b1118db5f9e3661c8de9fdd40638a9c0fac6d621f8caedcc11703017078ee4d32d1bfded26030befc9355826b6d80e872add0569d00453beaf1e2825858acab79f80371deb71624f1f6d34f727d60464c27407389bb8d17e8b0c04ead7ae5ee3220a3d81073ec53bdc7653dd54b9605302946ca33d9556367e033391acb86c65d26ebb174cea2aacaf09c79ee8a063eb9681684b443306c07a7949de4f0632cd279b236ac64c1989c66333b7a275dc288700822c1bc62d668544f23a15460929c611a040fd6ecf4544bfeaf41208941dbcc5300ac2e5d8d57d45ae41df016ffdd3c9acff56018afd721ee8fd417962fbe9a52681bd5ab6a1f26ec79b825d2819554af9f58f9d18b2e2d6fe2751f68251d0d3ac33c80e4a0908c1bfde4f8baeef3619992931591ee67f4f527c56d368fc87edfe6a4f7b2b2ee6c7f3186af9e01fad18e0ed7a83e8960ed662aa78762fc5dfc4bed71527fed9e913f5c0ff884ee88abe741c2209903da350683cd48edf79a0e335717bd9bec510b582b1139a0e7529d0ebb8a5dde948bf4e6de4136398d60ac9b92dd090213a49dc6d5db5746f65178190292c33c70a53af986a78ed64c45234008a32dc449d2a19eb99997b5202929c84e5786431e117015cbad2c6d8749e4c6316f86a43b2f9c82572838db44093046e3854322dec52af9205c1f6a943fd4bebca6edc4762b5994e9518f54637fd4bd145fa0f91829df1e320514c6cba9bc0bca78014559c8d4c986781f4e607e0dcbb4300cdeb66244cb2983d98f984e4026900efdd200e5b09dc0033f2f54cb59ea39c88a705c08ed531244b00691f8a0a9897756c147fee309d31d7f2e7e0d66c79b7ba7b438bc2e6e7fcf9a94949af61e06de60fd6a2add36770cab9620d959dd15c7586c988fb69db388a222239522e39bbbcf89b9866e773f26fdd1a375741e6a49e32df40a87ed49434b9d831da1fb92be1feb25316579a7018d6d086ce8fb608c8f81721137ef73f53f9cf5497fe3fc17acf9aafe54b9309723e2babe25963af002216f2bbc0670e13e7794bc1fc50b26c5bf2a7669b8ee20cf4c4d1df21b6b21787650dc5e950f10bf41ecd378078ec0c277517c6902bf8675a7532cc3b00b9154f59995c7740aa6f1512a2cd10e67e29d9a268abd38d929aad95cd4e9001c00279db922c43061d7995eedef1dc2060f73f48f72e5570b4817319be6a84ff27358e1ff755ed58ef275a43b7b483a041c605844c4d82c53687a7997f62498a11c704f655f1ff50bd4333b6e9fb930720d7a0b5af50ee8145316a41cf51331cb43fa58faa6fc891ec699ea2f9fb1519fccc9c0bc9549e3fd41d82a263ef4f3bdc35713b56a37f946efff850706a040131e287bd28d795300bda626ef82483b7e59f641759fd522fa66c0b1535749b863440215c5fcf281d1c82824c91cc52257de634654657ff0606d070b81606dfabe88e5b258f27b082ea6d5df7b169bc65f0503d088d18224bfebe3fce137f2f52f8235902536282eac4382456a5a73c493ab056c6f4183ed84f8943f193193a5b6f9c49db902c7ad81e13bfcdec29c2221a6f88c1e6e81276c200ed2eb57e272b7f3c8a2bac43ee54d9e30e6223936fc6a10eb26ba998001b03cf812c7d81cc4979efe712515ecdff83b0397f6b889e2f90c8dc6143858212cc469a89ccd9e9ca912154257eda0dfa69de507f796675cdd4780f27ceaf3b9a387d66cc52c4cfbc22ec0b14e8290aef5e276106e50e3b6076b8ab10b991b3cdba2dfc9bc1275e3e73de3bfd7e4171459e8386426c775b4024671f6205dea3bd52d65bb427b0867d077b99877c9df16f1edda1f786a5bce774e0a67d380e1eefd6e43db28fb0a97de0bfebededd8ab2bbd3deaeab16de3df521b394cbd13c991fdabb16f17a2f7efb595a3fe2c90a621e5434d14d0b5cfec72f70157a1797d6ce413318d056ca2ae2f41e4a08777140add1d7620faf17fe140cf962487248499c4eff6b12f347aeef07bb11b177c2692b5b0654f7a0e828d4cf3ca7a3f9465eb79199f177148a8ff26cf11d49099f536943f5f59f450d8110020404b7a6b32fc22c4210833fc", 0x1000, 0x8}, {&(0x7f0000000140)="51757222e016e52f9b4fe18426e26005e779c83392dd4b0179165b37176d5b60a812f9ff246fcbecf443137e186de56c46d35dae3d26803e8191570cc173e9b6a31d77dbd479bea377ec62b379b6ef2afb31606f172e12618ba7eec9fc9ece54ce3e29ca385336d713678e1d45d745ea40085298c8", 0x75, 0x8}, {&(0x7f0000001400)="7378991be631e6147ff8433c69c775d5e9fbe9552c96acf156fb641aaf61b8", 0x1f, 0x5}, {&(0x7f0000001440)="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", 0xfc, 0xfffffffffffffff9}, {&(0x7f0000001540)="820ad797d599214b559f9c41d24c17f49b939f3fb352eb5a384b65d6804fb3079df6830a95933ee68ffc509b0bf583585c3e505b344a42446e37d9773ab9680d72ae38a0dcea2bec70d5242651", 0x4d}, {&(0x7f00000015c0)="5350186fd1", 0x5, 0x7}], 0x24, &(0x7f0000001700)={[{@huge_never={'huge=never', 0x3d, '&:('}}, {@nr_inodes={'nr_inodes', 0x3d, [0x31, 0x70, 0x34, 0x31, 0x70, 0x33, 0x31, 0x2d]}}, {@size={'size', 0x3d, [0x37, 0x39, 0x38]}}, {@huge_within_size={'huge=within_size'}}, {@huge_within_size={'huge=within_size', 0x3d, ':{&'}}, {@huge_always={'huge=always', 0x3d, ' -*\x1e!'}}, {@nr_inodes={'nr_inodes'}}, {@huge_within_size={'huge=within_size', 0x3d, '\\%I}\x9c4]*\xd9+$'}}, {@huge_always={'huge=always'}}, {@nr_blocks={'nr_blocks', 0x3d, [0x67]}}], [{@smackfstransmute={'smackfstransmute'}}, {@context={'context', 0x3d, 'staff_u'}}, {@subj_user={'subj_user', 0x3d, '#:'}}]})
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000000c0)={0x1, [<r4=>0x0]}, &(0x7f000095dffc)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000280)={r4, @in={{0x2, 0x0, @empty}}}, 0x90)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000001800)={r4, 0x9, 0x10}, &(0x7f0000001840)=0xc)

11:38:17 executing program 5:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
close(r4)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732})
r6 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@multicast, @multicast, @val={@void}, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @private=0xa010101}, {0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x2e)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8)
splice(r0, 0x0, r4, 0x0, 0x10005, 0x300)

11:38:17 executing program 3:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x7, 0x0, &(0x7f0000000040)="b9010360e000f0", 0x0, 0x0, 0xa000000, 0x0, 0x0, 0x0, 0x0}, 0x40)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
r1 = socket(0x11, 0x800000003, 0x0)
bind(r1, 0x0, 0x0)
getsockname$packet(r1, 0x0, &(0x7f0000000040))
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x6db6e559)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x9)

11:38:17 executing program 0:
syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0)
syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x64}, 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xbd, 0x970, 0x1, 0x5})
socket$nl_route(0x10, 0x3, 0x0)

11:38:17 executing program 2:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$packet(0x11, 0x0, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x121000, 0x0)
ioctl$RTC_RD_TIME(r2, 0x80247009, &(0x7f0000000040))
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc0100002)
getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
r4 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001300)=ANY=[@ANYBLOB="4801000024000b0f00"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100726564"], 0x148}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1c, 0x9, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x32, 0x0, 0x0, 0x0, 0x7}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xbb0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, @alu={0x7, 0x1, 0x5, 0x6, 0x6, 0x1, 0xfffffffffffffff0}, @alu={0x7, 0x1, 0xc, 0x9, 0x3, 0x10}]}, &(0x7f0000000140)='GPL\x00', 0x3, 0x9f, &(0x7f0000000240)=""/159, 0x40f00, 0x0, [], r3, 0x1c, r1, 0x8, &(0x7f0000000180)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000300)={0x5, 0x1, 0x5, 0x8}, 0x10, 0xffffffffffffffff}, 0x78)
r5 = semget$private(0x0, 0x3, 0x0)
semctl$SETALL(r5, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semop(r5, &(0x7f0000000100), 0x2d)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
semctl$IPC_RMID(r5, 0x0, 0x0)
semget$private(0x0, 0x20000000102, 0x0)

11:38:17 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0x5000000}, 0x0)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:38:17 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0x8000000}, 0x0)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

[ 1924.667916][ T2964] futex_atomic_op_inuser: 4 callbacks suppressed
[ 1924.667927][ T2964] futex_wake_op: syz-executor.2 tries to shift op by 256; fix this program
[ 1924.706413][ T2967] netlink: 284 bytes leftover after parsing attributes in process `syz-executor.2'.
11:38:17 executing program 4:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$kcm(0x10, 0x2, 0x10)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000fc0)={0x14, r3, 0x1, 0x0, 0x0, {0x11}}, 0x14}}, 0x0)
sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r3, 0x800, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4841)
setitimer(0x1, 0x0, &(0x7f00000001c0))
r4 = socket(0x2a, 0x1, 0x6)
setsockopt$IP_VS_SO_SET_DELDEST(r4, 0x0, 0x488, &(0x7f0000000000)={{0x2c, @remote, 0x4e24, 0x2, 'wlc\x00', 0x10, 0x5c, 0x3}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x4, 0x10001, 0xfff, 0x8}}, 0x44)

11:38:17 executing program 2:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$packet(0x11, 0x0, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, &(0x7f0000000000), &(0x7f0000000040)=0x4)
r3 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc0100002)
r4 = semget$private(0x0, 0x3, 0x0)
semctl$SETALL(r4, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semop(r4, &(0x7f0000000100), 0x2d)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
semctl$IPC_RMID(r4, 0x0, 0x0)
semget$private(0x0, 0x20000000102, 0x0)

[ 1925.100422][ T2990] futex_wake_op: syz-executor.2 tries to shift op by 256; fix this program
11:38:17 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0x9000000}, 0x0)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:38:17 executing program 4:
setitimer(0x0, 0x0, &(0x7f00000001c0))
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00')
sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x28, r1, 0xab9535e9a6578fc1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x28}}, 0x0)
sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, r1, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x5}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xffffffff}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x840}, 0x80)

11:38:17 executing program 2:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$packet(0x11, 0x0, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc0100002)
r2 = semget$private(0x0, 0x3, 0x0)
sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="07000000000000000000020074cc0a31fc6a", @ANYRES32=0x0, @ANYBLOB='\b\x00,\x00\x00\x00\x00\x00\b\x004\x00f\x00\x00\x00'], 0x2c}}, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000240)={0x0, 0x9, 0xffff, <r3=>0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x9b090a, 0xff, [], @p_u16=&(0x7f0000000140)=0x8a88}})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0xc4, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}]}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r1}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8, 0x1, r1}]}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8, 0x1, r3}, {0x8, 0x1, r1}, {0x8, 0x1, r5}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0xc4}}, 0x20000000)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semop(r2, &(0x7f0000000100), 0x2d)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
semctl$IPC_RMID(r2, 0x0, 0x0)
semget$private(0x0, 0x20000000102, 0x0)

11:38:18 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0xe000000}, 0x0)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

[ 1925.362179][ T2996] futex_wake_op: syz-executor.2 tries to shift op by 256; fix this program
[ 1925.384954][ T3001] futex_wake_op: syz-executor.2 tries to shift op by 256; fix this program
11:38:18 executing program 5:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
close(r4)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732})
r6 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@multicast, @multicast, @val={@void}, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @private=0xa010101}, {0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x2e)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8)
splice(r0, 0x0, r4, 0x0, 0x10005, 0x500)

11:38:18 executing program 4:
setitimer(0x4, 0x0, &(0x7f00000000c0))
clock_gettime(0x0, &(0x7f0000000040)={<r0=>0x0, <r1=>0x0})
r2 = socket$isdn_base(0x22, 0x3, 0x0)
utimes(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={{r0, r1/1000+60000}})
ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000180)={0xa30000, 0x47, 0x200, <r3=>r2, 0x0, &(0x7f0000000140)={0xa10903, 0x5, [], @p_u32=&(0x7f0000000100)}})
sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="8400000002010102000000000008000005000006080015400000000328000480240003800800024000000006080003080003400000040005000100bf0000000600124000040000100001800c00028005000100060000000c0017000000800000000003140018800800014000000000080003400000020006001240000300000000000000"], 0x84}, 0x1, 0x0, 0x0, 0x800}, 0x4000015)

11:38:18 executing program 0:
syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0)
syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x76a}, 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xbd, 0x970, 0x1, 0x5})
socket$nl_route(0x10, 0x3, 0x0)

11:38:18 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x2}, 0x8441, 0x2000}, 0x0, 0x0, r1, 0x0)
socket$packet(0x11, 0x0, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup2(r2, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc0100002)
r4 = semget$private(0x0, 0x3, 0x0)
semctl$SETALL(r4, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semop(r4, &(0x7f0000000100), 0x2d)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
semctl$IPC_RMID(r4, 0x0, 0x0)
semget$private(0x0, 0x20000000102, 0x0)

11:38:18 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0xf000000}, 0x0)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:38:18 executing program 3:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x7, 0x0, &(0x7f0000000040)="b9010360e000f0", 0x0, 0x0, 0xa000000, 0x0, 0x0, 0x0, 0x0}, 0x40)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
r1 = socket(0x11, 0x800000003, 0x0)
bind(r1, &(0x7f0000000100)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r1, 0x0, &(0x7f0000000040))
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x6db6e559)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x9)

11:38:18 executing program 2:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$packet(0x11, 0x0, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
futex(0x0, 0x85, 0x1, 0x0, 0x0, 0xc0100004)
r2 = semget$private(0x0, 0x3, 0x0)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semop(r2, &(0x7f0000000100), 0x2d)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
semctl$IPC_RMID(r2, 0x0, 0x0)
semget$private(0x0, 0x20000000102, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = openat$cgroup_ro(r4, &(0x7f0000000000)='freezer.self_freezing\x00', 0x0, 0x0)
ioctl$PPPIOCSMRU(r5, 0x40047452, &(0x7f0000000040)=0x8)

11:38:18 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0x3f000000}, 0x0)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

[ 1926.047636][ T3028] futex_wake_op: syz-executor.2 tries to shift op by 256; fix this program
11:38:18 executing program 4:
setitimer(0x0, 0x0, &(0x7f00000001c0))
r0 = gettid()
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x40)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x8000, 0x0)
ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0xd000)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r0, 0x0, 0x0)
fsopen(&(0x7f0000000040)='qnx4\x00', 0x0)
ptrace$setregs(0xd, r0, 0x96e, &(0x7f0000000000)="22bbea682bbf601ae825e407120a360e84a05ee8f0fc4ec78833393b882fbb548b67dffeb9e68966f52e")

11:38:18 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0x40000000}, 0x0)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

[ 1926.285413][ T3044] futex_wake_op: syz-executor.2 tries to shift op by 256; fix this program
11:38:19 executing program 4:
setitimer(0x0, 0x0, &(0x7f00000001c0))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
fsconfig$FSCONFIG_SET_BINARY(r4, 0x2, &(0x7f0000000080)='\x00', &(0x7f0000000200)="e560defc676bbc3397de91d3220f74eec36050c4dc4fd2195ca46414b437c05aab6c6d6920919b57992fbd12780b76aaeb58158b75dde4491aaf7f6ed61fe4bb030fa921d96eeb82cbbb0e0f4e52b2c45b3d0876958681c737cdac442a09e646182e6a83b665f224165e0a8b041bb49a79a2100d43bd82f7df277b88f37bb7db1344f5240c57ab076785fc6d649ca523da68abf2c6b89b1ade29", 0x9a)
ioctl$PPPIOCSDEBUG(r2, 0x40047440, &(0x7f0000000000)=0x6)
openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mISDNtimer\x00', 0x48000, 0x0)
r5 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
fchmod(r5, 0x80)

11:38:19 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0x60000000}, 0x0)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:38:19 executing program 5:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
close(r4)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732})
r6 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@multicast, @multicast, @val={@void}, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @private=0xa010101}, {0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x2e)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8)
splice(r0, 0x0, r4, 0x0, 0x10005, 0x543)

11:38:19 executing program 2:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$packet(0x11, 0x0, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc0100002)
r2 = semget$private(0x0, 0x3, 0x0)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semop(r2, &(0x7f0000000100), 0x2d)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
r3 = semget$private(0x0, 0x4, 0x40)
r4 = semget$private(0x0, 0x20000000102, 0x0)
semctl$SETALL(r4, 0x0, 0x11, 0x0)
semctl$IPC_RMID(r3, 0x0, 0x0)
semget$private(0x0, 0x20000000102, 0x0)

11:38:19 executing program 4:
setitimer(0x1, 0x0, &(0x7f00000001c0))
write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0xf, 0x1, {{0x40, 0x800002, 0x4}, 0x400}}, 0x18)

11:38:19 executing program 3:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x7, 0x0, &(0x7f0000000040)="b9010360e000f0", 0x0, 0x0, 0xa000000, 0x0, 0x0, 0x0, 0x0}, 0x40)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
r1 = socket(0x11, 0x800000003, 0x0)
bind(r1, &(0x7f0000000100)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r1, 0x0, &(0x7f0000000040))
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x6db6e559)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x9)

11:38:19 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0x9effffff}, 0x0)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:38:19 executing program 0:
syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0)
syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x900}, 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xbd, 0x970, 0x1, 0x5})
socket$nl_route(0x10, 0x3, 0x0)

[ 1927.434720][ T3086] futex_wake_op: syz-executor.2 tries to shift op by 256; fix this program
11:38:20 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0xf0ffffff}, 0x0)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

[ 1927.767806][ T3083] futex_wake_op: syz-executor.2 tries to shift op by 256; fix this program
11:38:20 executing program 4:
setitimer(0x2, 0x0, &(0x7f0000000040))

11:38:20 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0xfb1c0000}, 0x0)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:38:20 executing program 2:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$packet(0x11, 0x0, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup(r1)
r2 = dup2(r1, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc0100002)
r3 = semget$private(0x0, 0x3, 0x0)
semctl$SETALL(r3, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semop(r3, &(0x7f0000000100), 0x2d)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
semctl$IPC_RMID(r3, 0x0, 0x0)
semget$private(0x0, 0x20000000102, 0x0)

11:38:20 executing program 4:
setitimer(0x0, 0x0, &(0x7f00000001c0))
openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qrtr-tun\x00', 0x20180)

11:38:20 executing program 3:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x7, 0x0, &(0x7f0000000040)="b9010360e000f0", 0x0, 0x0, 0xa000000, 0x0, 0x0, 0x0, 0x0}, 0x40)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
r1 = socket(0x11, 0x800000003, 0x0)
bind(r1, &(0x7f0000000100)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r1, 0x0, &(0x7f0000000040))
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x6db6e559)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x9)

[ 1928.046731][ T3106] futex_wake_op: syz-executor.2 tries to shift op by 256; fix this program
11:38:21 executing program 5:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
close(r4)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732})
r6 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@multicast, @multicast, @val={@void}, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @private=0xa010101}, {0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x2e)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8)
splice(r0, 0x0, r4, 0x0, 0x10005, 0x600)

11:38:21 executing program 4:
setitimer(0x0, 0x0, &(0x7f00000001c0))
r0 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil)
shmctl$IPC_RMID(r0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x3000)=nil, 0x2000)

11:38:21 executing program 0:
syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0)
syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x6400}, 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xbd, 0x970, 0x1, 0x5})
socket$nl_route(0x10, 0x3, 0x0)

11:38:21 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0xfffff000}, 0x0)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:38:21 executing program 2:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$packet(0x11, 0x0, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc0100002)
r2 = semget$private(0x0, 0x3, 0x0)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semop(r2, &(0x7f0000000100), 0x2d)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
semctl$IPC_RMID(r2, 0x0, 0x0)
semget$private(0x0, 0x20000000102, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x10)
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000fc0)={0x14, r4, 0x1, 0x0, 0x0, {0x11}}, 0x14}}, 0x0)
sendmsg$IPVS_CMD_GET_INFO(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000040)={&(0x7f0000000300)={0x14, r4, 0x8, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x45)

[ 1928.689744][ T3132] futex_wake_op: syz-executor.2 tries to shift op by 256; fix this program
11:38:21 executing program 2:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$packet(0x11, 0x0, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc0100002)
r2 = semget$private(0x0, 0x3, 0x0)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000080)=[0x200])
syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x40000)
semop(r2, &(0x7f0000000100), 0x2d)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
sendmsg$RDMA_NLDEV_CMD_SYS_SET(r4, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="180000000714000109bd7000ecdbdf2508000100020000a12894bb950018b75031593bcae79e356fb09d556b47f54a032be9caa1688f17529aec430109a480b9cd41d576b4a404f9b8ef213cf2b7f7da38bed5159c499ec6500789a9db3a69295d6fc7185f4fa3824559962f1cea7b037d422d54782f97c524f1cfd92c8acf41775e264cfe440da1c9ab7df5d2940f4309369230873d669c33b7d0b39149dd8b8676dde223a6ef40d125753369ecc3a954dbb31b50f0759eb26f49"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x0)
semctl$IPC_RMID(r2, 0x0, 0x0)
semget$private(0x0, 0x3, 0xc8)

11:38:21 executing program 4:
socket(0x2a, 0x4, 0x7ff)
setitimer(0x0, 0x0, &(0x7f00000001c0))

11:38:21 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0xffffff7f}, 0x0)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:38:21 executing program 4:
setitimer(0x0, 0x0, &(0x7f00000001c0))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @dev, 0xc}, @in={0x2, 0x0, @loopback}], 0x2c)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f00000000c0)={0x1, [<r3=>0x0]}, &(0x7f000095dffc)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000280)={r3, @in6={{0xa, 0x4e20, 0x3ff, @ipv4={[], [], @rand_addr=0x64010100}, 0x8}}, 0xffff, 0x800}, 0x90)
getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000000)={r3, @in6={{0xa, 0x4e23, 0x146fd696, @mcast1, 0x3}}}, &(0x7f00000000c0)=0x84)

11:38:21 executing program 3:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x7, 0x0, &(0x7f0000000040)="b9010360e000f0", 0x0, 0x0, 0xa000000, 0x0, 0x0, 0x0, 0x0}, 0x40)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
r1 = socket(0x11, 0x800000003, 0x0)
bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040))
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x6db6e559)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x9)

11:38:21 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0xffffff9e}, 0x0)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:38:21 executing program 2:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$packet(0x11, 0x0, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc0100002)
r2 = semget$private(0x0, 0x3, 0x0)
bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
r4 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001300)=ANY=[@ANYBLOB="4801000024000b0f00"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100726564"], 0x148}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r5=>r3})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'tunl0\x00', r5})
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semop(r2, &(0x7f0000000100), 0x2d)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
semctl$IPC_RMID(r2, 0x0, 0x0)
semget$private(0x0, 0x20000000102, 0x0)

[ 1929.355544][ T3179] netlink: 284 bytes leftover after parsing attributes in process `syz-executor.2'.
11:38:22 executing program 5:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
close(r4)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732})
r6 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@multicast, @multicast, @val={@void}, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @private=0xa010101}, {0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x2e)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8)
splice(r0, 0x0, r4, 0x0, 0x10005, 0x608)

11:38:22 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0xfffffff0}, 0x0)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:38:22 executing program 0:
syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0)
syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x6a07}, 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xbd, 0x970, 0x1, 0x5})
socket$nl_route(0x10, 0x3, 0x0)

11:38:22 executing program 2:
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x4800)
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
getsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f00000000c0), &(0x7f0000000140)=0x4)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r1, 0xc0096616, &(0x7f0000000100)=ANY=[@ANYBLOB="0151ed67420000000000000000"])
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc0100002)
r5 = semget$private(0x0, 0x3, 0x0)
semctl$SETALL(r5, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semop(r5, &(0x7f0000000100), 0x2d)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
semctl$IPC_RMID(r5, 0x0, 0x0)
semget$private(0x0, 0x20000000102, 0x0)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000040)={0x3, 'veth1_to_team\x00', {0x7}, 0xfe01})

11:38:22 executing program 4:
setitimer(0x0, 0x0, &(0x7f0000000040))

11:38:22 executing program 3:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x7, 0x0, &(0x7f0000000040)="b9010360e000f0", 0x0, 0x0, 0xa000000, 0x0, 0x0, 0x0, 0x0}, 0x40)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
r1 = socket(0x11, 0x800000003, 0x0)
bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040))
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x6db6e559)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x9)

11:38:22 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0x3000000000000}, 0x0)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

[ 1930.057624][ T3207] futex_atomic_op_inuser: 2 callbacks suppressed
[ 1930.057635][ T3207] futex_wake_op: syz-executor.2 tries to shift op by 256; fix this program
[ 1930.090049][ T3215] futex_wake_op: syz-executor.2 tries to shift op by 256; fix this program
11:38:22 executing program 4:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
io_uring_register$IORING_REGISTER_PROBE(r1, 0x8, &(0x7f0000000000)={0x0, 0x0, 0x0, [], [{}, {}]}, 0x2)
setitimer(0x0, 0x0, &(0x7f00000001c0))

11:38:22 executing program 2:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$packet(0x11, 0x0, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc0100002)
r2 = semget$private(0x0, 0x3, 0x0)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semop(r2, &(0x7f0000000100), 0x2d)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
semctl$IPC_RMID(r2, 0x0, 0x0)
semget$private(0x0, 0x20000000102, 0x0)
r3 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x6be, 0x2801)
ioctl$VIDIOC_S_EDID(r3, 0xc0285629, &(0x7f00000000c0)={0x0, 0x6, 0x400, [], &(0x7f0000000040)=0x2})

[ 1930.449476][ T3239] futex_wake_op: syz-executor.2 tries to shift op by 256; fix this program
11:38:23 executing program 2:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$packet(0x11, 0x0, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc0100002)
r2 = semget$private(0x0, 0x3, 0x0)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000080)=[0x200])
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @private2, 0xc}, @in={0x2, 0x800, @loopback}], 0x2c)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32=<r4=>0x0], &(0x7f000095dffc)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000280)={r4, @in={{0x2, 0x0, @empty}}}, 0x90)
setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000000c0)={r4, @in={{0x2, 0x4e23, @remote}}}, 0x84)
semop(r2, &(0x7f0000000100), 0x2d)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
semctl$IPC_RMID(r2, 0x0, 0x0)
semget$private(0x0, 0x20000000102, 0x0)

11:38:23 executing program 4:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$kcm(r1, &(0x7f0000000a40)={&(0x7f0000000000)=@ipx={0x4, 0x7, 0x25e, "5668f5119d47", 0x1}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000080)="d8f9fa96d7181c87c2fcde0b50e8d509a383a30189f7cf94dc77a3ff68562852aad956997ffe53709afbbc88192a386eeda2bd432dee4a6f5cb00df8ac3cf25176fa", 0x42}, {&(0x7f0000000200)="daedc8f9ad2ac70bc73eebf3679a451502e74a153372080ad682dccb6cb3415ebbe1c8053a5c44ea25d6595273a3e632ab2d000a07ac0b2b2b34ab7a0e9caf3c128e9243e014ac6ccf0f51d75ba7c2976a2e1edda0025395970a7dfe82fddc44e9752f228cbb616cddba20a6d0e5a0843a35e282e97faefea90aa1b40de225a05157e7432e01c0d5f5312b13d14304524148002e9ce57402cce744bdc91c404e403481fab9c1affe60918bfa15be7be716aac9640ad639f7a58a6a676f4ed5f35bc9f077f626de714451621c46307253714e3bee808ed14791f59e813eaccbafb8ca786e66c79bdb", 0xe8}, {&(0x7f0000000a80)="9b9459d1e9b2802c6c80150cb96c1f781720bec085f4990d2705fb03202f0078554dcfd9cdabbc880933261a425d4dccde213796e7c0855b130ed5f8a66395545c82cad6b219932918d05928565484922f90c80702f97c0b0adcb01db4cbb80caa5b10ace9980eff065a4e407adc2eddb2bdb73278cda9414b79acd0aef2ed196954e86cf77859b2452155d82c0152887334b4c4865bef911a3f27434fe34a171e3e3c18e910d43e10a746e7e9c1c9525e263ef1a663f2ac1ce45417e437be26355663c691056335a5242683b03bd2dfe1b53b7d5150bf5827067ef87e0e306d1d3c5afe7672925300", 0xe9}, {&(0x7f0000000400)="635cb292eda13402e46ffb6d09bf510990f21d06b4eb73347c152c79a4bca8efcd8c0ce6813265eb77ff79ad4c5750f2b1bee84bc847730ef58eb623c7a84f31fa5972d87150e4a6f2ea327f84e73f76031867f14f8122c18db65562d2b60e3d4ecfb5402db21b49d5058a2d25d55972538fc37135ecd4f5f54d69d9bb17d55c59a71c2f07a4b9f917d66007ad30225a07b8c722444c03cd346018be74be82b6a730cfb9851c954628d9415eeda1663ffe025aa4fb161ae770b35bf999c64b536e848fc525baee792a77a317", 0xcc}, {&(0x7f0000000100)="b3b7f913a0ae05e8d55bd582d04d1f38eaaeefb5bca83232a8af073585c1618693616a5c78afc656c0b786334142a7b47ca189b0e57bff62fa4fce5ad581015c1ec19487c56431a686442c6f2a09ef3454d678", 0x53}, {&(0x7f0000000500)="d02bc174b0972733666ca7505e1706fc3fae4c0121c8deb8229147973c2950ba161c6769bf7e2e19ee86c0764cbb8e1fa2c237184026210012b88608f9b7e82ffc4dd179582fc4c99a52eac66fb851d4878405fb5632f6ae3ae212df7307db91f3ad59f28f5a90deb71af68c5920727cd67e87a4d45f6a3ad34b64b85584a5437ce2ea8ebabb2bcd4ab6281a3d842b3c4ff3485fbb035a2f46cabd9482958a35c41d1de0edbf65d649e3001e2790392036f7d7113876a9726d65cd8fe6d6c55e653861a30517ce49f9f0e7dc9c081e11", 0xfffffd68}, {&(0x7f0000000180)="2009b97ba71639b294b3f2cfad648bdd1ba7184d816aea0460eba0ce23b7174b0b240d6a7dc7e945e08b", 0x2a}, {&(0x7f0000000600)="a2224dea36d98c0f5d06188c949f6c313396bdc7d7e53d4b5ae91ce3233ef9bc38bd009dc17af0e4361a1056c8aa468c151493d9fc127ec963baea1c28dfa93054a5a6a714ad30e0521c497825ff6bd3a230cae7a6d1d480728a2077d2563a843972fb0475037f4efe2c94d1c7becf230502a3e7a9b222392de91450fe3192c2617d7072d753e3517a4a4f7c1f46d427663d70a1e31d8ee2dc8805f7cf7db2dd5798c94ee9e9283088b91e4c58f3ca7709ba136a49c67a7caca53da73b5697ded92f0fae714024da94c76c8656081a1161326cc1bbc48b8ccbb09718ab568d3ba7d7c7036267a61d0d5637", 0xeb}, {&(0x7f0000000700)="eee5c74bfb9176a1b114cdbd5988f0b0c689113042c2ae3c2b8fd07aa03ef42c95ecd3787e226d0626ab4847b4074251479e63dc46c5fd5da79ed2ed4a863f9cedc012f87486d003bc9799b3bc9906ad2546ee10646134d2", 0x58}], 0x9, &(0x7f0000000840)}, 0x20000000)
setitimer(0x0, 0x0, &(0x7f00000001c0))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @dev, 0xc}, @in={0x2, 0x0, @loopback}], 0x2c)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f00000000c0)=ANY=[@ANYBLOB="11000000", @ANYRES32=<r6=>0x0], &(0x7f000095dffc)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f0000000280)={r6, @in={{0x2, 0x0, @empty}}}, 0x90)
getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f00000008c0)={0x3, 0x1f, 0x4, 0x0, 0x8001, 0x8000, 0x81, 0x0, r6}, &(0x7f0000000900)=0x20)
r7 = dup(r2)
getsockname(r4, &(0x7f0000000940)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000009c0)=0x80)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r7, 0x84, 0x12, &(0x7f0000000840), &(0x7f0000000880)=0x4)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000340)={0x2, 'veth0\x00', 0x3}, 0x18)

11:38:23 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0x40030000000000}, 0x0)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

[ 1930.652022][ T3249] futex_wake_op: syz-executor.2 tries to shift op by 256; fix this program
11:38:24 executing program 5:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
close(r4)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732})
r6 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@multicast, @multicast, @val={@void}, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @private=0xa010101}, {0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x2e)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8)
splice(r0, 0x0, r4, 0x0, 0x10005, 0x689)

11:38:24 executing program 2:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$packet(0x11, 0x0, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
getsockopt$TIPC_CONN_TIMEOUT(r3, 0x10f, 0x82, &(0x7f0000000000), &(0x7f0000000040)=0x4)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc0100002)
r4 = semget$private(0x0, 0x3, 0x0)
semctl$SETALL(r4, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semop(r4, &(0x7f0000000100), 0x2d)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
semctl$IPC_RMID(r4, 0x0, 0x0)
syz_init_net_socket$nl_rdma(0xffffffffffffffff, 0x3, 0x14)
semget$private(0x0, 0x20000000102, 0x0)

11:38:24 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0xf0ffffffffffff}, 0x0)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:38:24 executing program 0:
syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0)
syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0xff00}, 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xbd, 0x970, 0x1, 0x5})
socket$nl_route(0x10, 0x3, 0x0)

11:38:24 executing program 3:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x7, 0x0, &(0x7f0000000040)="b9010360e000f0", 0x0, 0x0, 0xa000000, 0x0, 0x0, 0x0, 0x0}, 0x40)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
r1 = socket(0x11, 0x800000003, 0x0)
bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040))
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x6db6e559)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x9)

11:38:24 executing program 2:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$packet(0x11, 0x0, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc0100002)
r2 = semget$private(0x0, 0x3, 0x0)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semop(r2, &(0x7f0000000100), 0x2d)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
semctl$IPC_RMID(r2, 0x0, 0x0)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x2, 0x0, {0x2, 0x2, 0x7}}, 0x28)
semget$private(0x0, 0x20000000102, 0x0)
r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x418880, 0x0)
ioctl$SOUND_MIXER_READ_DEVMASK(r3, 0x80044dfe, &(0x7f00000000c0))

[ 1931.457471][ T3282] futex_wake_op: syz-executor.2 tries to shift op by 256; fix this program
11:38:24 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0x100000000000000}, 0x0)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

[ 1931.764511][ T3312] futex_wake_op: syz-executor.2 tries to shift op by 256; fix this program
11:38:24 executing program 4:
setitimer(0x0, 0x0, &(0x7f0000000040))

11:38:24 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0x200000000000000}, 0x0)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:38:24 executing program 2:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$packet(0x11, 0x0, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup(r1)
r2 = dup2(r0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$UI_SET_MSCBIT(r4, 0x40045568, 0x7)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc0100002)
r5 = semget$private(0x0, 0x3, 0x0)
semctl$SETALL(r5, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semop(r5, &(0x7f0000000100), 0x2d)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
semget$private(0x0, 0x20000000102, 0x0)

11:38:24 executing program 4:
setitimer(0x0, 0x0, &(0x7f00000001c0))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SIOCX25SDTEFACILITIES(r1, 0x89eb, &(0x7f0000000080)={0xffe1, 0x1, 0x0, 0x4, 0x7, 0x15, 0x9, "542ba9a8a690177c60cd17a37089a6395b3b62b5", "e4c2c50afc39ad430a712447e43ecd91363d7c5c"})
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000100)={'batadv0\x00'})
getpeername$netlink(r2, &(0x7f0000000000), &(0x7f0000000040)=0xc)

[ 1931.984706][ T3321] futex_wake_op: syz-executor.2 tries to shift op by 256; fix this program
11:38:24 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0x300000000000000}, 0x0)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

[ 1932.086200][ T3321] futex_wake_op: syz-executor.2 tries to shift op by 256; fix this program
11:38:25 executing program 5:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
close(r4)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732})
r6 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@multicast, @multicast, @val={@void}, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @private=0xa010101}, {0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x2e)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8)
splice(r0, 0x0, r4, 0x0, 0x10005, 0x700)

11:38:25 executing program 2:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$packet(0x11, 0x0, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc0100002)
r2 = semget$private(0x0, 0x3, 0x0)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semop(r2, &(0x7f0000000100), 0x2d)
r3 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r5=>0x0, <r6=>0x0}, &(0x7f0000000340)=0xc)
keyctl$chown(0x4, 0x0, r5, r6)
sendmsg$nl_netfilter(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="cc120000fd408b36d375d7d9fddbdf250cf8000508001100", @ANYRES32=r5, @ANYBLOB="007a1e7e81cca2fbdb26009ca24c2c9d5c9fa0627652956f11a3ac9bae39b83bfc88c5858bb4cee1469e3d44a8600a14d0f2e86db3df2527681f15534d823e322144db4ab49ad2fbecedb47d507f426f68f306cdab1149c47c226aabf9f8fca13bc7abc1305576776531d0e2c0344dcc8b72022f836d2914d8ec642c7cc1d18aed5ff3b59ad5f097ead4efc43f2cd7985fae418983af2e7550fdee9d8a389fa226e625219834ab129574083bdfd99ee3ead4ed1b010782a25238d7f71e18c8d8fd89c4ea3bbc6394e10801300aec17062ba3982f22be9870f0c225aa15b2ad7af9f35215230dd60f13d50a72072e9897bee946c270233bb1c8054831e5dcc7778b231396c9d84936adc0b645998c3df145d7b20a6e1ed8309ea351da7ce67099b2aa371947377f1f42941f30d97cd95d2c6473c776be59dfd4eb1f2fedc16bf18cbd53cc59185dcf68ae63ebe611a67593f80daa9aae98001bc12d4598a59c447e2abc82a2cbaff759c60602ce5f89f2f0ddb3b49cbf352adb8a57971dc1926e75dca6c2b8042c67d12583e472499ca66525f51741bb7c1072eb113564ba8488b4d13da2b1ef83867de0513bb9906aa04af0999f754ed5dda8e8ce0c5cd0c3679402e909559d792a065e47c1709f515840b4eb197ad5bbe8972aad19f4b814c9e4625c8c509214102280041010004608b367a46b3e458a6319a4b04964c540f6598ea090b084b2f92e88c9187f7adf4557bc5975c43696012c68e8827fe1942be7f4966dd4555d5e2db2fa08bb08318766a285403aa27c8d3e385f6eb311e994a5cf07c7a4d28c0939192f19ec602f25f6609a0985c0ae35a268eecaa23845febad0c02c9445784ba5937f41fe57240f7da4ac95fa3bfc79d33b956b6710a900225401ce2ad7197fb45363b506b625e65bfff7f0042e6ff960f12e819d58c05133c61b020a85ad4eabe88028b9a8fdfceae6e118b0226982358322a9335bd03ce03eec7c6dee4d35d15e4bb4f3bd3b760a7541ef2b89dbdeb9029381f6d8eea37867423f345f4b29dacb1e5cb84f58c0b98411b5589f374ef6261fc1997e8c620aba46b258c0e8dc9cf19bcf622d9d3e801e78db4c1419930130b8d40597810be9efec7c335ca687c45213fd352c5c8e1f3a09ba7aab6471333825023754a0ef70ac65f66476534493866a454a7a8874b8b966d09fed0939caef5ec9a6295275fda86a08275df14dd8f4436ab112d1f7a9f2ea07631365badfc4c359bdd8b55173f06b2253541ad164f26a822dd30136bd75215ae688a6822e183e4ac6ad2bb8de69aa929f9c2f8bbb8e37c7263a9c3f7cf048bdcdb97d0715b1ea4e87429aedda9d9a7ed7e54c440c8d1a406ac6c946188600a4809a561e5a5543bdfd8f64a09bff8c82aaa7994dcacb37f73b7b60a274b6f5a682d7103aad6049ffaef309e82b5acf014ef7158624d3cf088fa6db5d26724f489c61158556c6f7fa17249d3d8fd95e2dc7668fee4feac7e3811e8c391fb2d44ed8c0ac39067ee37c30d44eadf3c2fc35e98ec2b1f211e8cfa17d5c54571418a33ceeda6ce943cfcf0a8a71e2025949175551e737c19408de43856fa931561d2f3ebe5f1eb5c176c24c463eb9eb3f5fbe5cc172926ddacd7e62ef5f1bf4f931a6c4d0e2580ac4601e931668a706c53dc52d7292e09b5e322baaf6d2211978722f524ed2d2f3aa59d9ff6b38570f3c1cdc024504229a94f3e8a6ac511892863395b9d45e2080a1f9825014c6eb9a1a552b7c9a190b71be0b49732376c0a093f090b11aa1fa3ff94cd54ffbcc946990b8ff2b2f26bc222e8902a7abf0f3ce0d727f23b8794b0a467d026360e2bb9b12eebc37ea97e7e4a17bebb8539aa8b2d1c889b7a34549f1e26bbebb70c105a061f209ae23ea870525da9bcb88950832057754d521ddb9d812d2814d2de0670e9ec7706424ca765e841332fca8c8f2007b34962b6fe5e8677a680e76c49159991ed2518be5452470c8beabeea8d45ef4f5fada69c133a5ca92dc04d302ded0c859ef951c181475de7409aa981c8b20606c96ddb236ac5cd0fa27d855fc6bcfca8481998d449babc637150aecd063e249f94380f067ffe4e75deeb0c15bfdc509fda986e9d3a6c312ea242655514a8461bc743bb3231c4823b008d2f69edb54294a258f2de1a55d8976c0730fec3a4885b14d85b9a9363b6d0c7d10444299ca91698b4a6470fd86d82486e8c92da6fb429cb76f568d08f23d275f797b1cf436a73f54733151f0101428daa6391c1336bb950874e1bf5e97e74e25888ed571c0620106c64ceaa7018ca71a6227298a06da5de663d279aa213d557e2a569ae558cb5ea9fcfdbb5d35d32f5dea2d02feb00b6d6cab11371e4ca25345ee7f3c56c820f02ae3692b7325b7b3627e82305636e5e0fd2c84f784fdb8ae43143509fe8d79a984eb2f996e6df1d9d96b5ec5a69d26e8b3c058ed62516c3df961502a8a4e22a9b8a04162fa6cbeb4dc50a02176f1be3ba46e57cb2cb0877308b83dbef950499e81a2ae4604b8a755dcb3c8c9c0f5cd9b7a78ddffb39907e24fbfdf48434a84a18e50cbbdcbd1d060f523bd965a2b50c4fe441ec2907d28d1a7d7fc9018411597c8340970987ab04870d39cf1dd94ca98d0068dd34b2f0961fe2aa206b17cc6739533a4077b80c57150cc347ec83fcdd580297fc635b2480aaa7ec20ae42619c8191e4d69618ec3b841377df142982993e8609f43044e183eed195bef089f12fe771acffbbe24717def1177144588cd9845000447e44b388a34b0ab629765d4ad5061504f6ee282cce040bcfefcfe09ae40b05b1482d5e85ae74f2fef1e3fbbf9393ea59d11d21a2ae8e80a25897e441c8422617508c5ff9bb8af527ef23e4baed0c1866b410b24911ea1d5c8de59bddf7b33d95aa3d4b2ce2d32b034988a794f3508bc79aa7ad01ded3c90422a8d44c8217eb7cba1b32fbe11b77eba5b6328f94be818c485a3684df8fd2946147afd8ad37c5726b8bc2bb91a6772784606dfef28fde73330d5a6c9d40d16dd4f362e14f94edcdb42e88d4381950fcd495aa9591fe49a7c4c0ed7cff273ab680527c3d03870ab565b9eb52232bc537128ead87d071ab190531877f2e427366e25c3351a7258da2d93a67296057ee6e8d5a789d35f92eaac4971f352ec5cd9366871c2bb1122dbfa70ab3801f637daa256c75db2ab3d6bb84a5505454514522e9f2aad28a54a76c4e9b4265f19682560eda96f6fffed4ed59bbf7861193adfa9b5d71e49da55b80b69fab968a553abd356580241cbaacd47c894ad8b398cf756d1bf722d0f8df51fcb17b7ca7e3e671a914d37fd6863e0b23860680b0eb1d8f5ac1a9ecd67a2b444750d16710635bb22975e187e2c81c25bde6011086ce230326d13a1596806fd9bcd38b7f688b3565928d3d8bc64c50ba8ac124883663f2c69f8991ea89e3ea72afa75df7ea6ee03c4aa1abe8b0442e044d10ce626f5cead3006f282a88394edfdc05c7a751c862ee7ebec37ca4e176055ae5918c36339fdaf28a37d09fdde58205e917c9dd0af66bd5c813adcd95f8c3d883364793874281c3a805b46134a806f076393f35fa0035acdb2282443744635e85b311670907d6ae9ba41b56f03353320d34aad11c59d770e8a856fab2aa426edebc69aa86251a7d25f0643f126bf501db0ef95db697b15958db8ab6cb52a07f2e541a0b28963f099d569bb20cad8e87737fb20bb6130cb33f8c86f8eed0df54f999f3512dbfd997b553e94b206dc6530912e3f3a1c17c9bce762d662257fa8159e56a43218f681e76c9cfa3b1c90ad5cdbd15a3ae5f988cd21936990b6032ccd62c3d77bcf35183ea7a592075c689900fdc5018e6746f337e5e2aaa66bc81ed366264f8333647d1e190131182bf2a23d3b9c9a5972074609d1fc9dee975ba52e35606e107c186ce52052724d85b5e8db3e5596358ce6500613fd6260c5dad4887f55781a950e291d02cc9b7d1da2d9dc5bf1369456785312728ea14759b07ea513253709eafb05e9d1459692872414d126ecbdd18304a86f2f12b1805ddf0aa522f634aa2d971b4042b65df6e27a14bb19445b09d7ea5099084568a96e9f73a8f099155b9b0ae5a25241a2c546f876ef09024488beae53f17e960a3f804da5fade1d68cb3272e8882f15726357454abfcd68d4e2993387ce1e6a055d1bcec90ec4e7df0b13daa6a26ceefa0c45fb783ae4d4c90d36f2cd765726d113c9b847f9120531e4be9ab407d93f4ab1a30695578a5caf03d98d8c51f6d565f624d39eb586bf02d985dcffdf27799adb95c2551b0db3075d1440c286a3ab56b52dc987f4c2654b65e3bdec4289bb81f74ec39b3002f572ff497dfa1655cd1ab2dd725032f41f55709105a0f68f7c8b7f9f7a0e0f21b1f6e670a8588723ae1ff51ec4ad4736a02531f99f3f28cb7625fc01cce76d391555d4ae8765cd6867f9d23c18636fec2fb5ec8641d30bdbbeb46cdea2c047f39daadaf813187028c1eccd696ce662b6a4aba6da6680b2f8c18831ffd06a55e973f8d14748077640db81288e5e3730016d1b5e4689cc5c37d98acf360446000ae4a3403bde0e9e6bdc7ce81a3a4b12d919e7a40ad06d22b5ecd8d8f02fe8d82751404efb87569c6aafa170304c1c34ad2f8ec7f95b74f8edf0108287d22f7a86e0f9e8d20eaa2172910a51dec290b8dee52fd7932c7f6a2c35b3b31ec6ca84bac3f3b3abd6f4d2243462ecc06c9601575178a663c69b131787e645a480b08ccf8e78c777d80e72f32c6a23db45a8447090c273fedc8d78d996fba4aa069fec9dccd6b1174aa652262dd7ebd7d55466c3b130eae3d7a5689a03e4177416f5bf6123c40c65da5346997c050e1d5c47d46c2aa695d6fefce9b5be5373f27d3e0d4f73752eab82d5b0c5aa42e51009768d4b1e1e266963884a2c9ed164a2a31a51755c76f2489623d5a1a082f86faaad369a1f403e4b218160df0da1c3e1902a55141ea2a5525ec2ecb9bf2b5925952ac6f6901d72c0e30f86b1dc13f9b57b0be99d821228fb80299263f24e2c5150e0f36165ec0dc278b1160f6d9d4f4c56fc748ca7f266c960a3d690fd497c6b65c0dd89eca7b24d60decd126fe506f356c4215d06545233ef1792e87d7e0b194335374bd268fea477b736ec8e0800e53160b6f878eed6b3c1633124304b286e32fb6152e931b96e048c2f0ea72525af7206575c36b17967ddeefb35b4b5c18ac549eadeb694561105d0e3c224fca5882b6c69856310173e2e851f97d5b371379fc574ad74a46fceeaaba027eba643b2f876afa3a1f2ccaecf30f0b126700e7c061206802a49fd341ca1fe94560d619b2ff1a0d445fa39516391a921ccda0a30c8f3e0f9c0c57d0bd311baad41f02a2990eb133aef6265bac85a50613205a258ecac0c57b8e058b2c8dd616cedc285319751ead804a628ebd0171cf28c56b78a9868d68e734bfd36378258c269d53aac533ee82eca3aa239a4fc487db4df16520f8a7150ecce4dada8e80583f9ff05de49bdbb1845ba3a0c4e982ac7f6dfe7c275e93e9c274f8103322b8f67d7e369ef39b6b524459cdd9063d6b1647094e59245735da8d4dc143f03f105821cf95a423a511879567d0c2e2078c4102d48d7eb3070ddf947d60ff3cba75fb692795e78d78c63418325bcb9753cd1cefed67d18075f3a61d38cd6a45437caf3963de52572c5742a4436aed788623a7b99642abde2045ecb7adad0374d4d47677440cc886fd642536fee7000e184d664f02701349f1d36315815ccc8421387ef3396a845723d2169ceab29eed59d7e01efe63130dfceeb0a1943f1496d30f72a94503748b4ed7df530199e5bf8233b18eec2fbcfd61a35784c3cfb86492aae2591ad95925ef927f46215c9ced73b4bf8d2265056be3d1f2104527cb3be64a89865462c3ebfea76e58e8d19e2a609bb8db0544ecfaf1640a2ccf7e93e6e30e8214977883b5667d163fd270f035796d9830027139d77729ceae1542283e5576452192d2d084be76855e71e8ad057fdcb8f01bbe8907439de4d733d94c046a44b79f32385f01e5ebb70124df4b4924f6d7fa958c7aa6e5ca32abe9b48b4a86b255f773fed56294b89c2db9219febd6de51d1be6786c4ee483b7f8dfbd5bab82acc10b33daf9aa4fc0d82425c49bf933c5ad604213ae5879be4cb3ccdf4590d431d50f5081612280a23004529455db1752c3059e80003b95e73dbaad24726cb3d17d0918eb8bbaea5524dab1f6c4e09a8ce02a3306813e6a51dfd4bbc791ab38a739ba5858e8a7a91624c82c3e4dcbda5735ee1cd1c4a79678ea308cc45064ffcb2563eb00a20d97450adc6e318d3bb6ae9c015fc997c6c8b7be314bd4b7ec5d1ad38206055c5b338ae2a51c61701c101f5b3100f0a3f2898390a56921bdfce664a2726bab21462a5e24e951cdf797f709bb0dd9b6cb637c07904c268cf7a5970c007d002b274f292c5d5d00b4008280884ce159e5b09464fbc918d3c4265beb45688573cca3038361a468a8cb50cb393a0e6465814b1d0bd48ae2a3237ec604d227efd67ee9562c2bad06f64317c1a50a4c8ba9f11cae3aa67939d7678ac077d27978bf5fd4208bfeaa9d2f2a3a971fec8937b793b42f67ba76ab7ec205eb85256586b2258ba803cfe7bc74a018b9e75ebad7bd420f9147d7f47bb8e9db3f4a96f12791edbc1ad314003b0000000000000000000000000000000001040060000000"], 0x12cc}, 0x1, 0x0, 0x0, 0x40000}, 0x4004090)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
semctl$IPC_RMID(r2, 0x0, 0x0)
semget$private(0x0, 0x20000000102, 0x0)

11:38:25 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0x400000000000000}, 0x0)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:38:25 executing program 0:
syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0)
syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x1000000}, 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xbd, 0x970, 0x1, 0x5})
socket$nl_route(0x10, 0x3, 0x0)

11:38:25 executing program 3:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x7, 0x0, &(0x7f0000000040)="b9010360e000f0", 0x0, 0x0, 0xa000000, 0x0, 0x0, 0x0, 0x0}, 0x40)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
r1 = socket(0x11, 0x800000003, 0x0)
bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r1, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x6db6e559)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x9)

11:38:25 executing program 4:
setitimer(0x1, 0x0, &(0x7f00000001c0))

11:38:25 executing program 2:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$packet(0x11, 0x0, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc0100002)
r2 = semget$private(0x0, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$VIDIOC_DV_TIMINGS_CAP(r4, 0xc0905664, &(0x7f00000000c0)={0x0, 0x0, [], @bt={0x2, 0x1, 0x4a0a, 0x1, 0x1, 0x7, 0xbf093f374c6f54f5, 0x1}})
ioctl$SNDCTL_DSP_NONBLOCK(0xffffffffffffffff, 0x500e, 0x0)
ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f0000000000))
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semop(r2, &(0x7f0000000100), 0x2d)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
semctl$IPC_RMID(r2, 0x0, 0x0)
semget$private(0x0, 0x20000000102, 0x0)

[ 1932.680664][ T3359] futex_wake_op: syz-executor.2 tries to shift op by 256; fix this program
11:38:25 executing program 4:
setitimer(0x0, 0x0, &(0x7f00000001c0))
r0 = syz_usb_connect$cdc_ecm(0x3, 0x5c, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4a, 0x1, 0x1, 0x0, 0x50, 0x7f, [{{0x9, 0x4, 0x0, 0x8, 0x3, 0x2, 0x6, 0x0, 0x8, {{0x6, 0x24, 0x6, 0x0, 0x0, 'u'}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x7fffffff, 0xa7, 0x0, 0x1}, [@call_mgmt={0x5, 0x24, 0x1, 0x3, 0x20}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x200, 0x8, 0xb9}}], {{0x9, 0x5, 0x82, 0x2, 0x5ff, 0x1, 0x1b, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x7f, 0x0, 0x40}}}}}]}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x250, 0x7, 0x3, 0x40, 0x40}, 0x35, &(0x7f00000000c0)={0x5, 0xf, 0x35, 0x2, [@ssp_cap={0x1c, 0x10, 0xa, 0x80, 0x4, 0x7, 0x0, 0x0, [0xc000, 0x3fff, 0xff00, 0x3f00]}, @ss_container_id={0x14, 0x10, 0x4, 0x3f, "fe0cb215320932860955abef1a028395"}]}, 0x9, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x409}}, {0x4, &(0x7f0000000140)=@lang_id={0x4}}, {0x4, &(0x7f0000000180)=@string={0x4, 0x3, "e979"}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x3401}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xf8ff}}, {0x9f, &(0x7f0000000280)=@string={0x9f, 0x3, "1c61dd6f07c3f2f3565a7c72630ff7d0738ecdd1135b5d7309f30a413e0b4ca3c6880a20819594c3906df80a64032167a3d8adbbdd6d30a54ef5339f21d65f2c56ab5cd846e695a1fcc57389bd72b97773136ddc0b50ea14bb8ed0dace1f03f53d31f655c96c1758706be81955e4a7ef71ea62581f5ee7084cf747bda115aef36be41a386a8f9de06df4ce8279db065ce39cf047f147ce2088a153d7b6"}}, {0xf6, &(0x7f0000000340)=@string={0xf6, 0x3, "12c5c7eaf68a223ddefb2d8e80c03a6b890a10b40c56f60a532aa20f4d9f46fc9d3ab32482148822617637b8ffe1eab52fac7dbffc291a37a76c066d8849a33011676354b85c977889288bd6b182efdd8819fc85f3f33b0e8412620cbaf07d5ca9d425ab767c2b19f7752f2f313db3b7cfed97ab142c712d1625727e8d1edbd0102a30f213a17a1c6cd62c409239ca825e390a3d95f039e4d56d4418aa4dd4c993b7156b8d5e2c01fd82e1835bb793b5197d550099a631208adda11d378ad4730ee17f29dec31ae79b54610d7f9da4b7dda0637281ea07eb8d873759f9e8797117a65ea7f0b7621f5240ebdb7f523eda071be250"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x430}}, {0x94, &(0x7f0000000480)=@string={0x94, 0x3, "8b5fcf94fc9a38ce2bb4b96efa2baf9dbd2767154712e737db9d158634644f388093e3cbb5bc38a31dbb2e846ad18913ed4fb076c779d37281f504225839e66e2ad392b9d83da14344aa115ce7517a1c9a65c520711924e2a0d86e49e660a312b280f9a5aa5e89693f1b7696cb62186a49d1ff462a22b083671a627720cb4b96e7c55c8e0af4a42d7039c83aa487c0a4e426"}}]})
syz_usb_ep_write(r0, 0x1f, 0x1a, &(0x7f0000000600)="4cdff20ae8fda7bc67f35a235d6ce80c2c3cf1d359821756a49d")

11:38:25 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0x500000000000000}, 0x0)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

[ 1933.030287][ T3383] futex_wake_op: syz-executor.2 tries to shift op by 256; fix this program
11:38:25 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0x800000000000000}, 0x0)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:38:25 executing program 2:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc0100002)
r2 = semget$private(0x0, 0x3, 0x0)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semop(r2, &(0x7f0000000100), 0x2d)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
semctl$IPC_RMID(r2, 0x0, 0x0)
semget$private(0x0, 0x20000000102, 0x0)

[ 1933.198722][T18318] usb 5-1: new high-speed USB device number 16 using dummy_hcd
11:38:26 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0x900000000000000}, 0x0)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

[ 1933.470684][T18318] usb 5-1: Using ep0 maxpacket: 8
[ 1933.599955][T18318] usb 5-1: config 1 interface 0 altsetting 8 endpoint 0x82 has invalid maxpacket 1535, setting to 1024
[ 1933.631435][T18318] usb 5-1: config 1 interface 0 altsetting 8 bulk endpoint 0x82 has invalid maxpacket 1024
[ 1933.668891][T18318] usb 5-1: config 1 interface 0 altsetting 8 bulk endpoint 0x3 has invalid maxpacket 1024
[ 1933.688518][T18318] usb 5-1: config 1 interface 0 has no altsetting 0
[ 1933.849086][T18318] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1933.858311][T18318] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1933.893345][T18318] usb 5-1: Product: 秩
[ 1933.897511][T18318] usb 5-1: SerialNumber: 㐁
[ 1933.930377][ T3379] raw-gadget gadget: fail, usb_ep_enable returned -22
[ 1933.938229][ T3379] raw-gadget gadget: fail, usb_ep_enable returned -22
11:38:26 executing program 5:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
close(r4)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732})
r6 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@multicast, @multicast, @val={@void}, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @private=0xa010101}, {0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x2e)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8)
splice(r0, 0x0, r4, 0x0, 0x10005, 0x806)

11:38:26 executing program 0:
syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0)
syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x8000000}, 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xbd, 0x970, 0x1, 0x5})
socket$nl_route(0x10, 0x3, 0x0)

11:38:26 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0xe00000000000000}, 0x0)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:38:26 executing program 3:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x7, 0x0, &(0x7f0000000040)="b9010360e000f0", 0x0, 0x0, 0xa000000, 0x0, 0x0, 0x0, 0x0}, 0x40)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
r1 = socket(0x11, 0x800000003, 0x0)
bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r1, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x6db6e559)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x9)

11:38:26 executing program 2:
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0xf}, 0x0, 0x0, 0x2, 0x3, 0x40000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$packet(0x11, 0x0, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc0100002)
r2 = semget$private(0x0, 0x3, 0x0)
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000100)=[0x200, 0x100])
semop(r2, &(0x7f0000000100), 0x2d)
r3 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$KDADDIO(r3, 0x4b34, 0x4d96)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, 0x0, 0x0)
semctl$IPC_RMID(r2, 0x0, 0x0)
semget$private(0x0, 0x20000000102, 0x0)

11:38:26 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0xf00000000000000}, 0x0)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:38:26 executing program 4:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x10002, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000100)={'batadv0\x00'})
r4 = fcntl$dupfd(r1, 0x0, r3)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000880)={0x104, 0x0, &(0x7f0000000640)=[@release, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000380)={@ptr={0x70742a85, 0x1, &(0x7f0000000040)=""/227, 0xe3, 0x0, 0x20}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/131, 0x83, 0x0, 0x30}, @ptr={0x70742a85, 0x1, &(0x7f00000002c0)=""/152, 0x98, 0x2, 0x24}}, &(0x7f0000000180)={0x0, 0x28, 0x50}}, 0x400}, @decrefs={0x40046307, 0x1}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x13, 0x0, 0x0, 0x48, 0x18, &(0x7f00000008c0)=ANY=[@ANYBLOB="852a646600000000", @ANYRES32=r1, @ANYBLOB="000000000000000000000000852a646600000000", @ANYRES32=r4, @ANYBLOB="000000000000000092725648852a64660000000032a7e931fce2c49965355fb8e98f4d328772796c0e485c2d84b2b7aee6dfd106d495006866d24defb3b33e914f1aacb3f2951fa50c5ab8668d60e761d304fde6be104e1d2d29c733f926d9452d1969ce6c8af5fa91f90430384bafd906cf91902dd239c234dde6304c6945a1abd4131acf99df576358b095ab373c7ed7893fceee556cff61e4ce44b0eff50cea1a", @ANYRES32, @ANYBLOB='\x00'/12], &(0x7f0000000480)={0x0, 0x18, 0x30}}}, @acquire={0x40046305, 0x1}, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/122, 0x7a, 0x0, 0x1e}, @flat=@weak_handle={0x77682a85, 0x1000, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000540)=""/41, 0x29, 0x1, 0x3a}}, &(0x7f0000000600)={0x0, 0x28, 0x40}}}, @increfs={0x40046304, 0x1}, @enter_looper, @dead_binder_done], 0xe2, 0x0, &(0x7f0000000780)="051637a933d6a62e94138edae379f5b7d7d85a5ba12c8b83ce5ff0010209116fb8c78d75a1d78070a5a905012dbb86f324c1e2e23d88b0ba295c3407e6c1442853fba9cd016691e2c8c2bd5b6905edcd334c05824a9426a9d948fdc3a8b11cf1104ec839bc83511373374d2880cf7446c95a8ed45ce5c4a8e266e957b6b39773d4546007993e2d37b03e057cc8cc62e12a435998621f9bd16ce7b2e403ec64f43988eaf7fe88c79e4706723d2ca7ea9a271c0a72175979a8044f09b630f0204aa5c013192504e9db8149e09bab5cc90b8ba08848f2881c83136eb9f07d833ed3c5ef"})
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000100)={'batadv0\x00', <r6=>0x0})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00')
sendmsg$BATADV_CMD_GET_MESH(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)={0x2c, r8, 0xf, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x66}]}, 0x2c}}, 0x0)
getsockopt$SO_TIMESTAMPING(r7, 0x1, 0x41, &(0x7f0000000400), &(0x7f0000000440)=0x4)
ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611)
setitimer(0x0, 0x0, &(0x7f00000001c0))

[ 1934.348911][T18318] cdc_ether: probe of 5-1:1.0 failed with error -71
[ 1934.393928][T18318] usb 5-1: USB disconnect, device number 16
11:38:27 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0x3f00000000000000}, 0x0)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:38:27 executing program 4:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='scalable\x00', 0x9)
setitimer(0x0, 0x0, &(0x7f00000001c0))

11:38:27 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0x4000000000000000}, 0x0)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:38:27 executing program 3:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x7, 0x0, &(0x7f0000000040)="b9010360e000f0", 0x0, 0x0, 0xa000000, 0x0, 0x0, 0x0, 0x0}, 0x40)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
r1 = socket(0x11, 0x800000003, 0x0)
bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r1, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x6db6e559)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x9)

11:38:27 executing program 2:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$packet(0x11, 0x0, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc0100002)
r2 = semget$private(0x0, 0x3, 0x0)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semop(r2, &(0x7f0000000100), 0x2d)
r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040)='NLBL_CALIPSO\x00')
sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=r3, @ANYBLOB="00ae8aac95e91b000000000000000000"], 0x1c}}, 0x10004081)
sendmsg$NLBL_CALIPSO_C_ADD(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r3, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x1)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
semctl$IPC_RMID(r2, 0x0, 0x0)
semget$private(0x0, 0x20000000102, 0x0)

[ 1935.106426][ T3480] futex_atomic_op_inuser: 3 callbacks suppressed
[ 1935.106437][ T3480] futex_wake_op: syz-executor.2 tries to shift op by 256; fix this program
11:38:28 executing program 5:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
close(r4)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732})
r6 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@multicast, @multicast, @val={@void}, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @private=0xa010101}, {0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x2e)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8)
splice(r0, 0x0, r4, 0x0, 0x10005, 0xd00)

11:38:28 executing program 0:
syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0)
syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x9000000}, 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xbd, 0x970, 0x1, 0x5})
socket$nl_route(0x10, 0x3, 0x0)

11:38:28 executing program 4:
setitimer(0x0, 0x0, &(0x7f00000001c0))
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)={'batadv0\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00')
sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)={0x2c, r3, 0xf, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x66}]}, 0x2c}}, 0x0)
r4 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$F2FS_IOC_GET_FEATURES(r4, 0x8004f50c, &(0x7f0000000200))
ioctl$SNDRV_PCM_IOCTL_REWIND(r4, 0x40084146, &(0x7f0000000340)=0x1b1)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$TCSETXW(0xffffffffffffffff, 0x5435, &(0x7f00000003c0)={0x9, 0x4e21, [0x9, 0x1, 0x0, 0x3, 0x3], 0x80})
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x800, 0x0)
recvfrom$llc(r6, &(0x7f0000000280)=""/1, 0x1, 0x2000, &(0x7f00000002c0)={0x1a, 0x203, 0x9, 0x0, 0x0, 0x0, @remote}, 0x10)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00')
sendmsg$TIPC_CMD_GET_NODES(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, r7, 0xf, 0x0, 0x0, {{}, {0x0, 0x6}}}, 0x1c}}, 0x0)
sendmsg$TIPC_CMD_GET_REMOTE_MNG(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r7, 0x400, 0x70bd2b, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x41}, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)=@bridge_newneigh={0x38, 0x1c, 0x400, 0x70bd29, 0x25dfdbfe, {0xa, 0x0, 0x0, 0x0, 0x40}, [@NDA_MASTER={0x8, 0x9, 0x7}, @NDA_DST_MAC={0xa, 0x1, @remote}, @NDA_PROBES={0x8, 0x4, 0x200}]}, 0x38}, 0x1, 0x0, 0x0, 0x8044010}, 0x811)
r8 = socket$packet(0x11, 0x2, 0x300)
getsockname(r8, &(0x7f0000000400)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f0000000480)=0x80)

11:38:28 executing program 2:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$packet(0x11, 0x0, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc0100002)
r2 = semget$private(0x0, 0x3, 0x108)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semop(r2, &(0x7f0000000100), 0x2d)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
semctl$IPC_RMID(r2, 0x0, 0x0)
semget$private(0x0, 0x20000000102, 0x0)

11:38:28 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0x6000000000000000}, 0x0)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

[ 1935.653730][ T3502] futex_wake_op: syz-executor.2 tries to shift op by 256; fix this program
11:38:28 executing program 2:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$packet(0x11, 0x0, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000000)={0x0, @aes128})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup2(r1, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc0100002)
r3 = semget$private(0x0, 0x3, 0x0)
semctl$SETALL(r3, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semop(r3, &(0x7f0000000100), 0x2d)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
semctl$IPC_RMID(r3, 0x0, 0x0)
semget$private(0x0, 0x20000000102, 0x0)

11:38:28 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0x9effffff00000000}, 0x0)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:38:28 executing program 4:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000000))
ioctl$KVM_GET_REGS(r1, 0x8090ae81, &(0x7f0000000040))
setitimer(0x0, 0x0, &(0x7f00000001c0))

11:38:28 executing program 3:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x7, 0x0, &(0x7f0000000040)="b9010360e000f0", 0x0, 0x0, 0xa000000, 0x0, 0x0, 0x0, 0x0}, 0x40)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
r1 = socket(0x11, 0x800000003, 0x0)
bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r1, 0x0, &(0x7f0000000040))
r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x6db6e559)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x9)

[ 1935.999513][ T3519] futex_wake_op: syz-executor.2 tries to shift op by 256; fix this program
11:38:28 executing program 2:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$packet(0x11, 0x0, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc0100002)
r2 = semget$private(0x0, 0x3, 0x0)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semop(r2, &(0x7f0000000100), 0x2d)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
semctl$IPC_RMID(r2, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f0000000000)={0x20, @time={0x3, 0xb6}, 0x81, {0xfc, 0x4}, 0x7, 0x1, 0xf7})
semget$private(0x0, 0x20000000102, 0x0)

11:38:28 executing program 4:
setitimer(0x0, 0x0, &(0x7f00000001c0))
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0xc0000, 0x0)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00')
sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="6800460f", @ANYRES16=r1, @ANYBLOB="000329bd7000fcdbdf25010000000000000007410000004c0018fffeffff62726f6164636173742d6c696e6b00"/98], 0x68}, 0x1, 0x0, 0x0, 0x81}, 0x60004085)

11:38:28 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0xf0ffffff00000000}, 0x0)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

[ 1936.196408][ T3532] futex_wake_op: syz-executor.2 tries to shift op by 256; fix this program
11:38:29 executing program 5:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
close(r4)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732})
r6 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@multicast, @multicast, @val={@void}, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @private=0xa010101}, {0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x2e)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8)
splice(r0, 0x0, r4, 0x0, 0x10005, 0xe80)

11:38:29 executing program 2:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$packet(0x11, 0x0, 0x300)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$CAPI_GET_ERRCODE(r1, 0x80024321, &(0x7f0000000000))
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup2(r2, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
futex(0x0, 0x85, 0x3, 0x0, 0x0, 0xc0100001)
r4 = semget$private(0x0, 0x3, 0x0)
semctl$SETALL(r4, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semop(r4, &(0x7f0000000100), 0x2d)
semctl$IPC_RMID(r4, 0x0, 0x0)
semget$private(0x0, 0x20000000102, 0x0)

11:38:29 executing program 3:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x7, 0x0, &(0x7f0000000040)="b9010360e000f0", 0x0, 0x0, 0xa000000, 0x0, 0x0, 0x0, 0x0}, 0x40)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
r1 = socket(0x11, 0x800000003, 0x0)
bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r1, 0x0, &(0x7f0000000040))
r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x6db6e559)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x9)

11:38:29 executing program 0:
syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0)
syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x10000000}, 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xbd, 0x970, 0x1, 0x5})
socket$nl_route(0x10, 0x3, 0x0)

11:38:29 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0xfb1c000000000000}, 0x0)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:38:29 executing program 4:
setitimer(0x0, 0x0, &(0x7f00000001c0))
r0 = semget$private(0x0, 0x20000000102, 0x0)
semctl$SETALL(r0, 0x0, 0x11, 0x0)
semctl$GETPID(r0, 0x1, 0xb, &(0x7f0000000000)=""/246)

11:38:29 executing program 2:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$packet(0x11, 0x0, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup2(r1, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc0100002)
r3 = semget$private(0x0, 0x3, 0x0)
semctl$SETALL(r3, 0x0, 0x11, &(0x7f0000000080)=[0x200])
ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f00000000c0)={0xa30000, 0x5287, 0x2, r0, 0x0, &(0x7f0000000040)={0x990af9, 0x5, [], @p_u32=&(0x7f0000000000)=0xffffffff}})
semop(r3, &(0x7f0000000100), 0x2d)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
semctl$IPC_RMID(r3, 0x0, 0x0)
semget$private(0x0, 0x20000000102, 0x0)

[ 1936.841879][ T3554] futex_wake_op: syz-executor.2 tries to shift op by 256; fix this program
11:38:29 executing program 4:
openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0)
r0 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0)
setitimer(0x0, 0x0, &(0x7f00000001c0))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ocfs2_control\x00', 0x100, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
syz_emit_ethernet(0x32, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaa08eae67dfde8b009100390081003000080600010800060400080500c6214a122cffac000000010a010101aaaaa8"], &(0x7f0000000180)={0x0, 0x3, [0x863, 0x438, 0xfc8, 0x115]})
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$sock_bt_hci(r5, 0x800448f0, &(0x7f0000000280)="7b4ea73de748a8009c7f5f7b901e9a6052538a454f873e605771a66e192b83b37bab348dc2a7f88eaad3d57385e06fd06040ef099a2c6bb1e2777b20c7d6f7cc21ebca2366b91c2f42667280ec99e9cdf51cb2b52dee6c5ec8da")
socket(0x4, 0x5, 0x8)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = dup(r6)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
ioctl$sock_ax25_SIOCDELRT(r7, 0x890c, &(0x7f0000000000)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, 0x5, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @null, @null]})
ioctl$KVM_GET_PIT2(r3, 0x8070ae9f, &(0x7f0000000200))

11:38:29 executing program 3:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x7, 0x0, &(0x7f0000000040)="b9010360e000f0", 0x0, 0x0, 0xa000000, 0x0, 0x0, 0x0, 0x0}, 0x40)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
r1 = socket(0x11, 0x800000003, 0x0)
bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r1, 0x0, &(0x7f0000000040))
r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x6db6e559)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x9)

11:38:29 executing program 3:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x7, 0x0, &(0x7f0000000040)="b9010360e000f0", 0x0, 0x0, 0xa000000, 0x0, 0x0, 0x0, 0x0}, 0x40)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
r1 = socket(0x11, 0x800000003, 0x0)
bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r1, 0x0, &(0x7f0000000040))
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x6db6e559)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x9)

[ 1937.047752][ T3579] futex_wake_op: syz-executor.2 tries to shift op by 256; fix this program
11:38:29 executing program 2:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc0100002)
r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyprintk\x00', 0x1, 0x0)
ioctl$TIOCGPKT(r2, 0x80045438, &(0x7f0000000040))
r3 = semget$private(0x0, 0x3, 0x0)
semctl$SETALL(r3, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semop(r3, &(0x7f0000000100), 0x2d)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
semctl$IPC_RMID(r3, 0x0, 0x0)
semget$private(0x0, 0x20000000102, 0x0)

11:38:29 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0xffffff7f00000000}, 0x0)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

[ 1937.337561][ T3588] futex_wake_op: syz-executor.2 tries to shift op by 256; fix this program
[ 1937.438495][ T3593] futex_wake_op: syz-executor.2 tries to shift op by 256; fix this program
11:38:30 executing program 5:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
close(r4)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732})
r6 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@multicast, @multicast, @val={@void}, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @private=0xa010101}, {0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x2e)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8)
splice(r0, 0x0, r4, 0x0, 0x10005, 0xfee)

11:38:30 executing program 3:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x7, 0x0, &(0x7f0000000040)="b9010360e000f0", 0x0, 0x0, 0xa000000, 0x0, 0x0, 0x0, 0x0}, 0x40)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
r1 = socket(0x11, 0x800000003, 0x0)
bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r1, 0x0, &(0x7f0000000040))
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x6db6e559)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x9)

11:38:30 executing program 4:
setitimer(0x0, 0x0, &(0x7f00000001c0))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$UFFDIO_ZEROPAGE(r3, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1})
ioctl$IMCTRLREQ(r1, 0x80044945, &(0x7f0000000000)={0x20, 0x7144, 0x6})

11:38:30 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0xffffffff00000000}, 0x0)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:38:30 executing program 2:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$packet(0x11, 0x0, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup2(r0, r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x3)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc0100002)
r3 = semget$private(0x0, 0x3, 0x0)
semctl$SETALL(r3, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semop(r3, &(0x7f0000000100), 0x2d)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
semctl$IPC_RMID(r3, 0x0, 0x0)
semget$private(0x0, 0x20000000102, 0x0)

11:38:30 executing program 0:
syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0)
syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x64000000}, 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xbd, 0x970, 0x1, 0x5})
socket$nl_route(0x10, 0x3, 0x0)

[ 1937.949965][ T3618] futex_wake_op: syz-executor.2 tries to shift op by 256; fix this program
11:38:30 executing program 2:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$packet(0x11, 0x0, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc0100002)
r2 = semget$private(0x0, 0x3, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000000c0)={0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x2, 0x0, 0x3f, 0xab, 0x6, 0x2, 0xffff, 0xfffa, 0xa0, 0x7ff, 0x1000, 0x1000, 0x8, 0x0, 0x2, 0x8, 0x7, 0x5, 0x7, 0x0, 0x7, 0x1, 0x4, 0x109, 0x10, 0x0, 0x0, 0xfe, 0x1ff, 0x6, 0x3ba, 0x7, 0xc9, 0x9499, 0x3, 0x6, 0x2, 0x81, 0x936, 0x8000, 0x2, 0xff, 0x2, 0xffc1, 0x9], 0x40}})
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semop(r2, &(0x7f0000000100), 0x2d)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
semctl$IPC_RMID(r2, 0x0, 0x0)
semget$private(0x0, 0x20000000102, 0x0)

11:38:30 executing program 4:
setitimer(0x0, 0x0, &(0x7f00000001c0))
syz_open_dev$ptys(0xc, 0x3, 0x0)

11:38:30 executing program 3:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x7, 0x0, &(0x7f0000000040)="b9010360e000f0", 0x0, 0x0, 0xa000000, 0x0, 0x0, 0x0, 0x0}, 0x40)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
r1 = socket(0x11, 0x800000003, 0x0)
bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r1, 0x0, &(0x7f0000000040))
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x6db6e559)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x9)

11:38:30 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0xfffffffffffff000}, 0x0)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:38:30 executing program 3:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x7, 0x0, &(0x7f0000000040)="b9010360e000f0", 0x0, 0x0, 0xa000000, 0x0, 0x0, 0x0, 0x0}, 0x40)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
r1 = socket(0x11, 0x800000003, 0x0)
bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r1, 0x0, &(0x7f0000000040))
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r2, 0x0, 0x6db6e559)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x9)

11:38:30 executing program 4:
setitimer(0x0, 0x0, &(0x7f00000001c0))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00')
sendmsg$TIPC_NL_NAME_TABLE_GET(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="7d0800000000000000d619"], 0x14}}, 0x0)
sendmsg$TIPC_NL_KEY_FLUSH(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x118, r3, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3329}]}, @TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x40}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x80000000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x81}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x401}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x16d}]}, @TIPC_NLA_NET={0x5c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x200}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x96}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffff7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6e1077ca}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}]}, @TIPC_NLA_NET={0x60, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5fd}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x100000001}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x101}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8c7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x12}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x800}, 0x28044800)

[ 1938.322016][ T3641] futex_wake_op: syz-executor.2 tries to shift op by 256; fix this program
11:38:31 executing program 5:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
close(r4)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732})
r6 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@multicast, @multicast, @val={@void}, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @private=0xa010101}, {0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x2e)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8)
splice(r0, 0x0, r4, 0x0, 0x10005, 0xffc)

11:38:31 executing program 2:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$packet(0x11, 0x0, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket(0x11, 0x2, 0x0)
bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
r4 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=ANY=[@ANYBLOB="34c79a41813d8fe53048010000a4827b004c63a35e0b05002016", @ANYRES32=r3, @ANYBLOB="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"], 0x148}}, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x53, r3})
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
futex(0x0, 0x8b, 0x80, 0x0, 0x0, 0x9)
r5 = semget$private(0x0, 0x3, 0x0)
semctl$SETALL(r5, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semop(r5, &(0x7f0000000100), 0x2d)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
semctl$IPC_RMID(r5, 0x0, 0x0)
semget$private(0x0, 0x0, 0x0)

11:38:31 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0x2}, 0x0)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:38:31 executing program 4:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
mq_notify(r1, &(0x7f0000000180)={0x0, 0xf, 0x1, @thr={&(0x7f0000000040)="247ea5f3f9870f84b693920736d82e374d2e3c1145caf5f680ae2b279d6a3e71a70b64f52dfa44d4365911c7319b99b48bfebdf2ad7ae45e3d8e1e2486420aae6a0167d8db433de53424", &(0x7f00000000c0)="1297b5326bd3795f035fc7eb74dcd634f012efc3aeed87a3d24e9432bb3425b27ce73e323bccd9faf691b438067b7e72366aa0b6768a131106672b30dd1f2b99996310da353002436454781739de7b32f12a5961b5fe9802da71466331af4aec306178ccef9cfe78565243ed8bd1aad04c6eab0292515e5f5ecc236a9c44a92b517e8e406d093552b0d31681de6d39dc0d311c75f3b662c5f62565f4be7f"}})
setitimer(0x0, 0x0, &(0x7f0000000000))

11:38:31 executing program 3:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x7, 0x0, &(0x7f0000000040)="b9010360e000f0", 0x0, 0x0, 0xa000000, 0x0, 0x0, 0x0, 0x0}, 0x40)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
r1 = socket(0x11, 0x800000003, 0x0)
bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r1, 0x0, &(0x7f0000000040))
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r2, 0x0, 0x6db6e559)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x9)

11:38:31 executing program 0:
syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0)
syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x6a070000}, 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xbd, 0x970, 0x1, 0x5})
socket$nl_route(0x10, 0x3, 0x0)

11:38:31 executing program 2:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$packet(0x11, 0x0, 0x300)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup2(r1, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc0100002)
getpeername$netlink(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0xc)
ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000240)="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")
ptrace$cont(0x7, 0x0, 0x0, 0x0)
r3 = getpgrp(0x0)
fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, <r4=>0x0})
setpgid(r3, r4)
r5 = semget$private(0x0, 0x3, 0x0)
semctl$SETALL(r5, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semop(r5, &(0x7f0000000100), 0x2d)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
semctl$IPC_RMID(r5, 0x0, 0x0)
semget$private(0x0, 0x20000000102, 0x0)

11:38:31 executing program 4:
setitimer(0xb9a7cf90ba859c65, 0x0, &(0x7f0000000080))
openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x565140, 0x0)

11:38:31 executing program 3:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x7, 0x0, &(0x7f0000000040)="b9010360e000f0", 0x0, 0x0, 0xa000000, 0x0, 0x0, 0x0, 0x0}, 0x40)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
r1 = socket(0x11, 0x800000003, 0x0)
bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r1, 0x0, &(0x7f0000000040))
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r2, 0x0, 0x6db6e559)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x9)

11:38:31 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0x3}, 0x0)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:38:32 executing program 4:
r0 = gettid()
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x40)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r0, 0x6, 0x0)
ptrace$cont(0x1f, r0, 0x60, 0x67c2176a)
setitimer(0x0, 0x0, &(0x7f00000001c0))

11:38:32 executing program 3:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x7, 0x0, &(0x7f0000000040)="b9010360e000f0", 0x0, 0x0, 0xa000000, 0x0, 0x0, 0x0, 0x0}, 0x40)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
r1 = socket(0x11, 0x800000003, 0x0)
bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r1, 0x0, &(0x7f0000000040))
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x6db6e559)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r2, 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x9)

11:38:33 executing program 5:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
close(r4)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732})
r6 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@multicast, @multicast, @val={@void}, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @private=0xa010101}, {0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x2e)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8)
splice(r0, 0x0, r4, 0x0, 0x10005, 0x1400)

11:38:33 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0x4}, 0x0)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:38:33 executing program 4:
setitimer(0x0, 0x0, &(0x7f0000000040))

11:38:33 executing program 2:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$packet(0x11, 0x0, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup2(r1, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendmsg(r0, &(0x7f0000000040)={&(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x0, 0x3, 0x0, 0x1, {0xa, 0x4e20, 0x80, @mcast1, 0x2}}}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000240)="0cbe42444106ea57c54f159d6fd4125a9b116ea8c26392636d9f982d3240f40dd8c87ff42b6c3ab5be9be95c11e01a6858b6d686238a9a738408653ad42444d1e3", 0x41}, {&(0x7f00000002c0)="ea1edf8701ca4a6df836e54b51671301e7eb7cd65ad38235f594ea73b511bb920bb8a46ad8da371b0c6a9bc8f70244b56e9a99951508e74d8d3987a16cb7260db3110af92fdd079213a2a5e79be65366d41c77795991e16b7c7117524bccf150cd332c98f98ba4d0198b34a660769158d7b79a07acffd26790a1d14385566b447acf5cc88d5af0d89b2870c1b3ca876cd00306ffee8aad931c99737e34d7fea22196883d908996291fd2405cb59eafbe5ae93b28b1b19f6a7942c5aad8d10d997e7674b2583982c92a86a576a492f12a358b6589f963e0e8aba0be00ef9aa52225d5cd8c892770969a8d85bf5f53fc1e82cd9b05c120", 0xf6}, {&(0x7f00000003c0)="512a458b4ce317e785ce3bcffb47a886f0403c85d7db23566e169929f9568d9bb43221c5a88aa7999a929af8e8df3218eed58bc079bded7c2cc7bf4a178eea29c8b9c246f0f3831b7f66dc0e227d932ef4250e49eee95e67d496407eca8c02257637cd70f5b5e4dd887faf1d3e8838a721ee6d186e", 0x75}, {&(0x7f0000000440)="6b78abd5eca50551f8be411ea6bb85f2579f600bfbaa35d95a910d8381d93dc6b1ad11510a2a1f6a1edca9ace5ae9d98beead40a3a3bcff0a0f004abd08732ae0c81304f62153c69bc6a872dbf0d6647ee7d3e3ba98f96b07fc68ee8ffccd0119e01bbae11ed7ff7cf3b57ec1cab892d11836e8364bad3ccbb6cfd", 0x7b}, {&(0x7f00000004c0)="4c268d8ead668aaa95437213aad316eb35db0fecfaddc51b75ada23eeac954bb94ed9618f70b6a25aea411324cfac81c1d2940c5dce83e96c562ad0fcd3234504d0b2cfeff3a911611720dfbad533f6de859b6e1855b3373a0ca443112791c76170eb5f3eae4735c52b773c5080fc5e4d37c475b970ac83884390ac1893484f79dd05a5ed9839f747ecc9194a37ed300e0581fd650850d08b270ecc1b543635c29208cedb469f249376e60fcfec4a98f8d4fd1aadd", 0xb5}, {&(0x7f0000000580)="3dc10f057790004c82ba10384466eba6b84107f33bd19d205465dba57abcf4322ec79e63cbfebf17e41de2f6293e0d11203781c24ce5544347a06e668e169fea89a86790ef2274897c8d331071f930f8d76d3f39a0d4b4edd6e2aeca1e37fcb4ca6784cfc94882d4461e16379dab7d3095b8724d16bcd7ed390b624870318d3450354987d7dfebf351a98fc9bf40c926426620aefe68d7567623d8b8", 0x9c}], 0x6, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x1220}, 0x4004)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r4, 0x8010661b, &(0x7f0000000000))
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc0100002)
r5 = semget$private(0x0, 0x3, 0x0)
semctl$SETALL(r5, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semop(r5, &(0x7f0000000100), 0x2d)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
semctl$IPC_RMID(r5, 0x0, 0x0)
semget$private(0x0, 0x20000000102, 0x0)

11:38:33 executing program 0:
syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0)
syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0xff000000}, 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xbd, 0x970, 0x1, 0x5})
socket$nl_route(0x10, 0x3, 0x0)

11:38:33 executing program 3:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x7, 0x0, &(0x7f0000000040)="b9010360e000f0", 0x0, 0x0, 0xa000000, 0x0, 0x0, 0x0, 0x0}, 0x40)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
r1 = socket(0x11, 0x800000003, 0x0)
bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r1, 0x0, &(0x7f0000000040))
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x6db6e559)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r2, 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x9)

11:38:33 executing program 4:
setitimer(0x0, 0x0, &(0x7f00000001c0))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$KVM_GET_SREGS(r1, 0x8138ae83, &(0x7f0000000000))

11:38:33 executing program 2:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$packet(0x11, 0x0, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup2(r1, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc0100002)
r3 = semget$private(0x0, 0x3, 0x0)
semctl$SETALL(r3, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semop(r3, &(0x7f0000000100), 0x2d)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0)
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r5, 0x84, 0x16, &(0x7f0000000000)={0x7, [0x9, 0x8, 0x0, 0x0, 0x1f, 0xca, 0xfff8]}, &(0x7f0000000040)=0x12)
semctl$IPC_RMID(r3, 0x0, 0x0)
semget$private(0x0, 0x20000000102, 0x0)
write$UHID_INPUT(r2, &(0x7f0000000240)={0x8, {"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", 0x1000}}, 0x1006)

[ 1940.457584][ T3729] futex_atomic_op_inuser: 2 callbacks suppressed
[ 1940.457599][ T3729] futex_wake_op: syz-executor.2 tries to shift op by 256; fix this program
11:38:33 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0x5}, 0x0)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

[ 1940.751431][ T3753] futex_wake_op: syz-executor.2 tries to shift op by 256; fix this program
11:38:33 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0x8}, 0x0)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:38:33 executing program 4:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f0000000040)={{0x2, 0x4e20, @multicast2}, {0x6, @remote}, 0x4, {0x2, 0x4e23, @private=0xa010102}, 'ipvlan1\x00'})
setitimer(0x0, 0x0, &(0x7f00000001c0))
syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x9, 0x400)

11:38:33 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0x9}, 0x0)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:38:34 executing program 5:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
close(r4)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732})
r6 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@multicast, @multicast, @val={@void}, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @private=0xa010101}, {0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x2e)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8)
splice(r0, 0x0, r4, 0x0, 0x10005, 0x3580)

11:38:34 executing program 0:
syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0)
syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x1000000000000}, 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xbd, 0x970, 0x1, 0x5})
socket$nl_route(0x10, 0x3, 0x0)

11:38:34 executing program 4:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clock_gettime(0x4, &(0x7f0000000000)={<r2=>0x0, <r3=>0x0})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
dup(r5)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000100)={'batadv0\x00'})
r7 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0)
keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0)
keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000180)={0x0, 0xb8, 0x4b}, 0x0, &(0x7f0000000240)="0b2f246fc39de53923ed8420249379944dc6d1f3105ef0ecad6c9b8f8d9ca8188833571b92e407a2a28ea632d5579c84d8b24110b91a9f31756261a07c4aae4feee04b18450d8e094f03c5554008819176b59ab31da5d3f80ebe053f09ddb112a8d59d7793b69ff1a9067802e2dadb8d7a2ccbf8c30c44fc2378a47aa3483901c3e5ee1993de8abf5649993993e31f5d820c0ff656d2d31fad002f69a1b47abe8e1f9a403c8b1086720de82c9c54bcc16bafe6ad02b4982d", &(0x7f00000001c0)=""/75)
ioctl$VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000080)={0x5, 0x7, 0x4, 0x10000, 0x0, {r2, r3/1000+60000}, {0x2, 0x8, 0x2, 0xef, 0xf8, 0x2, "8e9e184e"}, 0x1, 0x4, @userptr=0x80000000, 0x9, 0x0, r7})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
r9 = dup(r8)
ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200)
getsockopt$CAN_RAW_FILTER(r9, 0x65, 0x1, &(0x7f0000000040)=[{}, {}, {}, {}, {}], &(0x7f0000000100)=0x28)

11:38:34 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0xe}, 0x0)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:38:34 executing program 3:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x7, 0x0, &(0x7f0000000040)="b9010360e000f0", 0x0, 0x0, 0xa000000, 0x0, 0x0, 0x0, 0x0}, 0x40)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
r1 = socket(0x11, 0x800000003, 0x0)
bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r1, 0x0, &(0x7f0000000040))
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x6db6e559)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r2, 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x9)

11:38:34 executing program 2:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$packet(0x11, 0x0, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
setsockopt$ALG_SET_AEAD_AUTHSIZE(r3, 0x117, 0x5, 0x0, 0x5)
r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000), 0xc)
dup2(r3, r4)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc0100002)
r5 = semget$private(0x0, 0x3, 0x0)
semctl$SETALL(r5, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semop(r5, &(0x7f0000000100), 0x2d)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
semctl$IPC_RMID(r5, 0x0, 0x0)
semget$private(0x0, 0x20000000102, 0x0)

[ 1942.005930][ T3784] futex_wake_op: syz-executor.2 tries to shift op by 256; fix this program
11:38:34 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0xf}, 0x0)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:38:34 executing program 2:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$packet(0x11, 0x0, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180100905, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc0100002)
r2 = semget$private(0x0, 0x3, 0x0)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semop(r2, &(0x7f0000000100), 0x2d)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
semctl$IPC_RMID(r2, 0x0, 0x0)
semget$private(0x0, 0x20000000102, 0x0)

11:38:34 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
setrlimit(0xf, &(0x7f0000000040)={0x0, 0xff})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000000, 0x98071, r1, 0x0)
ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f00000000c0))
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x2, 0xc000})
setitimer(0x0, 0x0, &(0x7f00000001c0))

11:38:35 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0x60}, 0x0)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

[ 1942.385390][ T3817] futex_wake_op: syz-executor.2 tries to shift op by 256; fix this program
11:38:35 executing program 2:
perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$packet(0x11, 0x0, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc0100002)
r2 = semget$private(0x0, 0x3, 0x0)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semop(r2, &(0x7f0000000100), 0x2d)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
semctl$IPC_RMID(r2, 0x0, 0x0)
semget$private(0x0, 0x20000000102, 0x0)

[ 1942.451014][ T3820] futex_wake_op: syz-executor.2 tries to shift op by 256; fix this program
11:38:35 executing program 4:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000340)={&(0x7f0000000200)="b6746af92659c51125110bda510f99761e675f85f87fde6ba960b92e18c781e4b773f64c333fb38b8b0f266f771d5f3c970f143c20aa77714b90184d540068c411e43947df16e124a3533fe8787d9ec2c05beb887b09fffe121581bbe2842149f63309fc325ef4ae49afe7cb4f0e67829afd82224ab17cd8fdfd79fab4e13f273c8dba4dc1c8ea9936b17e12b096c2eb7057f6a69e570164f323f94c7fd95da16ca46825b6a581d3ff64d2a1d4ff4a54f98cee02af5849212e2408883204dc6b19f613", &(0x7f0000000180)=""/67, &(0x7f0000000380)="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", &(0x7f00000004c0)="a59ab595f15d48c892d59e3e65a8a07be2c5e1d25ecc320b65456ebbc4cdc69df6352177140a4db8c107b8978462b54878c775a56e6e5ade27a729a03a64bbf61bc2a8d84dfec07a1cf179301aff6e1245e95b9e0f04f8d6515718ec5652ca62e953d6fc8f0a667ea4dd1e16dd1f431dc42b483c4907913fd26f72dcf2f5b0f195a9ef805f80433cccacd1f8373fc91b2e398bc4feb9136565651eaf2c2636ef", 0x1, r3}, 0x38)
ioctl$SNDCTL_SEQ_NRMIDIS(r1, 0x8004510b, &(0x7f0000000000))
ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r1, 0xc0105303, &(0x7f0000000040)={0x0, 0x4, 0x2})

[ 1942.691907][ T3832] futex_wake_op: syz-executor.2 tries to shift op by 256; fix this program
11:38:35 executing program 5:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
close(r4)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732})
r6 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@multicast, @multicast, @val={@void}, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @private=0xa010101}, {0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x2e)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8)
splice(r0, 0x0, r4, 0x0, 0x10005, 0x3f00)

11:38:35 executing program 2:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xc}, 0x201, 0x0, 0x0, 0x5, 0x7}, 0x0, 0x8, 0xffffffffffffffff, 0x0)
socket$packet(0x11, 0x0, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc0100002)
r2 = semget$private(0x0, 0x3, 0x0)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semop(r2, &(0x7f0000000100), 0x2d)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
write$FUSE_NOTIFY_DELETE(r4, &(0x7f0000000000)={0x2c, 0x6, 0x0, {0x1, 0x3, 0x3, 0x0, '!,}'}}, 0x2c)
semctl$IPC_RMID(r2, 0x0, 0x0)
semget$private(0x0, 0x20000000102, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
ioctl$CAPI_INSTALLED(0xffffffffffffffff, 0x80024322)

11:38:35 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0xf0}, 0x0)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:38:35 executing program 4:
sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x1411, 0x200, 0x70bd27, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x884)
setitimer(0x0, 0x0, &(0x7f00000001c0))

11:38:35 executing program 3:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x7, 0x0, &(0x7f0000000040)="b9010360e000f0", 0x0, 0x0, 0xa000000, 0x0, 0x0, 0x0, 0x0}, 0x40)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
r1 = socket(0x11, 0x800000003, 0x0)
bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r1, 0x0, &(0x7f0000000040))
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x6db6e559)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10, r2, 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x9)

11:38:35 executing program 0:
syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0)
syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x100000000000000}, 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xbd, 0x970, 0x1, 0x5})
socket$nl_route(0x10, 0x3, 0x0)

[ 1943.355248][ T3859] futex_wake_op: syz-executor.2 tries to shift op by 256; fix this program
11:38:36 executing program 2:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$packet(0x11, 0x0, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc0100002)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x501201, 0x0)
ioctl$SIOCX25GSUBSCRIP(r2, 0x89e0, &(0x7f00000000c0)={'bond_slave_1\x00', 0x4, 0x7})
r3 = semget$private(0x0, 0x3, 0x0)
semctl$SETALL(r3, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semop(r3, &(0x7f0000000100), 0x2d)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
semctl$IPC_RMID(r3, 0x0, 0x0)
semget$private(0x0, 0x20000000102, 0x0)

11:38:36 executing program 4:
setitimer(0x0, 0x0, &(0x7f0000000040))
socketpair$unix(0x1, 0xc8bbf0cc74673ad9, 0x0, &(0x7f0000000180))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
dup(r0)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r3, 0x40045402, &(0x7f0000000000)=0x1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$TCSETA(r5, 0x5406, &(0x7f0000000080)={0xfbff, 0x9, 0x1, 0x7fff, 0x7, "9472e1ffd939c210"})
write$P9_RVERSION(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="1500d431da45f72dc5f2406dfec4f6758f6b54c147c297f7218f1870c8fe8ec28e84e5efb4617537ab558c4eec39fa6a53db4d341d126244311faf2cdae8"], 0x15)

11:38:36 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0x300}, 0x0)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

[ 1943.699557][ T3885] futex_wake_op: syz-executor.2 tries to shift op by 256; fix this program
11:38:36 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0x500}, 0x0)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:38:36 executing program 2:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc0100002)
r2 = semget$private(0x0, 0x3, 0x0)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semop(r2, &(0x7f0000000100), 0x2d)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
semctl$IPC_RMID(r2, 0x0, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x484443, 0x0)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x2, 0x3}, 0x10)
semget$private(0x0, 0x20000000102, 0x0)

11:38:36 executing program 4:
setitimer(0x0, 0x0, &(0x7f00000001c0))
openat$audio1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x200000, 0x0)

[ 1943.985056][ T3902] futex_wake_op: syz-executor.2 tries to shift op by 256; fix this program
11:38:37 executing program 5:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
close(r4)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732})
r6 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@multicast, @multicast, @val={@void}, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @private=0xa010101}, {0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x2e)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8)
splice(r0, 0x0, r4, 0x0, 0x10005, 0x4000)

11:38:37 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0x900}, 0x0)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:38:37 executing program 0:
syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0)
syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x800000000000000}, 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xbd, 0x970, 0x1, 0x5})
socket$nl_route(0x10, 0x3, 0x0)

11:38:37 executing program 4:
setitimer(0x0, 0x0, &(0x7f00000001c0))
ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)=0x4)

11:38:37 executing program 2:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$packet(0x11, 0x0, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @dev, 0xc}, @in={0x2, 0x0, @loopback}], 0x2c)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f00000000c0)={0x1, [<r3=>0x0]}, &(0x7f000095dffc)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000280)={r3, @in={{0x2, 0x0, @empty}}}, 0x90)
setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000000)={r3, 0xa}, 0x8)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc0100002)
r4 = semget$private(0x0, 0x3, 0x0)
semctl$SETALL(r4, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semop(r4, &(0x7f0000000100), 0x2d)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
semctl$IPC_RMID(r4, 0x0, 0x0)
semget$private(0x0, 0x20000000102, 0x0)

11:38:37 executing program 3:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x7, 0x0, &(0x7f0000000040)="b9010360e000f0", 0x0, 0x0, 0xa000000, 0x0, 0x0, 0x0, 0x0}, 0x40)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
r1 = socket(0x11, 0x800000003, 0x0)
bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r1, 0x0, &(0x7f0000000040))
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x6db6e559)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10, r2, 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x9)

11:38:37 executing program 4:
setitimer(0x0, 0x0, &(0x7f00000001c0))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r1, 0xc0305615, &(0x7f0000000000)={0x0, {0xba9}})

11:38:37 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0xe00}, 0x0)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

[ 1944.670943][ T3926] futex_wake_op: syz-executor.2 tries to shift op by 256; fix this program
11:38:37 executing program 2:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$packet(0x11, 0x0, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc0100002)
r2 = semget$private(0x0, 0x3, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x16)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000080)=[0x200])
ioctl$EVIOCGID(r1, 0x80084502, &(0x7f00000000c0)=""/89)
semop(r2, &(0x7f0000000100), 0x2d)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
semctl$IPC_RMID(r2, 0x0, 0x0)
semget$private(0x0, 0x20000000102, 0x0)

11:38:37 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0xf00}, 0x0)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:38:37 executing program 2:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x1000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$packet(0x11, 0x0, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc0100002)
r2 = semget$private(0x0, 0x3, 0x0)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semop(r2, &(0x7f0000000100), 0x2d)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
semctl$IPC_RMID(r2, 0x0, 0x0)
semget$private(0x0, 0x20000000102, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
sendmsg$RDMA_NLDEV_CMD_SYS_SET(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x40, 0x1407, 0x100, 0x70bd2b, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x10)

11:38:37 executing program 4:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
connect$nfc_raw(r1, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x1}, 0x10)
setitimer(0x0, 0x0, &(0x7f00000001c0))

11:38:38 executing program 5:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
close(r4)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732})
r6 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@multicast, @multicast, @val={@void}, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @private=0xa010101}, {0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x2e)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8)
splice(r0, 0x0, r4, 0x0, 0x10005, 0x4305)

11:38:38 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0x1cfb}, 0x0)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:38:38 executing program 0:
syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0)
syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x900000000000000}, 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xbd, 0x970, 0x1, 0x5})
socket$nl_route(0x10, 0x3, 0x0)

11:38:38 executing program 4:
setitimer(0x2, 0x0, &(0x7f0000000040))

11:38:38 executing program 2:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$packet(0x11, 0x0, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc0100002)
r2 = semget$private(0x0, 0x3, 0x0)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semop(r2, &(0x7f0000000100), 0x2d)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00')
sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)={0x2c, r3, 0xf, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x66}]}, 0x2c}}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00')
sendmsg$TIPC_CMD_GET_NODES(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, r5, 0xf, 0x0, 0x0, {{}, {0x0, 0x6}}}, 0x1c}}, 0x0)
sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r5, 0x8, 0x70bd27, 0x0, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x1)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
semctl$IPC_RMID(r2, 0x0, 0x0)
semget$private(0x0, 0x20000000102, 0x0)

11:38:38 executing program 3:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x7, 0x0, &(0x7f0000000040)="b9010360e000f0", 0x0, 0x0, 0xa000000, 0x0, 0x0, 0x0, 0x0}, 0x40)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
r1 = socket(0x11, 0x800000003, 0x0)
bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r1, 0x0, &(0x7f0000000040))
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x6db6e559)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10, r2, 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x9)

[ 1945.762631][ T3973] futex_atomic_op_inuser: 2 callbacks suppressed
[ 1945.762642][ T3973] futex_wake_op: syz-executor.2 tries to shift op by 256; fix this program
11:38:38 executing program 2:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffff}}, 0x0, 0x800000002, 0xffffffffffffffff, 0x0)
socket$packet(0x11, 0x0, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000000)=0x79)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc0100002)
r2 = semget$private(0x0, 0x3, 0x0)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semop(r2, &(0x7f0000000100), 0x2d)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000100)={'batadv0\x00'})
r4 = fcntl$dupfd(r3, 0xa8d73cb02fe84bbc, 0xffffffffffffffff)
setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r4, 0x111, 0x3, 0x0, 0x4)
semctl$IPC_RMID(r2, 0x0, 0x0)
semget$private(0x0, 0x20000000102, 0x0)

[ 1945.875846][ T3975] futex_wake_op: syz-executor.2 tries to shift op by 256; fix this program
11:38:38 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0x3f00}, 0x0)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:38:38 executing program 4:
setitimer(0x0, 0x0, &(0x7f00000001c0))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00'})
dup(r1)
getpeername$unix(r1, &(0x7f0000000000), &(0x7f0000000080)=0x6e)

[ 1946.253491][ T4001] futex_wake_op: syz-executor.2 tries to shift op by 256; fix this program
11:38:39 executing program 4:
setitimer(0x0, 0x0, &(0x7f0000000040))

11:38:39 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0x4000}, 0x0)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:38:39 executing program 2:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$packet(0x11, 0x0, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc0100002)
r2 = semget$private(0x0, 0x3, 0x0)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semop(r2, &(0x7f0000000100), 0x2d)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
r3 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000003c0)='devlink\x00')
sendmsg$DEVLINK_CMD_TRAP_GET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x50, r5, 0x3d, 0x70bd26, 0x0, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4c084}, 0x0)
sendmsg$DEVLINK_CMD_GET(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x50, r5, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4080}, 0x20000040)
semctl$IPC_RMID(r2, 0x0, 0x0)
semget$private(0x0, 0x20000000102, 0x0)

[ 1946.542965][ T4015] futex_wake_op: syz-executor.2 tries to shift op by 256; fix this program
11:38:39 executing program 5:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
close(r4)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732})
r6 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@multicast, @multicast, @val={@void}, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @private=0xa010101}, {0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x2e)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8)
splice(r0, 0x0, r4, 0x0, 0x10005, 0x4788)

11:38:39 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0x6000}, 0x0)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:38:39 executing program 0:
syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0)
syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x1000000000000000}, 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xbd, 0x970, 0x1, 0x5})
socket$nl_route(0x10, 0x3, 0x0)

11:38:39 executing program 4:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_open_pts(r1, 0x44003)
ioctl$TCSETXW(r2, 0x5435, &(0x7f0000000000)={0x3, 0x401, [0x6, 0x6, 0x80, 0x81, 0x9], 0x1})
setitimer(0x0, 0x0, &(0x7f00000001c0))

11:38:39 executing program 2:
perf_event_open(&(0x7f00000000c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1ff, 0x100000000}}, 0x0, 0x5, 0xffffffffffffffff, 0x0)
socket$packet(0x11, 0x0, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc0100002)
r2 = semget$private(0x0, 0x3, 0x41)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semop(r2, &(0x7f0000000100), 0x2d)
sendmsg$AUDIT_SET_FEATURE(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, 0x3fa, 0x800, 0x70bd2a, 0x25dfdbfb, {0x1, 0x1}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x810}, 0x40064)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r4, 0x40a85321, &(0x7f0000000200)={{0x3f}, 'port1\x00', 0xa2, 0x21002, 0x200, 0x7, 0x0, 0x3, 0x2a6, 0x0, 0x0, 0x20})
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000000000))
semctl$IPC_RMID(r2, 0x0, 0x0)
semget$private(0x0, 0x20000000102, 0x0)

11:38:39 executing program 3:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x7, 0x0, &(0x7f0000000040)="b9010360e000f0", 0x0, 0x0, 0xa000000, 0x0, 0x0, 0x0, 0x0}, 0x40)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
r1 = socket(0x11, 0x800000003, 0x0)
bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r1, 0x0, &(0x7f0000000040))
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x6db6e559)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x9)

[ 1947.114013][ T4035] futex_wake_op: syz-executor.2 tries to shift op by 256; fix this program
11:38:39 executing program 2:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$packet(0x11, 0x0, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000041c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@cred={{0x1c}}], 0x20}], 0x1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
statx(r1, &(0x7f0000000000)='./file0\x00', 0x0, 0x7f9, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0})
setregid(0x0, r2)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc0100002)
r5 = semget$private(0x0, 0x3, 0x0)
semctl$SETALL(r5, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semop(r5, &(0x7f0000000100), 0x2d)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
semctl$IPC_RMID(r5, 0x0, 0x0)
semget$private(0x0, 0x20000000102, 0x0)

11:38:39 executing program 4:
setitimer(0x0, 0x0, &(0x7f00000001c0))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
sendmsg$IPCTNL_MSG_TIMEOUT_GET(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, 0x1, 0x8, 0x801, 0x0, 0x0, {0x2, 0x0, 0xa}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0xfffffff9}]}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_REQUEST={0x8, 0x1, 0x1, 0x0, 0x800}, @CTA_TIMEOUT_DCCP_REQUEST={0x8, 0x1, 0x1, 0x0, 0xdd}]}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x10001}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x10000}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x4000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff)
accept$ax25(r5, &(0x7f0000000300)={{0x3, @bcast}, [@bcast, @default, @netrom, @bcast, @default, @bcast, @bcast, @rose]}, &(0x7f0000000400)=0x48)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00')
r7 = socket(0x11, 0x2, 0x0)
bind(r7, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r7, &(0x7f00000003c0)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
r9 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001300)=ANY=[@ANYBLOB="4801000024000b0f00"/20, @ANYRES32=r8, @ANYBLOB="00000000ffffffff0000000008000100726564"], 0x148}}, 0x0)
sendmsg$NL80211_CMD_GET_MPATH(r4, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, r6, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x3, 0x1}}]}, 0x28}, 0x1, 0x0, 0x0, 0x24020000}, 0x4000010)

11:38:39 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0xf000}, 0x0)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

[ 1947.257376][ T4047] netlink: 284 bytes leftover after parsing attributes in process `syz-executor.4'.
11:38:40 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0xfb1c}, 0x0)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

[ 1947.618172][ T4056] netlink: 284 bytes leftover after parsing attributes in process `syz-executor.4'.
11:38:40 executing program 2:
perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7, 0x10222, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000}, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$packet(0x11, 0x0, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc0100002)
r2 = semget$private(0x0, 0x3, 0x0)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semop(r2, &(0x7f0000000100), 0x2d)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
semctl$IPC_RMID(r2, 0x0, 0x0)
semget$private(0x0, 0x20000000102, 0x0)

11:38:40 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0x30000}, 0x0)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

[ 1947.917735][ T4072] futex_wake_op: syz-executor.2 tries to shift op by 256; fix this program
[ 1947.984356][ T4077] futex_wake_op: syz-executor.2 tries to shift op by 256; fix this program
11:38:41 executing program 5:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
close(r4)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732})
r6 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@multicast, @multicast, @val={@void}, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @private=0xa010101}, {0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x2e)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8)
splice(r0, 0x0, r4, 0x0, 0x10005, 0x4888)

11:38:41 executing program 4:
setitimer(0x1, 0x0, &(0x7f00000001c0))

11:38:41 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0x34000}, 0x0)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:38:41 executing program 2:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$packet(0x11, 0x0, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc0100002)
r2 = semget$private(0x0, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$SIOCNRDECOBS(r4, 0x89e2)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semop(r2, &(0x7f0000000100), 0x2d)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
semctl$IPC_RMID(r2, 0x0, 0x0)
syz_genetlink_get_family_id$smc(&(0x7f0000000000)='SMC_PNETID\x00')
semget$private(0x0, 0x20000000102, 0x0)

11:38:41 executing program 3:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x7, 0x0, &(0x7f0000000040)="b9010360e000f0", 0x0, 0x0, 0xa000000, 0x0, 0x0, 0x0, 0x0}, 0x40)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
r1 = socket(0x11, 0x800000003, 0x0)
bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r1, 0x0, &(0x7f0000000040))
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x6db6e559)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x9)

11:38:41 executing program 0:
syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0)
syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x6400000000000000}, 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xbd, 0x970, 0x1, 0x5})
socket$nl_route(0x10, 0x3, 0x0)

[ 1948.453498][ T4100] futex_wake_op: syz-executor.2 tries to shift op by 256; fix this program
11:38:41 executing program 2:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$packet(0x11, 0x0, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc0100002)
r2 = semget$private(0x0, 0x3, 0x0)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semop(r2, &(0x7f0000000100), 0x2d)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
semctl$IPC_RMID(r2, 0x0, 0x0)
semget$private(0x0, 0x20000000102, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$F2FS_IOC_RESIZE_FS(r4, 0x4008f510, &(0x7f0000000000)=0x2)

11:38:41 executing program 4:
setitimer(0x2, 0x0, &(0x7f0000000000))

11:38:41 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0x400300}, 0x0)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:38:41 executing program 4:
setitimer(0x0, 0x0, &(0x7f0000000000))

[ 1948.814941][ T4119] futex_wake_op: syz-executor.2 tries to shift op by 256; fix this program
11:38:41 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0xf0ffff}, 0x0)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:38:41 executing program 0:
syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0)
syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x6a07000000000000}, 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xbd, 0x970, 0x1, 0x5})
socket$nl_route(0x10, 0x3, 0x0)

11:38:42 executing program 5:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
close(r4)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732})
r6 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@multicast, @multicast, @val={@void}, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @private=0xa010101}, {0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x2e)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8)
splice(r0, 0x0, r4, 0x0, 0x10005, 0x4f89)

11:38:42 executing program 2:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc0100002)
r2 = semget$private(0x0, 0x3, 0x0)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semop(r2, &(0x7f0000000100), 0x2d)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
semctl$IPC_RMID(r2, 0x0, 0x0)
semget$private(0x0, 0x20000000102, 0x0)

11:38:42 executing program 4:
setitimer(0x0, 0x0, &(0x7f00000001c0))
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)={'batadv0\x00'})
r1 = dup3(r0, 0xffffffffffffffff, 0x0)
ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f0000000000)={{0x2, 0x4e23, @private=0xa010100}, {0x6, @random="c01300f5920e"}, 0x2, {0x2, 0x4e22, @local}, 'macvtap0\x00'})
r2 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000280)="a9", 0x1, 0xffffffffffffffff)
r3 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, 0x0, 0x0)
keyctl$KEYCTL_MOVE(0x1e, r2, 0xffffffffffffffff, r3, 0x0)
add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f00000002c0)="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", 0x1098, r3)

11:38:42 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0x1000000}, 0x0)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:38:42 executing program 3:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x7, 0x0, &(0x7f0000000040)="b9010360e000f0", 0x0, 0x0, 0xa000000, 0x0, 0x0, 0x0, 0x0}, 0x40)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
r1 = socket(0x11, 0x800000003, 0x0)
bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r1, 0x0, &(0x7f0000000040))
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x6db6e559)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x9)

[ 1949.814723][ T4154] futex_wake_op: syz-executor.2 tries to shift op by 256; fix this program
11:38:42 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = gettid()
ptrace$setopts(0x4206, r3, 0x0, 0x0)
tkill(r3, 0x40)
ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r3, 0x0, 0x0)
capset(&(0x7f0000000040)={0x20071026, r3}, &(0x7f0000000080)={0xc6, 0x4, 0x7, 0x8000, 0x9, 0x6})
r4 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
write$USERIO_CMD_SEND_INTERRUPT(r1, &(0x7f0000000000)={0x2, 0x20}, 0x2)
setitimer(0x0, 0x0, &(0x7f00000001c0))

11:38:42 executing program 2:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x17}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0)
socket$packet(0x11, 0x0, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x9)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc0100002)
r2 = semget$private(0x0, 0x3, 0x0)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000080)=[0x200])
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = socket$netlink(0x10, 0x3, 0x6)
sendmsg$netlink(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x108}], 0x1}, 0x0)
semop(r2, &(0x7f0000000100), 0x2d)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
semctl$IPC_RMID(r2, 0x0, 0x0)
semget$private(0x0, 0x20000000102, 0x0)

11:38:42 executing program 0:
syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0)
syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0xff00000000000000}, 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xbd, 0x970, 0x1, 0x5})
socket$nl_route(0x10, 0x3, 0x0)

11:38:42 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0x2000000}, 0x0)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

[ 1949.991288][ T4170] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'.
11:38:42 executing program 4:
r0 = socket(0x11, 0x2, 0x0)
bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001300)=ANY=[@ANYBLOB="4801000024000b0f00"/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff0000000008000100726564"], 0x148}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'sit0\x00', <r3=>r1, 0x4, 0xf1, 0x80, 0x1, 0x4, @remote, @local, 0x8000, 0x7800, 0x7f, 0x10000}})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000640)={'ip_vti0\x00', &(0x7f0000000580)=ANY=[@ANYBLOB='ip_vti0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=<r4=>0x0, @ANYBLOB="0000008000000000000000074d1f007400680015aef2440a985d4201e000000183071ee000000286560000000105105bec9f6d1fb33152ab47cad72bf8060aea5878fa774e808e000e56b24320c35d91cd2597b49b0702070fa753df503c79bca5529565aeff06062f945ff40011e5e971256d7a2c6a99d08971a91c51000000"]})
r5 = socket(0x11, 0x2, 0x0)
bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r5, &(0x7f00000003c0)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
r7 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001300)=ANY=[@ANYBLOB="4801000024000b0f00"/20, @ANYRES32=r6, @ANYBLOB="00000000ff0400000000009377aaf1d475ca31"], 0x148}}, 0x0)
r8 = socket(0x11, 0x2, 0x0)
bind(r8, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r8, &(0x7f00000003c0)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
r10 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=ANY=[@ANYBLOB="4801000024000b0f00000000000000000000000063b09853c03c2dd6cef03b562174e68c263198a51031d25f3945", @ANYRES32=r9, @ANYBLOB="00000000ffffffff0000000008000100726564"], 0x148}}, 0x0)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000800)={&(0x7f0000000880)={0x168, 0x0, 0x10, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKMODES_OURS={0xc4, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x80}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0xa0, 0x3, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'sit0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\'&$#\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '!\\,&+.+)|)\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ',\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffffff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa2a}]}]}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_LINKMODES_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x5}, @ETHTOOL_A_LINKMODES_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x5f}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x3}, @ETHTOOL_A_LINKMODES_OURS={0x4}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x3}]}, 0x168}, 0x1, 0x0, 0x0, 0x20064000}, 0x400c001)
setitimer(0x0, 0x0, &(0x7f0000000000))
creat(&(0x7f0000000040)='./file0\x00', 0x124)

[ 1950.099192][ T4173] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'.
11:38:42 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0x3000000}, 0x0)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

[ 1950.203794][ T4184] netlink: 284 bytes leftover after parsing attributes in process `syz-executor.4'.
11:38:42 executing program 2:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$packet(0x11, 0x0, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc0100002)
r2 = semget$private(0x0, 0x3, 0x0)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000080)=[0x200])
getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x23)
semop(r2, &(0x7f0000000100), 0x2d)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvme-fabrics\x00', 0x1, 0x0)
openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x400400, 0x0)
ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r3, 0x40184150, &(0x7f0000000240)={0x0, &(0x7f0000000100)="ca8dad9417b6ff63ae69dd59e70068085bb61ea53cdddf8cbe1e7f77c3ec16d020e21464e478d0fd3a2556fde5a4a7ca328224abca83dcc457e2cc91ffdd7011ccf06672db2106cf4ecde46d741797bb5af7170997102c7218f53b7272cc4eed2502bd0ccb8ece3078b60bfa0e23bc046bfc6b89571fdfdaa004810a4eac73df133fe61c8a09121eca8d494031789662298ee3b89f718b5ef23a503a7463528069ce466eb0fcc5ce6f3fc9fe0b3b085853d6bc5e12537f0277", 0xb9})
semctl$IPC_RMID(r2, 0x0, 0x0)
semget$private(0x0, 0x20000000102, 0x0)

[ 1950.279521][ T4187] netlink: 292 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1950.357148][ T4189] netlink: 292 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1950.458931][ T4184] netlink: 292 bytes leftover after parsing attributes in process `syz-executor.4'.
11:38:43 executing program 5:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
close(r4)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732})
r6 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@multicast, @multicast, @val={@void}, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @private=0xa010101}, {0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x2e)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8)
splice(r0, 0x0, r4, 0x0, 0x10005, 0x5865)

11:38:43 executing program 2:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$packet(0x11, 0x0, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc0100002)
r2 = semget$private(0x0, 0x3, 0x0)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semop(r2, &(0x7f0000000100), 0x2d)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
r3 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000003c0)='devlink\x00')
sendmsg$DEVLINK_CMD_TRAP_GET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x50, r5, 0x3d, 0x70bd26, 0x0, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4c084}, 0x0)
sendmsg$DEVLINK_CMD_GET(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x50, r5, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4080}, 0x20000040)
semctl$IPC_RMID(r2, 0x0, 0x0)
semget$private(0x0, 0x20000000102, 0x0)

11:38:43 executing program 4:
setitimer(0x1, 0x0, &(0x7f0000000000))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
getsockopt$IP6T_SO_GET_REVISION_MATCH(r1, 0x29, 0x44, &(0x7f0000000080)={'icmp\x00'}, &(0x7f00000000c0)=0x1e)
memfd_create(&(0x7f0000000040)=':\x00', 0x7)

11:38:43 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0x4000000}, 0x0)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:38:43 executing program 3:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x7, 0x0, &(0x7f0000000040)="b9010360e000f0", 0x0, 0x0, 0xa000000, 0x0, 0x0, 0x0, 0x0}, 0x40)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
r1 = socket(0x11, 0x800000003, 0x0)
bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r1, 0x0, &(0x7f0000000040))
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x6db6e559)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x9)

11:38:43 executing program 0:
syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0)
syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x8}, 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xbd, 0x970, 0x1, 0x5})
socket$nl_route(0x10, 0x3, 0x0)

[ 1951.115988][ T4212] futex_atomic_op_inuser: 3 callbacks suppressed
[ 1951.115999][ T4212] futex_wake_op: syz-executor.2 tries to shift op by 256; fix this program
11:38:43 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0x5000000}, 0x0)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:38:43 executing program 2:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$packet(0x11, 0x0, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc0100002)
r2 = semget$private(0x0, 0x3, 0x0)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semop(r2, &(0x7f0000000100), 0x2d)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
r3 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000003c0)='devlink\x00')
sendmsg$DEVLINK_CMD_TRAP_GET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x50, r5, 0x3d, 0x70bd26, 0x0, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4c084}, 0x0)
sendmsg$DEVLINK_CMD_GET(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x50, r5, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4080}, 0x20000040)
semctl$IPC_RMID(r2, 0x0, 0x0)
semget$private(0x0, 0x20000000102, 0x0)

11:38:43 executing program 4:
syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0)
syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x9000000}, 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xbd, 0x970, 0x1, 0x5})
socket$nl_route(0x10, 0x3, 0x0)

[ 1951.490292][ T4240] futex_wake_op: syz-executor.2 tries to shift op by 256; fix this program
11:38:44 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0x8000000}, 0x0)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:38:44 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$kcm(0x10, 0x2, 0x10)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000fc0)={0x14, r3, 0x1, 0x0, 0x0, {0x11}}, 0x14}}, 0x0)
sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r3, 0x800, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4841)
setitimer(0x1, 0x0, &(0x7f00000001c0))
r4 = socket(0x2a, 0x1, 0x6)
setsockopt$IP_VS_SO_SET_DELDEST(r4, 0x0, 0x488, &(0x7f0000000000)={{0x2c, @remote, 0x4e24, 0x2, 'wlc\x00', 0x10, 0x5c, 0x3}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x4, 0x10001, 0xfff, 0x8}}, 0x44)

11:38:44 executing program 2:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$packet(0x11, 0x0, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc0100002)
r2 = semget$private(0x0, 0x3, 0x0)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semop(r2, &(0x7f0000000100), 0x2d)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
semctl$IPC_RMID(r2, 0x0, 0x0)
semget$private(0x0, 0x20000000102, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @dev, 0xc}, @in={0x2, 0x0, @loopback}], 0x2c)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f00000000c0)={0x1, [<r4=>0x0]}, &(0x7f000095dffc)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000280)={r4, @in={{0x2, 0x0, @empty}}}, 0x90)
setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000000)={r4, 0xe776, 0x5, [0x4000, 0xd34, 0x2b1c, 0x9fae, 0x800]}, 0x12)

[ 1951.808560][ T4250] futex_wake_op: syz-executor.2 tries to shift op by 256; fix this program
11:38:45 executing program 5:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
close(r4)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732})
r6 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@multicast, @multicast, @val={@void}, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @private=0xa010101}, {0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x2e)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8)
splice(r0, 0x0, r4, 0x0, 0x10005, 0x6000)

11:38:45 executing program 2:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$packet(0x11, 0x0, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc0100002)
r2 = semget$private(0x0, 0x3, 0x0)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semop(r2, &(0x7f0000000100), 0x2d)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
semctl$IPC_RMID(r2, 0x0, 0x0)
semget$private(0x0, 0x20000000102, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @dev, 0xc}, @in={0x2, 0x0, @loopback}], 0x2c)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f00000000c0)={0x1, [<r4=>0x0]}, &(0x7f000095dffc)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000280)={r4, @in={{0x2, 0x0, @empty}}}, 0x90)
setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000000)={r4, 0xe776, 0x5, [0x4000, 0xd34, 0x2b1c, 0x9fae, 0x800]}, 0x12)

11:38:45 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0x9000000}, 0x0)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:38:45 executing program 3:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x7, 0x0, &(0x7f0000000040)="b9010360e000f0", 0x0, 0x0, 0xa000000, 0x0, 0x0, 0x0, 0x0}, 0x40)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
r1 = socket(0x11, 0x800000003, 0x0)
bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r1, 0x0, &(0x7f0000000040))
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x6db6e559)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x9)

11:38:45 executing program 4:
syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0)
syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x8}, 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xbd, 0x970, 0x1, 0x5})
socket$nl_route(0x10, 0x3, 0x0)

11:38:45 executing program 0:
syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0)
syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x9}, 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xbd, 0x970, 0x1, 0x5})
socket$nl_route(0x10, 0x3, 0x0)

[ 1952.446825][ T4270] futex_wake_op: syz-executor.2 tries to shift op by 256; fix this program
11:38:45 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0xe000000}, 0x0)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:38:45 executing program 2:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$packet(0x11, 0x0, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc0100002)
r2 = semget$private(0x0, 0x3, 0x0)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semop(r2, &(0x7f0000000100), 0x2d)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
semctl$IPC_RMID(r2, 0x0, 0x0)
semget$private(0x0, 0x20000000102, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @dev, 0xc}, @in={0x2, 0x0, @loopback}], 0x2c)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f00000000c0)={0x1, [<r4=>0x0]}, &(0x7f000095dffc)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000280)={r4, @in={{0x2, 0x0, @empty}}}, 0x90)
setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000000)={r4, 0xe776, 0x5, [0x4000, 0xd34, 0x2b1c, 0x9fae, 0x800]}, 0x12)

11:38:45 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0xf000000}, 0x0)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

[ 1952.829502][ T4296] futex_wake_op: syz-executor.2 tries to shift op by 256; fix this program
11:38:45 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0x3f000000}, 0x0)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:38:45 executing program 2:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$packet(0x11, 0x0, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc0100002)
r2 = semget$private(0x0, 0x3, 0x0)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semop(r2, &(0x7f0000000100), 0x2d)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
semctl$IPC_RMID(r2, 0x0, 0x0)
semget$private(0x0, 0x20000000102, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @dev, 0xc}, @in={0x2, 0x0, @loopback}], 0x2c)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f00000000c0)={0x1, [<r4=>0x0]}, &(0x7f000095dffc)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000280)={r4, @in={{0x2, 0x0, @empty}}}, 0x90)

11:38:45 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0x40000000}, 0x0)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

[ 1953.145550][ T4307] futex_wake_op: syz-executor.2 tries to shift op by 256; fix this program
11:38:46 executing program 5:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
close(r4)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732})
r6 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@multicast, @multicast, @val={@void}, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @private=0xa010101}, {0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x2e)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8)
splice(r0, 0x0, r4, 0x0, 0x10005, 0x60ea)

11:38:46 executing program 2:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$packet(0x11, 0x0, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc0100002)
r2 = semget$private(0x0, 0x3, 0x0)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semop(r2, &(0x7f0000000100), 0x2d)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
semctl$IPC_RMID(r2, 0x0, 0x0)
semget$private(0x0, 0x20000000102, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @dev, 0xc}, @in={0x2, 0x0, @loopback}], 0x2c)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f00000000c0)={0x1, [0x0]}, &(0x7f000095dffc)=0x8)

11:38:46 executing program 0:
syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0)
syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x10}, 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xbd, 0x970, 0x1, 0x5})
socket$nl_route(0x10, 0x3, 0x0)

11:38:46 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0x60000000}, 0x0)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:38:46 executing program 3:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x7, 0x0, &(0x7f0000000040)="b9010360e000f0", 0x0, 0x0, 0xa000000, 0x0, 0x0, 0x0, 0x0}, 0x40)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
r1 = socket(0x11, 0x800000003, 0x0)
bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r1, 0x0, &(0x7f0000000040))
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x6db6e559)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x9)

11:38:46 executing program 4:
syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0)
syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x8}, 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xbd, 0x970, 0x1, 0x5})
socket$nl_route(0x10, 0x3, 0x0)

11:38:46 executing program 2:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$packet(0x11, 0x0, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc0100002)
r2 = semget$private(0x0, 0x3, 0x0)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semop(r2, &(0x7f0000000100), 0x2d)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
semctl$IPC_RMID(r2, 0x0, 0x0)
semget$private(0x0, 0x20000000102, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @dev, 0xc}, @in={0x2, 0x0, @loopback}], 0x2c)

[ 1953.663966][ T4322] futex_wake_op: syz-executor.2 tries to shift op by 256; fix this program
11:38:46 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0x9effffff}, 0x0)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

[ 1953.930719][ T4349] futex_wake_op: syz-executor.2 tries to shift op by 256; fix this program
11:38:46 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0xf0ffffff}, 0x0)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:38:47 executing program 2:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$packet(0x11, 0x0, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc0100002)
r2 = semget$private(0x0, 0x3, 0x0)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semop(r2, &(0x7f0000000100), 0x2d)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
semctl$IPC_RMID(r2, 0x0, 0x0)
semget$private(0x0, 0x20000000102, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @dev, 0xc}, @in={0x2, 0x0, @loopback}], 0x2c)

11:38:47 executing program 4:
syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0)
syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0xff00000000000000}, 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xbd, 0x970, 0x1, 0x5})
socket$nl_route(0x10, 0x3, 0x0)

11:38:47 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0xfb1c0000}, 0x0)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

[ 1954.527578][ T4359] futex_wake_op: syz-executor.2 tries to shift op by 256; fix this program
11:38:47 executing program 5:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
close(r4)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732})
r6 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@multicast, @multicast, @val={@void}, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @private=0xa010101}, {0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x2e)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8)
splice(r0, 0x0, r4, 0x0, 0x10005, 0x6488)

11:38:47 executing program 0:
syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0)
syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x64}, 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xbd, 0x970, 0x1, 0x5})
socket$nl_route(0x10, 0x3, 0x0)

11:38:47 executing program 2:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$packet(0x11, 0x0, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc0100002)
r2 = semget$private(0x0, 0x3, 0x0)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semop(r2, &(0x7f0000000100), 0x2d)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
semctl$IPC_RMID(r2, 0x0, 0x0)
semget$private(0x0, 0x20000000102, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @dev, 0xc}, @in={0x2, 0x0, @loopback}], 0x2c)

11:38:47 executing program 3:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x7, 0x0, &(0x7f0000000040)="b9010360e000f0", 0x0, 0x0, 0xa000000, 0x0, 0x0, 0x0, 0x0}, 0x40)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
r1 = socket(0x11, 0x800000003, 0x0)
bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r1, 0x0, &(0x7f0000000040))
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x6db6e559)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0)
write$binfmt_misc(r0, 0x0, 0x9)

11:38:47 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0xfffff000}, 0x0)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:38:47 executing program 4:
r0 = socket$inet6_sctp(0x1c, 0x5, 0x84)
connect$inet6(r0, &(0x7f00000001c0)={0x1c, 0x1c, 0x3}, 0x1c)
connect$inet6(r0, &(0x7f0000001b40)={0x1c, 0x1c, 0x3}, 0x1c)
connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c, 0x2}, 0x1c)

11:38:47 executing program 2:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$packet(0x11, 0x0, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc0100002)
r2 = semget$private(0x0, 0x3, 0x0)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semop(r2, &(0x7f0000000100), 0x2d)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
semctl$IPC_RMID(r2, 0x0, 0x0)
semget$private(0x0, 0x20000000102, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @dev, 0xc}, @in={0x2, 0x0, @loopback}], 0x2c)

[ 1955.171486][ T4382] futex_wake_op: syz-executor.2 tries to shift op by 256; fix this program
11:38:47 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0xffffff7f}, 0x0)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:38:48 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0xffffff9e}, 0x0)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:38:48 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0xfffffff0}, 0x0)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:38:48 executing program 4:
socket$inet6_tcp(0x1c, 0x1, 0x0)
r0 = semget$private(0x0, 0x7, 0xc1)
semop(r0, &(0x7f00000005c0)=[{0x3, 0x1f}, {0x4, 0x7, 0x1000}, {0x3, 0x6, 0x1000}, {0x4, 0x7f}, {0x0, 0x9, 0x1800}, {0x4}, {0x2, 0x7fff, 0x800}], 0x7)
execve(0x0, 0x0, 0x0)

11:38:48 executing program 2:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$packet(0x11, 0x0, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc0100002)
r2 = semget$private(0x0, 0x3, 0x0)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semop(r2, &(0x7f0000000100), 0x2d)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
semctl$IPC_RMID(r2, 0x0, 0x0)
semget$private(0x0, 0x20000000102, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @dev, 0xc}, @in={0x2, 0x0, @loopback}], 0x2c)

11:38:49 executing program 5:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
close(r4)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732})
r6 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@multicast, @multicast, @val={@void}, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @private=0xa010101}, {0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x2e)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8)
splice(r0, 0x0, r4, 0x0, 0x10005, 0x6558)

11:38:49 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0x3000000000000}, 0x0)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:38:49 executing program 2:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$packet(0x11, 0x0, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc0100002)
r2 = semget$private(0x0, 0x3, 0x0)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semop(r2, &(0x7f0000000100), 0x2d)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
semctl$IPC_RMID(r2, 0x0, 0x0)
semget$private(0x0, 0x20000000102, 0x0)
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @dev, 0xc}, @in={0x2, 0x0, @loopback}], 0x2c)

11:38:49 executing program 3:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x7, 0x0, &(0x7f0000000040)="b9010360e000f0", 0x0, 0x0, 0xa000000, 0x0, 0x0, 0x0, 0x0}, 0x40)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
r1 = socket(0x11, 0x800000003, 0x0)
bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r1, 0x0, &(0x7f0000000040))
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x6db6e559)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0)
write$binfmt_misc(r0, 0x0, 0x9)

11:38:49 executing program 0:
syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0)
syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x76a}, 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xbd, 0x970, 0x1, 0x5})
socket$nl_route(0x10, 0x3, 0x0)

11:38:49 executing program 4:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x37)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2, 0x0, &(0x7f0000000140)="207ef39cbe2bfe2d20000000000001005c3f0ec27c70f69509e1c625ddda54090944e27ca559c64e9a385db4e4934ac5eb09ff2daaeeea8ed7f739866f053fc954404133ca610bd44acb182d5c781082bb500500d9ffb0e836b1a7ae0e0f3b53e5868adcd4e7102559cb00621f9906beb748da887735087e904c38b588349a7f324300000000cab810682b9e1debc1ca43696b39594d7870a10f3f5ce9afd1ce80e6f77b5f3d695f8ee93a25e6dbb30872010126515add92f1d19d9e207f9d3a5e1d22ae7843f7c0ef67865c9f7cf33079b0"}, 0x40)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r0, 0x0, 0x0)

[ 1956.511387][ T4441] futex_atomic_op_inuser: 2 callbacks suppressed
[ 1956.511398][ T4441] futex_wake_op: syz-executor.2 tries to shift op by 256; fix this program
11:38:49 executing program 2:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$packet(0x11, 0x0, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc0100002)
r2 = semget$private(0x0, 0x3, 0x0)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semop(r2, &(0x7f0000000100), 0x2d)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
semctl$IPC_RMID(r2, 0x0, 0x0)
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @dev, 0xc}, @in={0x2, 0x0, @loopback}], 0x2c)

11:38:49 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0x40030000000000}, 0x0)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:38:49 executing program 4:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x37)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd3, 0x0, &(0x7f0000000140)="207ef39cbe2bfe2d20000000000001005c3f0ec27c70f69509e1c625ddda54090944e27ca559c64e9a385db4e4934ac5eb09ff2daaeeea8ed7f739866f053fc954404133ca610bd44acb182d5c781082bb500500d9ffb0e836b1a7ae0e0f3b53e5868adcd4e7102559cb00621f9906beb748da887735087e904c38b588349a7f324300000000cab810682b9e1debc1ca43696b39594d7870a10f3f5ce9afd1ce80e6f77b5f3d695f8ee93a25e6dbb30872010126515add92f1d19d9e207f9d3a5e1d22ae7843f7c0ef67865c9f7cf33079b0b1"}, 0x40)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x24}}, 0x0)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r0, 0x0, 0x0)

[ 1956.878620][ T4467] futex_wake_op: syz-executor.2 tries to shift op by 256; fix this program
11:38:49 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0xf0ffffffffffff}, 0x0)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:38:49 executing program 2:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$packet(0x11, 0x0, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc0100002)
r2 = semget$private(0x0, 0x3, 0x0)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semop(r2, &(0x7f0000000100), 0x2d)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
semctl$IPC_RMID(r2, 0x0, 0x0)
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @dev, 0xc}, @in={0x2, 0x0, @loopback}], 0x2c)

11:38:49 executing program 4:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x37)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x108, 0x0, &(0x7f0000000140)="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"}, 0x40)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r0, 0x0, 0x0)

[ 1957.116508][ T4478] futex_wake_op: syz-executor.2 tries to shift op by 256; fix this program
11:38:50 executing program 5:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
close(r4)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732})
r6 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@multicast, @multicast, @val={@void}, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @private=0xa010101}, {0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x2e)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8)
splice(r0, 0x0, r4, 0x0, 0x10005, 0x800e)

11:38:50 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0x100000000000000}, 0x0)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:38:50 executing program 2:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$packet(0x11, 0x0, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc0100002)
r2 = semget$private(0x0, 0x3, 0x0)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semop(r2, &(0x7f0000000100), 0x2d)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
semctl$IPC_RMID(r2, 0x0, 0x0)
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @dev, 0xc}, @in={0x2, 0x0, @loopback}], 0x2c)

11:38:50 executing program 4:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x37)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84, 0x0, &(0x7f0000000140)="207ef39cbe2bfe2d20000000000001005c3f0ec27c70f69509e1c625ddda54090944e27ca559c64e9a385db4e4934ac5eb09ff2daaeeea8ed7f739866f053fc954404133ca610bd44acb182d5c781082bb500500d9ffb0e836b1a7ae0e0f3b53e5868adcd4e7102559cb00621f9906beb748da887735087e904c38b588349a7f32430000"}, 0x40)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r0, 0x0, 0x0)

11:38:50 executing program 3:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x7, 0x0, &(0x7f0000000040)="b9010360e000f0", 0x0, 0x0, 0xa000000, 0x0, 0x0, 0x0, 0x0}, 0x40)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
r1 = socket(0x11, 0x800000003, 0x0)
bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r1, 0x0, &(0x7f0000000040))
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x6db6e559)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0)
write$binfmt_misc(r0, 0x0, 0x9)

11:38:50 executing program 0:
syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0)
syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x900}, 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xbd, 0x970, 0x1, 0x5})
socket$nl_route(0x10, 0x3, 0x0)

11:38:50 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0x200000000000000}, 0x0)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:38:50 executing program 4:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x37)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x117, 0x0, &(0x7f0000000140)="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"}, 0x40)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r0, 0x0, 0x0)

[ 1957.811349][ T4502] futex_wake_op: syz-executor.2 tries to shift op by 256; fix this program
11:38:50 executing program 2:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$packet(0x11, 0x0, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc0100002)
r2 = semget$private(0x0, 0x3, 0x0)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semop(r2, &(0x7f0000000100), 0x2d)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
semget$private(0x0, 0x20000000102, 0x0)
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @dev, 0xc}, @in={0x2, 0x0, @loopback}], 0x2c)

11:38:50 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0x300000000000000}, 0x0)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:38:50 executing program 4:

[ 1958.083783][ T4524] futex_wake_op: syz-executor.2 tries to shift op by 256; fix this program
11:38:50 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0x400000000000000}, 0x0)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:38:51 executing program 5:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
close(r4)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732})
r6 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@multicast, @multicast, @val={@void}, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @private=0xa010101}, {0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x2e)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8)
splice(r0, 0x0, r4, 0x0, 0x10005, 0x8035)

11:38:51 executing program 4:

11:38:51 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0x500000000000000}, 0x0)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:38:51 executing program 0:
syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0)
syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x6400}, 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xbd, 0x970, 0x1, 0x5})
socket$nl_route(0x10, 0x3, 0x0)

11:38:51 executing program 3:

11:38:51 executing program 2:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$packet(0x11, 0x0, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc0100002)
r2 = semget$private(0x0, 0x3, 0x0)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semop(r2, &(0x7f0000000100), 0x2d)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
semget$private(0x0, 0x20000000102, 0x0)
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @dev, 0xc}, @in={0x2, 0x0, @loopback}], 0x2c)

[ 1958.985677][ T4557] futex_wake_op: syz-executor.2 tries to shift op by 256; fix this program
11:38:51 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0x800000000000000}, 0x0)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:38:51 executing program 3:

11:38:51 executing program 4:
r0 = socket$inet6_sctp(0x1c, 0x5, 0x84)
connect$inet6(r0, &(0x7f00000001c0)={0x1c, 0x1c, 0x3}, 0x1c)
connect$inet6(r0, &(0x7f0000001b40)={0x1c, 0x1c, 0x3}, 0x1c)

11:38:51 executing program 3:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x37)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x119, 0x0, &(0x7f0000000140)="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"}, 0x40)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r0, 0x0, 0x0)

11:38:51 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0x900000000000000}, 0x0)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:38:51 executing program 4:
openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/mdstat\x00', 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000300)='oom_adj\x00')
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f00000001c0), 0xfffffef3)
socket$caif_seqpacket(0x25, 0x5, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f0000000040), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)
bind(0xffffffffffffffff, 0x0, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0)

11:38:52 executing program 5:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
close(r4)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732})
r6 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@multicast, @multicast, @val={@void}, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @private=0xa010101}, {0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x2e)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8)
splice(r0, 0x0, r4, 0x0, 0x10005, 0x8100)

11:38:52 executing program 3:
r0 = socket$kcm(0x11, 0x200000000000002, 0x300)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(r0)

11:38:52 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0xe00000000000000}, 0x0)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:38:52 executing program 2:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$packet(0x11, 0x0, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc0100002)
r2 = semget$private(0x0, 0x3, 0x0)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semop(r2, &(0x7f0000000100), 0x2d)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
semget$private(0x0, 0x20000000102, 0x0)
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @dev, 0xc}, @in={0x2, 0x0, @loopback}], 0x2c)

11:38:52 executing program 0:
syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0)
syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x6a07}, 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xbd, 0x970, 0x1, 0x5})
socket$nl_route(0x10, 0x3, 0x0)

[ 1960.163752][ T4613] futex_wake_op: syz-executor.2 tries to shift op by 256; fix this program
11:38:52 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0xf00000000000000}, 0x0)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:38:52 executing program 3:

11:38:53 executing program 4:
openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/mdstat\x00', 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000300)='oom_adj\x00')
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f00000001c0), 0xfffffef3)
socket$caif_seqpacket(0x25, 0x5, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f0000000040), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)
bind(0xffffffffffffffff, 0x0, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0)

11:38:53 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0x3f00000000000000}, 0x0)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:38:53 executing program 3:

11:38:53 executing program 3:

11:38:53 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0x4000000000000000}, 0x0)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:38:53 executing program 5:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
close(r4)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732})
r6 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@multicast, @multicast, @val={@void}, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @private=0xa010101}, {0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x2e)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8)
splice(r0, 0x0, r4, 0x0, 0x10005, 0x8847)

11:38:53 executing program 3:

11:38:53 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0x6000000000000000}, 0x0)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:38:53 executing program 2:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$packet(0x11, 0x0, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc0100002)
r2 = semget$private(0x0, 0x3, 0x0)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semop(r2, &(0x7f0000000100), 0x2d)
semctl$IPC_RMID(r2, 0x0, 0x0)
semget$private(0x0, 0x20000000102, 0x0)
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @dev, 0xc}, @in={0x2, 0x0, @loopback}], 0x2c)

11:38:53 executing program 0:
syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0)
syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0xff00}, 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xbd, 0x970, 0x1, 0x5})
socket$nl_route(0x10, 0x3, 0x0)

11:38:53 executing program 4:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x24008080)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x48f, &(0x7f0000000000)={0x11, @rand_addr, 0x0, 0x0, 'sh\x00', 0x0, 0x0, 0x3a}, 0x2c)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x100000002, 0x0)

11:38:54 executing program 2:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$packet(0x11, 0x0, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc0100002)
r2 = semget$private(0x0, 0x3, 0x0)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semctl$IPC_RMID(r2, 0x0, 0x0)
semget$private(0x0, 0x20000000102, 0x0)
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @dev, 0xc}, @in={0x2, 0x0, @loopback}], 0x2c)

[ 1961.323165][ T4657] futex_wake_op: syz-executor.2 tries to shift op by 256; fix this program
11:38:54 executing program 3:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x24000840)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r1 = dup(0xffffffffffffffff)
getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f00000004c0)={'filter\x00', 0x0, 0x4, 0xdf, [], 0x0, &(0x7f0000000240)=[{}], &(0x7f0000000340)=""/223}, &(0x7f00000002c0)=0x78)
r2 = syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbfb, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20048080}, 0x2000c880)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000280)=@assoc_value, &(0x7f0000002000)=0x8)
setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0x10000, 0x4)
r3 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x11, @loopback, 0x0, 0x4, 'sh\x00', 0x0, 0x5d3, 0x6}, 0x2c)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1)
close(0xffffffffffffffff)
r4 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r4, &(0x7f0000000300)={0xa, 0x0, 0x200, @dev={0xfe, 0x80, [], 0xfd}, 0x6}, 0x1c)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x100000002, 0x0)
r5 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x8, 0x8002)
setsockopt$inet6_tcp_TLS_RX(r5, 0x6, 0x2, &(0x7f0000000480)=@gcm_256={{0x304}, "1791ab33a18f7d01", "65b68ec48652d57bd4143761d0ebca81104ad17ba73200000000000000027829", "afbe0f31", "24e500"}, 0x7f)

11:38:54 executing program 2:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$packet(0x11, 0x0, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc0100002)
r2 = semget$private(0x0, 0x3, 0x0)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semctl$IPC_RMID(r2, 0x0, 0x0)
semget$private(0x0, 0x20000000102, 0x0)
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @dev, 0xc}, @in={0x2, 0x0, @loopback}], 0x2c)

[ 1961.391613][ T4663] futex_wake_op: syz-executor.2 tries to shift op by 256; fix this program
11:38:54 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0x9effffff00000000}, 0x0)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:38:54 executing program 4:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x24008080)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x48f, &(0x7f0000000000)={0x11, @rand_addr, 0x0, 0x0, 'sh\x00', 0x0, 0x0, 0x3a}, 0x2c)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x100000002, 0x0)

11:38:54 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="e4e32dd2b696733552", 0x9}, {&(0x7f0000000580)="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", 0x390}], 0x2, &(0x7f0000000440)=ANY=[@ANYBLOB="300000000000000017e2ffff010000001800000045f43a1e02f4596a8034a9ab3e39597e422ffab456dd963a0000000018000000000000001701000004000000060000000000000018"], 0x60}], 0x1, 0x8001)
recvmsg(r1, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000001e00)=[{&(0x7f0000001c80)=""/103, 0xf380}], 0x1}, 0x0)

[ 1961.742205][ T4691] futex_wake_op: syz-executor.2 tries to shift op by 256; fix this program
11:38:55 executing program 5:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
close(r4)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732})
r6 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@multicast, @multicast, @val={@void}, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @private=0xa010101}, {0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x2e)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8)
splice(r0, 0x0, r4, 0x0, 0x10005, 0x8848)

11:38:55 executing program 4:
openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/mdstat\x00', 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000300)='oom_adj\x00')
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f00000001c0), 0xfffffef3)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f0000000040), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)
bind(0xffffffffffffffff, 0x0, 0x0)
vmsplice(r0, 0x0, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)

11:38:55 executing program 3:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x24000840)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r1 = dup(0xffffffffffffffff)
getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f00000004c0)={'filter\x00', 0x0, 0x4, 0xdf, [], 0x0, &(0x7f0000000240)=[{}], &(0x7f0000000340)=""/223}, &(0x7f00000002c0)=0x78)
r2 = syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbfb, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20048080}, 0x2000c880)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000280)=@assoc_value, &(0x7f0000002000)=0x8)
setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0x10000, 0x4)
r3 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x11, @loopback, 0x0, 0x4, 'sh\x00', 0x0, 0x5d3, 0x6}, 0x2c)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1)
close(0xffffffffffffffff)
r4 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r4, &(0x7f0000000300)={0xa, 0x0, 0x200, @dev={0xfe, 0x80, [], 0xfd}, 0x6}, 0x1c)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x100000002, 0x0)
r5 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x8, 0x8002)
setsockopt$inet6_tcp_TLS_RX(r5, 0x6, 0x2, &(0x7f0000000480)=@gcm_256={{0x304}, "1791ab33a18f7d01", "65b68ec48652d57bd4143761d0ebca81104ad17ba73200000000000000027829", "afbe0f31", "24e500"}, 0x7f)

11:38:55 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0xf0ffffff00000000}, 0x0)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:38:55 executing program 0:
syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0)
syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x1000000}, 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xbd, 0x970, 0x1, 0x5})
socket$nl_route(0x10, 0x3, 0x0)

11:38:55 executing program 2:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$packet(0x11, 0x0, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc0100002)
r2 = semget$private(0x0, 0x3, 0x0)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semctl$IPC_RMID(r2, 0x0, 0x0)
semget$private(0x0, 0x20000000102, 0x0)
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @dev, 0xc}, @in={0x2, 0x0, @loopback}], 0x2c)

[ 1962.482641][ T4717] futex_wake_op: syz-executor.2 tries to shift op by 256; fix this program
11:38:55 executing program 2:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$packet(0x11, 0x0, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc0100002)
r2 = semget$private(0x0, 0x3, 0x0)
semop(r2, &(0x7f0000000100), 0x2d)
semctl$IPC_RMID(r2, 0x0, 0x0)
semget$private(0x0, 0x20000000102, 0x0)
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @dev, 0xc}, @in={0x2, 0x0, @loopback}], 0x2c)

11:38:55 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0xfb1c000000000000}, 0x0)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:38:55 executing program 3:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x24000840)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r1 = dup(0xffffffffffffffff)
getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f00000004c0)={'filter\x00', 0x0, 0x4, 0xdf, [], 0x0, &(0x7f0000000240)=[{}], &(0x7f0000000340)=""/223}, &(0x7f00000002c0)=0x78)
r2 = syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbfb, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20048080}, 0x2000c880)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000280)=@assoc_value, &(0x7f0000002000)=0x8)
setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0x10000, 0x4)
r3 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x11, @loopback, 0x0, 0x4, 'sh\x00', 0x0, 0x5d3, 0x6}, 0x2c)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1)
close(0xffffffffffffffff)
r4 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r4, &(0x7f0000000300)={0xa, 0x0, 0x200, @dev={0xfe, 0x80, [], 0xfd}, 0x6}, 0x1c)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x100000002, 0x0)
r5 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x8, 0x8002)
setsockopt$inet6_tcp_TLS_RX(r5, 0x6, 0x2, &(0x7f0000000480)=@gcm_256={{0x304}, "1791ab33a18f7d01", "65b68ec48652d57bd4143761d0ebca81104ad17ba73200000000000000027829", "afbe0f31", "24e500"}, 0x7f)

[ 1962.773133][ T4742] futex_wake_op: syz-executor.2 tries to shift op by 256; fix this program
11:38:55 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0xffffff7f00000000}, 0x0)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:38:55 executing program 3:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x24000840)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r1 = dup(0xffffffffffffffff)
getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f00000004c0)={'filter\x00', 0x0, 0x4, 0xdf, [], 0x0, &(0x7f0000000240)=[{}], &(0x7f0000000340)=""/223}, &(0x7f00000002c0)=0x78)
r2 = syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbfb, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20048080}, 0x2000c880)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000280)=@assoc_value, &(0x7f0000002000)=0x8)
setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0x10000, 0x4)
r3 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x11, @loopback, 0x0, 0x4, 'sh\x00', 0x0, 0x5d3, 0x6}, 0x2c)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1)
close(0xffffffffffffffff)
r4 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r4, &(0x7f0000000300)={0xa, 0x0, 0x200, @dev={0xfe, 0x80, [], 0xfd}, 0x6}, 0x1c)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x100000002, 0x0)
r5 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x8, 0x8002)
setsockopt$inet6_tcp_TLS_RX(r5, 0x6, 0x2, &(0x7f0000000480)=@gcm_256={{0x304}, "1791ab33a18f7d01", "65b68ec48652d57bd4143761d0ebca81104ad17ba73200000000000000027829", "afbe0f31", "24e500"}, 0x7f)

11:38:55 executing program 2:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$packet(0x11, 0x0, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc0100002)
r2 = semget$private(0x0, 0x3, 0x0)
semop(r2, &(0x7f0000000100), 0x2d)
semctl$IPC_RMID(r2, 0x0, 0x0)
semget$private(0x0, 0x20000000102, 0x0)
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @dev, 0xc}, @in={0x2, 0x0, @loopback}], 0x2c)

[ 1963.017532][ T4754] futex_wake_op: syz-executor.2 tries to shift op by 256; fix this program
11:38:56 executing program 5:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
close(r4)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732})
r6 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@multicast, @multicast, @val={@void}, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @private=0xa010101}, {0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x2e)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8)
splice(r0, 0x0, r4, 0x0, 0x10005, 0x8864)

11:38:56 executing program 2:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$packet(0x11, 0x0, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc0100002)
r2 = semget$private(0x0, 0x3, 0x0)
semop(r2, &(0x7f0000000100), 0x2d)
semctl$IPC_RMID(r2, 0x0, 0x0)
semget$private(0x0, 0x20000000102, 0x0)
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @dev, 0xc}, @in={0x2, 0x0, @loopback}], 0x2c)

11:38:56 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0xffffffff00000000}, 0x0)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:38:56 executing program 3:
syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0)
syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x970, 0x0, 0x5})
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)

11:38:56 executing program 0:
syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0)
syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x8000000}, 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xbd, 0x970, 0x1, 0x5})
socket$nl_route(0x10, 0x3, 0x0)

11:38:56 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x58, 0x0, 0x2, 0x401, 0x0, 0x0, {}, [@CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_MASTER={0x4}]}, 0x58}}, 0x0)

[ 1963.660351][ T4776] futex_wake_op: syz-executor.2 tries to shift op by 256; fix this program
11:38:56 executing program 2:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$packet(0x11, 0x0, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc0100002)
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semop(0x0, &(0x7f0000000100), 0x2d)
semctl$IPC_RMID(0x0, 0x0, 0x0)
semget$private(0x0, 0x20000000102, 0x0)
r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @dev, 0xc}, @in={0x2, 0x0, @loopback}], 0x2c)

11:38:56 executing program 4:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000200), 0x400086)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x401c5820, &(0x7f0000000040))
close(r2)

11:38:56 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0xfffffffffffff000}, 0x0)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

[ 1963.864394][ T4795] futex_wake_op: syz-executor.2 tries to shift op by 256; fix this program
11:38:56 executing program 2:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$packet(0x11, 0x0, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc0100002)
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semop(0x0, &(0x7f0000000100), 0x2d)
semctl$IPC_RMID(0x0, 0x0, 0x0)
semget$private(0x0, 0x20000000102, 0x0)
r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @dev, 0xc}, @in={0x2, 0x0, @loopback}], 0x2c)

11:38:56 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}}, 0x0)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:38:56 executing program 2:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$packet(0x11, 0x0, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc0100002)
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semop(0x0, &(0x7f0000000100), 0x2d)
semctl$IPC_RMID(0x0, 0x0, 0x0)
semget$private(0x0, 0x20000000102, 0x0)
r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @dev, 0xc}, @in={0x2, 0x0, @loopback}], 0x2c)

[ 1964.135685][ T4804] futex_wake_op: syz-executor.2 tries to shift op by 256; fix this program
[ 1964.260665][ T4812] futex_wake_op: syz-executor.2 tries to shift op by 256; fix this program
11:38:57 executing program 5:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
close(r4)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732})
r6 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@multicast, @multicast, @val={@void}, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @private=0xa010101}, {0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x2e)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8)
splice(r0, 0x0, r4, 0x0, 0x10005, 0x8906)

11:38:57 executing program 2:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$packet(0x11, 0x0, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = semget$private(0x0, 0x3, 0x0)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semop(r2, &(0x7f0000000100), 0x2d)
semctl$IPC_RMID(r2, 0x0, 0x0)
semget$private(0x0, 0x20000000102, 0x0)
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @dev, 0xc}, @in={0x2, 0x0, @loopback}], 0x2c)

11:38:57 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x2}, 0x0)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:38:57 executing program 4:
r0 = socket$inet6(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="5500000018007f1412fe01b2a4a280930a06000000a84306910000000b000f0035020000060000fc1900154002000001d40000dc1338d54400009b84136ef75afb83de44110016000d0002000000060cec4faba7d4", 0x55}], 0x1}, 0x0)

11:38:57 executing program 0:
syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0)
syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x9000000}, 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xbd, 0x970, 0x1, 0x5})
socket$nl_route(0x10, 0x3, 0x0)

11:38:57 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@newtfilter={0x48, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x18, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @local}]}}]}, 0x48}}, 0x0)

11:38:57 executing program 2:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$packet(0x11, 0x0, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = semget$private(0x0, 0x3, 0x0)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semop(r2, &(0x7f0000000100), 0x2d)
semctl$IPC_RMID(r2, 0x0, 0x0)
semget$private(0x0, 0x20000000102, 0x0)
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @dev, 0xc}, @in={0x2, 0x0, @loopback}], 0x2c)

[ 1964.870688][ T4830] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
11:38:57 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x3}, 0x0)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

[ 1964.914685][ T4835] netlink: 'syz-executor.4': attribute type 15 has an invalid length.
[ 1964.933625][ T4835] netlink: 'syz-executor.4': attribute type 21 has an invalid length.
[ 1964.952884][ T4841] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 1965.033052][ T4830] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
[ 1965.090964][ T4841] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
11:38:57 executing program 4:
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/adsp1\x00', 0x0, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000000)=0x27)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000100))
ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000080))

[ 1965.162191][ T4830] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'.
11:38:57 executing program 2:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$packet(0x11, 0x0, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = semget$private(0x0, 0x3, 0x0)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semop(r2, &(0x7f0000000100), 0x2d)
semctl$IPC_RMID(r2, 0x0, 0x0)
semget$private(0x0, 0x20000000102, 0x0)
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @dev, 0xc}, @in={0x2, 0x0, @loopback}], 0x2c)

11:38:57 executing program 3:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x401c5820, &(0x7f0000000040)=0x40)

11:38:58 executing program 2:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$packet(0x11, 0x0, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc0100002)
r2 = semget$private(0x0, 0x3, 0x0)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semop(r2, &(0x7f0000000100), 0x2d)
semctl$IPC_RMID(r2, 0x0, 0x0)
semget$private(0x0, 0x20000000102, 0x0)
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @dev, 0xc}, @in={0x2, 0x0, @loopback}], 0x2c)

[ 1965.617872][ T4873] futex_wake_op: syz-executor.2 tries to shift op by 256; fix this program
11:38:58 executing program 5:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
close(r4)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732})
r6 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@multicast, @multicast, @val={@void}, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @private=0xa010101}, {0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x2e)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8)
splice(r0, 0x0, r4, 0x0, 0x10005, 0x894f)

11:38:58 executing program 3:
syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0)
syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x0)
dup(r0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r1=>0x0})
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0)

11:38:58 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:38:58 executing program 4:
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10)
recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)

11:38:58 executing program 0:
syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0)
syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x10000000}, 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xbd, 0x970, 0x1, 0x5})
socket$nl_route(0x10, 0x3, 0x0)

11:38:58 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:38:59 executing program 2:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$packet(0x11, 0x0, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc0100002)
r2 = semget$private(0x0, 0x3, 0x0)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semop(r2, &(0x7f0000000100), 0x2d)
semctl$IPC_RMID(r2, 0x0, 0x0)
semget$private(0x0, 0x20000000102, 0x0)
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @dev, 0xc}, @in={0x2, 0x0, @loopback}], 0x2c)

11:38:59 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x8}, 0x0)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

[ 1966.559960][ T4918] futex_wake_op: syz-executor.2 tries to shift op by 256; fix this program
11:38:59 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x9}, 0x0)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:38:59 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0xe}, 0x0)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:38:59 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0xf}, 0x0)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:38:59 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x3, &(0x7f00000004c0)={0x0, 0x16}, &(0x7f0000000500))
timer_delete(0x0)
dup(0xffffffffffffffff)
socket$inet(0x2, 0x0, 0x0)

11:39:00 executing program 5:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
close(r4)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732})
r6 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@multicast, @multicast, @val={@void}, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @private=0xa010101}, {0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x2e)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8)
splice(r0, 0x0, r4, 0x0, 0x10005, 0xe000)

11:39:00 executing program 0:
syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0)
syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x64000000}, 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xbd, 0x970, 0x1, 0x5})
socket$nl_route(0x10, 0x3, 0x0)

11:39:00 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x60}, 0x0)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:39:00 executing program 4:
r0 = socket$inet6(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="5500000018007f1412fe01b2a4a280930a06000000a84306910000000b000f0035020000060000001900154003000001d40000dc1338d54400009b84136ef75afb83de44110016000d0002000000060cec4faba7d4", 0x55}], 0x1}, 0x0)

11:39:00 executing program 3:
syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0)
syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x0)
r1 = dup(r0)
write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)

11:39:00 executing program 2:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$packet(0x11, 0x0, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc0100002)
r2 = semget$private(0x0, 0x3, 0x0)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semop(r2, &(0x7f0000000100), 0x2d)
semctl$IPC_RMID(r2, 0x0, 0x0)
semget$private(0x0, 0x20000000102, 0x0)
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @dev, 0xc}, @in={0x2, 0x0, @loopback}], 0x2c)

[ 1967.520831][ T4959] futex_wake_op: syz-executor.2 tries to shift op by 256; fix this program
[ 1967.536952][ T4963] netlink: 'syz-executor.4': attribute type 15 has an invalid length.
[ 1967.563275][ T4963] netlink: 'syz-executor.4': attribute type 21 has an invalid length.
11:39:00 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0xf0}, 0x0)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:39:00 executing program 4:
r0 = socket$inet6(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="5500000018007f1412fe01b2a4a280930a06000000a84306910000000b000f0035020000060000001900154006000001d40000dc1338d54400009b84136ef75afb83de44110016000d0002000000060cec4faba7d4", 0x55}], 0x1}, 0x0)

11:39:00 executing program 4:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r3 = accept4(r2, 0x0, 0x0, 0x0)
sendmmsg$alg(r3, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="e4e32dd2b696733552", 0x9}, {&(0x7f0000000580)="fe2a7f52ae40f65907887264cfd66318cbd8e39ba587c8bf", 0x18}], 0x2, &(0x7f0000000440)=ANY=[@ANYBLOB="300000000000000017e2ffff010000001800000045f43a1e02f4596a8034a9ab3e39597e422ffab456dd963a0000000018000000000000001701000004000000060000000000000018"], 0x60}], 0x1, 0x8001)
recvmsg(r3, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000001e00)=[{&(0x7f0000001c80)=""/103, 0xf380}], 0x1}, 0x0)

11:39:00 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x0, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x0, 0x0, 0x0)
creat(0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/nf_conntrack\x00')
preadv(r1, &(0x7f00000005c0)=[{0x0}, {&(0x7f00000001c0)=""/92, 0x5c}, {0x0}, {0x0}, {&(0x7f00000004c0)=""/196, 0xc4}], 0x5, 0x0, 0x0)

11:39:00 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x300}, 0x0)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:39:00 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x500}, 0x0)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:39:01 executing program 5:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
close(r4)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732})
r6 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@multicast, @multicast, @val={@void}, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @private=0xa010101}, {0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x2e)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8)
splice(r0, 0x0, r4, 0x0, 0x10005, 0xea60)

11:39:01 executing program 4:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r3 = accept4(r2, 0x0, 0x0, 0x0)
sendmmsg$alg(r3, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="e4e32dd2b696733552", 0x9}, {&(0x7f0000000580)="fe2a7f52ae40f65907887264cfd66318cbd8e39ba587c8bf", 0x18}], 0x2, &(0x7f0000000440)=ANY=[@ANYBLOB="300000000000000017e2ffff010000001800000045f43a1e02f4596a8034a9ab3e39597e422ffab456dd963a0000000018000000000000001701000004000000060000000000000018"], 0x60}], 0x1, 0x8001)
recvmsg(r3, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000001e00)=[{&(0x7f0000001c80)=""/103, 0xf380}], 0x1}, 0x0)

11:39:01 executing program 0:
syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0)
syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x6a070000}, 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xbd, 0x970, 0x1, 0x5})
socket$nl_route(0x10, 0x3, 0x0)

11:39:01 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x900}, 0x0)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:39:01 executing program 3:
openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo/3\x00')
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_adj\x00')
sendfile(r0, r1, 0x0, 0x2)

11:39:01 executing program 2:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$packet(0x11, 0x0, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup2(r0, r0)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc0100002)
r1 = semget$private(0x0, 0x3, 0x0)
semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semop(r1, &(0x7f0000000100), 0x2d)
semctl$IPC_RMID(r1, 0x0, 0x0)
semget$private(0x0, 0x20000000102, 0x0)
r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @dev, 0xc}, @in={0x2, 0x0, @loopback}], 0x2c)

11:39:01 executing program 2:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$packet(0x11, 0x0, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup2(r0, r0)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc0100002)
r1 = semget$private(0x0, 0x3, 0x0)
semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semop(r1, &(0x7f0000000100), 0x2d)
semctl$IPC_RMID(r1, 0x0, 0x0)
semget$private(0x0, 0x20000000102, 0x0)
r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @dev, 0xc}, @in={0x2, 0x0, @loopback}], 0x2c)

[ 1968.720658][ T5019] futex_wake_op: syz-executor.2 tries to shift op by 256; fix this program
11:39:01 executing program 4:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r3 = accept4(r2, 0x0, 0x0, 0x0)
sendmmsg$alg(r3, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="e4e32dd2b696733552", 0x9}, {&(0x7f0000000580)="fe2a7f52ae40f65907887264cfd66318cbd8e39ba587c8bf", 0x18}], 0x2, &(0x7f0000000440)=ANY=[@ANYBLOB="300000000000000017e2ffff010000001800000045f43a1e02f4596a8034a9ab3e39597e422ffab456dd963a0000000018000000000000001701000004000000060000000000000018"], 0x60}], 0x1, 0x8001)
recvmsg(r3, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000001e00)=[{&(0x7f0000001c80)=""/103, 0xf380}], 0x1}, 0x0)

11:39:01 executing program 3:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000180)=""/4082, 0xff2}], 0x1, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
dup(0xffffffffffffffff)
preadv(r1, &(0x7f00000017c0), 0x218, 0x0, 0x0)
r2 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)

11:39:01 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0xe00}, 0x0)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:39:01 executing program 2:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$packet(0x11, 0x0, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup2(r0, r0)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc0100002)
r1 = semget$private(0x0, 0x3, 0x0)
semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semop(r1, &(0x7f0000000100), 0x2d)
semctl$IPC_RMID(r1, 0x0, 0x0)
semget$private(0x0, 0x20000000102, 0x0)
r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @dev, 0xc}, @in={0x2, 0x0, @loopback}], 0x2c)

11:39:01 executing program 4:
r0 = socket$inet6(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="5500000018007f1412fe01b2a4a280930a06000000a84306910000000b000f0035020000060000001900154007000001d40000dc1338d54400009b84136ef75afb83de44110016000d0002000000060cec4faba7d4", 0x55}], 0x1}, 0x0)

[ 1969.254015][ T5052] futex_wake_op: syz-executor.2 tries to shift op by 256; fix this program
[ 1969.334984][ T5057] netlink: 'syz-executor.4': attribute type 15 has an invalid length.
[ 1969.357205][ T5057] netlink: 'syz-executor.4': attribute type 21 has an invalid length.
11:39:02 executing program 5:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
close(r4)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732})
r6 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@multicast, @multicast, @val={@void}, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @private=0xa010101}, {0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x2e)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8)
splice(r0, 0x0, r4, 0x0, 0x10005, 0xee0f)

11:39:02 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0xf00}, 0x0)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:39:02 executing program 2:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$packet(0x11, 0x0, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc0100002)
r0 = semget$private(0x0, 0x3, 0x0)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semop(r0, &(0x7f0000000100), 0x2d)
semctl$IPC_RMID(r0, 0x0, 0x0)
semget$private(0x0, 0x20000000102, 0x0)
r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @dev, 0xc}, @in={0x2, 0x0, @loopback}], 0x2c)

11:39:02 executing program 3:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000180)=""/4082, 0xff2}], 0x1, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
dup(0xffffffffffffffff)
preadv(r1, &(0x7f00000017c0), 0x218, 0x0, 0x0)
r2 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)

11:39:02 executing program 4:
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x0)
msgsnd(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="f1"], 0x2000, 0x0)

11:39:02 executing program 0:
syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0)
syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0xff000000}, 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xbd, 0x970, 0x1, 0x5})
socket$nl_route(0x10, 0x3, 0x0)

[ 1969.835560][ T5077] futex_wake_op: syz-executor.2 tries to shift op by 256; fix this program
11:39:02 executing program 2:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$packet(0x11, 0x0, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc0100002)
r0 = semget$private(0x0, 0x3, 0x0)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semop(r0, &(0x7f0000000100), 0x2d)
semctl$IPC_RMID(r0, 0x0, 0x0)
semget$private(0x0, 0x20000000102, 0x0)
r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @dev, 0xc}, @in={0x2, 0x0, @loopback}], 0x2c)

11:39:02 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x1cfb}, 0x0)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:39:02 executing program 3:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r3 = accept4(r2, 0x0, 0x0, 0x0)
sendmsg$AUDIT_TRIM(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x10}, 0x10}}, 0x0)
recvmsg(r3, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000001e00)=[{&(0x7f0000001c80)=""/103, 0xf380}], 0x1}, 0x0)

[ 1970.110166][ T5091] futex_wake_op: syz-executor.2 tries to shift op by 256; fix this program
11:39:02 executing program 4:
syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0)
syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x0)
dup(r0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r1=>0x0})
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0)

11:39:02 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x3f00}, 0x0)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:39:02 executing program 3:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r3 = accept4(r2, 0x0, 0x0, 0x0)
sendmsg$AUDIT_TRIM(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x10}, 0x10}}, 0x0)
recvmsg(r3, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000001e00)=[{&(0x7f0000001c80)=""/103, 0xf380}], 0x1}, 0x0)

11:39:03 executing program 5:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
close(r4)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732})
r6 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@multicast, @multicast, @val={@void}, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @private=0xa010101}, {0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x2e)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8)
splice(r0, 0x0, r4, 0x0, 0x10005, 0xfc0f)

11:39:03 executing program 2:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$packet(0x11, 0x0, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc0100002)
r0 = semget$private(0x0, 0x3, 0x0)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semop(r0, &(0x7f0000000100), 0x2d)
semctl$IPC_RMID(r0, 0x0, 0x0)
semget$private(0x0, 0x20000000102, 0x0)
r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @dev, 0xc}, @in={0x2, 0x0, @loopback}], 0x2c)

11:39:03 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:39:03 executing program 3:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r3 = accept4(r2, 0x0, 0x0, 0x0)
sendmsg$AUDIT_TRIM(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x10}, 0x10}}, 0x0)
recvmsg(r3, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000001e00)=[{&(0x7f0000001c80)=""/103, 0xf380}], 0x1}, 0x0)

11:39:03 executing program 0:
syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0)
syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x1000000000000}, 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xbd, 0x970, 0x1, 0x5})
socket$nl_route(0x10, 0x3, 0x0)

11:39:03 executing program 2:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$packet(0x11, 0x0, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc0100002)
r1 = semget$private(0x0, 0x3, 0x0)
semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semop(r1, &(0x7f0000000100), 0x2d)
semctl$IPC_RMID(r1, 0x0, 0x0)
semget$private(0x0, 0x20000000102, 0x0)
r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @dev, 0xc}, @in={0x2, 0x0, @loopback}], 0x2c)

[ 1970.886057][ T5129] futex_wake_op: syz-executor.2 tries to shift op by 256; fix this program
11:39:03 executing program 3:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r3 = accept4(r2, 0x0, 0x0, 0x0)
sendmsg$AUDIT_TRIM(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x10}, 0x10}}, 0x0)
recvmsg(r3, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000001e00)=[{&(0x7f0000001c80)=""/103, 0xf380}], 0x1}, 0x0)

11:39:03 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x6000}, 0x0)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

[ 1971.100425][ T5146] futex_wake_op: syz-executor.2 tries to shift op by 256; fix this program
11:39:03 executing program 2:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$packet(0x11, 0x0, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc0100002)
r1 = semget$private(0x0, 0x3, 0x0)
semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semop(r1, &(0x7f0000000100), 0x2d)
semctl$IPC_RMID(r1, 0x0, 0x0)
semget$private(0x0, 0x20000000102, 0x0)
r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @dev, 0xc}, @in={0x2, 0x0, @loopback}], 0x2c)

11:39:03 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10)
recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)

11:39:03 executing program 2:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$packet(0x11, 0x0, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc0100002)
r1 = semget$private(0x0, 0x3, 0x0)
semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semop(r1, &(0x7f0000000100), 0x2d)
semctl$IPC_RMID(r1, 0x0, 0x0)
semget$private(0x0, 0x20000000102, 0x0)
r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @dev, 0xc}, @in={0x2, 0x0, @loopback}], 0x2c)

[ 1971.283870][ T5157] futex_wake_op: syz-executor.2 tries to shift op by 256; fix this program
11:39:04 executing program 2:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$packet(0x11, 0x0, 0x300)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc0100002)
r2 = semget$private(0x0, 0x3, 0x0)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semop(r2, &(0x7f0000000100), 0x2d)
semctl$IPC_RMID(r2, 0x0, 0x0)
semget$private(0x0, 0x20000000102, 0x0)
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @dev, 0xc}, @in={0x2, 0x0, @loopback}], 0x2c)

[ 1971.363774][ T5162] futex_wake_op: syz-executor.2 tries to shift op by 256; fix this program
[ 1971.433339][ T5166] futex_wake_op: syz-executor.2 tries to shift op by 256; fix this program
11:39:04 executing program 5:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
close(r4)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732})
r6 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@multicast, @multicast, @val={@void}, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @private=0xa010101}, {0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x2e)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8)
splice(r0, 0x0, r4, 0x0, 0x10005, 0x1000000)

11:39:04 executing program 3:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000180)=""/4082, 0xff2}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
shmat(0x0, &(0x7f0000001000/0x1000)=nil, 0x0)
dup(0xffffffffffffffff)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
preadv(r0, &(0x7f00000017c0), 0x218, 0x0, 0x0)

11:39:04 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0xf000}, 0x0)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:39:04 executing program 2:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$packet(0x11, 0x0, 0x300)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc0100002)
r2 = semget$private(0x0, 0x3, 0x0)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semop(r2, &(0x7f0000000100), 0x2d)
semctl$IPC_RMID(r2, 0x0, 0x0)
semget$private(0x0, 0x20000000102, 0x0)
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @dev, 0xc}, @in={0x2, 0x0, @loopback}], 0x2c)

11:39:04 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10)
recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)

11:39:04 executing program 0:
syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0)
syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x100000000000000}, 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xbd, 0x970, 0x1, 0x5})
socket$nl_route(0x10, 0x3, 0x0)

11:39:04 executing program 2:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$packet(0x11, 0x0, 0x300)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc0100002)
r2 = semget$private(0x0, 0x3, 0x0)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semop(r2, &(0x7f0000000100), 0x2d)
semctl$IPC_RMID(r2, 0x0, 0x0)
semget$private(0x0, 0x20000000102, 0x0)
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @dev, 0xc}, @in={0x2, 0x0, @loopback}], 0x2c)

11:39:04 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0xfb1c}, 0x0)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:39:05 executing program 3:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000180)=""/4082, 0xff2}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
shmat(0x0, &(0x7f0000001000/0x1000)=nil, 0x0)
dup(0xffffffffffffffff)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
preadv(r0, &(0x7f00000017c0), 0x218, 0x0, 0x0)

11:39:05 executing program 2:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc0100002)
r2 = semget$private(0x0, 0x3, 0x0)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semop(r2, &(0x7f0000000100), 0x2d)
semctl$IPC_RMID(r2, 0x0, 0x0)
semget$private(0x0, 0x20000000102, 0x0)
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @dev, 0xc}, @in={0x2, 0x0, @loopback}], 0x2c)

11:39:05 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x30000}, 0x0)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

[ 1972.620872][ T5217] futex_atomic_op_inuser: 2 callbacks suppressed
[ 1972.620882][ T5217] futex_wake_op: syz-executor.2 tries to shift op by 256; fix this program
11:39:05 executing program 2:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc0100002)
r2 = semget$private(0x0, 0x3, 0x0)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semop(r2, &(0x7f0000000100), 0x2d)
semctl$IPC_RMID(r2, 0x0, 0x0)
semget$private(0x0, 0x20000000102, 0x0)
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @dev, 0xc}, @in={0x2, 0x0, @loopback}], 0x2c)

[ 1972.826065][ T5227] futex_wake_op: syz-executor.2 tries to shift op by 256; fix this program
11:39:05 executing program 5:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
close(r4)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732})
r6 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@multicast, @multicast, @val={@void}, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @private=0xa010101}, {0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x2e)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8)
splice(r0, 0x0, r4, 0x0, 0x10005, 0x2000000)

11:39:05 executing program 3:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000180)=""/4082, 0xff2}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
shmat(0x0, &(0x7f0000001000/0x1000)=nil, 0x0)
dup(0xffffffffffffffff)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
preadv(r0, &(0x7f00000017c0), 0x218, 0x0, 0x0)

11:39:05 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x34000}, 0x0)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:39:05 executing program 2:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc0100002)
r2 = semget$private(0x0, 0x3, 0x0)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semop(r2, &(0x7f0000000100), 0x2d)
semctl$IPC_RMID(r2, 0x0, 0x0)
semget$private(0x0, 0x20000000102, 0x0)
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @dev, 0xc}, @in={0x2, 0x0, @loopback}], 0x2c)

11:39:05 executing program 0:
syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0)
syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x800000000000000}, 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xbd, 0x970, 0x1, 0x5})
socket$nl_route(0x10, 0x3, 0x0)

11:39:05 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10)
recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)

11:39:06 executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc0100002)
r2 = semget$private(0x0, 0x3, 0x0)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semop(r2, &(0x7f0000000100), 0x2d)
semctl$IPC_RMID(r2, 0x0, 0x0)
semget$private(0x0, 0x20000000102, 0x0)
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @dev, 0xc}, @in={0x2, 0x0, @loopback}], 0x2c)

[ 1973.315346][ T5243] futex_wake_op: syz-executor.2 tries to shift op by 256; fix this program
11:39:06 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x400300}, 0x0)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:39:06 executing program 3:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000180)=""/4082, 0xff2}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
shmat(0x0, &(0x7f0000001000/0x1000)=nil, 0x0)
dup(0xffffffffffffffff)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
preadv(r0, &(0x7f00000017c0), 0x218, 0x0, 0x0)

[ 1973.601538][ T5265] futex_wake_op: syz-executor.2 tries to shift op by 256; fix this program
11:39:06 executing program 3:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000180)=""/4082, 0xff2}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
shmat(0x0, &(0x7f0000001000/0x1000)=nil, 0x0)
dup(0xffffffffffffffff)
preadv(r0, &(0x7f00000017c0), 0x218, 0x0, 0x0)

11:39:06 executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc0100002)
r2 = semget$private(0x0, 0x3, 0x0)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semop(r2, &(0x7f0000000100), 0x2d)
semctl$IPC_RMID(r2, 0x0, 0x0)
semget$private(0x0, 0x20000000102, 0x0)
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @dev, 0xc}, @in={0x2, 0x0, @loopback}], 0x2c)

11:39:06 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0xf0ffff}, 0x0)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

[ 1973.967666][ T5276] futex_wake_op: syz-executor.2 tries to shift op by 256; fix this program
11:39:07 executing program 5:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
close(r4)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732})
r6 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@multicast, @multicast, @val={@void}, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @private=0xa010101}, {0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x2e)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8)
splice(r0, 0x0, r4, 0x0, 0x10005, 0x3000000)

11:39:07 executing program 3:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000180)=""/4082, 0xff2}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
shmat(0x0, &(0x7f0000001000/0x1000)=nil, 0x0)
dup(0xffffffffffffffff)
preadv(r0, &(0x7f00000017c0), 0x218, 0x0, 0x0)

11:39:07 executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc0100002)
r2 = semget$private(0x0, 0x3, 0x0)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semop(r2, &(0x7f0000000100), 0x2d)
semctl$IPC_RMID(r2, 0x0, 0x0)
semget$private(0x0, 0x20000000102, 0x0)
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @dev, 0xc}, @in={0x2, 0x0, @loopback}], 0x2c)

11:39:07 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10)
recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)

11:39:07 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x1000000}, 0x0)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:39:07 executing program 0:
syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0)
syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x900000000000000}, 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xbd, 0x970, 0x1, 0x5})
socket$nl_route(0x10, 0x3, 0x0)

[ 1974.586615][ T5294] futex_wake_op: syz-executor.2 tries to shift op by 256; fix this program
11:39:07 executing program 2:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc0100002)
r2 = semget$private(0x0, 0x3, 0x0)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semop(r2, &(0x7f0000000100), 0x2d)
semctl$IPC_RMID(r2, 0x0, 0x0)
semget$private(0x0, 0x20000000102, 0x0)
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @dev, 0xc}, @in={0x2, 0x0, @loopback}], 0x2c)

11:39:07 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000000}, 0x0)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:39:07 executing program 3:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000180)=""/4082, 0xff2}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
shmat(0x0, &(0x7f0000001000/0x1000)=nil, 0x0)
dup(0xffffffffffffffff)
preadv(r0, &(0x7f00000017c0), 0x218, 0x0, 0x0)

11:39:07 executing program 3:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000180)=""/4082, 0xff2}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
shmat(0x0, &(0x7f0000001000/0x1000)=nil, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
preadv(r0, &(0x7f00000017c0), 0x218, 0x0, 0x0)

[ 1975.012394][ T5322] futex_wake_op: syz-executor.2 tries to shift op by 256; fix this program
11:39:07 executing program 2:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc0100002)
r2 = semget$private(0x0, 0x3, 0x0)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semop(r2, &(0x7f0000000100), 0x2d)
semctl$IPC_RMID(r2, 0x0, 0x0)
semget$private(0x0, 0x20000000102, 0x0)
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @dev, 0xc}, @in={0x2, 0x0, @loopback}], 0x2c)

11:39:07 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x3000000}, 0x0)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

[ 1975.242614][ T5329] futex_wake_op: syz-executor.2 tries to shift op by 256; fix this program
11:39:08 executing program 5:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
close(r4)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732})
r6 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@multicast, @multicast, @val={@void}, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @private=0xa010101}, {0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x2e)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8)
splice(r0, 0x0, r4, 0x0, 0x10005, 0x4000000)

11:39:08 executing program 3:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000180)=""/4082, 0xff2}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
shmat(0x0, &(0x7f0000001000/0x1000)=nil, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
preadv(r0, &(0x7f00000017c0), 0x218, 0x0, 0x0)

11:39:08 executing program 2:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(0xffffffffffffffff, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc0100002)
r2 = semget$private(0x0, 0x3, 0x0)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semop(r2, &(0x7f0000000100), 0x2d)
semctl$IPC_RMID(r2, 0x0, 0x0)
semget$private(0x0, 0x20000000102, 0x0)
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @dev, 0xc}, @in={0x2, 0x0, @loopback}], 0x2c)

11:39:08 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:39:08 executing program 0:
syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0)
syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x1000000000000000}, 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xbd, 0x970, 0x1, 0x5})
socket$nl_route(0x10, 0x3, 0x0)

11:39:08 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10)
recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0)

[ 1975.813669][ T5348] futex_wake_op: syz-executor.2 tries to shift op by 256; fix this program
11:39:08 executing program 2:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(0xffffffffffffffff, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc0100002)
r2 = semget$private(0x0, 0x3, 0x0)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semop(r2, &(0x7f0000000100), 0x2d)
semctl$IPC_RMID(r2, 0x0, 0x0)
semget$private(0x0, 0x20000000102, 0x0)
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @dev, 0xc}, @in={0x2, 0x0, @loopback}], 0x2c)

11:39:08 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x5000000}, 0x0)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:39:08 executing program 3:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000180)=""/4082, 0xff2}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
shmat(0x0, &(0x7f0000001000/0x1000)=nil, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
preadv(r0, &(0x7f00000017c0), 0x218, 0x0, 0x0)

11:39:09 executing program 2:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(0xffffffffffffffff, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc0100002)
r2 = semget$private(0x0, 0x3, 0x0)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semop(r2, &(0x7f0000000100), 0x2d)
semctl$IPC_RMID(r2, 0x0, 0x0)
semget$private(0x0, 0x20000000102, 0x0)
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @dev, 0xc}, @in={0x2, 0x0, @loopback}], 0x2c)

11:39:09 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000000}, 0x0)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:39:09 executing program 3:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000180)=""/4082, 0xff2}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
dup(0xffffffffffffffff)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
preadv(r0, &(0x7f00000017c0), 0x218, 0x0, 0x0)

[ 1976.592663][ T5380] futex_wake_op: syz-executor.2 tries to shift op by 256; fix this program
11:39:09 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x9000000}, 0x0)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:39:09 executing program 2:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc0100002)
r2 = semget$private(0x0, 0x3, 0x0)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semop(r2, &(0x7f0000000100), 0x2d)
semctl$IPC_RMID(r2, 0x0, 0x0)
semget$private(0x0, 0x20000000102, 0x0)
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @dev, 0xc}, @in={0x2, 0x0, @loopback}], 0x2c)

11:39:09 executing program 0:
syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0)
syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x6400000000000000}, 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xbd, 0x970, 0x1, 0x5})
socket$nl_route(0x10, 0x3, 0x0)

11:39:09 executing program 5:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
close(r4)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732})
r6 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@multicast, @multicast, @val={@void}, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @private=0xa010101}, {0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x2e)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8)
splice(r0, 0x0, r4, 0x0, 0x10005, 0x5000000)

11:39:09 executing program 3:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000180)=""/4082, 0xff2}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
dup(0xffffffffffffffff)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
preadv(r0, &(0x7f00000017c0), 0x218, 0x0, 0x0)

11:39:11 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10)
recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0)

11:39:11 executing program 2:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc0100002)
r2 = semget$private(0x0, 0x3, 0x0)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semop(r2, &(0x7f0000000100), 0x2d)
semctl$IPC_RMID(r2, 0x0, 0x0)
semget$private(0x0, 0x20000000102, 0x0)
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @dev, 0xc}, @in={0x2, 0x0, @loopback}], 0x2c)

11:39:11 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0xe000000}, 0x0)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:39:11 executing program 3:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000180)=""/4082, 0xff2}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
dup(0xffffffffffffffff)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
preadv(r0, &(0x7f00000017c0), 0x218, 0x0, 0x0)

11:39:11 executing program 0:
syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0)
syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x6a07000000000000}, 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xbd, 0x970, 0x1, 0x5})
socket$nl_route(0x10, 0x3, 0x0)

11:39:11 executing program 5:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
close(r4)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732})
r6 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@multicast, @multicast, @val={@void}, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @private=0xa010101}, {0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x2e)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8)
splice(r0, 0x0, r4, 0x0, 0x10005, 0x6000000)

[ 1978.796519][ T5428] futex_atomic_op_inuser: 1 callbacks suppressed
[ 1978.796529][ T5428] futex_wake_op: syz-executor.2 tries to shift op by 256; fix this program
11:39:11 executing program 2:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc0100002)
r2 = semget$private(0x0, 0x3, 0x0)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semop(r2, &(0x7f0000000100), 0x2d)
semctl$IPC_RMID(r2, 0x0, 0x0)
semget$private(0x0, 0x20000000102, 0x0)
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @dev, 0xc}, @in={0x2, 0x0, @loopback}], 0x2c)

11:39:11 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0xf000000}, 0x0)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:39:11 executing program 3:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000180)=""/4082, 0xff2}], 0x1, 0x0, 0x0)
shmat(0x0, &(0x7f0000001000/0x1000)=nil, 0x0)
dup(0xffffffffffffffff)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x218, 0x0, 0x0)

[ 1979.089191][ T5452] futex_wake_op: syz-executor.2 tries to shift op by 256; fix this program
11:39:11 executing program 2:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc0100002)
r1 = semget$private(0x0, 0x3, 0x0)
semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semop(r1, &(0x7f0000000100), 0x2d)
semctl$IPC_RMID(r1, 0x0, 0x0)
semget$private(0x0, 0x20000000102, 0x0)
r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @dev, 0xc}, @in={0x2, 0x0, @loopback}], 0x2c)

11:39:11 executing program 2:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc0100002)
r1 = semget$private(0x0, 0x3, 0x0)
semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semop(r1, &(0x7f0000000100), 0x2d)
semctl$IPC_RMID(r1, 0x0, 0x0)
semget$private(0x0, 0x20000000102, 0x0)
r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @dev, 0xc}, @in={0x2, 0x0, @loopback}], 0x2c)

11:39:11 executing program 2:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc0100002)
r1 = semget$private(0x0, 0x3, 0x0)
semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semop(r1, &(0x7f0000000100), 0x2d)
semctl$IPC_RMID(r1, 0x0, 0x0)
semget$private(0x0, 0x20000000102, 0x0)
r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @dev, 0xc}, @in={0x2, 0x0, @loopback}], 0x2c)

[ 1979.248627][ T5459] futex_wake_op: syz-executor.2 tries to shift op by 256; fix this program
[ 1979.286482][ T5462] futex_wake_op: syz-executor.2 tries to shift op by 256; fix this program
[ 1979.345221][ T5465] futex_wake_op: syz-executor.2 tries to shift op by 256; fix this program
11:39:13 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10)
recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0)

11:39:13 executing program 3:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000180)=""/4082, 0xff2}], 0x1, 0x0, 0x0)
shmat(0x0, &(0x7f0000001000/0x1000)=nil, 0x0)
dup(0xffffffffffffffff)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x218, 0x0, 0x0)

11:39:13 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x3f000000}, 0x0)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:39:13 executing program 2:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc0100002)
r2 = semget$private(0x0, 0x3, 0x0)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semop(r2, &(0x7f0000000100), 0x2d)
semctl$IPC_RMID(r2, 0x0, 0x0)
semget$private(0x0, 0x20000000102, 0x0)
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @dev, 0xc}, @in={0x2, 0x0, @loopback}], 0x2c)

11:39:13 executing program 0:
syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0)
syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0xff00000000000000}, 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xbd, 0x970, 0x1, 0x5})
socket$nl_route(0x10, 0x3, 0x0)

11:39:13 executing program 5:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
close(r4)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732})
r6 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@multicast, @multicast, @val={@void}, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @private=0xa010101}, {0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x2e)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8)
splice(r0, 0x0, r4, 0x0, 0x10005, 0x7000000)

11:39:13 executing program 2:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc0100002)
r2 = semget$private(0x0, 0x3, 0x0)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semop(r2, &(0x7f0000000100), 0x2d)
semctl$IPC_RMID(r2, 0x0, 0x0)
semget$private(0x0, 0x20000000102, 0x0)
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @dev, 0xc}, @in={0x2, 0x0, @loopback}], 0x2c)

[ 1980.836335][ T5485] futex_wake_op: syz-executor.2 tries to shift op by 256; fix this program
11:39:13 executing program 3:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000180)=""/4082, 0xff2}], 0x1, 0x0, 0x0)
shmat(0x0, &(0x7f0000001000/0x1000)=nil, 0x0)
dup(0xffffffffffffffff)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x218, 0x0, 0x0)

[ 1981.021476][ T5504] futex_wake_op: syz-executor.2 tries to shift op by 256; fix this program
11:39:13 executing program 2:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc0100002)
r2 = semget$private(0x0, 0x3, 0x0)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semop(r2, &(0x7f0000000100), 0x2d)
semctl$IPC_RMID(r2, 0x0, 0x0)
semget$private(0x0, 0x20000000102, 0x0)
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @dev, 0xc}, @in={0x2, 0x0, @loopback}], 0x2c)

11:39:13 executing program 3:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
shmat(0x0, &(0x7f0000001000/0x1000)=nil, 0x0)
dup(0xffffffffffffffff)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
preadv(r0, &(0x7f00000017c0), 0x218, 0x0, 0x0)

11:39:13 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000000}, 0x0)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:39:13 executing program 3:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
shmat(0x0, &(0x7f0000001000/0x1000)=nil, 0x0)
dup(0xffffffffffffffff)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
preadv(r0, &(0x7f00000017c0), 0x218, 0x0, 0x0)

[ 1981.333401][ T5513] futex_wake_op: syz-executor.2 tries to shift op by 256; fix this program
11:39:15 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10)
recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0)
mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)

11:39:15 executing program 2:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc0100002)
r2 = semget$private(0x0, 0x3, 0x0)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semop(r2, &(0x7f0000000100), 0x2d)
semctl$IPC_RMID(r2, 0x0, 0x0)
semget$private(0x0, 0x20000000102, 0x0)
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @dev, 0xc}, @in={0x2, 0x0, @loopback}], 0x2c)

11:39:15 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x60000000}, 0x0)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:39:15 executing program 3:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
shmat(0x0, &(0x7f0000001000/0x1000)=nil, 0x0)
dup(0xffffffffffffffff)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
preadv(r0, &(0x7f00000017c0), 0x218, 0x0, 0x0)

11:39:15 executing program 0:
syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0)
syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8}, 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xbd, 0x970, 0x1, 0x5})
socket$nl_route(0x10, 0x3, 0x0)

11:39:15 executing program 5:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
close(r4)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732})
r6 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@multicast, @multicast, @val={@void}, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @private=0xa010101}, {0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x2e)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8)
splice(r0, 0x0, r4, 0x0, 0x10005, 0x8000000)

11:39:15 executing program 3:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000180)=""/4082, 0xff2}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
shmat(0x0, &(0x7f0000001000/0x1000)=nil, 0x0)
dup(0xffffffffffffffff)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
preadv(r0, &(0x7f00000017c0), 0x218, 0x0, 0x0)

11:39:15 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x9effffff}, 0x0)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

[ 1982.982647][ T5536] futex_wake_op: syz-executor.2 tries to shift op by 256; fix this program
11:39:15 executing program 3:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000180)=""/4082, 0xff2}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
shmat(0x0, &(0x7f0000001000/0x1000)=nil, 0x0)
dup(0xffffffffffffffff)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
preadv(r0, &(0x7f00000017c0), 0x218, 0x0, 0x0)

11:39:15 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0xf0ffffff}, 0x0)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:39:16 executing program 3:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000180)=""/4082, 0xff2}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
shmat(0x0, &(0x7f0000001000/0x1000)=nil, 0x0)
dup(0xffffffffffffffff)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
preadv(r0, &(0x7f00000017c0), 0x218, 0x0, 0x0)

11:39:16 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0xfb1c0000}, 0x0)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:39:17 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10)
recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0)
mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)

11:39:17 executing program 3:
perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000180)=""/4082, 0xff2}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
shmat(0x0, &(0x7f0000001000/0x1000)=nil, 0x0)
dup(0xffffffffffffffff)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
preadv(r0, &(0x7f00000017c0), 0x218, 0x0, 0x0)

11:39:17 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0xfffff000}, 0x0)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:39:17 executing program 2:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc0100002)
r2 = semget$private(0x0, 0x3, 0x0)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semop(r2, &(0x7f0000000100), 0x2d)
semctl$IPC_RMID(r2, 0x0, 0x0)
semget$private(0x0, 0x20000000102, 0x0)
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @dev, 0xc}, @in={0x2, 0x0, @loopback}], 0x2c)

11:39:17 executing program 0:
syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0)
syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x9}, 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xbd, 0x970, 0x1, 0x5})
socket$nl_route(0x10, 0x3, 0x0)

11:39:17 executing program 5:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
close(r4)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732})
r6 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@multicast, @multicast, @val={@void}, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @private=0xa010101}, {0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x2e)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8)
splice(r0, 0x0, r4, 0x0, 0x10005, 0x8060000)

11:39:17 executing program 3:
perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000180)=""/4082, 0xff2}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
shmat(0x0, &(0x7f0000001000/0x1000)=nil, 0x0)
dup(0xffffffffffffffff)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
preadv(r0, &(0x7f00000017c0), 0x218, 0x0, 0x0)

11:39:17 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0xffffff7f}, 0x0)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

[ 1985.243057][ T5591] futex_wake_op: syz-executor.2 tries to shift op by 256; fix this program
11:39:18 executing program 3:
perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000180)=""/4082, 0xff2}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
shmat(0x0, &(0x7f0000001000/0x1000)=nil, 0x0)
dup(0xffffffffffffffff)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
preadv(r0, &(0x7f00000017c0), 0x218, 0x0, 0x0)

11:39:18 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0xffffff9e}, 0x0)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:39:18 executing program 3:
openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000180)=""/4082, 0xff2}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
shmat(0x0, &(0x7f0000001000/0x1000)=nil, 0x0)
dup(0xffffffffffffffff)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
preadv(r0, &(0x7f00000017c0), 0x218, 0x0, 0x0)

11:39:18 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0xfffffff0}, 0x0)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:39:19 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10)
recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0)
mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)

11:39:19 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0xffffffff}, 0x0)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:39:19 executing program 3:
openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000180)=""/4082, 0xff2}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
shmat(0x0, &(0x7f0000001000/0x1000)=nil, 0x0)
dup(0xffffffffffffffff)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
preadv(r0, &(0x7f00000017c0), 0x218, 0x0, 0x0)

11:39:19 executing program 2:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc0100002)
r2 = semget$private(0x0, 0x3, 0x0)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semop(r2, &(0x7f0000000100), 0x2d)
semctl$IPC_RMID(r2, 0x0, 0x0)
semget$private(0x0, 0x20000000102, 0x0)
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @dev, 0xc}, @in={0x2, 0x0, @loopback}], 0x2c)

11:39:19 executing program 0:
syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0)
syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x10}, 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xbd, 0x970, 0x1, 0x5})
socket$nl_route(0x10, 0x3, 0x0)

11:39:19 executing program 5:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
close(r4)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732})
r6 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@multicast, @multicast, @val={@void}, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @private=0xa010101}, {0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x2e)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8)
splice(r0, 0x0, r4, 0x0, 0x10005, 0xd000000)

11:39:20 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}}, 0x2)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:39:20 executing program 3:
openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000180)=""/4082, 0xff2}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
shmat(0x0, &(0x7f0000001000/0x1000)=nil, 0x0)
dup(0xffffffffffffffff)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
preadv(r0, &(0x7f00000017c0), 0x218, 0x0, 0x0)

[ 1987.336866][ T5644] futex_wake_op: syz-executor.2 tries to shift op by 256; fix this program
11:39:20 executing program 3:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000180)=""/4082, 0xff2}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
shmat(0x0, &(0x7f0000001000/0x1000)=nil, 0x0)
dup(0xffffffffffffffff)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
preadv(r0, &(0x7f00000017c0), 0x218, 0x0, 0x0)

11:39:20 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}}, 0x3)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:39:20 executing program 3:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000180)=""/4082, 0xff2}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
shmat(0x0, &(0x7f0000001000/0x1000)=nil, 0x0)
dup(0xffffffffffffffff)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
preadv(r0, &(0x7f00000017c0), 0x218, 0x0, 0x0)

11:39:20 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}}, 0x4)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:39:22 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)

11:39:22 executing program 0:
syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0)
syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x64}, 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xbd, 0x970, 0x1, 0x5})
socket$nl_route(0x10, 0x3, 0x0)

11:39:22 executing program 3:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000180)=""/4082, 0xff2}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
shmat(0x0, &(0x7f0000001000/0x1000)=nil, 0x0)
dup(0xffffffffffffffff)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
preadv(r0, &(0x7f00000017c0), 0x218, 0x0, 0x0)

11:39:22 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}}, 0x5)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:39:22 executing program 2:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
futex(0x0, 0x0, 0x0, 0x0, 0x0, 0xc0100002)
r2 = semget$private(0x0, 0x3, 0x0)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semop(r2, &(0x7f0000000100), 0x2d)
semctl$IPC_RMID(r2, 0x0, 0x0)
semget$private(0x0, 0x20000000102, 0x0)
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @dev, 0xc}, @in={0x2, 0x0, @loopback}], 0x2c)

11:39:22 executing program 5:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
close(r4)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732})
r6 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@multicast, @multicast, @val={@void}, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @private=0xa010101}, {0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x2e)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8)
splice(r0, 0x0, r4, 0x0, 0x10005, 0x10000000)

11:39:22 executing program 2:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
futex(0x0, 0x0, 0x0, 0x0, 0x0, 0xc0100002)
r2 = semget$private(0x0, 0x3, 0x0)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semop(r2, &(0x7f0000000100), 0x2d)
semctl$IPC_RMID(r2, 0x0, 0x0)
semget$private(0x0, 0x20000000102, 0x0)
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @dev, 0xc}, @in={0x2, 0x0, @loopback}], 0x2c)

11:39:22 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}}, 0x8)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:39:22 executing program 3:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000001340)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000180)=""/4082, 0xff2}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
shmat(0x0, &(0x7f0000001000/0x1000)=nil, 0x0)
dup(0xffffffffffffffff)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
preadv(r0, &(0x7f00000017c0), 0x218, 0x0, 0x0)

11:39:22 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)

11:39:22 executing program 2:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
futex(0x0, 0x0, 0x0, 0x0, 0x0, 0xc0100002)
r2 = semget$private(0x0, 0x3, 0x0)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semop(r2, &(0x7f0000000100), 0x2d)
semctl$IPC_RMID(r2, 0x0, 0x0)
semget$private(0x0, 0x20000000102, 0x0)
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @dev, 0xc}, @in={0x2, 0x0, @loopback}], 0x2c)

11:39:22 executing program 3:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000001340)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000180)=""/4082, 0xff2}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
shmat(0x0, &(0x7f0000001000/0x1000)=nil, 0x0)
dup(0xffffffffffffffff)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
preadv(r0, &(0x7f00000017c0), 0x218, 0x0, 0x0)

11:39:22 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}}, 0x9)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:39:22 executing program 0:
syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0)
syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x76a}, 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xbd, 0x970, 0x1, 0x5})
socket$nl_route(0x10, 0x3, 0x0)

11:39:22 executing program 2:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0x0)
r2 = semget$private(0x0, 0x3, 0x0)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semop(r2, &(0x7f0000000100), 0x2d)
semctl$IPC_RMID(r2, 0x0, 0x0)
semget$private(0x0, 0x20000000102, 0x0)
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @dev, 0xc}, @in={0x2, 0x0, @loopback}], 0x2c)

11:39:22 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)

11:39:22 executing program 3:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000001340)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000180)=""/4082, 0xff2}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
shmat(0x0, &(0x7f0000001000/0x1000)=nil, 0x0)
dup(0xffffffffffffffff)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
preadv(r0, &(0x7f00000017c0), 0x218, 0x0, 0x0)

11:39:23 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10)
recvmmsg(0xffffffffffffffff, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)

11:39:23 executing program 5:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
close(r4)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732})
r6 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@multicast, @multicast, @val={@void}, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @private=0xa010101}, {0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x2e)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8)
splice(r0, 0x0, r4, 0x0, 0x10005, 0x14000000)

11:39:23 executing program 2:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0x0)
r2 = semget$private(0x0, 0x3, 0x0)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semop(r2, &(0x7f0000000100), 0x2d)
semctl$IPC_RMID(r2, 0x0, 0x0)
semget$private(0x0, 0x20000000102, 0x0)
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @dev, 0xc}, @in={0x2, 0x0, @loopback}], 0x2c)

11:39:23 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}}, 0xe)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:39:23 executing program 3:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000180)=""/4082, 0xff2}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
shmat(0x0, &(0x7f0000001000/0x1000)=nil, 0x0)
dup(0xffffffffffffffff)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
preadv(r0, &(0x7f00000017c0), 0x218, 0x0, 0x0)

11:39:23 executing program 2:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0x0)
r2 = semget$private(0x0, 0x3, 0x0)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semop(r2, &(0x7f0000000100), 0x2d)
semctl$IPC_RMID(r2, 0x0, 0x0)
semget$private(0x0, 0x20000000102, 0x0)
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @dev, 0xc}, @in={0x2, 0x0, @loopback}], 0x2c)

11:39:23 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10)
recvmmsg(0xffffffffffffffff, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)

11:39:23 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}}, 0xf)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:39:23 executing program 0:
syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0)
syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x900}, 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xbd, 0x970, 0x1, 0x5})
socket$nl_route(0x10, 0x3, 0x0)

11:39:23 executing program 3:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000180)=""/4082, 0xff2}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
shmat(0x0, &(0x7f0000001000/0x1000)=nil, 0x0)
dup(0xffffffffffffffff)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
preadv(r0, &(0x7f00000017c0), 0x218, 0x0, 0x0)

11:39:23 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10)
recvmmsg(0xffffffffffffffff, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)

11:39:23 executing program 2:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc0100002)
r2 = semget$private(0x0, 0x0, 0x0)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semop(r2, &(0x7f0000000100), 0x2d)
semctl$IPC_RMID(r2, 0x0, 0x0)
semget$private(0x0, 0x20000000102, 0x0)
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @dev, 0xc}, @in={0x2, 0x0, @loopback}], 0x2c)

11:39:23 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}}, 0x60)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

[ 1991.009384][ T5792] futex_wake_op: syz-executor.2 tries to shift op by 256; fix this program
11:39:24 executing program 5:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
close(r4)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732})
r6 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@multicast, @multicast, @val={@void}, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @private=0xa010101}, {0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x2e)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8)
splice(r0, 0x0, r4, 0x0, 0x10005, 0x3f000000)

11:39:24 executing program 2:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc0100002)
r2 = semget$private(0x0, 0x0, 0x0)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semop(r2, &(0x7f0000000100), 0x2d)
semctl$IPC_RMID(r2, 0x0, 0x0)
semget$private(0x0, 0x20000000102, 0x0)
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @dev, 0xc}, @in={0x2, 0x0, @loopback}], 0x2c)

11:39:24 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}}, 0xf0)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:39:24 executing program 3:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000180)=""/4082, 0xff2}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
shmat(0x0, &(0x7f0000001000/0x1000)=nil, 0x0)
dup(0xffffffffffffffff)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
preadv(r0, &(0x7f00000017c0), 0x218, 0x0, 0x0)

11:39:24 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10)
recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)

11:39:24 executing program 3:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000180)=""/4082, 0xff2}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
shmat(0x0, &(0x7f0000001000/0x1000)=nil, 0x0)
dup(0xffffffffffffffff)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
preadv(r0, &(0x7f00000017c0), 0x218, 0x0, 0x0)

[ 1991.888876][ T5821] futex_wake_op: syz-executor.2 tries to shift op by 256; fix this program
11:39:24 executing program 0:
syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0)
syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x6400}, 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xbd, 0x970, 0x1, 0x5})
socket$nl_route(0x10, 0x3, 0x0)

11:39:24 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10)
recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)

11:39:24 executing program 2:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc0100002)
r2 = semget$private(0x0, 0x0, 0x0)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semop(r2, &(0x7f0000000100), 0x2d)
semctl$IPC_RMID(r2, 0x0, 0x0)
semget$private(0x0, 0x20000000102, 0x0)
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @dev, 0xc}, @in={0x2, 0x0, @loopback}], 0x2c)

11:39:24 executing program 3:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000180)=""/4082, 0xff2}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
shmat(0x0, &(0x7f0000001000/0x1000)=nil, 0x0)
dup(0xffffffffffffffff)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
preadv(r0, &(0x7f00000017c0), 0x218, 0x0, 0x0)

11:39:24 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}}, 0x300)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:39:24 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10)
recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)

11:39:25 executing program 5:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
close(r4)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732})
r6 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@multicast, @multicast, @val={@void}, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @private=0xa010101}, {0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x2e)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8)
splice(r0, 0x0, r4, 0x0, 0x10005, 0x40000000)

11:39:25 executing program 3:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000180)=""/4082, 0xff2}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
shmat(0x0, &(0x7f0000001000/0x1000)=nil, 0x0)
dup(0xffffffffffffffff)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
preadv(r0, &(0x7f00000017c0), 0x218, 0x0, 0x0)

11:39:25 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}}, 0x500)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:39:25 executing program 2:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc0100002)
r2 = semget$private(0x0, 0x3, 0x0)
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semop(r2, &(0x7f0000000100), 0x2d)
semctl$IPC_RMID(r2, 0x0, 0x0)
semget$private(0x0, 0x20000000102, 0x0)
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @dev, 0xc}, @in={0x2, 0x0, @loopback}], 0x2c)

11:39:25 executing program 4:
bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58)
r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10)
recvmmsg(r0, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)

[ 1992.880966][ T5830] binder: 5829:5830 ioctl 40305652 20000140 returned -22
11:39:25 executing program 0:
syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0)
syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x6a07}, 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xbd, 0x970, 0x1, 0x5})
socket$nl_route(0x10, 0x3, 0x0)

[ 1992.942787][ T5869] futex_wake_op: syz-executor.2 tries to shift op by 256; fix this program
11:39:25 executing program 2:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc0100002)
r2 = semget$private(0x0, 0x3, 0x0)
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semop(r2, &(0x7f0000000100), 0x2d)
semctl$IPC_RMID(r2, 0x0, 0x0)
semget$private(0x0, 0x20000000102, 0x0)
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @dev, 0xc}, @in={0x2, 0x0, @loopback}], 0x2c)

11:39:25 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}}, 0x900)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:39:25 executing program 4:
bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58)
r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10)
recvmmsg(r0, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)

11:39:25 executing program 3:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
shmat(0x0, &(0x7f0000001000/0x1000)=nil, 0x0)
dup(0xffffffffffffffff)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
preadv(r0, &(0x7f00000017c0), 0x218, 0x0, 0x0)

11:39:25 executing program 3:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
shmat(0x0, &(0x7f0000001000/0x1000)=nil, 0x0)
dup(0xffffffffffffffff)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
preadv(r0, &(0x7f00000017c0), 0x218, 0x0, 0x0)

[ 1993.160559][ T5894] futex_wake_op: syz-executor.2 tries to shift op by 256; fix this program
11:39:25 executing program 4:
bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58)
r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10)
recvmmsg(r0, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)

11:39:26 executing program 5:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
close(r4)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732})
r6 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@multicast, @multicast, @val={@void}, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @private=0xa010101}, {0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x2e)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8)
splice(r0, 0x0, r4, 0x0, 0x10005, 0x43050000)

11:39:26 executing program 2:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc0100002)
r2 = semget$private(0x0, 0x3, 0x0)
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semop(r2, &(0x7f0000000100), 0x2d)
semctl$IPC_RMID(r2, 0x0, 0x0)
semget$private(0x0, 0x20000000102, 0x0)
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @dev, 0xc}, @in={0x2, 0x0, @loopback}], 0x2c)

11:39:26 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}}, 0xe00)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:39:26 executing program 3:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
shmat(0x0, &(0x7f0000001000/0x1000)=nil, 0x0)
dup(0xffffffffffffffff)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
preadv(r0, &(0x7f00000017c0), 0x218, 0x0, 0x0)

11:39:26 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10)
recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)

[ 1993.994975][ T5885] binder: 5877:5885 ioctl 40305652 20000140 returned -22
11:39:26 executing program 0:
syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0)
syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xff00}, 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xbd, 0x970, 0x1, 0x5})
socket$nl_route(0x10, 0x3, 0x0)

11:39:26 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10)
recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)

11:39:26 executing program 3:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0), 0x0, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
shmat(0x0, &(0x7f0000001000/0x1000)=nil, 0x0)
dup(0xffffffffffffffff)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
preadv(r0, &(0x7f00000017c0), 0x218, 0x0, 0x0)

11:39:26 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}}, 0xf00)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:39:26 executing program 2:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc0100002)
r2 = semget$private(0x0, 0x3, 0x0)
semctl$SETALL(r2, 0x0, 0x11, 0x0)
semop(r2, &(0x7f0000000100), 0x2d)
semctl$IPC_RMID(r2, 0x0, 0x0)
semget$private(0x0, 0x20000000102, 0x0)
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @dev, 0xc}, @in={0x2, 0x0, @loopback}], 0x2c)

[ 1994.061083][ T5927] futex_wake_op: syz-executor.2 tries to shift op by 256; fix this program
11:39:26 executing program 3:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0), 0x0, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
shmat(0x0, &(0x7f0000001000/0x1000)=nil, 0x0)
dup(0xffffffffffffffff)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
preadv(r0, &(0x7f00000017c0), 0x218, 0x0, 0x0)

11:39:26 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10)
recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)

[ 1994.230564][ T5947] futex_wake_op: syz-executor.2 tries to shift op by 256; fix this program
11:39:27 executing program 5:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
close(r4)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732})
r6 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@multicast, @multicast, @val={@void}, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @private=0xa010101}, {0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x2e)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8)
splice(r0, 0x0, r4, 0x0, 0x10005, 0x60000000)

11:39:27 executing program 2:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc0100002)
r2 = semget$private(0x0, 0x3, 0x0)
semctl$SETALL(r2, 0x0, 0x11, 0x0)
semop(r2, &(0x7f0000000100), 0x2d)
semctl$IPC_RMID(r2, 0x0, 0x0)
semget$private(0x0, 0x20000000102, 0x0)
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @dev, 0xc}, @in={0x2, 0x0, @loopback}], 0x2c)

11:39:27 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}}, 0x1cfb)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:39:27 executing program 3:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0), 0x0, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
shmat(0x0, &(0x7f0000001000/0x1000)=nil, 0x0)
dup(0xffffffffffffffff)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
preadv(r0, &(0x7f00000017c0), 0x218, 0x0, 0x0)

11:39:27 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10)
recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)

11:39:27 executing program 0:
syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0)
syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1000000}, 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xbd, 0x970, 0x1, 0x5})
socket$nl_route(0x10, 0x3, 0x0)

11:39:27 executing program 2:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc0100002)
r2 = semget$private(0x0, 0x3, 0x0)
semctl$SETALL(r2, 0x0, 0x11, 0x0)
semop(r2, &(0x7f0000000100), 0x2d)
semctl$IPC_RMID(r2, 0x0, 0x0)
semget$private(0x0, 0x20000000102, 0x0)
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @dev, 0xc}, @in={0x2, 0x0, @loopback}], 0x2c)

[ 1995.161970][ T5979] futex_wake_op: syz-executor.2 tries to shift op by 256; fix this program
11:39:27 executing program 3:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{0x0}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
shmat(0x0, &(0x7f0000001000/0x1000)=nil, 0x0)
dup(0xffffffffffffffff)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
preadv(r0, &(0x7f00000017c0), 0x218, 0x0, 0x0)

11:39:27 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}}, 0x3f00)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:39:27 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10)
recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)

11:39:28 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10)
recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)

[ 1995.380281][ T6000] futex_wake_op: syz-executor.2 tries to shift op by 256; fix this program
11:39:28 executing program 3:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{0x0}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
shmat(0x0, &(0x7f0000001000/0x1000)=nil, 0x0)
dup(0xffffffffffffffff)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
preadv(r0, &(0x7f00000017c0), 0x218, 0x0, 0x0)

11:39:28 executing program 5:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
close(r4)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732})
r6 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@multicast, @multicast, @val={@void}, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @private=0xa010101}, {0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x2e)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8)
splice(r0, 0x0, r4, 0x0, 0x10005, 0x60ea0000)

11:39:28 executing program 2:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc0100002)
r2 = semget$private(0x0, 0x3, 0x0)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000080))
semop(r2, &(0x7f0000000100), 0x2d)
semctl$IPC_RMID(r2, 0x0, 0x0)
semget$private(0x0, 0x20000000102, 0x0)
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @dev, 0xc}, @in={0x2, 0x0, @loopback}], 0x2c)

11:39:28 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}}, 0x4000)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:39:28 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58)
r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10)
recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)

11:39:28 executing program 3:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{0x0}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
shmat(0x0, &(0x7f0000001000/0x1000)=nil, 0x0)
dup(0xffffffffffffffff)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
preadv(r0, &(0x7f00000017c0), 0x218, 0x0, 0x0)

11:39:28 executing program 0:
syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0)
syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8000000}, 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xbd, 0x970, 0x1, 0x5})
socket$nl_route(0x10, 0x3, 0x0)

11:39:28 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58)
r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10)
recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)

[ 1996.271411][ T6028] futex_wake_op: syz-executor.2 tries to shift op by 256; fix this program
11:39:29 executing program 2:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc0100002)
r2 = semget$private(0x0, 0x3, 0x0)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000080))
semop(r2, &(0x7f0000000100), 0x2d)
semctl$IPC_RMID(r2, 0x0, 0x0)
semget$private(0x0, 0x20000000102, 0x0)
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @dev, 0xc}, @in={0x2, 0x0, @loopback}], 0x2c)

11:39:29 executing program 3:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000180)=""/4082, 0xff2}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, 0x0)
shmat(0x0, &(0x7f0000001000/0x1000)=nil, 0x0)
dup(0xffffffffffffffff)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
preadv(r0, &(0x7f00000017c0), 0x218, 0x0, 0x0)

11:39:29 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58)
r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10)
recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)

11:39:29 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}}, 0x6000)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:39:29 executing program 3:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000180)=""/4082, 0xff2}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, 0x0)
shmat(0x0, &(0x7f0000001000/0x1000)=nil, 0x0)
dup(0xffffffffffffffff)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
preadv(r0, &(0x7f00000017c0), 0x218, 0x0, 0x0)

[ 1996.598323][ T6051] futex_wake_op: syz-executor.2 tries to shift op by 256; fix this program
11:39:29 executing program 5:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
close(r4)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732})
r6 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@multicast, @multicast, @val={@void}, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @private=0xa010101}, {0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x2e)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8)
splice(r0, 0x0, r4, 0x0, 0x10005, 0x65580000)

11:39:29 executing program 2:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc0100002)
r2 = semget$private(0x0, 0x3, 0x0)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000080))
semop(r2, &(0x7f0000000100), 0x2d)
semctl$IPC_RMID(r2, 0x0, 0x0)
semget$private(0x0, 0x20000000102, 0x0)
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @dev, 0xc}, @in={0x2, 0x0, @loopback}], 0x2c)

11:39:29 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}}, 0xf000)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:39:29 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10)
recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)

11:39:29 executing program 3:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000180)=""/4082, 0xff2}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, 0x0)
shmat(0x0, &(0x7f0000001000/0x1000)=nil, 0x0)
dup(0xffffffffffffffff)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
preadv(r0, &(0x7f00000017c0), 0x218, 0x0, 0x0)

11:39:29 executing program 0:
syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0)
syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x9000000}, 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xbd, 0x970, 0x1, 0x5})
socket$nl_route(0x10, 0x3, 0x0)

11:39:30 executing program 3:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000180)=""/4082, 0xff2}], 0x1, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
shmat(0x0, &(0x7f0000001000/0x1000)=nil, 0x0)
dup(0xffffffffffffffff)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x218, 0x0, 0x0)

11:39:30 executing program 2:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc0100002)
r2 = semget$private(0x0, 0x3, 0x0)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000080)=[0x0])
semop(r2, &(0x7f0000000100), 0x2d)
semctl$IPC_RMID(r2, 0x0, 0x0)
semget$private(0x0, 0x20000000102, 0x0)
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @dev, 0xc}, @in={0x2, 0x0, @loopback}], 0x2c)

11:39:30 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}}, 0xfb1c)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

[ 1997.356770][ T6080] futex_wake_op: syz-executor.2 tries to shift op by 256; fix this program
11:39:30 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10)
recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)

11:39:30 executing program 3:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000180)=""/4082, 0xff2}], 0x1, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
shmat(0x0, &(0x7f0000001000/0x1000)=nil, 0x0)
dup(0xffffffffffffffff)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x218, 0x0, 0x0)

11:39:30 executing program 3:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000180)=""/4082, 0xff2}], 0x1, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
shmat(0x0, &(0x7f0000001000/0x1000)=nil, 0x0)
dup(0xffffffffffffffff)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x218, 0x0, 0x0)

[ 1997.665347][ T6101] futex_wake_op: syz-executor.2 tries to shift op by 256; fix this program
11:39:31 executing program 2:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc0100002)
r2 = semget$private(0x0, 0x3, 0x0)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000080)=[0x0])
semop(r2, &(0x7f0000000100), 0x2d)
semctl$IPC_RMID(r2, 0x0, 0x0)
semget$private(0x0, 0x20000000102, 0x0)
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @dev, 0xc}, @in={0x2, 0x0, @loopback}], 0x2c)

11:39:31 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10)
recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)

11:39:31 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}}, 0x30000)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:39:31 executing program 0:
syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0)
syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x10000000}, 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xbd, 0x970, 0x1, 0x5})
socket$nl_route(0x10, 0x3, 0x0)

11:39:31 executing program 5:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
close(r4)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732})
r6 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@multicast, @multicast, @val={@void}, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @private=0xa010101}, {0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x2e)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8)
splice(r0, 0x0, r4, 0x0, 0x10005, 0x800e0000)

11:39:31 executing program 3:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000180)=""/4082, 0xff2}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
shmat(0x0, &(0x7f0000001000/0x1000)=nil, 0x0)
dup(0xffffffffffffffff)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
preadv(r0, 0x0, 0x0, 0x0, 0x0)

11:39:31 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)

[ 1998.437427][ T6132] futex_wake_op: syz-executor.2 tries to shift op by 256; fix this program
11:39:31 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}}, 0x34000)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:39:31 executing program 2:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc0100002)
r2 = semget$private(0x0, 0x3, 0x0)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000080)=[0x0])
semop(r2, &(0x7f0000000100), 0x2d)
semctl$IPC_RMID(r2, 0x0, 0x0)
semget$private(0x0, 0x20000000102, 0x0)
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @dev, 0xc}, @in={0x2, 0x0, @loopback}], 0x2c)

11:39:31 executing program 3:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000180)=""/4082, 0xff2}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
shmat(0x0, &(0x7f0000001000/0x1000)=nil, 0x0)
dup(0xffffffffffffffff)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
preadv(r0, 0x0, 0x0, 0x0, 0x0)

[ 1998.756507][ T6156] futex_wake_op: syz-executor.2 tries to shift op by 256; fix this program
11:39:31 executing program 3:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000180)=""/4082, 0xff2}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
shmat(0x0, &(0x7f0000001000/0x1000)=nil, 0x0)
dup(0xffffffffffffffff)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
preadv(r0, 0x0, 0x0, 0x0, 0x0)

11:39:31 executing program 2:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc0100002)
r2 = semget$private(0x0, 0x3, 0x0)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semop(0x0, &(0x7f0000000100), 0x2d)
semctl$IPC_RMID(r2, 0x0, 0x0)
semget$private(0x0, 0x20000000102, 0x0)
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @dev, 0xc}, @in={0x2, 0x0, @loopback}], 0x2c)

11:39:31 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)

11:39:31 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}}, 0x400300)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:39:31 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x4c}}, 0x0)

[ 1998.899216][ T6164] futex_wake_op: syz-executor.2 tries to shift op by 256; fix this program
11:39:31 executing program 0:
syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0)
syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x64000000}, 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xbd, 0x970, 0x1, 0x5})
socket$nl_route(0x10, 0x3, 0x0)

11:39:32 executing program 5:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
close(r4)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732})
r6 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@multicast, @multicast, @val={@void}, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @private=0xa010101}, {0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x2e)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8)
splice(r0, 0x0, r4, 0x0, 0x10005, 0x80350000)

11:39:32 executing program 2:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc0100002)
r2 = semget$private(0x0, 0x3, 0x0)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semop(0x0, &(0x7f0000000100), 0x2d)
semctl$IPC_RMID(r2, 0x0, 0x0)
semget$private(0x0, 0x20000000102, 0x0)
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @dev, 0xc}, @in={0x2, 0x0, @loopback}], 0x2c)

11:39:32 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)

11:39:32 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}}, 0xf0ffff)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:39:32 executing program 3:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r6, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x4}}]}, 0x34}}, 0x0)

11:39:32 executing program 2:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc0100002)
r2 = semget$private(0x0, 0x3, 0x0)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semop(0x0, &(0x7f0000000100), 0x2d)
semctl$IPC_RMID(r2, 0x0, 0x0)
semget$private(0x0, 0x20000000102, 0x0)
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @dev, 0xc}, @in={0x2, 0x0, @loopback}], 0x2c)

[ 1999.553739][ T6192] futex_wake_op: syz-executor.2 tries to shift op by 256; fix this program
[ 1999.563549][ T6191] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
11:39:32 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200), 0x0)
recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)

11:39:32 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}}, 0x1000000)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

[ 1999.611092][ T6191] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'.
11:39:32 executing program 3:
openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/mdstat\x00', 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000300)='oom_adj\x00')
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f00000001c0), 0xfffffef3)
socket$caif_seqpacket(0x25, 0x5, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f0000000040), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0)

[ 1999.664913][ T6191] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 1999.676213][ T6207] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 1999.686583][ T6211] futex_wake_op: syz-executor.2 tries to shift op by 256; fix this program
11:39:32 executing program 2:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc0100002)
r2 = semget$private(0x0, 0x3, 0x0)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semop(r2, 0x0, 0x0)
semctl$IPC_RMID(r2, 0x0, 0x0)
semget$private(0x0, 0x20000000102, 0x0)
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @dev, 0xc}, @in={0x2, 0x0, @loopback}], 0x2c)

11:39:32 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200), 0x0)
recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)

[ 1999.844302][ T6225] futex_wake_op: syz-executor.2 tries to shift op by 256; fix this program
11:39:32 executing program 0:
syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0)
syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x6a070000}, 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xbd, 0x970, 0x1, 0x5})
socket$nl_route(0x10, 0x3, 0x0)

11:39:33 executing program 5:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
close(r4)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732})
r6 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@multicast, @multicast, @val={@void}, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @private=0xa010101}, {0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x2e)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8)
splice(r0, 0x0, r4, 0x0, 0x10005, 0x81000000)

11:39:33 executing program 2:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc0100002)
r2 = semget$private(0x0, 0x3, 0x0)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semop(r2, 0x0, 0x0)
semctl$IPC_RMID(r2, 0x0, 0x0)
semget$private(0x0, 0x20000000102, 0x0)
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @dev, 0xc}, @in={0x2, 0x0, @loopback}], 0x2c)

11:39:33 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}}, 0x2000000)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:39:33 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200), 0x0)
recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)

11:39:33 executing program 3:
ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000500)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10018, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x6, 0xffffffffffffffff, 0x1)
ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="7000000000011905030100000800000002000000240001001400010008000100ffffffff08000200acffffe70b0002000500010000000000240002000c00020005000100000000001400010008000100e00000020800020000a3d40008000700000000000c000600a7b1f832ce37f750b4af8a2fb6374949"], 0x70}}, 0x0)
r0 = socket(0x0, 0x0, 0x0)
ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40040c0}, 0x8895)
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETCHAIN(r1, &(0x7f0000000580)={0x0, 0xfffffff5, &(0x7f0000000200)={0x0}, 0xb, 0x6000000}, 0x0)

11:39:33 executing program 2:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc0100002)
r2 = semget$private(0x0, 0x3, 0x0)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semop(r2, 0x0, 0x0)
semctl$IPC_RMID(r2, 0x0, 0x0)
semget$private(0x0, 0x20000000102, 0x0)
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @dev, 0xc}, @in={0x2, 0x0, @loopback}], 0x2c)

11:39:33 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}}, 0x3000000)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:39:33 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb9", 0x8)
recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)

[ 2000.828001][ T6259] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
11:39:33 executing program 2:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc0100002)
r2 = semget$private(0x0, 0x3, 0x0)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semop(r2, &(0x7f0000000100), 0x2d)
semctl$IPC_RMID(0x0, 0x0, 0x0)
semget$private(0x0, 0x20000000102, 0x0)
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @dev, 0xc}, @in={0x2, 0x0, @loopback}], 0x2c)

11:39:33 executing program 3:
ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000500)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10018, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x6, 0xffffffffffffffff, 0x1)
ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="7000000000011905030100000800000002000000240001001400010008000100ffffffff08000200acffffe70b0002000500010000000000240002000c00020005000100000000001400010008000100e00000020800020000a3d40008000700000000000c000600a7b1f832ce37f750b4af8a2fb6374949"], 0x70}}, 0x0)
r0 = socket(0x0, 0x0, 0x0)
ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40040c0}, 0x8895)
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETCHAIN(r1, &(0x7f0000000580)={0x0, 0xfffffff5, &(0x7f0000000200)={0x0}, 0xb, 0x6000000}, 0x0)

11:39:33 executing program 0:
syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0)
syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xff000000}, 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xbd, 0x970, 0x1, 0x5})
socket$nl_route(0x10, 0x3, 0x0)

11:39:33 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}}, 0x4000000)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

[ 2001.180444][ T6291] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
11:39:34 executing program 5:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
close(r4)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732})
r6 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@multicast, @multicast, @val={@void}, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @private=0xa010101}, {0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x2e)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8)
splice(r0, 0x0, r4, 0x0, 0x10005, 0x86ddffff)

11:39:34 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}}, 0x5000000)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:39:34 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb9", 0x8)
recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)

11:39:34 executing program 3:
ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000500)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10018, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x6, 0xffffffffffffffff, 0x1)
ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="7000000000011905030100000800000002000000240001001400010008000100ffffffff08000200acffffe70b0002000500010000000000240002000c00020005000100000000001400010008000100e00000020800020000a3d40008000700000000000c000600a7b1f832ce37f750b4af8a2fb6374949"], 0x70}}, 0x0)
r0 = socket(0x0, 0x0, 0x0)
ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40040c0}, 0x8895)
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETCHAIN(r1, &(0x7f0000000580)={0x0, 0xfffffff5, &(0x7f0000000200)={0x0}, 0xb, 0x6000000}, 0x0)

11:39:34 executing program 2:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc0100002)
r2 = semget$private(0x0, 0x3, 0x0)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semop(r2, &(0x7f0000000100), 0x2d)
semctl$IPC_RMID(0x0, 0x0, 0x0)
semget$private(0x0, 0x20000000102, 0x0)
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @dev, 0xc}, @in={0x2, 0x0, @loopback}], 0x2c)

11:39:34 executing program 0:
syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0)
syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1000000000000}, 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xbd, 0x970, 0x1, 0x5})
socket$nl_route(0x10, 0x3, 0x0)

[ 2002.033598][ T6312] futex_atomic_op_inuser: 3 callbacks suppressed
[ 2002.033608][ T6312] futex_wake_op: syz-executor.2 tries to shift op by 256; fix this program
11:39:34 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb9", 0x8)
recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)

11:39:34 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}}, 0x8000000)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

[ 2002.133065][ T6320] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
11:39:35 executing program 3:
prlimit64(0x0, 0x7, &(0x7f0000000080), 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x79, 0x11, 0xb8}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)

11:39:35 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992", 0xc)
recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)

11:39:35 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}}, 0x9000000)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:39:35 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992", 0xc)
recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)

11:39:35 executing program 5:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
close(r4)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732})
r6 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@multicast, @multicast, @val={@void}, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @private=0xa010101}, {0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x2e)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8)
splice(r0, 0x0, r4, 0x0, 0x10005, 0x88470000)

11:39:35 executing program 3:
prlimit64(0x0, 0x7, &(0x7f0000000080), 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x79, 0x11, 0xb8}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)

11:39:35 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992", 0xc)
recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)

11:39:35 executing program 0:
syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0)
syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x100000000000000}, 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xbd, 0x970, 0x1, 0x5})
socket$nl_route(0x10, 0x3, 0x0)

11:39:35 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}}, 0xe000000)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:39:35 executing program 2:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc0100002)
r2 = semget$private(0x0, 0x3, 0x0)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semop(r2, &(0x7f0000000100), 0x2d)
semctl$IPC_RMID(0x0, 0x0, 0x0)
semget$private(0x0, 0x20000000102, 0x0)
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @dev, 0xc}, @in={0x2, 0x0, @loopback}], 0x2c)

11:39:36 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea54", 0xe)
recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)

11:39:36 executing program 3:
prlimit64(0x0, 0x7, &(0x7f0000000080), 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x79, 0x11, 0xb8}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)

11:39:36 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}}, 0xf000000)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

[ 2003.463340][ T6377] futex_wake_op: syz-executor.2 tries to shift op by 256; fix this program
11:39:36 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea54", 0xe)
recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)

11:39:36 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}}, 0x3f000000)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:39:36 executing program 3:
prlimit64(0x0, 0x7, &(0x7f0000000080), 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x79, 0x11, 0xb8}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)

11:39:37 executing program 5:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
close(r4)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732})
r6 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@multicast, @multicast, @val={@void}, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @private=0xa010101}, {0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x2e)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8)
splice(r0, 0x0, r4, 0x0, 0x10005, 0x88480000)

11:39:37 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea54", 0xe)
recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)

11:39:37 executing program 0:
syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0)
syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x800000000000000}, 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xbd, 0x970, 0x1, 0x5})
socket$nl_route(0x10, 0x3, 0x0)

11:39:37 executing program 3:
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x79, 0x11, 0xb8}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)

11:39:37 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}}, 0x40000000)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:39:37 executing program 2:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc0100002)
r2 = semget$private(0x0, 0x3, 0x0)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semop(r2, &(0x7f0000000100), 0x2d)
semctl$IPC_RMID(r2, 0x0, 0x0)
semget$private(0x0, 0x0, 0x0)
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @dev, 0xc}, @in={0x2, 0x0, @loopback}], 0x2c)

11:39:37 executing program 3:
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x79, 0x11, 0xb8}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)

11:39:37 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400", 0xf)
recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)

[ 2004.580408][ T6415] futex_wake_op: syz-executor.2 tries to shift op by 256; fix this program
11:39:37 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}}, 0x60000000)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:39:37 executing program 2:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc0100002)
r2 = semget$private(0x0, 0x3, 0x0)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semop(r2, &(0x7f0000000100), 0x2d)
semctl$IPC_RMID(r2, 0x0, 0x0)
semget$private(0x0, 0x0, 0x0)
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @dev, 0xc}, @in={0x2, 0x0, @loopback}], 0x2c)

11:39:37 executing program 3:
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x79, 0x11, 0xb8}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)

11:39:37 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400", 0xf)
recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)

[ 2004.976613][ T6440] futex_wake_op: syz-executor.2 tries to shift op by 256; fix this program
11:39:38 executing program 5:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
close(r4)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732})
r6 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@multicast, @multicast, @val={@void}, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @private=0xa010101}, {0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x2e)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8)
splice(r0, 0x0, r4, 0x0, 0x10005, 0x88640000)

11:39:38 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}}, 0x9effffff)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:39:38 executing program 3:
prlimit64(0x0, 0x0, &(0x7f0000000080), 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x79, 0x11, 0xb8}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)

11:39:38 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400", 0xf)
recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)

11:39:38 executing program 2:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc0100002)
r2 = semget$private(0x0, 0x3, 0x0)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semop(r2, &(0x7f0000000100), 0x2d)
semctl$IPC_RMID(r2, 0x0, 0x0)
semget$private(0x0, 0x0, 0x0)
r3 = socket$inet6_sctp(0xa, 0x0, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @dev, 0xc}, @in={0x2, 0x0, @loopback}], 0x2c)

11:39:38 executing program 0:
syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0)
syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x900000000000000}, 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xbd, 0x970, 0x1, 0x5})
socket$nl_route(0x10, 0x3, 0x0)

[ 2005.572547][ T6458] futex_wake_op: syz-executor.2 tries to shift op by 256; fix this program
11:39:38 executing program 3:
prlimit64(0x0, 0x0, &(0x7f0000000080), 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x79, 0x11, 0xb8}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)

11:39:38 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58)
accept4(r0, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10)
recvmmsg(0xffffffffffffffff, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)

11:39:38 executing program 2:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc0100002)
r2 = semget$private(0x0, 0x3, 0x0)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semop(r2, &(0x7f0000000100), 0x2d)
semctl$IPC_RMID(r2, 0x0, 0x0)
semget$private(0x0, 0x0, 0x0)
r3 = socket$inet6_sctp(0xa, 0x0, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @dev, 0xc}, @in={0x2, 0x0, @loopback}], 0x2c)

11:39:38 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}}, 0xf0ffffff)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:39:38 executing program 3:
prlimit64(0x0, 0x0, &(0x7f0000000080), 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x79, 0x11, 0xb8}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)

11:39:38 executing program 2:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc0100002)
r2 = semget$private(0x0, 0x3, 0x0)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semop(r2, &(0x7f0000000100), 0x2d)
semctl$IPC_RMID(r2, 0x0, 0x0)
semget$private(0x0, 0x0, 0x0)
r3 = socket$inet6_sctp(0xa, 0x0, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @dev, 0xc}, @in={0x2, 0x0, @loopback}], 0x2c)

[ 2005.914026][ T6486] futex_wake_op: syz-executor.2 tries to shift op by 256; fix this program
[ 2006.080298][ T6493] futex_wake_op: syz-executor.2 tries to shift op by 256; fix this program
11:39:39 executing program 5:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
close(r4)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732})
r6 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@multicast, @multicast, @val={@void}, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @private=0xa010101}, {0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x2e)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8)
splice(r0, 0x0, r4, 0x0, 0x10005, 0x88a8ffff)

11:39:39 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}}, 0xfb1c0000)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:39:39 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58)
accept4(r0, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10)
recvmmsg(0xffffffffffffffff, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)

11:39:39 executing program 3:
prlimit64(0x0, 0x7, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x79, 0x11, 0xb8}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)

11:39:39 executing program 2:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc0100002)
r2 = semget$private(0x0, 0x3, 0x0)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semop(r2, &(0x7f0000000100), 0x2d)
semctl$IPC_RMID(r2, 0x0, 0x0)
semget$private(0x0, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @dev, 0xc}, @in={0x2, 0x0, @loopback}], 0x2c)

11:39:39 executing program 0:
syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0)
syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xbd, 0x970, 0x1, 0x5})
socket$nl_route(0x10, 0x3, 0x0)

[ 2006.709690][ T6517] futex_wake_op: syz-executor.2 tries to shift op by 256; fix this program
11:39:39 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}}, 0xfffff000)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:39:39 executing program 3:
prlimit64(0x0, 0x7, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x79, 0x11, 0xb8}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)

11:39:39 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58)
accept4(r0, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10)
recvmmsg(0xffffffffffffffff, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)

11:39:39 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10)
recvmmsg(r1, 0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)

11:39:39 executing program 2:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc0100002)
r2 = semget$private(0x0, 0x3, 0x0)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semop(r2, &(0x7f0000000100), 0x2d)
semctl$IPC_RMID(r2, 0x0, 0x0)
semget$private(0x0, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @dev, 0xc}, @in={0x2, 0x0, @loopback}], 0x2c)

11:39:39 executing program 3:
prlimit64(0x0, 0x7, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x79, 0x11, 0xb8}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)

[ 2007.050825][ T6544] futex_wake_op: syz-executor.2 tries to shift op by 256; fix this program
11:39:40 executing program 5:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
close(r4)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732})
r6 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@multicast, @multicast, @val={@void}, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @private=0xa010101}, {0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x2e)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8)
splice(r0, 0x0, r4, 0x0, 0x10005, 0x88caffff)

11:39:40 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10)
recvmmsg(r1, 0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)

11:39:40 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}}, 0xffffff7f)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:39:40 executing program 2:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc0100002)
r2 = semget$private(0x0, 0x3, 0x0)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semop(r2, &(0x7f0000000100), 0x2d)
semctl$IPC_RMID(r2, 0x0, 0x0)
semget$private(0x0, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @dev, 0xc}, @in={0x2, 0x0, @loopback}], 0x2c)

11:39:40 executing program 3:
prlimit64(0x0, 0x7, &(0x7f0000000080), 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

11:39:40 executing program 0:
syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0)
syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x6400000000000000}, 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xbd, 0x970, 0x1, 0x5})
socket$nl_route(0x10, 0x3, 0x0)

11:39:40 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10)
recvmmsg(r1, 0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)

[ 2007.747550][ T6567] futex_wake_op: syz-executor.2 tries to shift op by 256; fix this program
11:39:40 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}}, 0xffffff9e)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:39:40 executing program 3:
prlimit64(0x0, 0x7, &(0x7f0000000080), 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

11:39:40 executing program 2:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc0100002)
r2 = semget$private(0x0, 0x3, 0x0)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semop(r2, &(0x7f0000000100), 0x2d)
semctl$IPC_RMID(r2, 0x0, 0x0)
semget$private(0x0, 0x0, 0x0)
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, 0x0, 0x0)

11:39:40 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10)
recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)

[ 2008.030962][ T6594] futex_wake_op: syz-executor.2 tries to shift op by 256; fix this program
11:39:40 executing program 3:
prlimit64(0x0, 0x7, &(0x7f0000000080), 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

11:39:41 executing program 5:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
close(r4)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732})
r6 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@multicast, @multicast, @val={@void}, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @private=0xa010101}, {0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x2e)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8)
splice(r0, 0x0, r4, 0x0, 0x10005, 0x89060000)

11:39:41 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}}, 0xfffffff0)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:39:41 executing program 2:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc0100002)
r2 = semget$private(0x0, 0x3, 0x0)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semop(r2, &(0x7f0000000100), 0x2d)
semctl$IPC_RMID(r2, 0x0, 0x0)
semget$private(0x0, 0x0, 0x0)
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, 0x0, 0x0)

11:39:41 executing program 3:
prlimit64(0x0, 0x7, &(0x7f0000000080), 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x79, 0x11, 0xb8}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)

11:39:41 executing program 0:
syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0)
syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x6a07000000000000}, 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xbd, 0x970, 0x1, 0x5})
socket$nl_route(0x10, 0x3, 0x0)

11:39:41 executing program 2:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc0100002)
r2 = semget$private(0x0, 0x3, 0x0)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semop(r2, &(0x7f0000000100), 0x2d)
semctl$IPC_RMID(r2, 0x0, 0x0)
semget$private(0x0, 0x0, 0x0)
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, 0x0, 0x0)

[ 2009.036547][ T6617] futex_wake_op: syz-executor.2 tries to shift op by 256; fix this program
11:39:41 executing program 3:
prlimit64(0x0, 0x7, &(0x7f0000000080), 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x79, 0x11, 0xb8}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)

11:39:41 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}}, 0x3000000000000)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:39:41 executing program 3:
prlimit64(0x0, 0x7, &(0x7f0000000080), 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x79, 0x11, 0xb8}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)

[ 2009.305135][ T6643] futex_wake_op: syz-executor.2 tries to shift op by 256; fix this program
11:39:42 executing program 3:
prlimit64(0x0, 0x7, &(0x7f0000000080), 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)

11:39:43 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10)
recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)

11:39:43 executing program 2:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc0100002)
r2 = semget$private(0x0, 0x3, 0x0)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semop(r2, &(0x7f0000000100), 0x2d)
semctl$IPC_RMID(r2, 0x0, 0x0)
semget$private(0x0, 0x0, 0x0)
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @dev, 0xc}], 0x1c)

11:39:43 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}}, 0x40030000000000)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:39:43 executing program 3:
prlimit64(0x0, 0x7, &(0x7f0000000080), 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)

11:39:43 executing program 0:
syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0)
syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xff00000000000000}, 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xbd, 0x970, 0x1, 0x5})
socket$nl_route(0x10, 0x3, 0x0)

11:39:43 executing program 5:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
close(r4)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732})
r6 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@multicast, @multicast, @val={@void}, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @private=0xa010101}, {0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x2e)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8)
splice(r0, 0x0, r4, 0x0, 0x10005, 0x894f0000)

11:39:43 executing program 2:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc0100002)
r2 = semget$private(0x0, 0x3, 0x0)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semop(r2, &(0x7f0000000100), 0x2d)
semctl$IPC_RMID(r2, 0x0, 0x0)
semget$private(0x0, 0x0, 0x0)
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000140), 0x0)

[ 2010.895897][ T6668] futex_wake_op: syz-executor.2 tries to shift op by 256; fix this program
11:39:43 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}}, 0xf0ffffffffffff)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:39:43 executing program 3:
prlimit64(0x0, 0x7, &(0x7f0000000080), 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)

[ 2011.083487][ T6690] futex_wake_op: syz-executor.2 tries to shift op by 256; fix this program
11:39:43 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}}, 0x100000000000000)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:39:43 executing program 2:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc0100002)
r2 = semget$private(0x0, 0x3, 0x0)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semop(r2, &(0x7f0000000100), 0x2d)
semctl$IPC_RMID(r2, 0x0, 0x0)
semget$private(0x0, 0x0, 0x0)
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000140), 0x0)

11:39:43 executing program 3:
prlimit64(0x0, 0x7, &(0x7f0000000080), 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)

[ 2011.410357][ T6705] futex_wake_op: syz-executor.2 tries to shift op by 256; fix this program
11:39:45 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10)
recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)

11:39:45 executing program 2:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc0100002)
r2 = semget$private(0x0, 0x3, 0x0)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semop(r2, &(0x7f0000000100), 0x2d)
semctl$IPC_RMID(r2, 0x0, 0x0)
semget$private(0x0, 0x0, 0x0)
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000140), 0x0)

11:39:45 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}}, 0x200000000000000)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:39:45 executing program 3:
prlimit64(0x0, 0x7, &(0x7f0000000080), 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)

11:39:45 executing program 0:
syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0)
syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xbd, 0x970, 0x1, 0x5})
socket$nl_route(0x10, 0x3, 0x0)

11:39:45 executing program 5:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
close(r4)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732})
r6 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@multicast, @multicast, @val={@void}, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @private=0xa010101}, {0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x2e)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8)
splice(r0, 0x0, r4, 0x0, 0x10005, 0xe0000000)

11:39:45 executing program 3:
prlimit64(0x0, 0x7, &(0x7f0000000080), 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)

[ 2013.067816][ T6736] futex_wake_op: syz-executor.2 tries to shift op by 256; fix this program
11:39:45 executing program 2:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc0100002)
r2 = semget$private(0x0, 0x3, 0x0)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semop(r2, &(0x7f0000000100), 0x2d)
semctl$IPC_RMID(r2, 0x0, 0x0)
semget$private(0x0, 0x0, 0x0)
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @dev}], 0x1c)

11:39:45 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}}, 0x300000000000000)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:39:46 executing program 3:
prlimit64(0x0, 0x7, &(0x7f0000000080), 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x79, 0x11, 0xb8}]}, 0x0, 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)

11:39:46 executing program 3:
prlimit64(0x0, 0x7, &(0x7f0000000080), 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x79, 0x11, 0xb8}]}, 0x0, 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)

11:39:46 executing program 2:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc0100002)
r2 = semget$private(0x0, 0x3, 0x0)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semop(r2, &(0x7f0000000100), 0x2d)
semctl$IPC_RMID(r2, 0x0, 0x0)
semget$private(0x0, 0x0, 0x0)
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @dev}], 0x1c)

[ 2013.392891][ T6762] futex_wake_op: syz-executor.2 tries to shift op by 256; fix this program
[ 2013.557268][ T6774] futex_wake_op: syz-executor.2 tries to shift op by 256; fix this program
11:39:47 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10)
recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil)

11:39:47 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}}, 0x400000000000000)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:39:47 executing program 3:
prlimit64(0x0, 0x7, &(0x7f0000000080), 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x79, 0x11, 0xb8}]}, 0x0, 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)

11:39:47 executing program 2:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc0100002)
r2 = semget$private(0x0, 0x3, 0x0)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semop(r2, &(0x7f0000000100), 0x2d)
semctl$IPC_RMID(r2, 0x0, 0x0)
semget$private(0x0, 0x0, 0x0)
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @dev}], 0x1c)

11:39:47 executing program 0:
syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0)
syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xbd, 0x970, 0x1, 0x5})
socket$nl_route(0x10, 0x3, 0x0)

11:39:47 executing program 5:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
close(r4)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732})
r6 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@multicast, @multicast, @val={@void}, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @private=0xa010101}, {0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x2e)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8)
splice(r0, 0x0, r4, 0x0, 0x10005, 0xee0f0000)

[ 2015.067842][ T6797] futex_wake_op: syz-executor.2 tries to shift op by 256; fix this program
11:39:47 executing program 3:
prlimit64(0x0, 0x7, &(0x7f0000000080), 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x79, 0x11, 0xb8}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)

11:39:47 executing program 2:
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
socket(0x0, 0x0, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="7000000000011905030100000800000002000000240001001400010008000100ffffffff08000200acffffe70b0002000500010000000000240002000c00020005000100000000001400010008000100e00000020800020000a3d40008000700000000000c000600a7b1f832ce37f750b4af8a2fb6374949cabe9455b4ffd5138a5a4e763953b41da6619fc505e1825842fef3369c95501048640bc00afebda40d2e013dadda8b9df8c62a82670959e776c5b90607061ee7cfe13840262845b073e333d7f83e2a6a751f435d94ef6d02f0a5ac490f06d9a44ba90207b413f7b52c2c0e7093810000000000ff7f0000000000"], 0x70}, 0x1, 0x0, 0x0, 0x11}, 0x0)
r0 = socket(0x0, 0x0, 0x0)
ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0}, 0x8895)
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETCHAIN(r1, &(0x7f0000000580)={0x0, 0xfffffff5, &(0x7f0000000200)={0x0}, 0xb, 0x6000000}, 0x0)

11:39:48 executing program 3:
prlimit64(0x0, 0x7, &(0x7f0000000080), 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x79, 0x11, 0xb8}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)

[ 2015.379096][ T6816] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
11:39:48 executing program 2:
socketpair$unix(0x1, 0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x4000091005d7d, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
recvmmsg(0xffffffffffffffff, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000001140)=[{&(0x7f00000003c0)=""/150, 0x96}], 0x1}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='syscall\x00')
exit(0x0)
setfsgid(0xee01)
preadv(r0, &(0x7f0000000500), 0x37d, 0x0, 0x0)

11:39:48 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}}, 0x500000000000000)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:39:48 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}}, 0x800000000000000)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:39:49 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10)
recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil)

11:39:49 executing program 3:
prlimit64(0x0, 0x7, &(0x7f0000000080), 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x79, 0x11, 0xb8}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)

11:39:49 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}}, 0x900000000000000)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:39:49 executing program 0:
syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0)
syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xbd, 0x970, 0x1, 0x5})
socket$nl_route(0x10, 0x3, 0x0)

11:39:49 executing program 5:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
close(r4)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732})
r6 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@multicast, @multicast, @val={@void}, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @private=0xa010101}, {0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x2e)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8)
splice(r0, 0x0, r4, 0x0, 0x10005, 0xfc0f0000)

11:39:49 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000380)=ANY=[@ANYBLOB="03000000000020c308000080020000090400000000000000f6ffffff0000000001"])

11:39:49 executing program 3:
prlimit64(0x0, 0x7, &(0x7f0000000080), 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x79, 0x11, 0xb8}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)

11:39:50 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}}, 0xe00000000000000)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:39:50 executing program 3:
prlimit64(0x0, 0x7, &(0x7f0000000080), 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x79, 0x11, 0xb8}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)

11:39:50 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f00000001c0)="0f8c0000ab66b98c0400000f20e06635000040000f22e066ba008000000f22a72e0fc7b72106f2260f0d8c00880f32e6000f01c5dad866b9800000c00f326635002000000f30", 0x46}], 0x1, 0x44, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f000001d000)={0x1, 0x9a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000380)=ANY=[@ANYBLOB="03000000000020c3067d3100020000090400000000000000f6ffffff0000000001000000000000fffffffffffffff3100000f2ffff0700000a0000007218"])
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0xf1, 0x0, 0x0, 0x0, 0x20000004cb]})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

11:39:50 executing program 3:
prlimit64(0x0, 0x7, &(0x7f0000000080), 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x79, 0x11, 0xb8}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)

11:39:50 executing program 3:
setitimer(0x1, 0x0, 0x0)
perf_event_open(&(0x7f00000005c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_open_procfs(0x0, 0x0)
add_key(0x0, 0x0, 0x0, 0x0, 0x0)
add_key(0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x2e0080, 0x0)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, 0x0, 0x0, 0x0)
ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402)
r1 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r1, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10)
sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0}, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f00000001c0), 0x330bde9fb9c845f, 0x0)

11:39:52 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10)
recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil)

11:39:52 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}}, 0xf00000000000000)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:39:52 executing program 2:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x2005000, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mount$bpf(0x20000000, &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0xd800, 0x0)
mount$bpf(0x20000000, &(0x7f0000000200)='./file0/file0/file0\x00', 0x0, 0x5890, 0x0)
getpid()
syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f0000000280)='./file0/file0/file0\x00', 0x2, 0x8, &(0x7f0000001940)=[{&(0x7f0000000400)="c67876d4042d1b99974e8df35d435038ad1f2325f62a25026b1e966f5f01cfd6742c86d16ec345cb87307cb3259c56a47270789f21f9720734d6f561e959dc95390116ef3401d06d82ffa5b03f3c3e324b0d5a37b61dbdedf3c40e547a1df8286e01815732449a1c4a1a1d956dd905efdd728c78bd185c4d118ce94c5d0aaf19b849e93ce627fd7e402d05f895240416675292333c1a1ed4dfe3a62671a1150a059d3dd08332dc63d90a1ed0b1af74bf306d28cba3bb63bc0ef9399dd32c6c4586d1c435d657ae8bb44f99f33e3e2713a1135adb1acb5fac02157ee40d5b3b37dc5b8866", 0xe4, 0x4}, {&(0x7f0000000500)="7b89c2ab76647bd6904429ff1eac51561d29f41246df92bd7e6268af830f7179641a44fe889833a7eb0efabe8d5f4f6a3857ddd29cad6f04f59bcab32a62022d96c8b905461bfb9e8ef19669f72597ac98e720547c5d8c1cc48640ad47fac8a2893e2e7c78ff3bf7663e839743096391437c120403a5f35222a429c88fce0ad841134776f9336755", 0x88, 0xc1}, {&(0x7f00000002c0)="e5a6df467d7c91a5b59c9e0347db9abe4bc8cb3829f5df20954eadff3eb1e19fccbbb827b762260847f8c0a58ea0fac568c38ddeeb37790f824e25d0126fa53cd6637fec086dcae687405fd222c3361439dd9b11e6c5111260d514df6f9f4840b2bc45ddd810f8", 0x67, 0x9}, {&(0x7f00000006c0), 0x0, 0x24f6}, {&(0x7f0000000780)="8c4ff13ff5ccae86a9d296db2a676c168def279bb74e677338da52e8f98b6604339a3c0537e6c87d69c939095d2905e61587444709d71f3bd85e6a71b0fbb8f25019808310c853095faf2a57d2f6be69ec4e342fc24351", 0x57}, {&(0x7f0000000800)="0a6d4944e809fd42b84065c78bcde82cb78123cb7afe317746d57027dec249c2ba17a6631ca5feb26beba5bba78e0f44d31f36dcc1da430b383f7abdb78f612bed304668e80bd3ba37d275502a41e6168d8ca60e8546e45aaa2f9d", 0x5b, 0x7fffffff}, {&(0x7f0000000880)="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", 0x1000, 0x4}, {&(0x7f0000001880)="83d77f8b3993c7f7157fbba0fa92e5ba502f9c3f08b74a3ebd3fc78dba531ed2604a933d7b879e711a5c6ddac57cb19ff1fe946843f39a11d18e032ab4e4a06b32b6c0aa04cc401f980b22551faced858cfdb8181aa7c5621e3dfc9b06e5a7ce433b47c2a1465223a2591640bc0feabb20ac94306d7b8d28c9b5588a16943b08eb09762c10f8d0652cbfa708b44d23", 0x8f, 0x3}], 0x80000, &(0x7f0000001b80)={[{@shortname_mixed='shortname=mixed'}, {@uni_xlate='uni_xlate=1'}, {@shortname_mixed='shortname=mixed'}, {@nonumtail='nnonumtail=1'}], [{@obj_role={'obj_role', 0x3d, '#'}}, {@fsname={'fsname', 0x3d, '+\x02'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '^:#^.-..'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '-'}}]})
socketpair(0x0, 0x0, 0x0, &(0x7f0000000340)={0x0, 0x0})
umount2(&(0x7f0000000040)='./file0\x00', 0x3)

11:39:52 executing program 0:
syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0)
syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xbd, 0x970, 0x1, 0x5})
socket$nl_route(0x10, 0x3, 0x0)

11:39:52 executing program 3:
setitimer(0x1, 0x0, 0x0)
perf_event_open(&(0x7f00000005c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_open_procfs(0x0, 0x0)
add_key(0x0, 0x0, 0x0, 0x0, 0x0)
add_key(0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x2e0080, 0x0)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, 0x0, 0x0, 0x0)
ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402)
r1 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r1, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10)
sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0}, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f00000001c0), 0x330bde9fb9c845f, 0x0)

11:39:52 executing program 5:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
close(r4)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732})
r6 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@multicast, @multicast, @val={@void}, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @private=0xa010101}, {0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x2e)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8)
splice(r0, 0x0, r4, 0x0, 0x10005, 0xffffa888)

11:39:52 executing program 3:
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
write$snddsp(r0, 0x0, 0x0)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x34, 0x22, 0xf0b, 0x0, 0x0, {}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x4}}]}, 0x34}}, 0x0)

11:39:52 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}}, 0x3f00000000000000)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:39:52 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x44, 0x6, 0x3d0, 0x1e0, 0x1e0, 0x278, 0x98, 0x0, 0x338, 0x338, 0x338, 0x338, 0x338, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00', {}, {}, 0x11}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@empty, @multicast2, 0x0, 0x0, 'veth1_macvtap\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@ipv4={[], [], @remote}}}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_virt_wifi\x00', 'batadv_slave_1\x00'}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x0, "120a"}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x430)

11:39:52 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}}, 0x4000000000000000)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

[ 2020.293225][ T6983] xt_TPROXY: Can be used only with -p tcp or -p udp
11:39:53 executing program 2:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x2005000, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mount$bpf(0x20000000, &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0xd800, 0x0)
mount$bpf(0x20000000, &(0x7f0000000200)='./file0/file0/file0\x00', 0x0, 0x5890, 0x0)
getpid()
syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f0000000280)='./file0/file0/file0\x00', 0x2, 0x8, &(0x7f0000001940)=[{&(0x7f0000000400)="c67876d4042d1b99974e8df35d435038ad1f2325f62a25026b1e966f5f01cfd6742c86d16ec345cb87307cb3259c56a47270789f21f9720734d6f561e959dc95390116ef3401d06d82ffa5b03f3c3e324b0d5a37b61dbdedf3c40e547a1df8286e01815732449a1c4a1a1d956dd905efdd728c78bd185c4d118ce94c5d0aaf19b849e93ce627fd7e402d05f895240416675292333c1a1ed4dfe3a62671a1150a059d3dd08332dc63d90a1ed0b1af74bf306d28cba3bb63bc0ef9399dd32c6c4586d1c435d657ae8bb44f99f33e3e2713a1135adb1acb5fac02157ee40d5b3b37dc5b8866", 0xe4, 0x4}, {&(0x7f0000000500)="7b89c2ab76647bd6904429ff1eac51561d29f41246df92bd7e6268af830f7179641a44fe889833a7eb0efabe8d5f4f6a3857ddd29cad6f04f59bcab32a62022d96c8b905461bfb9e8ef19669f72597ac98e720547c5d8c1cc48640ad47fac8a2893e2e7c78ff3bf7663e839743096391437c120403a5f35222a429c88fce0ad841134776f9336755", 0x88, 0xc1}, {&(0x7f00000002c0)="e5a6df467d7c91a5b59c9e0347db9abe4bc8cb3829f5df20954eadff3eb1e19fccbbb827b762260847f8c0a58ea0fac568c38ddeeb37790f824e25d0126fa53cd6637fec086dcae687405fd222c3361439dd9b11e6c5111260d514df6f9f4840b2bc45ddd810f8", 0x67, 0x9}, {&(0x7f00000006c0), 0x0, 0x24f6}, {&(0x7f0000000780)="8c4ff13ff5ccae86a9d296db2a676c168def279bb74e677338da52e8f98b6604339a3c0537e6c87d69c939095d2905e61587444709d71f3bd85e6a71b0fbb8f25019808310c853095faf2a57d2f6be69ec4e342fc24351", 0x57}, {&(0x7f0000000800)="0a6d4944e809fd42b84065c78bcde82cb78123cb7afe317746d57027dec249c2ba17a6631ca5feb26beba5bba78e0f44d31f36dcc1da430b383f7abdb78f612bed304668e80bd3ba37d275502a41e6168d8ca60e8546e45aaa2f9d", 0x5b, 0x7fffffff}, {&(0x7f0000000880)="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", 0x1000, 0x4}, {&(0x7f0000001880)="83d77f8b3993c7f7157fbba0fa92e5ba502f9c3f08b74a3ebd3fc78dba531ed2604a933d7b879e711a5c6ddac57cb19ff1fe946843f39a11d18e032ab4e4a06b32b6c0aa04cc401f980b22551faced858cfdb8181aa7c5621e3dfc9b06e5a7ce433b47c2a1465223a2591640bc0feabb20ac94306d7b8d28c9b5588a16943b08eb09762c10f8d0652cbfa708b44d23", 0x8f, 0x3}], 0x80000, &(0x7f0000001b80)={[{@shortname_mixed='shortname=mixed'}, {@uni_xlate='uni_xlate=1'}, {@shortname_mixed='shortname=mixed'}, {@nonumtail='nnonumtail=1'}], [{@obj_role={'obj_role', 0x3d, '#'}}, {@fsname={'fsname', 0x3d, '+\x02'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '^:#^.-..'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '-'}}]})
socketpair(0x0, 0x0, 0x0, &(0x7f0000000340)={0x0, 0x0})
umount2(&(0x7f0000000040)='./file0\x00', 0x3)

[ 2020.418423][ T6989] xt_TPROXY: Can be used only with -p tcp or -p udp
11:39:53 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}}, 0x6000000000000000)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:39:54 executing program 5:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
close(r4)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732})
r6 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@multicast, @multicast, @val={@void}, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @private=0xa010101}, {0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x2e)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8)
splice(r0, 0x0, r4, 0x0, 0x10005, 0xffffca88)

11:39:54 executing program 0:
syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0)
syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x76a}, 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xbd, 0x970, 0x1, 0x5})
socket$nl_route(0x10, 0x3, 0x0)

11:39:54 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x44, 0x6, 0x3d0, 0x1e0, 0x1e0, 0x278, 0x98, 0x0, 0x338, 0x338, 0x338, 0x338, 0x338, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00', {}, {}, 0x11}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@empty, @multicast2, 0x0, 0x0, 'veth1_macvtap\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@ipv4={[], [], @remote}}}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_virt_wifi\x00', 'batadv_slave_1\x00'}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x0, "120a"}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x430)

11:39:54 executing program 2:
setitimer(0x1, 0x0, 0x0)
perf_event_open(&(0x7f00000005c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x450800, 0x0)
syz_open_procfs(0x0, 0x0)
add_key(0x0, 0x0, 0x0, 0x0, 0x0)
add_key(0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c00000010001fff0000268f3c872d2b010000003341084781d1d851cf32032204b8690d9b88cc74c5c15baafe4c3b55b2889875a2f57a695a706b91e13197d78f3bd77a9eda8319afd6da799e91e9683d0356dd150e49cb19d9722663643921667003a419b6aae6dbbd9751d39421bb939440bfadd3d3dd489cd3ebd6d636d7cbb92b19fbe5c632f0a1", @ANYRES32=0x0, @ANYBLOB="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"], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0)
setsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x0, 0x0, 0x0)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x2e0080, 0x0)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, 0x0, 0x0, 0x0)
ioctl$SNDCTL_TMR_START(r0, 0x5402)
r1 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r1, &(0x7f00000000c0)={0x2, 0x4e24, @local}, 0x10)
sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0}, 0x0)
dup2(r0, r1)
sendmmsg$alg(0xffffffffffffffff, &(0x7f00000001c0), 0x330bde9fb9c845f, 0x0)

11:39:54 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}}, 0x9effffff00000000)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:39:54 executing program 4:
r0 = socket(0x11, 0x800000003, 0x0)
bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0xc, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}]}}]}, 0x3c}}, 0x0)

[ 2022.306999][ T7017] xt_TPROXY: Can be used only with -p tcp or -p udp
11:39:55 executing program 2:
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x24, 0x22, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0)

11:39:55 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}}, 0xf0ffffff00000000)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:39:55 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x44, 0x6, 0x3d0, 0x1e0, 0x1e0, 0x278, 0x98, 0x0, 0x338, 0x338, 0x338, 0x338, 0x338, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00', {}, {}, 0x11}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@empty, @multicast2, 0x0, 0x0, 'veth1_macvtap\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@ipv4={[], [], @remote}}}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_virt_wifi\x00', 'batadv_slave_1\x00'}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x0, "120a"}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x430)

11:39:55 executing program 4:
r0 = socket(0x11, 0x800000003, 0x0)
bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0xffff}}}, 0x24}}, 0x0)

[ 2022.592670][ T7042] xt_TPROXY: Can be used only with -p tcp or -p udp
11:39:55 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}}, 0xfb1c000000000000)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:39:55 executing program 2:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x2005000, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mount$bpf(0x20000000, &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0xd800, 0x0)
mount$bpf(0x20000000, &(0x7f0000000200)='./file0/file0/file0\x00', 0x0, 0x5890, 0x0)
r0 = geteuid()
syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f0000000280)='./file0/file0/file0\x00', 0x0, 0x8, &(0x7f0000001940)=[{&(0x7f0000000500)="7b89c2ab76647bd6904429ff1eac51561d29f41246df92bd7e6268af830f7179641a44fe889833a7eb0efabe8d5f4f6a3857ddd29cad6f04f59bcab32a62022d96c8b905461bfb9e8ef19669f72597ac98e720547c5d8c1cc48640ad47fac8a2893e2e7c78ff3bf7663e839743096391437c120403a5f35222a429c88fce0ad841134776f9336755d37e9722953717505c0592d72bb067b7af1bf920b8fb81d981be0578008e4f02be77d80bae0d9f5c4568fa587c", 0xb5, 0xc1}, {&(0x7f00000002c0)="e5a6df467d7c91a5b59c9e0347db9abe4bc8cb3829f5df20954eadff3eb1e19fccbbb827b762260847f8c0a58ea0fac568c38ddeeb37790f824e25d0126fa53cd6637fec086dcae687405fd222c3361439dd9b11e6c5111260d514df6f9f4840b2bc45ddd810f8", 0x67, 0x9}, {&(0x7f00000005c0)="93d7e040740597822c8e98a7e431f2e862443a2276749e54f378f2d6ed13488f87822ec64ab8c765f1faa6d9c35eaf26394760a82a9122323695a62ff38b1f93611fbaa78b29d41242f07510fc94591d2e929657ee86cd4bb122c818484dca2c33ae65793842e31deb25ba38c496c463aac6b4cb76f85b36499c2807d8a98d01558ff1e2c2da9a9ab102a53e36bf48468daeb24f9c82a62da38907c2424efd201cc2763a20fc3fa6eb92260dcee29d6325b5dbe036a53d19d252ad0e0cc55c8bc26e881819c3d7d01b6ff283dfe7a20ce127ca6059b1e3029ecba2b68b3feee74f88e3fdd421011273672457c392ae859c41320a8e4a85a6f57f3b2c78cf", 0xfe, 0x7}, {&(0x7f00000006c0)="724a1e97ca891d2c76ac9eb3e270d37fb32cab2440e973c1b0919fea77c31e2fd1b0d6304f0158cb6c1053af2d38a9500d633dca6cd1371eec5dced28a9e7dd11fa46911c85325915b3ba2a3d3991ec1d0275daa7697601ef653e77d7efccfaecb5969f82127beb41300f58e35dbfb42f1482938e6c448295a00bb8841724cb2964cd894d6b8ec8e1857d5fb1e327b", 0x8f, 0x24f6}, {&(0x7f0000000780)="8c4ff13ff5ccae86a9d296db2a676c168def279bb74e677338da52e8f98b6604339a3c0537e6c87d69c939095d2905e61587444709d71f3bd85e6a71b0fbb8f25019808310c853095faf2a57d2f6be69ec4e342fc24351", 0x57}, {&(0x7f0000000800)="0a6d4944e809fd42b84065c78bcde82cb78123cb7afe317746d57027dec249c2ba17a6631ca5feb26beba5bba78e0f44d31f36dcc1da430b383f7abdb78f612bed304668e80bd3ba37d275502a41e6168d8ca60e8546e45aaa2f9d", 0x5b, 0x7fffffff}, {&(0x7f0000000880)="83130e23595354ec431d7c9211dfb52cb7a172444d1f4ce2ebf714d1fca38777bdfc26b409573924dfc087a6d9813903e9e99dded5c8826d3a06ac78adacb9f5b6c5bea4f50398030ffdf6a0d7d7861ee6492e7c99f938cc9baf24773199493c54a0d3fa31855f5e948aac8f4fc9aef94e077b2f41ffc605f141e207b7063ca478260ae372baecda04a9a87043fe80ffcccf1f926f81ade8b7ec9a21f4de85aec46f4fbf83f88925de35d2a4f86d93fe1fc93fa380d112b77499daae88424391539317f44f16f0df1962a23164c7f9ce2e7cfeaf966d8a715e5d1a4e32ba6fbfbfbeae640d4bb2e1e10f52f3d973cd879af29a1e40ddc8f48c57bab659b93ae988d5d556a4c8c767b8174be9cf420db0ea5793c150057794d5b7de2c24b1c92cf0d6d044f424509ce344c381e25052b5af664d33174721a5f517de7304a853c3a267bbbc833ed94ac15f9807b350508c8fd4878ecc52ae0e9b701bedf3bf54041bb5f7fad503f25af35963377726277f1850e3c4425abe4522ddb4078f0b52f06c9bba117c19939dbedecffb5f8c025ad7f347fb3a8554d9d4102662c7d04e723fc19cce19185343c4e253063782cdac497cbdb733bbd2db0dd8c139a92c08cf0357af0820e99a4cc1d2c2df959dc987d95d6a373027755b51ca5e5a23b5e179523f4552b9f51db4c93154d8b71f09a3ee81020002a103dbe5a36a5d6023b7b5919835535ea5a453c2758371377d84b4e7ba4d1c2c15efa52a02d9050176a52956e90affadf5c01e23e4fcb24c5b8d8a0733e209846ee1082b446fb1b128b83ac1822184068c974ce7db2d6c00abb7d80986c265ec206dd26933823c6182cad4a09df8e0e1203ff22c17032dcca8eb0ca58dfa451a22e5de51082b60daff9ee47c3e04ed1b7c7f9d06aa848e88c80f3bd90a7a8fd9ff87cea36a577da71882b81f95983cfed28864d6cbb0fe3a4dee34bb6d3d35c752e5eef3e85a859f81be224d1c77ef3d921a6766ba671003572657d77e87f007e7ef8c8da3da79e6d14242aee341ddf11c017905fa3aa259a4b5ad4971d1b5d366ded5a1635249b63dcece133e4185f98bc6e111b84863caf421d77ed13bb524705d19ec9c240cb37a0ed848ffaf9c321cf40908cc333ecdfa45d4a65598a16c37671e7c3d332f6cbb1a4c49b697f0543650c3177e3848247eb0532d5ba06261ce8124a3a19187263a943faddedd672db38825e9b41d527e6f32b52c335f49e559b515a90a4427de96d5dbe376d2ee696abec92215890db02db44d4bc9721b343c2174b4e51d8836db8bb1a395c7feceb24a482e3c710acef8a4118da624648face123d5f2b9a4bd8f5109eab3671339baacd9485620d2acc700d77231e1b94afbd83c441ac1f71c554893f39290040a9a84ad6a5d9e3906e92b1a36f5de7b6245f6d58a2c5c0172a716f46ee540ebce27aaa3b7f56a89cb84ea174ad1f67441cb67d4b9d2f1f18fd3c4252e2dd95b9ebfbc1eecae7cb9aa7d02e835b236dfc3a87846d3672656f4ae739713eca8529789ec304fd016eb4e765f09ce4bb79a915712356682db986bdb3441eb62aefe07062143992712c804abee7bf9fafa097c1d59b227c3ba1ec82498899e36320c3fa678d9f9a6bd91826b21dc0ec67f565c4b72ea0e91c63b36696775d06d4d79a8cc890950e2511d33edb4953865fab41f3b85b37cb078d38d99cc44ae86870685ce9e0e3bd81f854ca99bf797e4f881361f98fee174b6fbd14aac7c15761efd35c999dee6c8a849c02b91229d6d21690392682817c1da465188a24bafcf31dd4eeaaacca03a2a974e60dcd161ac1b073db3159d8c117a0a0a8aa63834c2c033075b33cd8f21e3f449b62a9ba3b61ee0438e4b4ac2c628638bedc0b0cb769027fbc5227e400d097ffba95bbd09e5a17bb9765f8d94a219cd281c4473480fd1b026583923edaee5a58d8db3b3132717d36f641f0ee0bd33c6431383367ba8972d267026627e5b0287180df83fde37d89f44a6c4f4172dd52a4c9db76a93a6b6d38dac0e8a6846d9eabae7bc94d171cfae4729f12caae26a7758c82d617315cc2868a7616f689903f642c04ef8780ecf6d5f3ae348197ffffd1c22857f6d69d362ecf5e8ba136b8267288698f84688925339573d4dc30451df254cdc34b7656cf01c4eda976488cca83ef5992ff1d333c189300d7fbe59dee826a06ac784c9bf54c2ea8c5ef4ace327d20b611969167b0a2fdf9777e75019ff4a91491d2e33ba297ac73bb6a760ff2e4db707f7a5aaf2f26df29aacaa9d0f7b27119dc9a249d16fa364191682fe2be55113348f443e84127c8d2df3f6dfa0757851b2e1e1ec82b6922b830bbc5d77de4445fbb9e9b2875ad69fb6fac9a5b2f6358ca50c2b868a6f2930d714c52d1823a0aca685b64a41482ba0e2750c43df45c6ee29a7f78070d7b5696c8a54bdaa6e224644265c6e1f4845c159883222b7cc1adb49ed2fab1b0e13d714ddeed61082683efe9445edc02fae5edff74bd9a7b9d090fc696593013a20c3608e30142285cdd9e11599b1198b2ba1015748dc5c59410b3a48b679dab98f283e4957dddf2b91c29701ab7d4af6735ae86ed3aba8b5727e88778f8813b1d4c8bd7e40909ad92bdbb3e68b4f9dbebbe3f0527881a650b6ef02b6c6d78740dc17be3be7d5345ddc04e2ff75bd510e23b902a528fd09366ff84b695105728b6daf5bbd15dad3e92ba3ed5698ffccc544de7545d2e4c103cb05f6c72f79da831ff81df608d224ada09049aef1cd0243e588bd6bb6dffa4140e420ef9487fb68a165c4cf23f1e96cd279a23cce0e53df3bd4774d488784ee81a67dbfcff39c45b96c24d7e434a9d0da131a2725074a5fb5d8cc2b0bc3005d1f20a8923bfcc14edcbce9483d25c461a08d24ceda3542496311ef0b709a8c7a4dfa3b552a65da81328c1169f04bd39f199004b25685e639f4737057c857dafc4d1641056b7ee037eb5c14fcda5512d03b0a77ceff22db4d09121681829270c025070f6a4bf740b90c967a54db442ae5464f1ff48afa981170ea967c95c6bd5afe46cb67c8351213f9af17f6520c24db41d011b57fcd10a16a0527430d2ed91e7a74c11b895329478d7f951da6d1130ebad2fc9b71216c4775baa4c893174e4cbe3e5aebf7c33da5a8fe9f406ae2c44c547473642e189a77f6ce58baafc46662be855b832851c5e60bbfe034abc066c8347d5f6771574e72e56f67ee7c962bde5c7f2046aeaf7773908cec915824e7a00ac6a55fdc7c44edeebf31f58b1d6b8a50ca351c4e4a0cf7b3d09c43c81b09afc1922198c34aae1f438b15438ca817ee7a637e335e7194f91108515f2dd9d9433a4caa86f32cae8e96cb5460d5810ee3603874dd61015cfc106aa04796a5183e99061ca91c64826b5b0eedc331379e6cf08098d66d65b32839ae33ee5a75f14f1c954877e5132b866de11eeaa1fbc2965ac947a13d927fe46a288467d4a80705f92d5b4c6b2711e42b7dd20d9e4d22c9febd89c273f962485f34f68b9dc8752a50a13ecfa948d2605eaaa4c83d74183344a0ddc56aa0a40826518b6d9582ad9105abdbf383f5170ac58104b2196cc331cd2a448fe14cdb6e6a02666fc1a143cb6fa52d1213b0f35cfc4ef8a371526527842ab63ae7d7e5e552b28f55e7758a3e03f206032aa12a48cc2a1de4cb4d098b553e51f18c608f678c6763f9783578f102958aa33ba8d14ad1dd335c232d36f963e3dee582b47a8b4b7f13928599e3af7085064e12a44bbf0dff7611e2221f6539d55b470ff6e6b5f76c77dd0e04d6b8fcf433ee5b539ea89caa05fc4535723f655e9bb4f6c64a16e382def940b4ccfea1d29747c319e088f680a907fa44682c0c0997a743abe01d7aa6d2ad52c93268191eb114bc0b0ad233f6b08c515b2273711b090605bc5ccb1076a0f7d4614f5a0456555d927a420e0d4d94999c6fa12706c6c66546ac3ca5895a9eaa842c7b7d04cac6b6b04d9350290fcbfa870fed010ac99125d550569b5a9b8e6385359fba9cf88fe453814fdbb4ab6d3e194ed748c35e752f55f0883607ad5fc8a531153e08b4a6c348dbd274d7f455e08fa414d47122dc3953b21c61d6be6f8c800bce41c00943bb62c7a1684a7c749eaff1243479a5a154991f9cfe90a9433f2cebd2e1f75a6d1f91bd1629400db0048526f3511b7b289160f04cafb0ed0a33d51f78ad8b10e58ee0a454e0e137e2b37b4f972d3615aff9491f16f0f397c73fac1283023329b2b40cc6163c2c686903e5f03523e9b1f41e797034448167e40b0243aa3f09ba92ee1a3042c9ad2e6142f297f8aa234bf793f0115fac3692b56842a3749a546113328c579067225c673df7a6f6793a8e8c39af1395f385209b69c3fc3a3ea348993b6ea7b1b545ff64cbd79e69e35a7abdf984f789752d401902c1c6dfddf39e52f8246dfa4db70c5f78356863e3684d43870f23493d773e631781d37084799f34f0e9470f19afcf61e1dfe633536b76432a9248adf41adad25c13392f27277fa9ccf6c4676829ad8e0f8c3676271f494cfa7f2124a290a4072939fe18f5e6a61e643a323a1e8de4492e610c19dc906af667435a309f60f4c9684d5efe08b23d64c29e94df23f069a8a962cc78bcd88e71c1aaf27b0ea9a3457708bba932181da050721818d0ee86632a407583109ea46e88b46547254c8b27a2f6be95997dbb92bbadd09a562cdf99afadabd080a4ec0857dd6d750b0df509b9062a0f0f98eca24944b9e5c9e936adedc4e570ac59ac4f9ff7ca72c12be6f6392c27f86d3ab0d75073c70597c3c2dab57162eee6a3ba0398a4601284a756b7e4a5b0e667ad2e03f4d4a374734c4339eb266fd57a4d0bc409413fe26ab53e32e7167ea0cf4bfa5a97abe123619f8818ecaaeb82f2869caeffbd7efa6f1588763340a1747fdcc50d94d55296fc97e68496cd4ed28917c3df7217569411dcfd70ca392f4ddae5d325592fe5c37b1cd5937959719378ad5491fee13a936fcd33a8d59534ad701745ad037fc01bbc1c59a8cb9dfb0dc4ad41ae0140bfc8c9bdf9ba394ab9220e2183334e2d0946295d2e3fa2f18debcbaf2cb5dbdbc3c08eedf41f45c230ae03aa57a0141df4a9a17377f8eeaa3b4df9c08c0b1cb978fd6631ce41af306f257966ec9b69cf39941ff08d28e9d024d11cb93244c761d2733c29792b1d58e5fd4347b7ed90f035c835e00f93af8b9b2a21f53a67b2076996f993e7acfce761ad78c2e74633b1f2f52869190909868062fb4909f3df8e355750a2b88ad9b38ac87591d995d36cb7ccb27c7501ac9ca485dccc204d1db81e8f0e3afafd066a3dd24c284cb3c9b9267044e03dde50b06c82b85029feb8a1dcd9de55ee31a7b28999baf8572188c249a3bc1d5b43350b0b5ccdb9633f2d25a463ac602382e1cab5f0f46bcca5e8337bdd55ad07271b456395b37917eb77a95ea9a61e26978c01f0959e0813ef5370bbe7b0f7969d81123aed86921c184b0699035345b9ee01aa536d661661dd7d34d249eced95f98125b380c31ed47550cf175fe0ab182f1ea865be4fd74cedf197fc28a01cc329d8c82966a130500ecbfd6640d62aeac99ad99aaac30d9883ac6ced33802f40d571e2570d072411863dfe24b3200e605236307eed9cac205967a794cd1b137d6dfb3ba1706c3095713a337e3c74093459a65d820c320bcf1521c02c91dc5174e624763fb82057ed56f4099c9025821225f5ce513cceb3abc1aa99c43d78666edbdb93347b2056a756df", 0x1000, 0x4}, {&(0x7f0000001880)="83d77f8b3993c7f7157fbba0fa92e5ba502f9c3f08b74a3ebd3fc78dba531ed2604a933d7b879e711a5c6ddac57cb19ff1fe946843f39a11d18e032ab4e4a06b32b6c0aa04cc401f980b22551faced858cfdb8181aa7c5621e3dfc9b06e5a7ce433b47c2a1465223a2591640bc0feabb20ac94306d7b8d28c9b5588a16943b08eb09762c10f8d0652cbfa708b44d23", 0x8f, 0x3}], 0x80000, &(0x7f0000001b80)={[{@shortname_mixed='shortname=mixed'}, {@uni_xlate='uni_xlate=1'}, {@shortname_mixed='shortname=mixed'}, {@nonumtail='nnonumtail=1'}], [{@obj_role={'obj_role', 0x3d, '#'}}, {@fsname={'fsname', 0x3d, '+\x02'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '^:#^.-..'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '-'}}, {@uid_eq={'uid', 0x3d, r0}}]})
socketpair(0x0, 0x0, 0x0, &(0x7f0000000340)={0x0, 0x0})
umount2(&(0x7f0000000040)='./file0\x00', 0x3)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[], 0x50}}, 0x0)

11:39:56 executing program 5:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
close(r4)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732})
r6 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@multicast, @multicast, @val={@void}, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @private=0xa010101}, {0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x2e)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8)
splice(r0, 0x0, r4, 0x0, 0x10005, 0xffffdd86)

11:39:56 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x44, 0x6, 0x3d0, 0x1e0, 0x1e0, 0x278, 0x98, 0x0, 0x338, 0x338, 0x338, 0x338, 0x338, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00', {}, {}, 0x11}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@empty, @multicast2, 0x0, 0x0, 'veth1_macvtap\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@ipv4={[], [], @remote}}}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_virt_wifi\x00', 'batadv_slave_1\x00'}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x0, "120a"}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x430)

11:39:56 executing program 4:
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = socket(0x11, 0x800000003, 0x0)
bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@newqdisc={0x50, 0x24, 0xf0b, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x20, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_NAT={0x8}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x87af}]}}]}, 0x50}}, 0x0)

11:39:56 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}}, 0xffffff7f00000000)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:39:56 executing program 0:
syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0)
syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x900}, 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xbd, 0x970, 0x1, 0x5})
socket$nl_route(0x10, 0x3, 0x0)

11:39:56 executing program 2:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='hugetlbfs\x00', 0x0, 0x0)
chdir(&(0x7f0000000380)='./file0\x00')
mkdir(&(0x7f0000000200)='./bus\x00', 0x0)
r0 = open(&(0x7f0000002800)='./bus\x00', 0x0, 0x0)
mknodat(r0, &(0x7f0000000240)='./bus\x00', 0x1000, 0x0)

[ 2023.709545][ T7081] xt_TPROXY: Can be used only with -p tcp or -p udp
11:39:56 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}}, 0xffffffff00000000)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:39:56 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x44, 0x6, 0x3d0, 0x1e0, 0x1e0, 0x278, 0x98, 0x0, 0x338, 0x338, 0x338, 0x338, 0x338, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00', {}, {}, 0x11}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@empty, @multicast2, 0x0, 0x0, 'veth1_macvtap\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@ipv4={[], [], @remote}}}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_virt_wifi\x00', 'batadv_slave_1\x00'}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x0, "120a"}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x430)

11:39:56 executing program 2:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='hugetlbfs\x00', 0x0, 0x0)
chdir(&(0x7f0000000380)='./file0\x00')
mkdir(&(0x7f0000000200)='./bus\x00', 0x0)
r0 = open(&(0x7f0000002800)='./bus\x00', 0x0, 0x0)
mknodat(r0, &(0x7f0000000240)='./bus\x00', 0x1000, 0x0)

11:39:56 executing program 4:
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = socket(0x11, 0x800000003, 0x0)
bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@newqdisc={0x50, 0x24, 0xf0b, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x20, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_NAT={0x8}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x87af}]}}]}, 0x50}}, 0x0)

11:39:56 executing program 2:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='hugetlbfs\x00', 0x0, 0x0)
chdir(&(0x7f0000000380)='./file0\x00')
mkdir(&(0x7f0000000200)='./bus\x00', 0x0)
r0 = open(&(0x7f0000002800)='./bus\x00', 0x0, 0x0)
mknodat(r0, &(0x7f0000000240)='./bus\x00', 0x1000, 0x0)

11:39:56 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x44, 0x6, 0x3d0, 0x1e0, 0x1e0, 0x278, 0x98, 0x0, 0x338, 0x338, 0x338, 0x338, 0x338, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00', {}, {}, 0x11}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@empty, @multicast2, 0x0, 0x0, 'veth1_macvtap\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@ipv4={[], [], @remote}}}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_virt_wifi\x00', 'batadv_slave_1\x00'}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x0, "120a"}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x430)

11:39:57 executing program 5:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
close(r4)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732})
r6 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@multicast, @multicast, @val={@void}, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @private=0xa010101}, {0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x2e)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8)
splice(r0, 0x0, r4, 0x0, 0x10005, 0x100000000000000)

11:39:57 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}}, 0xfffffffffffff000)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:39:57 executing program 4:
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe)
add_key(&(0x7f0000000140)='big_key\x00', &(0x7f0000000280)={'syz', 0x2}, &(0x7f00000008c0)="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", 0x8b1, r0)

11:39:57 executing program 2:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='hugetlbfs\x00', 0x0, 0x0)
chdir(&(0x7f0000000380)='./file0\x00')
mkdir(&(0x7f0000000200)='./bus\x00', 0x0)
r0 = open(&(0x7f0000002800)='./bus\x00', 0x0, 0x0)
mknodat(r0, &(0x7f0000000240)='./bus\x00', 0x1000, 0x0)

11:39:57 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x44, 0x6, 0x3d0, 0x1e0, 0x1e0, 0x278, 0x98, 0x0, 0x338, 0x338, 0x338, 0x338, 0x338, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00', {}, {}, 0x11}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@empty, @multicast2, 0x0, 0x0, 'veth1_macvtap\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@ipv4={[], [], @remote}}}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_virt_wifi\x00', 'batadv_slave_1\x00'}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x0, "120a"}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x430)

11:39:57 executing program 0:
syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0)
syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x6400}, 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xbd, 0x970, 0x1, 0x5})
socket$nl_route(0x10, 0x3, 0x0)

11:39:57 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$dupfd(r0, 0x0, r1)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x44, 0x6, 0x3d0, 0x1e0, 0x1e0, 0x278, 0x98, 0x0, 0x338, 0x338, 0x338, 0x338, 0x338, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00', {}, {}, 0x11}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@empty, @multicast2, 0x0, 0x0, 'veth1_macvtap\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@ipv4={[], [], @remote}}}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_virt_wifi\x00', 'batadv_slave_1\x00'}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x0, "120a"}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x430)

11:39:57 executing program 2:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='hugetlbfs\x00', 0x0, 0x0)
chdir(&(0x7f0000000380)='./file0\x00')
mkdir(&(0x7f0000000200)='./bus\x00', 0x0)
mknodat(0xffffffffffffffff, &(0x7f0000000240)='./bus\x00', 0x1000, 0x0)

11:39:57 executing program 4:
creat(&(0x7f0000000300)='./file0\x00', 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
mount(&(0x7f0000000200)=@md0='/dev/md0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f00000005c0)='udf\x00', 0x0, 0x0)

11:39:57 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

[ 2025.008112][ T7149] xt_TPROXY: Can be used only with -p tcp or -p udp
11:39:57 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$dupfd(r0, 0x0, r1)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x44, 0x6, 0x3d0, 0x1e0, 0x1e0, 0x278, 0x98, 0x0, 0x338, 0x338, 0x338, 0x338, 0x338, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00', {}, {}, 0x11}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@empty, @multicast2, 0x0, 0x0, 'veth1_macvtap\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@ipv4={[], [], @remote}}}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_virt_wifi\x00', 'batadv_slave_1\x00'}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x0, "120a"}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x430)

11:39:57 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}}, 0x0)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)
r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor\x00', 0x119000, 0x0)
syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00')
ioctl$PPPOEIOCSFWD(r2, 0x4008b100, &(0x7f0000000100)={0x18, 0x0, {0x0, @dev={[], 0x3f}, 'ip6gretap0\x00'}})

[ 2025.279995][ T7160] UDF-fs: error (device md0): udf_read_tagged: read failed, block=256, location=256
[ 2025.344527][ T7165] xt_TPROXY: Can be used only with -p tcp or -p udp
[ 2025.357405][ T7160] UDF-fs: error (device md0): udf_read_tagged: read failed, block=512, location=512
[ 2025.400994][ T7160] UDF-fs: warning (device md0): udf_load_vrs: No anchor found
[ 2025.410925][ T7160] UDF-fs: Scanning with blocksize 512 failed
[ 2025.433788][ T7160] UDF-fs: error (device md0): udf_read_tagged: read failed, block=256, location=256
[ 2025.444362][ T7160] UDF-fs: error (device md0): udf_read_tagged: read failed, block=512, location=512
[ 2025.454532][ T7160] UDF-fs: warning (device md0): udf_load_vrs: No anchor found
[ 2025.468015][ T7160] UDF-fs: Scanning with blocksize 1024 failed
[ 2025.476169][ T7160] UDF-fs: error (device md0): udf_read_tagged: read failed, block=256, location=256
[ 2025.492019][ T7160] UDF-fs: error (device md0): udf_read_tagged: read failed, block=512, location=512
[ 2025.510193][ T7160] UDF-fs: warning (device md0): udf_load_vrs: No anchor found
[ 2025.539937][ T7160] UDF-fs: Scanning with blocksize 2048 failed
[ 2025.554410][ T7160] UDF-fs: error (device md0): udf_read_tagged: read failed, block=256, location=256
[ 2025.565855][ T7160] UDF-fs: error (device md0): udf_read_tagged: read failed, block=512, location=512
[ 2025.576232][ T7160] UDF-fs: warning (device md0): udf_load_vrs: No anchor found
[ 2025.584537][ T7160] UDF-fs: Scanning with blocksize 4096 failed
[ 2025.590663][ T7160] UDF-fs: warning (device md0): udf_fill_super: No partition found (1)
[ 2025.628882][ T7170] UDF-fs: error (device md0): udf_read_tagged: read failed, block=256, location=256
[ 2025.639352][ T7170] UDF-fs: error (device md0): udf_read_tagged: read failed, block=512, location=512
[ 2025.650507][ T7170] UDF-fs: warning (device md0): udf_load_vrs: No anchor found
[ 2025.660734][ T7170] UDF-fs: Scanning with blocksize 512 failed
[ 2025.670107][ T7170] UDF-fs: error (device md0): udf_read_tagged: read failed, block=256, location=256
[ 2025.681830][ T7170] UDF-fs: error (device md0): udf_read_tagged: read failed, block=512, location=512
[ 2025.692460][ T7170] UDF-fs: warning (device md0): udf_load_vrs: No anchor found
[ 2025.702107][ T7170] UDF-fs: Scanning with blocksize 1024 failed
[ 2025.708603][ T7170] UDF-fs: error (device md0): udf_read_tagged: read failed, block=256, location=256
[ 2025.719294][ T7170] UDF-fs: error (device md0): udf_read_tagged: read failed, block=512, location=512
[ 2025.729385][ T7170] UDF-fs: warning (device md0): udf_load_vrs: No anchor found
[ 2025.737594][ T7170] UDF-fs: Scanning with blocksize 2048 failed
[ 2025.745855][ T7170] UDF-fs: error (device md0): udf_read_tagged: read failed, block=256, location=256
[ 2025.758627][ T7170] UDF-fs: error (device md0): udf_read_tagged: read failed, block=512, location=512
[ 2025.831243][ T7170] UDF-fs: warning (device md0): udf_load_vrs: No anchor found
[ 2025.843143][ T7170] UDF-fs: Scanning with blocksize 4096 failed
[ 2025.863559][ T7170] UDF-fs: warning (device md0): udf_fill_super: No partition found (1)
11:39:58 executing program 5:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
close(r4)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732})
r6 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@multicast, @multicast, @val={@void}, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @private=0xa010101}, {0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x2e)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8)
splice(r0, 0x0, r4, 0x0, 0x10005, 0x200000000000000)

11:39:58 executing program 2:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='hugetlbfs\x00', 0x0, 0x0)
chdir(&(0x7f0000000380)='./file0\x00')
mkdir(&(0x7f0000000200)='./bus\x00', 0x0)
mknodat(0xffffffffffffffff, &(0x7f0000000240)='./bus\x00', 0x1000, 0x0)

11:39:58 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setrlimit(0x9, &(0x7f00000000c0)={0x9, 0x5})
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}}, 0x0)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:39:58 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$dupfd(r0, 0x0, r1)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x44, 0x6, 0x3d0, 0x1e0, 0x1e0, 0x278, 0x98, 0x0, 0x338, 0x338, 0x338, 0x338, 0x338, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00', {}, {}, 0x11}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@empty, @multicast2, 0x0, 0x0, 'veth1_macvtap\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@ipv4={[], [], @remote}}}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_virt_wifi\x00', 'batadv_slave_1\x00'}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x0, "120a"}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x430)

11:39:58 executing program 0:
syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0)
syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x6a07}, 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xbd, 0x970, 0x1, 0x5})
socket$nl_route(0x10, 0x3, 0x0)

11:39:58 executing program 4:
creat(&(0x7f0000000300)='./file0\x00', 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
mount(&(0x7f0000000200)=@md0='/dev/md0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f00000005c0)='udf\x00', 0x0, 0x0)

[ 2026.126087][ T7185] xt_TPROXY: Can be used only with -p tcp or -p udp
[ 2026.166306][ T7186] UDF-fs: error (device md0): udf_read_tagged: read failed, block=256, location=256
11:39:58 executing program 2:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='hugetlbfs\x00', 0x0, 0x0)
chdir(&(0x7f0000000380)='./file0\x00')
mkdir(&(0x7f0000000200)='./bus\x00', 0x0)
mknodat(0xffffffffffffffff, &(0x7f0000000240)='./bus\x00', 0x1000, 0x0)

[ 2026.201592][ T7186] UDF-fs: error (device md0): udf_read_tagged: read failed, block=512, location=512
11:39:58 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0))
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x44, 0x6, 0x3d0, 0x1e0, 0x1e0, 0x278, 0x98, 0x0, 0x338, 0x338, 0x338, 0x338, 0x338, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00', {}, {}, 0x11}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@empty, @multicast2, 0x0, 0x0, 'veth1_macvtap\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@ipv4={[], [], @remote}}}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_virt_wifi\x00', 'batadv_slave_1\x00'}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x0, "120a"}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x430)

11:39:58 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000001)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00')
sendmsg$NL80211_CMD_GET_SCAN(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x28, r5, 0xab9535e9a6578fc1, 0x0, 0xfffffffd, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x40}}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x28}}, 0x0)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

[ 2026.332597][ T7186] UDF-fs: warning (device md0): udf_load_vrs: No anchor found
[ 2026.420924][ T7186] UDF-fs: Scanning with blocksize 512 failed
[ 2026.465117][ T7205] xt_TPROXY: Can be used only with -p tcp or -p udp
[ 2026.495383][ T7186] UDF-fs: error (device md0): udf_read_tagged: read failed, block=256, location=256
[ 2026.506307][ T7186] UDF-fs: error (device md0): udf_read_tagged: read failed, block=512, location=512
[ 2026.515886][ T7186] UDF-fs: warning (device md0): udf_load_vrs: No anchor found
[ 2026.523561][ T7186] UDF-fs: Scanning with blocksize 1024 failed
[ 2026.530199][ T7186] UDF-fs: error (device md0): udf_read_tagged: read failed, block=256, location=256
[ 2026.540133][ T7186] UDF-fs: error (device md0): udf_read_tagged: read failed, block=512, location=512
11:39:59 executing program 2:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='hugetlbfs\x00', 0x0, 0x0)
chdir(&(0x7f0000000380)='./file0\x00')
r0 = open(&(0x7f0000002800)='./bus\x00', 0x0, 0x0)
mknodat(r0, &(0x7f0000000240)='./bus\x00', 0x1000, 0x0)

11:39:59 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0))
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x44, 0x6, 0x3d0, 0x1e0, 0x1e0, 0x278, 0x98, 0x0, 0x338, 0x338, 0x338, 0x338, 0x338, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00', {}, {}, 0x11}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@empty, @multicast2, 0x0, 0x0, 'veth1_macvtap\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@ipv4={[], [], @remote}}}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_virt_wifi\x00', 'batadv_slave_1\x00'}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x0, "120a"}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x430)

[ 2026.567443][ T7186] UDF-fs: warning (device md0): udf_load_vrs: No anchor found
[ 2026.607507][ T7186] UDF-fs: Scanning with blocksize 2048 failed
[ 2026.617546][ T7186] UDF-fs: error (device md0): udf_read_tagged: read failed, block=256, location=256
[ 2026.635651][ T7186] UDF-fs: error (device md0): udf_read_tagged: read failed, block=512, location=512
11:39:59 executing program 2:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='hugetlbfs\x00', 0x0, 0x0)
chdir(&(0x7f0000000380)='./file0\x00')
r0 = open(&(0x7f0000002800)='./bus\x00', 0x0, 0x0)
mknodat(r0, &(0x7f0000000240)='./bus\x00', 0x1000, 0x0)

[ 2026.661461][ T7186] UDF-fs: warning (device md0): udf_load_vrs: No anchor found
[ 2026.685903][ T7215] xt_TPROXY: Can be used only with -p tcp or -p udp
[ 2026.699705][ T7186] UDF-fs: Scanning with blocksize 4096 failed
[ 2026.718304][ T7186] UDF-fs: warning (device md0): udf_fill_super: No partition found (1)
11:39:59 executing program 5:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
close(r4)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732})
r6 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@multicast, @multicast, @val={@void}, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @private=0xa010101}, {0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x2e)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8)
splice(r0, 0x0, r4, 0x0, 0x10005, 0x300000000000000)

11:39:59 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0))
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x44, 0x6, 0x3d0, 0x1e0, 0x1e0, 0x278, 0x98, 0x0, 0x338, 0x338, 0x338, 0x338, 0x338, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00', {}, {}, 0x11}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@empty, @multicast2, 0x0, 0x0, 'veth1_macvtap\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@ipv4={[], [], @remote}}}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_virt_wifi\x00', 'batadv_slave_1\x00'}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x0, "120a"}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x430)

11:39:59 executing program 4:
creat(&(0x7f0000000300)='./file0\x00', 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
mount(&(0x7f0000000200)=@md0='/dev/md0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f00000005c0)='udf\x00', 0x0, 0x0)

11:39:59 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}}, 0x0)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:39:59 executing program 2:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='hugetlbfs\x00', 0x0, 0x0)
chdir(&(0x7f0000000380)='./file0\x00')
r0 = open(&(0x7f0000002800)='./bus\x00', 0x0, 0x0)
mknodat(r0, &(0x7f0000000240)='./bus\x00', 0x1000, 0x0)

11:39:59 executing program 0:
syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0)
syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xff00}, 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xbd, 0x970, 0x1, 0x5})
socket$nl_route(0x10, 0x3, 0x0)

[ 2027.347483][ T7236] xt_TPROXY: Can be used only with -p tcp or -p udp
11:40:00 executing program 2:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='hugetlbfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000200)='./bus\x00', 0x0)
r0 = open(&(0x7f0000002800)='./bus\x00', 0x0, 0x0)
mknodat(r0, &(0x7f0000000240)='./bus\x00', 0x1000, 0x0)

11:40:00 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="34020400", @ANYRES16=r1, @ANYBLOB="01000000000000000000020000001400020064756d6d7930000000000000000000000900010073797a3200000000"], 0x34}}, 0x0)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

[ 2027.412241][ T7240] UDF-fs: error (device md0): udf_read_tagged: read failed, block=256, location=256
11:40:00 executing program 3:
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x44, 0x6, 0x3d0, 0x1e0, 0x1e0, 0x278, 0x98, 0x0, 0x338, 0x338, 0x338, 0x338, 0x338, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00', {}, {}, 0x11}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@empty, @multicast2, 0x0, 0x0, 'veth1_macvtap\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@ipv4={[], [], @remote}}}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_virt_wifi\x00', 'batadv_slave_1\x00'}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x0, "120a"}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x430)

[ 2027.502451][ T7240] UDF-fs: error (device md0): udf_read_tagged: read failed, block=512, location=512
[ 2027.583670][ T7253] xt_TPROXY: Can be used only with -p tcp or -p udp
[ 2027.613544][ T7240] UDF-fs: warning (device md0): udf_load_vrs: No anchor found
[ 2027.643428][ T7240] UDF-fs: Scanning with blocksize 512 failed
[ 2027.650117][ T7240] UDF-fs: error (device md0): udf_read_tagged: read failed, block=256, location=256
[ 2027.659963][ T7240] UDF-fs: error (device md0): udf_read_tagged: read failed, block=512, location=512
[ 2027.671299][ T7240] UDF-fs: warning (device md0): udf_load_vrs: No anchor found
[ 2027.686553][ T7240] UDF-fs: Scanning with blocksize 1024 failed
11:40:00 executing program 2:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='hugetlbfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000200)='./bus\x00', 0x0)
r0 = open(&(0x7f0000002800)='./bus\x00', 0x0, 0x0)
mknodat(r0, &(0x7f0000000240)='./bus\x00', 0x1000, 0x0)

11:40:00 executing program 3:
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x44, 0x6, 0x3d0, 0x1e0, 0x1e0, 0x278, 0x98, 0x0, 0x338, 0x338, 0x338, 0x338, 0x338, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00', {}, {}, 0x11}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@empty, @multicast2, 0x0, 0x0, 'veth1_macvtap\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@ipv4={[], [], @remote}}}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_virt_wifi\x00', 'batadv_slave_1\x00'}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x0, "120a"}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x430)

[ 2027.693343][ T7240] UDF-fs: error (device md0): udf_read_tagged: read failed, block=256, location=256
[ 2027.711054][ T7240] UDF-fs: error (device md0): udf_read_tagged: read failed, block=512, location=512
11:40:00 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x34}}, 0x0)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

[ 2027.754781][ T7240] UDF-fs: warning (device md0): udf_load_vrs: No anchor found
[ 2027.816742][ T7240] UDF-fs: Scanning with blocksize 2048 failed
[ 2027.852786][ T7240] UDF-fs: error (device md0): udf_read_tagged: read failed, block=256, location=256
[ 2027.862761][ T7240] UDF-fs: error (device md0): udf_read_tagged: read failed, block=512, location=512
[ 2027.867628][ T7266] xt_TPROXY: Can be used only with -p tcp or -p udp
[ 2027.872752][ T7240] UDF-fs: warning (device md0): udf_load_vrs: No anchor found
[ 2027.898136][ T7240] UDF-fs: Scanning with blocksize 4096 failed
[ 2027.915211][ T7240] UDF-fs: warning (device md0): udf_fill_super: No partition found (1)
11:40:01 executing program 5:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
close(r4)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732})
r6 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@multicast, @multicast, @val={@void}, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @private=0xa010101}, {0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x2e)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8)
splice(r0, 0x0, r4, 0x0, 0x10005, 0x400000000000000)

11:40:01 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x401)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r3, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}}, 0x0)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:40:01 executing program 3:
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x44, 0x6, 0x3d0, 0x1e0, 0x1e0, 0x278, 0x98, 0x0, 0x338, 0x338, 0x338, 0x338, 0x338, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00', {}, {}, 0x11}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@empty, @multicast2, 0x0, 0x0, 'veth1_macvtap\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@ipv4={[], [], @remote}}}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_virt_wifi\x00', 'batadv_slave_1\x00'}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x0, "120a"}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x430)

11:40:01 executing program 2:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='hugetlbfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000200)='./bus\x00', 0x0)
r0 = open(&(0x7f0000002800)='./bus\x00', 0x0, 0x0)
mknodat(r0, &(0x7f0000000240)='./bus\x00', 0x1000, 0x0)

11:40:01 executing program 4:
creat(&(0x7f0000000300)='./file0\x00', 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
mount(&(0x7f0000000200)=@md0='/dev/md0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f00000005c0)='udf\x00', 0x0, 0x0)

11:40:01 executing program 0:
syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0)
syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xbd, 0x970, 0x1, 0x5})
socket$nl_route(0x10, 0x3, 0x0)

[ 2028.473366][ T7288] xt_TPROXY: Can be used only with -p tcp or -p udp
[ 2028.517923][ T7290] UDF-fs: error (device md0): udf_read_tagged: read failed, block=256, location=256
11:40:01 executing program 3:
socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x44, 0x6, 0x3d0, 0x1e0, 0x1e0, 0x278, 0x98, 0x0, 0x338, 0x338, 0x338, 0x338, 0x338, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00', {}, {}, 0x11}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@empty, @multicast2, 0x0, 0x0, 'veth1_macvtap\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@ipv4={[], [], @remote}}}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_virt_wifi\x00', 'batadv_slave_1\x00'}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x0, "120a"}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x430)

11:40:01 executing program 2:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
chdir(&(0x7f0000000380)='./file0\x00')
mkdir(&(0x7f0000000200)='./bus\x00', 0x0)
r0 = open(&(0x7f0000002800)='./bus\x00', 0x0, 0x0)
mknodat(r0, &(0x7f0000000240)='./bus\x00', 0x1000, 0x0)

[ 2028.576619][ T7290] UDF-fs: error (device md0): udf_read_tagged: read failed, block=512, location=512
11:40:01 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x2c, r1, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x2c}}, 0x44)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\b', @ANYRES16=r1, @ANYBLOB="0100000000756d6d7930000000000000000000000900010073797a3200000000"], 0x34}}, 0x0)
pipe2$9p(&(0x7f00000000c0), 0x4000)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

[ 2028.684039][ T7290] UDF-fs: warning (device md0): udf_load_vrs: No anchor found
[ 2028.752937][ T7305] xt_TPROXY: Can be used only with -p tcp or -p udp
[ 2028.765593][ T7290] UDF-fs: Scanning with blocksize 512 failed
[ 2028.830442][ T7290] UDF-fs: error (device md0): udf_read_tagged: read failed, block=256, location=256
11:40:01 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000100)={'batadv0\x00'})
ioctl$sock_SIOCGSKNS(r2, 0x894c, &(0x7f00000000c0)=0x20)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$TIOCL_GETMOUSEREPORTING(r4, 0x541c, &(0x7f0000000140))
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:40:01 executing program 3:
socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x44, 0x6, 0x3d0, 0x1e0, 0x1e0, 0x278, 0x98, 0x0, 0x338, 0x338, 0x338, 0x338, 0x338, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00', {}, {}, 0x11}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@empty, @multicast2, 0x0, 0x0, 'veth1_macvtap\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@ipv4={[], [], @remote}}}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_virt_wifi\x00', 'batadv_slave_1\x00'}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x0, "120a"}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x430)

[ 2028.943202][ T7290] UDF-fs: error (device md0): udf_read_tagged: read failed, block=512, location=512
11:40:01 executing program 2:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
chdir(&(0x7f0000000380)='./file0\x00')
mkdir(&(0x7f0000000200)='./bus\x00', 0x0)
r0 = open(&(0x7f0000002800)='./bus\x00', 0x0, 0x0)
mknodat(r0, &(0x7f0000000240)='./bus\x00', 0x1000, 0x0)

[ 2029.019846][ T7290] UDF-fs: warning (device md0): udf_load_vrs: No anchor found
[ 2029.077091][ T7290] UDF-fs: Scanning with blocksize 1024 failed
[ 2029.093506][ T7316] xt_TPROXY: Can be used only with -p tcp or -p udp
[ 2029.112179][ T7290] UDF-fs: error (device md0): udf_read_tagged: read failed, block=256, location=256
[ 2029.180591][ T7290] UDF-fs: error (device md0): udf_read_tagged: read failed, block=512, location=512
[ 2029.228856][ T7290] UDF-fs: warning (device md0): udf_load_vrs: No anchor found
[ 2029.253827][ T7290] UDF-fs: Scanning with blocksize 2048 failed
[ 2029.278547][ T7290] UDF-fs: error (device md0): udf_read_tagged: read failed, block=256, location=256
[ 2029.308055][ T7290] UDF-fs: error (device md0): udf_read_tagged: read failed, block=512, location=512
[ 2029.336275][ T7290] UDF-fs: warning (device md0): udf_load_vrs: No anchor found
[ 2029.363344][ T7290] UDF-fs: Scanning with blocksize 4096 failed
[ 2029.369412][ T7290] UDF-fs: warning (device md0): udf_fill_super: No partition found (1)
11:40:02 executing program 5:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
close(r4)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732})
r6 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@multicast, @multicast, @val={@void}, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @private=0xa010101}, {0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x2e)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8)
splice(r0, 0x0, r4, 0x0, 0x10005, 0x500000000000000)

11:40:02 executing program 3:
socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x44, 0x6, 0x3d0, 0x1e0, 0x1e0, 0x278, 0x98, 0x0, 0x338, 0x338, 0x338, 0x338, 0x338, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00', {}, {}, 0x11}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@empty, @multicast2, 0x0, 0x0, 'veth1_macvtap\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@ipv4={[], [], @remote}}}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_virt_wifi\x00', 'batadv_slave_1\x00'}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x0, "120a"}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x430)

11:40:02 executing program 0:
syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0)
syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xbd, 0x970, 0x1, 0x5})
socket$nl_route(0x10, 0x3, 0x0)

11:40:02 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002060bada700020064756d6d7930000000000000000000000900010073797a3200000000"], 0x34}}, 0x0)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:40:02 executing program 2:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
chdir(&(0x7f0000000380)='./file0\x00')
mkdir(&(0x7f0000000200)='./bus\x00', 0x0)
r0 = open(&(0x7f0000002800)='./bus\x00', 0x0, 0x0)
mknodat(r0, &(0x7f0000000240)='./bus\x00', 0x1000, 0x0)

11:40:02 executing program 4:
creat(&(0x7f0000000300)='./file0\x00', 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
dup(r0)
mount(&(0x7f0000000200)=@md0='/dev/md0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f00000005c0)='udf\x00', 0x0, 0x0)

11:40:02 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x44, 0x6, 0x3d0, 0x1e0, 0x1e0, 0x278, 0x98, 0x0, 0x338, 0x338, 0x338, 0x338, 0x338, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00', {}, {}, 0x11}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@empty, @multicast2, 0x0, 0x0, 'veth1_macvtap\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@ipv4={[], [], @remote}}}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_virt_wifi\x00', 'batadv_slave_1\x00'}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x0, "120a"}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x430)

[ 2029.693412][ T7337] UDF-fs: error (device md0): udf_read_tagged: read failed, block=256, location=256
[ 2029.697636][ T7340] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 2029.730155][ T7337] UDF-fs: error (device md0): udf_read_tagged: read failed, block=512, location=512
[ 2029.767841][ T7343] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 2029.845481][ T7337] UDF-fs: warning (device md0): udf_load_vrs: No anchor found
[ 2029.944175][ T7337] UDF-fs: Scanning with blocksize 512 failed
11:40:02 executing program 2:
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='hugetlbfs\x00', 0x0, 0x0)
chdir(&(0x7f0000000380)='./file0\x00')
mkdir(&(0x7f0000000200)='./bus\x00', 0x0)
r0 = open(&(0x7f0000002800)='./bus\x00', 0x0, 0x0)
mknodat(r0, &(0x7f0000000240)='./bus\x00', 0x1000, 0x0)

[ 2029.995267][ T7337] UDF-fs: error (device md0): udf_read_tagged: read failed, block=256, location=256
[ 2030.005325][ T7337] UDF-fs: error (device md0): udf_read_tagged: read failed, block=512, location=512
[ 2030.015783][ T7337] UDF-fs: warning (device md0): udf_load_vrs: No anchor found
[ 2030.024661][ T7337] UDF-fs: Scanning with blocksize 1024 failed
[ 2030.031600][ T7337] UDF-fs: error (device md0): udf_read_tagged: read failed, block=256, location=256
11:40:02 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f00000001c0)="032fece31d48b01040af994ebe3146b30e200be1d84aa62535cda105c5d9f834653a90e148c115c074a522ed9011abc5e8b6ed27ab4bdd416dc02f4daf29d09b1b199f029e742ac824e611134e47a032d14cb133981c76e5eb48734dc51db680157767c2c4679f169f452dad0053bee764c1e2541211cee377745b1f69c159a2fa184a68fdb346ce7c07c6d9dea5cd1992ebf00e0200e677c380f797012448e96322a84e1bfc172d4aa886638b6182b127a3885ddb7e278636a439c23d359708b2283c6a5686fba11ecec758a0304caee7c56891173c856be330c0bddde84981b0eeae74f8f888871930b4ff8416276e3abf880f2f6e1590a82983380489e94d")
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r3, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}}, 0x0)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:40:02 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x44, 0x6, 0x3d0, 0x1e0, 0x1e0, 0x278, 0x98, 0x0, 0x338, 0x338, 0x338, 0x338, 0x338, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00', {}, {}, 0x11}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@empty, @multicast2, 0x0, 0x0, 'veth1_macvtap\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@ipv4={[], [], @remote}}}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_virt_wifi\x00', 'batadv_slave_1\x00'}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x0, "120a"}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x430)

[ 2030.041522][ T7337] UDF-fs: error (device md0): udf_read_tagged: read failed, block=512, location=512
[ 2030.051708][ T7337] UDF-fs: warning (device md0): udf_load_vrs: No anchor found
[ 2030.059241][ T7337] UDF-fs: Scanning with blocksize 2048 failed
[ 2030.080956][ T7337] UDF-fs: error (device md0): udf_read_tagged: read failed, block=256, location=256
[ 2030.090440][ T7337] UDF-fs: error (device md0): udf_read_tagged: read failed, block=512, location=512
[ 2030.111727][ T7337] UDF-fs: warning (device md0): udf_load_vrs: No anchor found
[ 2030.136174][ T7337] UDF-fs: Scanning with blocksize 4096 failed
11:40:02 executing program 2:
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='hugetlbfs\x00', 0x0, 0x0)
chdir(&(0x7f0000000380)='./file0\x00')
mkdir(&(0x7f0000000200)='./bus\x00', 0x0)
r0 = open(&(0x7f0000002800)='./bus\x00', 0x0, 0x0)
mknodat(r0, &(0x7f0000000240)='./bus\x00', 0x1000, 0x0)

11:40:02 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x44, 0x6, 0x3d0, 0x1e0, 0x1e0, 0x278, 0x98, 0x0, 0x338, 0x338, 0x338, 0x338, 0x338, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00', {}, {}, 0x11}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@empty, @multicast2, 0x0, 0x0, 'veth1_macvtap\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@ipv4={[], [], @remote}}}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_virt_wifi\x00', 'batadv_slave_1\x00'}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x0, "120a"}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x430)

[ 2030.176676][ T7337] UDF-fs: warning (device md0): udf_fill_super: No partition found (1)
11:40:03 executing program 5:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
close(r4)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732})
r6 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@multicast, @multicast, @val={@void}, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @private=0xa010101}, {0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x2e)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8)
splice(r0, 0x0, r4, 0x0, 0x10005, 0x600000000000000)

11:40:03 executing program 2:
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='hugetlbfs\x00', 0x0, 0x0)
chdir(&(0x7f0000000380)='./file0\x00')
mkdir(&(0x7f0000000200)='./bus\x00', 0x0)
r0 = open(&(0x7f0000002800)='./bus\x00', 0x0, 0x0)
mknodat(r0, &(0x7f0000000240)='./bus\x00', 0x1000, 0x0)

11:40:03 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$RTC_VL_CLR(r1, 0x7014)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r3, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}}, 0x0)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:40:03 executing program 4:
creat(&(0x7f0000000300)='./file0\x00', 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
dup(r0)
mount(&(0x7f0000000200)=@md0='/dev/md0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f00000005c0)='udf\x00', 0x0, 0x0)

11:40:03 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x44, 0x6, 0x3d0, 0x1e0, 0x1e0, 0x278, 0x98, 0x0, 0x338, 0x338, 0x338, 0x338, 0x338, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00', {}, {}, 0x11}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@empty, @multicast2, 0x0, 0x0, 'veth1_macvtap\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@ipv4={[], [], @remote}}}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_virt_wifi\x00', 'batadv_slave_1\x00'}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x0, "120a"}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x430)

11:40:03 executing program 0:
syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0)
syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x9000000}, 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xbd, 0x970, 0x1, 0x5})
socket$nl_route(0x10, 0x3, 0x0)

[ 2030.813278][ T7383] tproxy_tg4_check: 4 callbacks suppressed
[ 2030.813341][ T7383] xt_TPROXY: Can be used only with -p tcp or -p udp
[ 2030.849885][ T7386] UDF-fs: error (device md0): udf_read_tagged: read failed, block=256, location=256
11:40:03 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f00000000c0)=0x80, &(0x7f0000000100)=0x4)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}}, 0x0)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:40:03 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x44, 0x6, 0x3d0, 0x1e0, 0x1e0, 0x278, 0x98, 0x0, 0x338, 0x338, 0x338, 0x338, 0x338, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00', {}, {}, 0x11}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@empty, @multicast2, 0x0, 0x0, 'veth1_macvtap\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@ipv4={[], [], @remote}}}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_virt_wifi\x00', 'batadv_slave_1\x00'}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x0, "120a"}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x430)

[ 2030.945367][ T7386] UDF-fs: error (device md0): udf_read_tagged: read failed, block=512, location=512
11:40:03 executing program 2:
mkdir(0x0, 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='hugetlbfs\x00', 0x0, 0x0)
chdir(&(0x7f0000000380)='./file0\x00')
mkdir(&(0x7f0000000200)='./bus\x00', 0x0)
r0 = open(&(0x7f0000002800)='./bus\x00', 0x0, 0x0)
mknodat(r0, &(0x7f0000000240)='./bus\x00', 0x1000, 0x0)

[ 2031.082045][ T7386] UDF-fs: warning (device md0): udf_load_vrs: No anchor found
[ 2031.122047][ T7386] UDF-fs: Scanning with blocksize 512 failed
[ 2031.128640][ T7386] UDF-fs: error (device md0): udf_read_tagged: read failed, block=256, location=256
[ 2031.139350][ T7386] UDF-fs: error (device md0): udf_read_tagged: read failed, block=512, location=512
[ 2031.149126][ T7386] UDF-fs: warning (device md0): udf_load_vrs: No anchor found
[ 2031.153074][ T7397] xt_TPROXY: Can be used only with -p tcp or -p udp
[ 2031.160004][ T7386] UDF-fs: Scanning with blocksize 1024 failed
[ 2031.170123][ T7386] UDF-fs: error (device md0): udf_read_tagged: read failed, block=256, location=256
11:40:03 executing program 2:
mkdir(0x0, 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='hugetlbfs\x00', 0x0, 0x0)
chdir(&(0x7f0000000380)='./file0\x00')
mkdir(&(0x7f0000000200)='./bus\x00', 0x0)
r0 = open(&(0x7f0000002800)='./bus\x00', 0x0, 0x0)
mknodat(r0, &(0x7f0000000240)='./bus\x00', 0x1000, 0x0)

[ 2031.179975][ T7386] UDF-fs: error (device md0): udf_read_tagged: read failed, block=512, location=512
[ 2031.189840][ T7386] UDF-fs: warning (device md0): udf_load_vrs: No anchor found
[ 2031.217233][ T7386] UDF-fs: Scanning with blocksize 2048 failed
[ 2031.224770][ T7386] UDF-fs: error (device md0): udf_read_tagged: read failed, block=256, location=256
[ 2031.235625][ T7386] UDF-fs: error (device md0): udf_read_tagged: read failed, block=512, location=512
11:40:03 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x44, 0x6, 0x3d0, 0x1e0, 0x1e0, 0x278, 0x98, 0x0, 0x338, 0x338, 0x338, 0x338, 0x338, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00', {}, {}, 0x11}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@empty, @multicast2, 0x0, 0x0, 'veth1_macvtap\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@ipv4={[], [], @remote}}}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_virt_wifi\x00', 'batadv_slave_1\x00'}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x0, "120a"}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x430)

[ 2031.274415][ T7386] UDF-fs: warning (device md0): udf_load_vrs: No anchor found
[ 2031.297650][ T7386] UDF-fs: Scanning with blocksize 4096 failed
[ 2031.318927][ T7386] UDF-fs: warning (device md0): udf_fill_super: No partition found (1)
11:40:04 executing program 4:
creat(&(0x7f0000000300)='./file0\x00', 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
dup(r0)
mount(&(0x7f0000000200)=@md0='/dev/md0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f00000005c0)='udf\x00', 0x0, 0x0)

[ 2031.390483][ T7409] xt_TPROXY: Can be used only with -p tcp or -p udp
[ 2031.469182][ T7414] UDF-fs: error (device md0): udf_read_tagged: read failed, block=256, location=256
[ 2031.497803][ T7414] UDF-fs: error (device md0): udf_read_tagged: read failed, block=512, location=512
[ 2031.517281][ T7414] UDF-fs: warning (device md0): udf_load_vrs: No anchor found
[ 2031.526924][ T7414] UDF-fs: Scanning with blocksize 512 failed
[ 2031.539269][ T7414] UDF-fs: error (device md0): udf_read_tagged: read failed, block=256, location=256
[ 2031.550992][ T7414] UDF-fs: error (device md0): udf_read_tagged: read failed, block=512, location=512
[ 2031.566344][ T7414] UDF-fs: warning (device md0): udf_load_vrs: No anchor found
[ 2031.579807][ T7414] UDF-fs: Scanning with blocksize 1024 failed
[ 2031.595705][ T7414] UDF-fs: error (device md0): udf_read_tagged: read failed, block=256, location=256
[ 2031.609261][ T7414] UDF-fs: error (device md0): udf_read_tagged: read failed, block=512, location=512
[ 2031.671111][ T7414] UDF-fs: warning (device md0): udf_load_vrs: No anchor found
[ 2031.723332][ T7414] UDF-fs: Scanning with blocksize 2048 failed
[ 2031.740893][ T7414] UDF-fs: error (device md0): udf_read_tagged: read failed, block=256, location=256
[ 2031.762770][ T7414] UDF-fs: error (device md0): udf_read_tagged: read failed, block=512, location=512
[ 2031.790339][ T7414] UDF-fs: warning (device md0): udf_load_vrs: No anchor found
[ 2031.797812][ T7414] UDF-fs: Scanning with blocksize 4096 failed
[ 2031.830296][ T7414] UDF-fs: warning (device md0): udf_fill_super: No partition found (1)
11:40:04 executing program 5:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
close(r4)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732})
r6 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@multicast, @multicast, @val={@void}, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @private=0xa010101}, {0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x2e)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8)
splice(r0, 0x0, r4, 0x0, 0x10005, 0x700000000000000)

11:40:04 executing program 2:
mkdir(0x0, 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='hugetlbfs\x00', 0x0, 0x0)
chdir(&(0x7f0000000380)='./file0\x00')
mkdir(&(0x7f0000000200)='./bus\x00', 0x0)
r0 = open(&(0x7f0000002800)='./bus\x00', 0x0, 0x0)
mknodat(r0, &(0x7f0000000240)='./bus\x00', 0x1000, 0x0)

11:40:04 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x44, 0x6, 0x3d0, 0x1e0, 0x1e0, 0x278, 0x98, 0x0, 0x338, 0x338, 0x338, 0x338, 0x338, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00', {}, {}, 0x11}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@empty, @multicast2, 0x0, 0x0, 'veth1_macvtap\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@ipv4={[], [], @remote}}}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_virt_wifi\x00', 'batadv_slave_1\x00'}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x0, "120a"}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x430)

11:40:04 executing program 0:
syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0)
syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xbd, 0x970, 0x1, 0x5})
socket$nl_route(0x10, 0x3, 0x0)

11:40:04 executing program 4:
creat(&(0x7f0000000300)='./file0\x00', 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340))
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
mount(&(0x7f0000000200)=@md0='/dev/md0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f00000005c0)='udf\x00', 0x0, 0x0)

[ 2032.171044][ T7431] xt_TPROXY: Can be used only with -p tcp or -p udp
[ 2032.180919][ T7429] UDF-fs: error (device md0): udf_read_tagged: read failed, block=256, location=256
11:40:04 executing program 2:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, 0x0, &(0x7f0000000040)='hugetlbfs\x00', 0x0, 0x0)
chdir(&(0x7f0000000380)='./file0\x00')
mkdir(&(0x7f0000000200)='./bus\x00', 0x0)
r0 = open(&(0x7f0000002800)='./bus\x00', 0x0, 0x0)
mknodat(r0, &(0x7f0000000240)='./bus\x00', 0x1000, 0x0)

11:40:04 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x44, 0x6, 0x3d0, 0x1e0, 0x1e0, 0x278, 0x98, 0x0, 0x338, 0x338, 0x338, 0x338, 0x338, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00', {}, {}, 0x11}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@empty, @multicast2, 0x0, 0x0, 'veth1_macvtap\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@ipv4={[], [], @remote}}}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_virt_wifi\x00', 'batadv_slave_1\x00'}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x0, "120a"}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x430)

[ 2032.232399][ T7429] UDF-fs: error (device md0): udf_read_tagged: read failed, block=512, location=512
[ 2032.338470][ T7429] UDF-fs: warning (device md0): udf_load_vrs: No anchor found
[ 2032.381294][ T7443] xt_TPROXY: Can be used only with -p tcp or -p udp
[ 2032.390301][ T7429] UDF-fs: Scanning with blocksize 512 failed
[ 2032.397021][ T7429] UDF-fs: error (device md0): udf_read_tagged: read failed, block=256, location=256
[ 2032.408317][ T7429] UDF-fs: error (device md0): udf_read_tagged: read failed, block=512, location=512
[ 2032.418545][ T7429] UDF-fs: warning (device md0): udf_load_vrs: No anchor found
[ 2032.426826][ T7429] UDF-fs: Scanning with blocksize 1024 failed
[ 2032.434403][ T7429] UDF-fs: error (device md0): udf_read_tagged: read failed, block=256, location=256
[ 2032.444753][ T7429] UDF-fs: error (device md0): udf_read_tagged: read failed, block=512, location=512
[ 2032.455858][ T7429] UDF-fs: warning (device md0): udf_load_vrs: No anchor found
[ 2032.466189][ T7429] UDF-fs: Scanning with blocksize 2048 failed
11:40:05 executing program 2:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, 0x0, &(0x7f0000000040)='hugetlbfs\x00', 0x0, 0x0)
chdir(&(0x7f0000000380)='./file0\x00')
mkdir(&(0x7f0000000200)='./bus\x00', 0x0)
r0 = open(&(0x7f0000002800)='./bus\x00', 0x0, 0x0)
mknodat(r0, &(0x7f0000000240)='./bus\x00', 0x1000, 0x0)

[ 2032.485289][ T7429] UDF-fs: error (device md0): udf_read_tagged: read failed, block=256, location=256
[ 2032.508727][ T7429] UDF-fs: error (device md0): udf_read_tagged: read failed, block=512, location=512
[ 2032.519677][ T7429] UDF-fs: warning (device md0): udf_load_vrs: No anchor found
[ 2032.527866][ T7429] UDF-fs: Scanning with blocksize 4096 failed
11:40:05 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x44, 0x6, 0x3d0, 0x1e0, 0x1e0, 0x278, 0x98, 0x0, 0x338, 0x338, 0x338, 0x338, 0x338, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00', {}, {}, 0x11}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@empty, @multicast2, 0x0, 0x0, 'veth1_macvtap\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@ipv4={[], [], @remote}}}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_virt_wifi\x00', 'batadv_slave_1\x00'}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x0, "120a"}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x430)

[ 2032.534786][ T7429] UDF-fs: warning (device md0): udf_fill_super: No partition found (1)
11:40:05 executing program 2:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, 0x0, &(0x7f0000000040)='hugetlbfs\x00', 0x0, 0x0)
chdir(&(0x7f0000000380)='./file0\x00')
mkdir(&(0x7f0000000200)='./bus\x00', 0x0)
r0 = open(&(0x7f0000002800)='./bus\x00', 0x0, 0x0)
mknodat(r0, &(0x7f0000000240)='./bus\x00', 0x1000, 0x0)

11:40:05 executing program 4:
creat(&(0x7f0000000300)='./file0\x00', 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340))
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
mount(&(0x7f0000000200)=@md0='/dev/md0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f00000005c0)='udf\x00', 0x0, 0x0)

11:40:05 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$dupfd(r0, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x44, 0x6, 0x3d0, 0x1e0, 0x1e0, 0x278, 0x98, 0x0, 0x338, 0x338, 0x338, 0x338, 0x338, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00', {}, {}, 0x11}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@empty, @multicast2, 0x0, 0x0, 'veth1_macvtap\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@ipv4={[], [], @remote}}}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_virt_wifi\x00', 'batadv_slave_1\x00'}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x0, "120a"}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x430)

[ 2032.743143][ T7455] xt_TPROXY: Can be used only with -p tcp or -p udp
[ 2032.788757][ T7459] UDF-fs: error (device md0): udf_read_tagged: read failed, block=256, location=256
[ 2032.798730][ T7459] UDF-fs: error (device md0): udf_read_tagged: read failed, block=512, location=512
[ 2032.816202][ T7459] UDF-fs: warning (device md0): udf_load_vrs: No anchor found
[ 2032.834776][ T7459] UDF-fs: Scanning with blocksize 512 failed
[ 2032.849409][ T7459] UDF-fs: error (device md0): udf_read_tagged: read failed, block=256, location=256
[ 2032.861368][ T7461] xt_TPROXY: Can be used only with -p tcp or -p udp
[ 2032.868324][ T7459] UDF-fs: error (device md0): udf_read_tagged: read failed, block=512, location=512
[ 2032.893052][ T7459] UDF-fs: warning (device md0): udf_load_vrs: No anchor found
[ 2032.901650][ T7459] UDF-fs: Scanning with blocksize 1024 failed
[ 2032.908284][ T7459] UDF-fs: error (device md0): udf_read_tagged: read failed, block=256, location=256
[ 2032.918249][ T7459] UDF-fs: error (device md0): udf_read_tagged: read failed, block=512, location=512
[ 2032.928426][ T7459] UDF-fs: warning (device md0): udf_load_vrs: No anchor found
[ 2032.936354][ T7459] UDF-fs: Scanning with blocksize 2048 failed
[ 2032.943761][ T7459] UDF-fs: error (device md0): udf_read_tagged: read failed, block=256, location=256
[ 2033.002204][ T7459] UDF-fs: error (device md0): udf_read_tagged: read failed, block=512, location=512
[ 2033.071386][ T7459] UDF-fs: warning (device md0): udf_load_vrs: No anchor found
[ 2033.119651][ T7459] UDF-fs: Scanning with blocksize 4096 failed
[ 2033.139592][ T7459] UDF-fs: warning (device md0): udf_fill_super: No partition found (1)
11:40:06 executing program 5:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
close(r4)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732})
r6 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@multicast, @multicast, @val={@void}, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @private=0xa010101}, {0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x2e)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8)
splice(r0, 0x0, r4, 0x0, 0x10005, 0x800000000000000)

11:40:06 executing program 2:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0)
chdir(&(0x7f0000000380)='./file0\x00')
mkdir(&(0x7f0000000200)='./bus\x00', 0x0)
r0 = open(&(0x7f0000002800)='./bus\x00', 0x0, 0x0)
mknodat(r0, &(0x7f0000000240)='./bus\x00', 0x1000, 0x0)

11:40:06 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$dupfd(r0, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x44, 0x6, 0x3d0, 0x1e0, 0x1e0, 0x278, 0x98, 0x0, 0x338, 0x338, 0x338, 0x338, 0x338, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00', {}, {}, 0x11}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@empty, @multicast2, 0x0, 0x0, 'veth1_macvtap\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@ipv4={[], [], @remote}}}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_virt_wifi\x00', 'batadv_slave_1\x00'}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x0, "120a"}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x430)

11:40:06 executing program 0:
syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0)
syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x64000000}, 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xbd, 0x970, 0x1, 0x5})
socket$nl_route(0x10, 0x3, 0x0)

11:40:06 executing program 4:
creat(&(0x7f0000000300)='./file0\x00', 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340))
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
mount(&(0x7f0000000200)=@md0='/dev/md0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f00000005c0)='udf\x00', 0x0, 0x0)

[ 2033.449582][ T7479] xt_TPROXY: Can be used only with -p tcp or -p udp
[ 2033.484395][ T7482] UDF-fs: error (device md0): udf_read_tagged: read failed, block=256, location=256
11:40:06 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$dupfd(r0, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x44, 0x6, 0x3d0, 0x1e0, 0x1e0, 0x278, 0x98, 0x0, 0x338, 0x338, 0x338, 0x338, 0x338, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00', {}, {}, 0x11}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@empty, @multicast2, 0x0, 0x0, 'veth1_macvtap\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@ipv4={[], [], @remote}}}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_virt_wifi\x00', 'batadv_slave_1\x00'}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x0, "120a"}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x430)

[ 2033.536586][ T7482] UDF-fs: error (device md0): udf_read_tagged: read failed, block=512, location=512
11:40:06 executing program 2:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0)
chdir(&(0x7f0000000380)='./file0\x00')
mkdir(&(0x7f0000000200)='./bus\x00', 0x0)
r0 = open(&(0x7f0000002800)='./bus\x00', 0x0, 0x0)
mknodat(r0, &(0x7f0000000240)='./bus\x00', 0x1000, 0x0)

[ 2033.616295][ T7489] xt_TPROXY: Can be used only with -p tcp or -p udp
[ 2033.636603][ T7482] UDF-fs: warning (device md0): udf_load_vrs: No anchor found
[ 2033.687474][ T7482] UDF-fs: Scanning with blocksize 512 failed
[ 2033.720672][ T7482] UDF-fs: error (device md0): udf_read_tagged: read failed, block=256, location=256
[ 2033.752137][ T7482] UDF-fs: error (device md0): udf_read_tagged: read failed, block=512, location=512
[ 2033.773957][ T7482] UDF-fs: warning (device md0): udf_load_vrs: No anchor found
[ 2033.783603][ T7482] UDF-fs: Scanning with blocksize 1024 failed
11:40:06 executing program 2:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0)
chdir(&(0x7f0000000380)='./file0\x00')
mkdir(&(0x7f0000000200)='./bus\x00', 0x0)
r0 = open(&(0x7f0000002800)='./bus\x00', 0x0, 0x0)
mknodat(r0, &(0x7f0000000240)='./bus\x00', 0x1000, 0x0)

11:40:06 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x44, 0x6, 0x3d0, 0x1e0, 0x1e0, 0x278, 0x98, 0x0, 0x338, 0x338, 0x338, 0x338, 0x338, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00', {}, {}, 0x11}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@empty, @multicast2, 0x0, 0x0, 'veth1_macvtap\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@ipv4={[], [], @remote}}}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_virt_wifi\x00', 'batadv_slave_1\x00'}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x0, "120a"}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x430)

[ 2033.801274][ T7482] UDF-fs: error (device md0): udf_read_tagged: read failed, block=256, location=256
[ 2033.855025][ T7482] UDF-fs: error (device md0): udf_read_tagged: read failed, block=512, location=512
11:40:06 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x44, 0x6, 0x3d0, 0x1e0, 0x1e0, 0x278, 0x98, 0x0, 0x338, 0x338, 0x338, 0x338, 0x338, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00', {}, {}, 0x11}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@empty, @multicast2, 0x0, 0x0, 'veth1_macvtap\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@ipv4={[], [], @remote}}}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_virt_wifi\x00', 'batadv_slave_1\x00'}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x0, "120a"}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x430)

[ 2033.920330][ T7503] xt_TPROXY: Can be used only with -p tcp or -p udp
[ 2033.947144][ T7482] UDF-fs: warning (device md0): udf_load_vrs: No anchor found
[ 2034.001303][ T7482] UDF-fs: Scanning with blocksize 2048 failed
[ 2034.059696][ T7482] UDF-fs: error (device md0): udf_read_tagged: read failed, block=256, location=256
11:40:06 executing program 2:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='hugetlbfs\x00', 0x0, 0x0)
chdir(0x0)
mkdir(&(0x7f0000000200)='./bus\x00', 0x0)
r0 = open(&(0x7f0000002800)='./bus\x00', 0x0, 0x0)
mknodat(r0, &(0x7f0000000240)='./bus\x00', 0x1000, 0x0)

[ 2034.151943][ T7482] UDF-fs: error (device md0): udf_read_tagged: read failed, block=512, location=512
11:40:06 executing program 2:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='hugetlbfs\x00', 0x0, 0x0)
chdir(0x0)
mkdir(&(0x7f0000000200)='./bus\x00', 0x0)
r0 = open(&(0x7f0000002800)='./bus\x00', 0x0, 0x0)
mknodat(r0, &(0x7f0000000240)='./bus\x00', 0x1000, 0x0)

[ 2034.246547][ T7482] UDF-fs: warning (device md0): udf_load_vrs: No anchor found
[ 2034.267811][ T7482] UDF-fs: Scanning with blocksize 4096 failed
[ 2034.286536][ T7482] UDF-fs: warning (device md0): udf_fill_super: No partition found (1)
11:40:07 executing program 5:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
close(r4)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732})
r6 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@multicast, @multicast, @val={@void}, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @private=0xa010101}, {0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x2e)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8)
splice(r0, 0x0, r4, 0x0, 0x10005, 0x806000000000000)

11:40:07 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x44, 0x6, 0x3d0, 0x1e0, 0x1e0, 0x278, 0x98, 0x0, 0x338, 0x338, 0x338, 0x338, 0x338, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00', {}, {}, 0x11}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@empty, @multicast2, 0x0, 0x0, 'veth1_macvtap\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@ipv4={[], [], @remote}}}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_virt_wifi\x00', 'batadv_slave_1\x00'}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x0, "120a"}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x430)

11:40:07 executing program 0:
syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0)
syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x6a070000}, 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xbd, 0x970, 0x1, 0x5})
socket$nl_route(0x10, 0x3, 0x0)

11:40:07 executing program 2:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='hugetlbfs\x00', 0x0, 0x0)
chdir(0x0)
mkdir(&(0x7f0000000200)='./bus\x00', 0x0)
r0 = open(&(0x7f0000002800)='./bus\x00', 0x0, 0x0)
mknodat(r0, &(0x7f0000000240)='./bus\x00', 0x1000, 0x0)

11:40:07 executing program 4:
creat(&(0x7f0000000300)='./file0\x00', 0x0)
r0 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
mount(&(0x7f0000000200)=@md0='/dev/md0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f00000005c0)='udf\x00', 0x0, 0x0)

[ 2034.979557][ T7526] UDF-fs: error (device md0): udf_read_tagged: read failed, block=256, location=256
11:40:07 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x44, 0x6, 0x3d0, 0x1e0, 0x1e0, 0x278, 0x98, 0x0, 0x338, 0x338, 0x338, 0x338, 0x338, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00', {}, {}, 0x11}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@empty, @multicast2, 0x0, 0x0, 'veth1_macvtap\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@ipv4={[], [], @remote}}}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_virt_wifi\x00', 'batadv_slave_1\x00'}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x0, "120a"}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x430)

[ 2035.064141][ T7526] UDF-fs: error (device md0): udf_read_tagged: read failed, block=512, location=512
11:40:07 executing program 2:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='hugetlbfs\x00', 0x0, 0x0)
chdir(&(0x7f0000000380)='./file0\x00')
mkdir(0x0, 0x0)
r0 = open(&(0x7f0000002800)='./bus\x00', 0x0, 0x0)
mknodat(r0, &(0x7f0000000240)='./bus\x00', 0x1000, 0x0)

[ 2035.200495][ T7526] UDF-fs: warning (device md0): udf_load_vrs: No anchor found
[ 2035.276649][ T7526] UDF-fs: Scanning with blocksize 512 failed
[ 2035.284404][ T7526] UDF-fs: error (device md0): udf_read_tagged: read failed, block=256, location=256
[ 2035.296055][ T7526] UDF-fs: error (device md0): udf_read_tagged: read failed, block=512, location=512
[ 2035.306642][ T7526] UDF-fs: warning (device md0): udf_load_vrs: No anchor found
[ 2035.314495][ T7526] UDF-fs: Scanning with blocksize 1024 failed
[ 2035.321613][ T7526] UDF-fs: error (device md0): udf_read_tagged: read failed, block=256, location=256
[ 2035.331578][ T7526] UDF-fs: error (device md0): udf_read_tagged: read failed, block=512, location=512
[ 2035.348633][ T7526] UDF-fs: warning (device md0): udf_load_vrs: No anchor found
[ 2035.356538][ T7526] UDF-fs: Scanning with blocksize 2048 failed
[ 2035.363562][ T7526] UDF-fs: error (device md0): udf_read_tagged: read failed, block=256, location=256
11:40:08 executing program 2:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='hugetlbfs\x00', 0x0, 0x0)
chdir(&(0x7f0000000380)='./file0\x00')
mkdir(0x0, 0x0)
r0 = open(&(0x7f0000002800)='./bus\x00', 0x0, 0x0)
mknodat(r0, &(0x7f0000000240)='./bus\x00', 0x1000, 0x0)

[ 2035.373501][ T7526] UDF-fs: error (device md0): udf_read_tagged: read failed, block=512, location=512
[ 2035.384272][ T7526] UDF-fs: warning (device md0): udf_load_vrs: No anchor found
[ 2035.396205][ T7526] UDF-fs: Scanning with blocksize 4096 failed
[ 2035.416642][ T7526] UDF-fs: warning (device md0): udf_fill_super: No partition found (1)
11:40:08 executing program 4:
creat(&(0x7f0000000300)='./file0\x00', 0x0)
r0 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
mount(&(0x7f0000000200)=@md0='/dev/md0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f00000005c0)='udf\x00', 0x0, 0x0)

11:40:08 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x44, 0x6, 0x3d0, 0x1e0, 0x1e0, 0x278, 0x98, 0x0, 0x338, 0x338, 0x338, 0x338, 0x338, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00', {}, {}, 0x11}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@empty, @multicast2, 0x0, 0x0, 'veth1_macvtap\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@ipv4={[], [], @remote}}}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_virt_wifi\x00', 'batadv_slave_1\x00'}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x0, "120a"}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x430)

11:40:08 executing program 2:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='hugetlbfs\x00', 0x0, 0x0)
chdir(&(0x7f0000000380)='./file0\x00')
mkdir(0x0, 0x0)
r0 = open(&(0x7f0000002800)='./bus\x00', 0x0, 0x0)
mknodat(r0, &(0x7f0000000240)='./bus\x00', 0x1000, 0x0)

[ 2035.616394][ T7552] UDF-fs: error (device md0): udf_read_tagged: read failed, block=256, location=256
[ 2035.647117][ T7552] UDF-fs: error (device md0): udf_read_tagged: read failed, block=512, location=512
11:40:08 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x44, 0x6, 0x3d0, 0x1e0, 0x1e0, 0x278, 0x98, 0x0, 0x338, 0x338, 0x338, 0x338, 0x338, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00', {}, {}, 0x11}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@empty, @multicast2, 0x0, 0x0, 'veth1_macvtap\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@ipv4={[], [], @remote}}}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_virt_wifi\x00', 'batadv_slave_1\x00'}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x0, "120a"}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x430)

[ 2035.667748][ T7552] UDF-fs: warning (device md0): udf_load_vrs: No anchor found
[ 2035.684307][ T7552] UDF-fs: Scanning with blocksize 512 failed
[ 2035.701849][ T7552] UDF-fs: error (device md0): udf_read_tagged: read failed, block=256, location=256
[ 2035.753848][ T7552] UDF-fs: error (device md0): udf_read_tagged: read failed, block=512, location=512
[ 2035.812277][ T7552] UDF-fs: warning (device md0): udf_load_vrs: No anchor found
[ 2035.841891][ T7552] UDF-fs: Scanning with blocksize 1024 failed
[ 2035.857467][ T7552] UDF-fs: error (device md0): udf_read_tagged: read failed, block=256, location=256
[ 2035.905922][ T7552] UDF-fs: error (device md0): udf_read_tagged: read failed, block=512, location=512
[ 2035.939562][ T7552] UDF-fs: warning (device md0): udf_load_vrs: No anchor found
[ 2035.965242][ T7552] UDF-fs: Scanning with blocksize 2048 failed
[ 2035.986475][ T7552] UDF-fs: error (device md0): udf_read_tagged: read failed, block=256, location=256
[ 2036.028573][ T7552] UDF-fs: error (device md0): udf_read_tagged: read failed, block=512, location=512
[ 2036.056389][ T7552] UDF-fs: warning (device md0): udf_load_vrs: No anchor found
[ 2036.078731][ T7552] UDF-fs: Scanning with blocksize 4096 failed
[ 2036.098404][ T7552] UDF-fs: warning (device md0): udf_fill_super: No partition found (1)
11:40:08 executing program 5:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
close(r4)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732})
r6 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@multicast, @multicast, @val={@void}, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @private=0xa010101}, {0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x2e)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8)
splice(r0, 0x0, r4, 0x0, 0x10005, 0xd00000000000000)

11:40:08 executing program 2:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='hugetlbfs\x00', 0x0, 0x0)
chdir(&(0x7f0000000380)='./file0\x00')
mkdir(&(0x7f0000000200)='./bus\x00', 0x0)
r0 = open(0x0, 0x0, 0x0)
mknodat(r0, &(0x7f0000000240)='./bus\x00', 0x1000, 0x0)

11:40:08 executing program 0:
syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0)
syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xff000000}, 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xbd, 0x970, 0x1, 0x5})
socket$nl_route(0x10, 0x3, 0x0)

11:40:08 executing program 4:
creat(&(0x7f0000000300)='./file0\x00', 0x0)
r0 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
mount(&(0x7f0000000200)=@md0='/dev/md0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f00000005c0)='udf\x00', 0x0, 0x0)

11:40:08 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, 0x0, 0x0)

[ 2036.408292][ T7573] UDF-fs: error (device md0): udf_read_tagged: read failed, block=256, location=256
11:40:09 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, 0x0, 0x0)

11:40:09 executing program 2:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='hugetlbfs\x00', 0x0, 0x0)
chdir(&(0x7f0000000380)='./file0\x00')
mkdir(&(0x7f0000000200)='./bus\x00', 0x0)
r0 = open(0x0, 0x0, 0x0)
mknodat(r0, &(0x7f0000000240)='./bus\x00', 0x1000, 0x0)

[ 2036.536236][ T7573] UDF-fs: error (device md0): udf_read_tagged: read failed, block=512, location=512
[ 2036.629760][ T7573] UDF-fs: warning (device md0): udf_load_vrs: No anchor found
[ 2036.637419][ T7573] UDF-fs: Scanning with blocksize 512 failed
[ 2036.646131][ T7573] UDF-fs: error (device md0): udf_read_tagged: read failed, block=256, location=256
[ 2036.655996][ T7573] UDF-fs: error (device md0): udf_read_tagged: read failed, block=512, location=512
[ 2036.665662][ T7573] UDF-fs: warning (device md0): udf_load_vrs: No anchor found
[ 2036.674802][ T7573] UDF-fs: Scanning with blocksize 1024 failed
[ 2036.682346][ T7573] UDF-fs: error (device md0): udf_read_tagged: read failed, block=256, location=256
[ 2036.693996][ T7573] UDF-fs: error (device md0): udf_read_tagged: read failed, block=512, location=512
[ 2036.713744][ T7573] UDF-fs: warning (device md0): udf_load_vrs: No anchor found
11:40:09 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, 0x0, 0x0)

[ 2036.730328][ T7573] UDF-fs: Scanning with blocksize 2048 failed
[ 2036.740454][ T7573] UDF-fs: error (device md0): udf_read_tagged: read failed, block=256, location=256
11:40:09 executing program 2:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='hugetlbfs\x00', 0x0, 0x0)
chdir(&(0x7f0000000380)='./file0\x00')
mkdir(&(0x7f0000000200)='./bus\x00', 0x0)
r0 = open(0x0, 0x0, 0x0)
mknodat(r0, &(0x7f0000000240)='./bus\x00', 0x1000, 0x0)

[ 2036.794761][ T7573] UDF-fs: error (device md0): udf_read_tagged: read failed, block=512, location=512
11:40:09 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000000c0), 0x4)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, r1, 0x100, 0xfffffffc}, 0x14}}, 0x4)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

[ 2036.865335][ T7573] UDF-fs: warning (device md0): udf_load_vrs: No anchor found
11:40:09 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x44, 0x6, 0x3a8, 0x1e0, 0x1e0, 0x278, 0x98, 0x0, 0x338, 0x338, 0x338, 0x338, 0x338, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00', {}, {}, 0x11}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@empty, @multicast2, 0x0, 0x0, 'veth1_macvtap\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@ipv4={[], [], @remote}}}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_virt_wifi\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x408)

11:40:09 executing program 0:
syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0)
syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1000000000000}, 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xbd, 0x970, 0x1, 0x5})
socket$nl_route(0x10, 0x3, 0x0)

[ 2036.911074][ T7573] UDF-fs: Scanning with blocksize 4096 failed
[ 2036.938170][ T7573] UDF-fs: warning (device md0): udf_fill_super: No partition found (1)
11:40:10 executing program 5:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
close(r4)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732})
r6 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@multicast, @multicast, @val={@void}, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @private=0xa010101}, {0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x2e)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8)
splice(r0, 0x0, r4, 0x0, 0x10005, 0x1000000000000000)

11:40:10 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x28, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000480)='mptcp_pm\x00')
r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r2, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}}, 0x0)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)

11:40:10 executing program 2:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='hugetlbfs\x00', 0x0, 0x0)
chdir(&(0x7f0000000380)='./file0\x00')
mkdir(&(0x7f0000000200)='./bus\x00', 0x0)
open(&(0x7f0000002800)='./bus\x00', 0x0, 0x0)
mknodat(0xffffffffffffffff, &(0x7f0000000240)='./bus\x00', 0x1000, 0x0)

11:40:10 executing program 4:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
mount(&(0x7f0000000200)=@md0='/dev/md0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f00000005c0)='udf\x00', 0x0, 0x0)

11:40:10 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x44, 0x6, 0x3a8, 0x1e0, 0x1e0, 0x278, 0x98, 0x0, 0x338, 0x338, 0x338, 0x338, 0x338, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00', {}, {}, 0x11}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@empty, @multicast2, 0x0, 0x0, 'veth1_macvtap\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@ipv4={[], [], @remote}}}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_virt_wifi\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x408)

11:40:10 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x44, 0x6, 0x3a8, 0x1e0, 0x1e0, 0x278, 0x98, 0x0, 0x338, 0x338, 0x338, 0x338, 0x338, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00', {}, {}, 0x11}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@empty, @multicast2, 0x0, 0x0, 'veth1_macvtap\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@ipv4={[], [], @remote}}}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_virt_wifi\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x408)

11:40:10 executing program 4:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
mount(&(0x7f0000000200)=@md0='/dev/md0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f00000005c0)='udf\x00', 0x0, 0x0)

11:40:10 executing program 2:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='hugetlbfs\x00', 0x0, 0x0)
chdir(&(0x7f0000000380)='./file0\x00')
mkdir(&(0x7f0000000200)='./bus\x00', 0x0)
open(&(0x7f0000002800)='./bus\x00', 0x0, 0x0)
mknodat(0xffffffffffffffff, &(0x7f0000000240)='./bus\x00', 0x1000, 0x0)

11:40:10 executing program 0:
syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0)
syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x100000000000000}, 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xbd, 0x970, 0x1, 0x5})
socket$nl_route(0x10, 0x3, 0x0)

11:40:10 executing program 2:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='hugetlbfs\x00', 0x0, 0x0)
chdir(&(0x7f0000000380)='./file0\x00')
mkdir(&(0x7f0000000200)='./bus\x00', 0x0)
open(&(0x7f0000002800)='./bus\x00', 0x0, 0x0)
mknodat(0xffffffffffffffff, &(0x7f0000000240)='./bus\x00', 0x1000, 0x0)

11:40:10 executing program 1:
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}}, 0x0)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_si_security={{0x2, 0x7}, {0x5e9, 0x2, 0x6, 0x9}}}, 0xa)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r3, 0xc0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=0x1, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x3, 0x4}, 0x0, 0x0, &(0x7f0000000140)={0x5, 0xf, 0x1, 0x101}, &(0x7f00000001c0)=0x7, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=0x8}}, 0x10)

11:40:10 executing program 4:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
mount(&(0x7f0000000200)=@md0='/dev/md0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f00000005c0)='udf\x00', 0x0, 0x0)

[ 2038.313965][ T8115] ==================================================================
[ 2038.322539][ T8115] BUG: KASAN: slab-out-of-bounds in hci_event_packet+0xb2d/0x86f5
[ 2038.330329][ T8115] Read of size 3 at addr ffff88802aafc5ff by task kworker/u5:2/8115
[ 2038.338287][ T8115] 
[ 2038.340608][ T8115] CPU: 1 PID: 8115 Comm: kworker/u5:2 Not tainted 5.8.0-rc7-syzkaller #0
[ 2038.349005][ T8115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2038.359058][ T8115] Workqueue: hci1 hci_rx_work
[ 2038.363721][ T8115] Call Trace:
[ 2038.367011][ T8115]  dump_stack+0x18f/0x20d
[ 2038.371355][ T8115]  ? hci_event_packet+0xb2d/0x86f5
[ 2038.376466][ T8115]  ? hci_event_packet+0xb2d/0x86f5
[ 2038.381578][ T8115]  print_address_description.constprop.0.cold+0xae/0x436
[ 2038.388600][ T8115]  ? lockdep_hardirqs_off+0x66/0xa0
[ 2038.393797][ T8115]  ? vprintk_func+0x97/0x1a6
[ 2038.398419][ T8115]  ? hci_event_packet+0xb2d/0x86f5
[ 2038.403545][ T8115]  kasan_report.cold+0x1f/0x37
[ 2038.408304][ T8115]  ? hci_event_packet+0xb2d/0x86f5
[ 2038.413409][ T8115]  check_memory_region+0x13d/0x180
[ 2038.418516][ T8115]  memcpy+0x20/0x60
[ 2038.422328][ T8115]  hci_event_packet+0xb2d/0x86f5
[ 2038.427273][ T8115]  ? lockdep_hardirqs_on_prepare+0x590/0x590
[ 2038.433272][ T8115]  ? __lock_acquire+0x16e3/0x56e0
[ 2038.438315][ T8115]  ? hci_cmd_complete_evt+0xc6e0/0xc6e0
[ 2038.443856][ T8115]  ? lock_acquire+0x1f1/0xad0
[ 2038.448530][ T8115]  ? skb_dequeue+0x1c/0x180
[ 2038.453045][ T8115]  ? find_held_lock+0x2d/0x110
[ 2038.457807][ T8115]  ? mark_lock+0xbc/0x1710
[ 2038.462223][ T8115]  ? mark_held_locks+0x9f/0xe0
[ 2038.466982][ T8115]  ? _raw_spin_unlock_irqrestore+0x62/0xe0
[ 2038.472779][ T8115]  ? lockdep_hardirqs_on_prepare+0x3a2/0x590
[ 2038.478751][ T8115]  ? trace_hardirqs_on+0x5f/0x220
[ 2038.483779][ T8115]  ? lockdep_hardirqs_on+0x6a/0xe0
[ 2038.488888][ T8115]  hci_rx_work+0x22e/0xb10
[ 2038.493311][ T8115]  process_one_work+0x94c/0x1670
[ 2038.498245][ T8115]  ? lock_release+0x8d0/0x8d0
[ 2038.502913][ T8115]  ? pwq_dec_nr_in_flight+0x2d0/0x2d0
[ 2038.508279][ T8115]  ? rwlock_bug.part.0+0x90/0x90
[ 2038.513240][ T8115]  ? lockdep_hardirqs_off+0x66/0xa0
[ 2038.518439][ T8115]  worker_thread+0x64c/0x1120
[ 2038.523125][ T8115]  ? __kthread_parkme+0x13f/0x1e0
[ 2038.528168][ T8115]  ? process_one_work+0x1670/0x1670
[ 2038.533368][ T8115]  kthread+0x3b5/0x4a0
[ 2038.537435][ T8115]  ? __kthread_bind_mask+0xc0/0xc0
[ 2038.542543][ T8115]  ? __kthread_bind_mask+0xc0/0xc0
[ 2038.547658][ T8115]  ret_from_fork+0x1f/0x30
[ 2038.552074][ T8115] 
[ 2038.554399][ T8115] Allocated by task 7650:
[ 2038.558725][ T8115]  save_stack+0x1b/0x40
[ 2038.562881][ T8115]  __kasan_kmalloc.constprop.0+0xc2/0xd0
[ 2038.568511][ T8115]  __alloc_skb+0xae/0x550
[ 2038.572893][ T8115]  vhci_write+0xbd/0x450
[ 2038.577132][ T8115]  new_sync_write+0x422/0x650
[ 2038.581802][ T8115]  vfs_write+0x59d/0x6b0
[ 2038.586038][ T8115]  ksys_write+0x12d/0x250
[ 2038.590362][ T8115]  do_syscall_64+0x60/0xe0
[ 2038.594879][ T8115]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 2038.600763][ T8115] 
[ 2038.603086][ T8115] Freed by task 3892:
[ 2038.607064][ T8115]  save_stack+0x1b/0x40
[ 2038.611220][ T8115]  __kasan_slab_free+0xf5/0x140
[ 2038.616147][ T8115]  kfree+0x103/0x2c0
[ 2038.620034][ T8115]  kernfs_fop_release+0x120/0x190
[ 2038.625046][ T8115]  __fput+0x33c/0x880
[ 2038.629022][ T8115]  task_work_run+0xdd/0x190
[ 2038.633522][ T8115]  __prepare_exit_to_usermode+0x1e9/0x1f0
[ 2038.639236][ T8115]  do_syscall_64+0x6c/0xe0
[ 2038.643646][ T8115]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 2038.649520][ T8115] 
[ 2038.651846][ T8115] The buggy address belongs to the object at ffff88802aafc400
[ 2038.651846][ T8115]  which belongs to the cache kmalloc-512 of size 512
[ 2038.665890][ T8115] The buggy address is located 511 bytes inside of
[ 2038.665890][ T8115]  512-byte region [ffff88802aafc400, ffff88802aafc600)
[ 2038.679163][ T8115] The buggy address belongs to the page:
[ 2038.684815][ T8115] page:ffffea0000aabf00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0
[ 2038.693912][ T8115] flags: 0xfffe0000000200(slab)
[ 2038.698753][ T8115] raw: 00fffe0000000200 ffffea000269a748 ffffea0002988608 ffff8880aa000a80
[ 2038.707331][ T8115] raw: 0000000000000000 ffff88802aafc000 0000000100000004 0000000000000000
[ 2038.715904][ T8115] page dumped because: kasan: bad access detected
[ 2038.722303][ T8115] 
[ 2038.724622][ T8115] Memory state around the buggy address:
[ 2038.730244][ T8115]  ffff88802aafc500: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 2038.738295][ T8115]  ffff88802aafc580: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 2038.746349][ T8115] >ffff88802aafc600: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 2038.754396][ T8115]                    ^
[ 2038.758462][ T8115]  ffff88802aafc680: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 2038.766519][ T8115]  ffff88802aafc700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 2038.774569][ T8115] ==================================================================
[ 2038.782616][ T8115] Disabling lock debugging due to kernel taint
[ 2038.798968][ T8115] Kernel panic - not syncing: panic_on_warn set ...
[ 2038.805561][ T8115] CPU: 1 PID: 8115 Comm: kworker/u5:2 Tainted: G    B             5.8.0-rc7-syzkaller #0
[ 2038.815336][ T8115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2038.825375][ T8115] Workqueue: hci1 hci_rx_work
[ 2038.830029][ T8115] Call Trace:
[ 2038.833307][ T8115]  dump_stack+0x18f/0x20d
[ 2038.837631][ T8115]  ? hci_event_packet+0xab0/0x86f5
[ 2038.842734][ T8115]  panic+0x2e3/0x75c
[ 2038.846619][ T8115]  ? __warn_printk+0xf3/0xf3
[ 2038.851200][ T8115]  ? preempt_schedule_common+0x59/0xc0
[ 2038.856651][ T8115]  ? hci_event_packet+0xb2d/0x86f5
[ 2038.861755][ T8115]  ? preempt_schedule_thunk+0x16/0x18
[ 2038.867120][ T8115]  ? trace_hardirqs_on+0x55/0x220
[ 2038.872161][ T8115]  ? hci_event_packet+0xb2d/0x86f5
[ 2038.877264][ T8115]  ? hci_event_packet+0xb2d/0x86f5
[ 2038.882555][ T8115]  end_report+0x4d/0x53
[ 2038.886706][ T8115]  kasan_report.cold+0xd/0x37
[ 2038.891377][ T8115]  ? hci_event_packet+0xb2d/0x86f5
[ 2038.896498][ T8115]  check_memory_region+0x13d/0x180
[ 2038.901594][ T8115]  memcpy+0x20/0x60
[ 2038.905403][ T8115]  hci_event_packet+0xb2d/0x86f5
[ 2038.910332][ T8115]  ? lockdep_hardirqs_on_prepare+0x590/0x590
[ 2038.916301][ T8115]  ? __lock_acquire+0x16e3/0x56e0
[ 2038.921331][ T8115]  ? hci_cmd_complete_evt+0xc6e0/0xc6e0
[ 2038.926867][ T8115]  ? lock_acquire+0x1f1/0xad0
[ 2038.931536][ T8115]  ? skb_dequeue+0x1c/0x180
[ 2038.936038][ T8115]  ? find_held_lock+0x2d/0x110
[ 2038.940789][ T8115]  ? mark_lock+0xbc/0x1710
[ 2038.945200][ T8115]  ? mark_held_locks+0x9f/0xe0
[ 2038.949948][ T8115]  ? _raw_spin_unlock_irqrestore+0x62/0xe0
[ 2038.955738][ T8115]  ? lockdep_hardirqs_on_prepare+0x3a2/0x590
[ 2038.961713][ T8115]  ? trace_hardirqs_on+0x5f/0x220
[ 2038.966739][ T8115]  ? lockdep_hardirqs_on+0x6a/0xe0
[ 2038.971877][ T8115]  hci_rx_work+0x22e/0xb10
[ 2038.976282][ T8115]  process_one_work+0x94c/0x1670
[ 2038.981209][ T8115]  ? lock_release+0x8d0/0x8d0
[ 2038.985890][ T8115]  ? pwq_dec_nr_in_flight+0x2d0/0x2d0
[ 2038.991247][ T8115]  ? rwlock_bug.part.0+0x90/0x90
[ 2038.996172][ T8115]  ? lockdep_hardirqs_off+0x66/0xa0
[ 2039.001362][ T8115]  worker_thread+0x64c/0x1120
[ 2039.006036][ T8115]  ? __kthread_parkme+0x13f/0x1e0
[ 2039.011147][ T8115]  ? process_one_work+0x1670/0x1670
[ 2039.016330][ T8115]  kthread+0x3b5/0x4a0
[ 2039.020385][ T8115]  ? __kthread_bind_mask+0xc0/0xc0
[ 2039.025482][ T8115]  ? __kthread_bind_mask+0xc0/0xc0
[ 2039.030585][ T8115]  ret_from_fork+0x1f/0x30
[ 2039.036216][ T8115] Kernel Offset: disabled
[ 2039.040523][ T8115] Rebooting in 86400 seconds..