10102}, 'wg2\x00'}) 11:30:28 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/12, 0x8}], 0x1) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, &(0x7f0000000080)=']M,$[\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffff9c) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 11:30:28 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/12, 0x8}], 0x1) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x3, 0x0, 0x0, 0xe9bb9c3c2e84984c}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 11:30:29 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000040), 0xffffffffffffffff, 0x622080) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000340)=ANY=[], 0xfea7) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x1, 0x4000010, r1, 0x0) ioctl(r0, 0xc06c4124, &(0x7f0000000040)) 11:30:29 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}) r1 = accept4$inet(r0, 0x0, &(0x7f0000000000), 0x100800) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000040)={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x14}}, {0x1}, 0x3a, {0x2, 0x4e24, @rand_addr=0x64010102}, 'wg2\x00'}) 11:30:29 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$mouse(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000280), 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r5 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES64=r2], 0x14}}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x47) write(r2, &(0x7f0000000000)="0553ad72e4a6bd03194e1b125e9cd0a9416df02e0e025410a7248d6813e4fe7b19c1bd5338e3ee9966b568b82c48", 0x97d08) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) 11:30:29 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000040), 0xffffffffffffffff, 0x622080) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000340)=ANY=[], 0xfea7) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x1, 0x4000010, r1, 0x0) (async) ioctl(r0, 0xc06c4124, &(0x7f0000000040)) 11:30:29 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/12, 0x8}], 0x1) (async) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) (async, rerun: 32) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) (async, rerun: 32) fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, &(0x7f0000000080)=']M,$[\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffff9c) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) (async) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 11:30:29 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}) r1 = accept4$inet(r0, 0x0, &(0x7f0000000000), 0x100800) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000040)={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x14}}, {0x1}, 0x3a, {0x2, 0x4e24, @rand_addr=0x64010102}, 'wg2\x00'}) socket$inet_tcp(0x2, 0x1, 0x0) (async) ioctl$sock_inet_SIOCDELRT(r0, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}) (async) accept4$inet(r0, 0x0, &(0x7f0000000000), 0x100800) (async) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000040)={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x14}}, {0x1}, 0x3a, {0x2, 0x4e24, @rand_addr=0x64010102}, 'wg2\x00'}) (async) 11:30:29 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000040), 0xffffffffffffffff, 0x622080) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000340)=ANY=[], 0xfea7) (async) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x1, 0x4000010, r1, 0x0) (async) ioctl(r0, 0xc06c4124, &(0x7f0000000040)) 11:30:29 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x3ede, &(0x7f00000000c0), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x3, 0x0, @fd_index, 0x8, 0x0, 0x80000000}, 0xd) ioctl$sock_inet_SIOCDELRT(r0, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) 11:30:29 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/12, 0x8}], 0x1) (async) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, &(0x7f0000000080)=']M,$[\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffff9c) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 11:30:29 executing program 5: syz_emit_ethernet(0x1b9, &(0x7f00000006c0)={@link_local, @link_local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "80488c", 0x183, 0x11, 0x1, @ipv4={'\x00', '\xff\xff', @multicast2}, @mcast1, {[@srh={0x29, 0x14, 0x4, 0xa, 0x1, 0x28, 0xff, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @remote}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}], {0x4e21, 0x4e20, 0xdb, 0x0, @gue={{0x1, 0x1, 0x0, 0x0, 0x0, @void}, "bad1cecb58a8826b6ed39a5336b50dcb2d86f0ff15b5f2325dda82c6cca8e0a3a2f07f9ab2305b1539c8c2f3308a7f33ff0a05278d703158156ba5080867d609d42b4449a5f597ffb051d03e9b841e9d50202ebe67ccdfb5e275383c9b63ba3133226360dfb5298c8e73579e1da2d60c4f5e45260fb779c79ed6885310b81d032bcd38fcd4029308046aab03257a33a5f98add3c448e3ec523ea7b59c16b88ee6bc314da36a0b18ef68f022859f7e1f391958cbd8b3b52cae781d1fd41f827312d2c9de4cc15c1bd86e991f4355f13"}}}}}}}, 0x0) syz_extract_tcp_res$synack(&(0x7f00000001c0)={0x41424344, 0x41424344}, 0x1, 0x0) syz_extract_tcp_res(&(0x7f0000000380), 0xe8b, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000240)={0x41424344}, 0x1, 0x0) r2 = msgget$private(0x0, 0xfffffffffffffffd) msgsnd(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x87, 0x800) msgsnd(r2, &(0x7f00000008c0)=ANY=[@ANYBLOB="210000a75a17db"], 0xee, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f00000025c0)) ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f0000000000)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}]}) msgrcv(r2, &(0x7f0000000900)=ANY=[@ANYRES16=r4, @ANYRESHEX=r2, @ANYRESHEX=r1, @ANYRES16, @ANYRES64], 0x94, 0x1, 0x800) syz_emit_ethernet(0x122, &(0x7f00000003c0)=ANY=[@ANYBLOB="000000000000fffffeffffff86dd66a9a46e00ec6ca97f62b1a420ca77b7382441cfcee1c50aff02000000000000000000000000000101400109650000001d00ff69640000000101000000cb06000001090001000105000000000000000003000138660000004e234e22", @ANYRES32=r1, @ANYRES32=0x41424344, @ANYBLOB="700200069078010105060000000000000c012487e5f60b44316c7d5bee2f42749f13a6d11963d1b434f39be69509c191c26f8d2037bcec06e2c48251c7da4e842b0733c263158804bb070299a50b729214c21fc36c4138b12dbb41177f26314ff05b25c11608644cf66d8b6335769c73ce31a0e831cd2e780d30b8d1629f10dccee89b26c212e04ddb0b21f6cdaa10c107201783a4decb3df29a910b3f2bed6a0dd60316576ba290b684ce828d95b49c"], 0x0) syz_emit_ethernet(0x19b, &(0x7f0000000980)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa08004616018d006700060870907800000000000000a0010000004e234e22", @ANYRES32=0x41424344, @ANYRES32=r1, @ANYBLOB="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"], 0x0) syz_emit_ethernet(0x150, &(0x7f0000000200)={@random="5478ecbed8dd", @broadcast, @void, {@mpls_uc={0x8847, {[{0x1000, 0x0, 0x1}, {0x8, 0x0, 0x1}], @ipv6=@tcp={0x7, 0x6, "be024d", 0x112, 0x6, 0x1, @loopback, @private0, {[@routing={0x3c, 0xa, 0x0, 0x1, 0x0, [@private2, @mcast1, @empty, @remote, @ipv4={'\x00', '\xff\xff', @loopback}]}, @srh={0xff, 0x4, 0x4, 0x2, 0x0, 0x8, 0x3ff, [@mcast1, @remote]}], {{0x4e23, 0x4e21, r0, r1, 0x1, 0x0, 0x13, 0x2, 0x9, 0x0, 0x100, {[@fastopen={0x22, 0xc, "4a2deabd332f156ae94a"}, @exp_fastopen={0xfe, 0xf, 0xf989, "7637b0d5e82682d4452db7"}, @timestamp={0x8, 0xa, 0x7, 0x1}, @eol, @exp_fastopen={0xfe, 0x11, 0xf989, "9028283403e1cb62ffa9108503"}]}}, {"18545938774c5f27988903f91488d98803b9b59b98a39cad75298236ca216ab042a7bcc96ae8e29b583f02e7c87ae4cf1502acd554df6f2f7ba6f6ae256eab1ef5dba7c7afaf"}}}}}}}}, 0x0) 11:30:29 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) (async) syz_io_uring_setup(0x3ede, &(0x7f00000000c0), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) (async) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x3, 0x0, @fd_index, 0x8, 0x0, 0x80000000}, 0xd) (async) ioctl$sock_inet_SIOCDELRT(r0, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) 11:30:29 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$mouse(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000280), 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r5 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES64=r2], 0x14}}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x47) write(r2, &(0x7f0000000000)="0553ad72e4a6bd03194e1b125e9cd0a9416df02e0e025410a7248d6813e4fe7b19c1bd5338e3ee9966b568b8", 0x2c) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 11:30:29 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/12, 0x8}], 0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000002100)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b26]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) close(r3) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 11:30:29 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000340)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000008, 0x1010, r1, 0x3a6ca000) ioctl(r0, 0xc06c4124, &(0x7f0000000040)) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(0xffffffffffffffff, 0xc0884123, &(0x7f00000000c0)={0x0, "a0848ca654ac89cbaafe04bceae0494d8b6b03717584aeb3f69389bfbebc2a9bf2fb0fa0f694802cf754136735fba6ad8d8bc216c461dcda02f62c6f19fb413c", {0x0, 0x3}}) 11:30:30 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x3ede, &(0x7f00000000c0), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) (async, rerun: 32) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x3, 0x0, @fd_index, 0x8, 0x0, 0x80000000}, 0xd) (async, rerun: 32) ioctl$sock_inet_SIOCDELRT(r0, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) 11:30:30 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000340)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000008, 0x1010, r1, 0x3a6ca000) (async) ioctl(r0, 0xc06c4124, &(0x7f0000000040)) (async) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(0xffffffffffffffff, 0xc0884123, &(0x7f00000000c0)={0x0, "a0848ca654ac89cbaafe04bceae0494d8b6b03717584aeb3f69389bfbebc2a9bf2fb0fa0f694802cf754136735fba6ad8d8bc216c461dcda02f62c6f19fb413c", {0x0, 0x3}}) 11:30:30 executing program 5: syz_emit_ethernet(0x1b9, &(0x7f00000006c0)={@link_local, @link_local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "80488c", 0x183, 0x11, 0x1, @ipv4={'\x00', '\xff\xff', @multicast2}, @mcast1, {[@srh={0x29, 0x14, 0x4, 0xa, 0x1, 0x28, 0xff, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @remote}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}], {0x4e21, 0x4e20, 0xdb, 0x0, @gue={{0x1, 0x1, 0x0, 0x0, 0x0, @void}, "bad1cecb58a8826b6ed39a5336b50dcb2d86f0ff15b5f2325dda82c6cca8e0a3a2f07f9ab2305b1539c8c2f3308a7f33ff0a05278d703158156ba5080867d609d42b4449a5f597ffb051d03e9b841e9d50202ebe67ccdfb5e275383c9b63ba3133226360dfb5298c8e73579e1da2d60c4f5e45260fb779c79ed6885310b81d032bcd38fcd4029308046aab03257a33a5f98add3c448e3ec523ea7b59c16b88ee6bc314da36a0b18ef68f022859f7e1f391958cbd8b3b52cae781d1fd41f827312d2c9de4cc15c1bd86e991f4355f13"}}}}}}}, 0x0) (async) syz_extract_tcp_res$synack(&(0x7f00000001c0)={0x41424344, 0x41424344}, 0x1, 0x0) syz_extract_tcp_res(&(0x7f0000000380), 0xe8b, 0x0) (async) syz_extract_tcp_res$synack(&(0x7f0000000240)={0x41424344}, 0x1, 0x0) r2 = msgget$private(0x0, 0xfffffffffffffffd) msgsnd(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x87, 0x800) msgsnd(r2, &(0x7f00000008c0)=ANY=[@ANYBLOB="210000a75a17db"], 0xee, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) (async) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f00000025c0)) (async) ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f0000000000)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}]}) (async) msgrcv(r2, &(0x7f0000000900)=ANY=[@ANYRES16=r4, @ANYRESHEX=r2, @ANYRESHEX=r1, @ANYRES16, @ANYRES64], 0x94, 0x1, 0x800) syz_emit_ethernet(0x122, &(0x7f00000003c0)=ANY=[@ANYBLOB="000000000000fffffeffffff86dd66a9a46e00ec6ca97f62b1a420ca77b7382441cfcee1c50aff02000000000000000000000000000101400109650000001d00ff69640000000101000000cb06000001090001000105000000000000000003000138660000004e234e22", @ANYRES32=r1, @ANYRES32=0x41424344, @ANYBLOB="700200069078010105060000000000000c012487e5f60b44316c7d5bee2f42749f13a6d11963d1b434f39be69509c191c26f8d2037bcec06e2c48251c7da4e842b0733c263158804bb070299a50b729214c21fc36c4138b12dbb41177f26314ff05b25c11608644cf66d8b6335769c73ce31a0e831cd2e780d30b8d1629f10dccee89b26c212e04ddb0b21f6cdaa10c107201783a4decb3df29a910b3f2bed6a0dd60316576ba290b684ce828d95b49c"], 0x0) (async) syz_emit_ethernet(0x19b, &(0x7f0000000980)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa08004616018d006700060870907800000000000000a0010000004e234e22", @ANYRES32=0x41424344, @ANYRES32=r1, @ANYBLOB="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"], 0x0) syz_emit_ethernet(0x150, &(0x7f0000000200)={@random="5478ecbed8dd", @broadcast, @void, {@mpls_uc={0x8847, {[{0x1000, 0x0, 0x1}, {0x8, 0x0, 0x1}], @ipv6=@tcp={0x7, 0x6, "be024d", 0x112, 0x6, 0x1, @loopback, @private0, {[@routing={0x3c, 0xa, 0x0, 0x1, 0x0, [@private2, @mcast1, @empty, @remote, @ipv4={'\x00', '\xff\xff', @loopback}]}, @srh={0xff, 0x4, 0x4, 0x2, 0x0, 0x8, 0x3ff, [@mcast1, @remote]}], {{0x4e23, 0x4e21, r0, r1, 0x1, 0x0, 0x13, 0x2, 0x9, 0x0, 0x100, {[@fastopen={0x22, 0xc, "4a2deabd332f156ae94a"}, @exp_fastopen={0xfe, 0xf, 0xf989, "7637b0d5e82682d4452db7"}, @timestamp={0x8, 0xa, 0x7, 0x1}, @eol, @exp_fastopen={0xfe, 0x11, 0xf989, "9028283403e1cb62ffa9108503"}]}}, {"18545938774c5f27988903f91488d98803b9b59b98a39cad75298236ca216ab042a7bcc96ae8e29b583f02e7c87ae4cf1502acd554df6f2f7ba6f6ae256eab1ef5dba7c7afaf"}}}}}}}}, 0x0) 11:30:30 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/12, 0x8}], 0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000002100)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b26]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) close(r3) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/12, 0x8}], 0x1) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000002100)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b26]}) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) close(r3) (async) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) (async) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) (async) 11:30:30 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$mouse(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000280), 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r5 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES64=r2], 0x14}}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x47) write(r2, &(0x7f0000000000)="0553ad72e4a6bd03194e1b125e9cd0a9416df02e0e025410a7248d6813e4fe7b19c1bd5338e3ee9966b568b82c48", 0x97d08) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) 11:30:30 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000340)=ANY=[], 0xfea7) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000008, 0x1010, r1, 0x3a6ca000) (async) ioctl(r0, 0xc06c4124, &(0x7f0000000040)) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(0xffffffffffffffff, 0xc0884123, &(0x7f00000000c0)={0x0, "a0848ca654ac89cbaafe04bceae0494d8b6b03717584aeb3f69389bfbebc2a9bf2fb0fa0f694802cf754136735fba6ad8d8bc216c461dcda02f62c6f19fb413c", {0x0, 0x3}}) 11:30:30 executing program 2: r0 = fspick(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r0}, './file0/file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000100)=ANY=[@ANYBLOB="e58b193ac5f3854d01000008000000000000fb", @ANYRES32=r0, @ANYBLOB="0000109e000000002e6f66696c653000"]) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r2, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x0, 0x2, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x40804) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) setsockopt$inet_int(r2, 0x0, 0x1, &(0x7f0000000080)=0x3ff, 0x4) ioctl$sock_inet_SIOCDELRT(r2, 0x890c, &(0x7f00000001c0)={0x0, {0x2, 0x4e21, @local}, {0x2, 0x4e22, @remote}, {0x2, 0x4e21, @private=0xa010101}, 0x11, 0x0, 0x0, 0x0, 0x8f, &(0x7f00000000c0)='syzkaller1\x00', 0xfffffffffffffffd, 0x978, 0x9}) 11:30:30 executing program 2: r0 = fspick(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r0}, './file0/file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000100)=ANY=[@ANYBLOB="e58b193ac5f3854d01000008000000000000fb", @ANYRES32=r0, @ANYBLOB="0000109e000000002e6f66696c653000"]) (async, rerun: 32) r2 = socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 32) ioctl$sock_inet_SIOCDELRT(r2, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x0, 0x2, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x40804) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) setsockopt$inet_int(r2, 0x0, 0x1, &(0x7f0000000080)=0x3ff, 0x4) (async) ioctl$sock_inet_SIOCDELRT(r2, 0x890c, &(0x7f00000001c0)={0x0, {0x2, 0x4e21, @local}, {0x2, 0x4e22, @remote}, {0x2, 0x4e21, @private=0xa010101}, 0x11, 0x0, 0x0, 0x0, 0x8f, &(0x7f00000000c0)='syzkaller1\x00', 0xfffffffffffffffd, 0x978, 0x9}) 11:30:30 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r3, 0xc1004110, &(0x7f00000000c0)={0x3, [0x5, 0xfff, 0x88b], [{0x7, 0xfffffffa}, {0x7fffffff, 0x2cf6, 0x0, 0x0, 0x0, 0x1}, {0xd4, 0x2, 0x0, 0x0, 0x1, 0x1}, {0xc7, 0x4, 0x1, 0x1}, {0x490a, 0x401, 0x1, 0x0, 0x1}, {0x1ff, 0x1, 0x1}, {0x6, 0x3f, 0x1, 0x1}, {0x7ff, 0x400, 0x0, 0x1, 0x0, 0x1}, {0x8001, 0x6401, 0x1}, {0x1f, 0x4, 0x1}, {0x7, 0x81, 0x0, 0x1}, {0x3e78d5bd, 0x8, 0x0, 0x1, 0x1}], 0x6}) write$binfmt_script(r1, &(0x7f0000000340)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl(r0, 0xc06c4124, &(0x7f0000000040)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x4c7f, 0x0, 0x0, 'queue0\x00', 0x7f}) 11:30:31 executing program 5: syz_emit_ethernet(0x1b9, &(0x7f00000006c0)={@link_local, @link_local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "80488c", 0x183, 0x11, 0x1, @ipv4={'\x00', '\xff\xff', @multicast2}, @mcast1, {[@srh={0x29, 0x14, 0x4, 0xa, 0x1, 0x28, 0xff, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @remote}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}], {0x4e21, 0x4e20, 0xdb, 0x0, @gue={{0x1, 0x1, 0x0, 0x0, 0x0, @void}, "bad1cecb58a8826b6ed39a5336b50dcb2d86f0ff15b5f2325dda82c6cca8e0a3a2f07f9ab2305b1539c8c2f3308a7f33ff0a05278d703158156ba5080867d609d42b4449a5f597ffb051d03e9b841e9d50202ebe67ccdfb5e275383c9b63ba3133226360dfb5298c8e73579e1da2d60c4f5e45260fb779c79ed6885310b81d032bcd38fcd4029308046aab03257a33a5f98add3c448e3ec523ea7b59c16b88ee6bc314da36a0b18ef68f022859f7e1f391958cbd8b3b52cae781d1fd41f827312d2c9de4cc15c1bd86e991f4355f13"}}}}}}}, 0x0) syz_extract_tcp_res$synack(&(0x7f00000001c0)={0x41424344, 0x41424344}, 0x1, 0x0) (async) syz_extract_tcp_res(&(0x7f0000000380), 0xe8b, 0x0) (async) syz_extract_tcp_res$synack(&(0x7f0000000240)={0x41424344}, 0x1, 0x0) (async) r2 = msgget$private(0x0, 0xfffffffffffffffd) msgsnd(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x87, 0x800) (async, rerun: 64) msgsnd(r2, &(0x7f00000008c0)=ANY=[@ANYBLOB="210000a75a17db"], 0xee, 0x0) (async, rerun: 64) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) (async) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f00000025c0)) (async) ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f0000000000)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}]}) msgrcv(r2, &(0x7f0000000900)=ANY=[@ANYRES16=r4, @ANYRESHEX=r2, @ANYRESHEX=r1, @ANYRES16, @ANYRES64], 0x94, 0x1, 0x800) (async) syz_emit_ethernet(0x122, &(0x7f00000003c0)=ANY=[@ANYBLOB="000000000000fffffeffffff86dd66a9a46e00ec6ca97f62b1a420ca77b7382441cfcee1c50aff02000000000000000000000000000101400109650000001d00ff69640000000101000000cb06000001090001000105000000000000000003000138660000004e234e22", @ANYRES32=r1, @ANYRES32=0x41424344, @ANYBLOB="700200069078010105060000000000000c012487e5f60b44316c7d5bee2f42749f13a6d11963d1b434f39be69509c191c26f8d2037bcec06e2c48251c7da4e842b0733c263158804bb070299a50b729214c21fc36c4138b12dbb41177f26314ff05b25c11608644cf66d8b6335769c73ce31a0e831cd2e780d30b8d1629f10dccee89b26c212e04ddb0b21f6cdaa10c107201783a4decb3df29a910b3f2bed6a0dd60316576ba290b684ce828d95b49c"], 0x0) (async) syz_emit_ethernet(0x19b, &(0x7f0000000980)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa08004616018d006700060870907800000000000000a0010000004e234e22", @ANYRES32=0x41424344, @ANYRES32=r1, @ANYBLOB="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"], 0x0) (async) syz_emit_ethernet(0x150, &(0x7f0000000200)={@random="5478ecbed8dd", @broadcast, @void, {@mpls_uc={0x8847, {[{0x1000, 0x0, 0x1}, {0x8, 0x0, 0x1}], @ipv6=@tcp={0x7, 0x6, "be024d", 0x112, 0x6, 0x1, @loopback, @private0, {[@routing={0x3c, 0xa, 0x0, 0x1, 0x0, [@private2, @mcast1, @empty, @remote, @ipv4={'\x00', '\xff\xff', @loopback}]}, @srh={0xff, 0x4, 0x4, 0x2, 0x0, 0x8, 0x3ff, [@mcast1, @remote]}], {{0x4e23, 0x4e21, r0, r1, 0x1, 0x0, 0x13, 0x2, 0x9, 0x0, 0x100, {[@fastopen={0x22, 0xc, "4a2deabd332f156ae94a"}, @exp_fastopen={0xfe, 0xf, 0xf989, "7637b0d5e82682d4452db7"}, @timestamp={0x8, 0xa, 0x7, 0x1}, @eol, @exp_fastopen={0xfe, 0x11, 0xf989, "9028283403e1cb62ffa9108503"}]}}, {"18545938774c5f27988903f91488d98803b9b59b98a39cad75298236ca216ab042a7bcc96ae8e29b583f02e7c87ae4cf1502acd554df6f2f7ba6f6ae256eab1ef5dba7c7afaf"}}}}}}}}, 0x0) 11:30:31 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$mouse(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000280), 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r5 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES64=r2], 0x14}}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x47) write(r2, &(0x7f0000000000)="0553ad72e4a6bd03194e1b125e9cd0a9416df02e0e025410a7248d6813e4fe7b19c1bd5338e3ee9966b568b82c48", 0x97d08) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) 11:30:31 executing program 5: syz_emit_ethernet(0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c20000000180c200000086dd60f4d857003c3a0000000000000000000000ffff7f000001ff02000000000000000000000000000101009078000000006047e39300008800fe8000000000000000000000000000bbff0100000000000000000000000000013da468344a1af97a4754334f0e5784d7f1990c6d498be37860d58e3c9ee645e938"], 0x0) syz_emit_ethernet(0x4f, &(0x7f00000000c0)={@multicast, @remote, @val={@void, {0x8100, 0x1, 0x0, 0x2}}, {@llc={0x4, {@snap={0xaa, 0xa9, '.', "95d47f", 0xf5, "cddb7b798336652e92cf3dfc68e8373807a129be8d31ab3f8ce2e9eb3a3d87dbaac4403978494d83dfb08f802334cec94eca3872b9"}}}}}, &(0x7f0000000140)={0x0, 0x4, [0x6f9, 0x23f, 0x5d0, 0x199]}) 11:30:31 executing program 2: r0 = fspick(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r0}, './file0/file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000100)=ANY=[@ANYBLOB="e58b193ac5f3854d01000008000000000000fb", @ANYRES32=r0, @ANYBLOB="0000109e000000002e6f66696c653000"]) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r2, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x0, 0x2, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x40804) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) (async) setsockopt$inet_int(r2, 0x0, 0x1, &(0x7f0000000080)=0x3ff, 0x4) ioctl$sock_inet_SIOCDELRT(r2, 0x890c, &(0x7f00000001c0)={0x0, {0x2, 0x4e21, @local}, {0x2, 0x4e22, @remote}, {0x2, 0x4e21, @private=0xa010101}, 0x11, 0x0, 0x0, 0x0, 0x8f, &(0x7f00000000c0)='syzkaller1\x00', 0xfffffffffffffffd, 0x978, 0x9}) 11:30:31 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/12, 0x8}], 0x1) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000002100)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b26]}) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) close(r3) (async) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) (async) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 11:30:31 executing program 5: syz_emit_ethernet(0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c20000000180c200000086dd60f4d857003c3a0000000000000000000000ffff7f000001ff02000000000000000000000000000101009078000000006047e39300008800fe8000000000000000000000000000bbff0100000000000000000000000000013da468344a1af97a4754334f0e5784d7f1990c6d498be37860d58e3c9ee645e938"], 0x0) syz_emit_ethernet(0x4f, &(0x7f00000000c0)={@multicast, @remote, @val={@void, {0x8100, 0x1, 0x0, 0x2}}, {@llc={0x4, {@snap={0xaa, 0xa9, '.', "95d47f", 0xf5, "cddb7b798336652e92cf3dfc68e8373807a129be8d31ab3f8ce2e9eb3a3d87dbaac4403978494d83dfb08f802334cec94eca3872b9"}}}}}, &(0x7f0000000140)={0x0, 0x4, [0x6f9, 0x23f, 0x5d0, 0x199]}) 11:30:31 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @rand_addr=0x64010102}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) 11:30:31 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @rand_addr=0x64010102}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) 11:30:31 executing program 5: syz_emit_ethernet(0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c20000000180c200000086dd60f4d857003c3a0000000000000000000000ffff7f000001ff02000000000000000000000000000101009078000000006047e39300008800fe8000000000000000000000000000bbff0100000000000000000000000000013da468344a1af97a4754334f0e5784d7f1990c6d498be37860d58e3c9ee645e938"], 0x0) (async) syz_emit_ethernet(0x4f, &(0x7f00000000c0)={@multicast, @remote, @val={@void, {0x8100, 0x1, 0x0, 0x2}}, {@llc={0x4, {@snap={0xaa, 0xa9, '.', "95d47f", 0xf5, "cddb7b798336652e92cf3dfc68e8373807a129be8d31ab3f8ce2e9eb3a3d87dbaac4403978494d83dfb08f802334cec94eca3872b9"}}}}}, &(0x7f0000000140)={0x0, 0x4, [0x6f9, 0x23f, 0x5d0, 0x199]}) 11:30:31 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/12, 0x8}], 0x1) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) r1 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r2, 0x54a3) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 11:30:31 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$mouse(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000280), 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r5 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES64=r2], 0x14}}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x47) write(r2, &(0x7f0000000000)="0553ad72e4a6bd03194e1b125e9cd0a9416df02e0e025410a7248d6813e4fe7b19c1bd5338e3ee9966b568b82c48", 0x97d08) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) 11:30:31 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000040), 0x0, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) (async) r2 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) (async) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r3, 0xc1004110, &(0x7f00000000c0)={0x3, [0x5, 0xfff, 0x88b], [{0x7, 0xfffffffa}, {0x7fffffff, 0x2cf6, 0x0, 0x0, 0x0, 0x1}, {0xd4, 0x2, 0x0, 0x0, 0x1, 0x1}, {0xc7, 0x4, 0x1, 0x1}, {0x490a, 0x401, 0x1, 0x0, 0x1}, {0x1ff, 0x1, 0x1}, {0x6, 0x3f, 0x1, 0x1}, {0x7ff, 0x400, 0x0, 0x1, 0x0, 0x1}, {0x8001, 0x6401, 0x1}, {0x1f, 0x4, 0x1}, {0x7, 0x81, 0x0, 0x1}, {0x3e78d5bd, 0x8, 0x0, 0x1, 0x1}], 0x6}) (async) write$binfmt_script(r1, &(0x7f0000000340)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) (async) ioctl(r0, 0xc06c4124, &(0x7f0000000040)) (async) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x4c7f, 0x0, 0x0, 'queue0\x00', 0x7f}) 11:30:32 executing program 5: syz_emit_ethernet(0x7e, &(0x7f0000000080)={@link_local, @link_local, @void, {@ipv6={0x86dd, @generic={0xf, 0x6, "8fcaca", 0x48, 0x1d, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, {[], "3fa4282a921f45506405b9347d511ad159bfdfe96d6a66ad314e8dc53700ab47da6cedc4ff0f83b22a3d7782d32b501b131976ed51745fea34008f57b1b81a94c479844f8a475642"}}}}}, 0x0) syz_emit_ethernet(0xa1, &(0x7f0000000100)={@multicast, @multicast, @void, {@generic={0x8809, "3a0d160ea62323b5f180e83d9cc18231f54116033eb665741418f1323e3c9a037ff9c40863e30bb1d511b73c7234a251e528e6451e7920bb56aba90a26ce1cf03346692f199e246c9ffb16f1adade7b88878324629115a326a803e8261b61799f6adef4c2f820e6427b2c7121503ca7a03bf629f4967b6f2f499b0258dca600dbc2d1bb974d3cbbfc23c9a17ba96a5c3767a9b"}}}, &(0x7f0000000000)={0x1, 0x2, [0xdb7, 0x86c, 0xb4b, 0x694]}) 11:30:32 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @rand_addr=0x64010102}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) 11:30:32 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000040), 0x0, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r3, 0xc1004110, &(0x7f00000000c0)={0x3, [0x5, 0xfff, 0x88b], [{0x7, 0xfffffffa}, {0x7fffffff, 0x2cf6, 0x0, 0x0, 0x0, 0x1}, {0xd4, 0x2, 0x0, 0x0, 0x1, 0x1}, {0xc7, 0x4, 0x1, 0x1}, {0x490a, 0x401, 0x1, 0x0, 0x1}, {0x1ff, 0x1, 0x1}, {0x6, 0x3f, 0x1, 0x1}, {0x7ff, 0x400, 0x0, 0x1, 0x0, 0x1}, {0x8001, 0x6401, 0x1}, {0x1f, 0x4, 0x1}, {0x7, 0x81, 0x0, 0x1}, {0x3e78d5bd, 0x8, 0x0, 0x1, 0x1}], 0x6}) write$binfmt_script(r1, &(0x7f0000000340)=ANY=[], 0xfea7) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) (async) ioctl(r0, 0xc06c4124, &(0x7f0000000040)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x4c7f, 0x0, 0x0, 'queue0\x00', 0x7f}) 11:30:32 executing program 5: syz_emit_ethernet(0x7e, &(0x7f0000000080)={@link_local, @link_local, @void, {@ipv6={0x86dd, @generic={0xf, 0x6, "8fcaca", 0x48, 0x1d, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, {[], "3fa4282a921f45506405b9347d511ad159bfdfe96d6a66ad314e8dc53700ab47da6cedc4ff0f83b22a3d7782d32b501b131976ed51745fea34008f57b1b81a94c479844f8a475642"}}}}}, 0x0) syz_emit_ethernet(0xa1, &(0x7f0000000100)={@multicast, @multicast, @void, {@generic={0x8809, "3a0d160ea62323b5f180e83d9cc18231f54116033eb665741418f1323e3c9a037ff9c40863e30bb1d511b73c7234a251e528e6451e7920bb56aba90a26ce1cf03346692f199e246c9ffb16f1adade7b88878324629115a326a803e8261b61799f6adef4c2f820e6427b2c7121503ca7a03bf629f4967b6f2f499b0258dca600dbc2d1bb974d3cbbfc23c9a17ba96a5c3767a9b"}}}, &(0x7f0000000000)={0x1, 0x2, [0xdb7, 0x86c, 0xb4b, 0x694]}) 11:30:32 executing program 1: syz_emit_ethernet(0x1b9, &(0x7f00000006c0)={@link_local, @link_local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "80488c", 0x183, 0x11, 0x1, @ipv4={'\x00', '\xff\xff', @multicast2}, @mcast1, {[@srh={0x29, 0x14, 0x4, 0xa, 0x1, 0x28, 0xff, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @remote}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}], {0x4e21, 0x4e20, 0xdb, 0x0, @gue={{0x1, 0x1, 0x0, 0x0, 0x0, @void}, "bad1cecb58a8826b6ed39a5336b50dcb2d86f0ff15b5f2325dda82c6cca8e0a3a2f07f9ab2305b1539c8c2f3308a7f33ff0a05278d703158156ba5080867d609d42b4449a5f597ffb051d03e9b841e9d50202ebe67ccdfb5e275383c9b63ba3133226360dfb5298c8e73579e1da2d60c4f5e45260fb779c79ed6885310b81d032bcd38fcd4029308046aab03257a33a5f98add3c448e3ec523ea7b59c16b88ee6bc314da36a0b18ef68f022859f7e1f391958cbd8b3b52cae781d1fd41f827312d2c9de4cc15c1bd86e991f4355f13"}}}}}}}, 0x0) syz_extract_tcp_res$synack(&(0x7f00000001c0)={0x41424344, 0x41424344}, 0x1, 0x0) syz_extract_tcp_res(&(0x7f0000000380), 0xe8b, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000240)={0x41424344}, 0x1, 0x0) r2 = msgget$private(0x0, 0xfffffffffffffffd) msgsnd(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x87, 0x800) msgsnd(r2, &(0x7f00000008c0)=ANY=[@ANYBLOB="210000a75a17db"], 0xee, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f00000025c0)) ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f0000000000)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}]}) msgrcv(r2, &(0x7f0000000900)=ANY=[@ANYRES16=r4, @ANYRESHEX=r2, @ANYRESHEX=r1, @ANYRES16, @ANYRES64], 0x94, 0x1, 0x800) syz_emit_ethernet(0x122, &(0x7f00000003c0)=ANY=[@ANYBLOB="000000000000fffffeffffff86dd66a9a46e00ec6ca97f62b1a420ca77b7382441cfcee1c50aff02000000000000000000000000000101400109650000001d00ff69640000000101000000cb06000001090001000105000000000000000003000138660000004e234e22", @ANYRES32=r1, @ANYRES32=0x41424344, @ANYBLOB="700200069078010105060000000000000c012487e5f60b44316c7d5bee2f42749f13a6d11963d1b434f39be69509c191c26f8d2037bcec06e2c48251c7da4e842b0733c263158804bb070299a50b729214c21fc36c4138b12dbb41177f26314ff05b25c11608644cf66d8b6335769c73ce31a0e831cd2e780d30b8d1629f10dccee89b26c212e04ddb0b21f6cdaa10c107201783a4decb3df29a910b3f2bed6a0dd60316576ba290b684ce828d95b49c"], 0x0) syz_emit_ethernet(0x19b, &(0x7f0000000980)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa08004616018d006700060870907800000000000000a0010000004e234e22", @ANYRES32=0x41424344, @ANYRES32=r1, @ANYBLOB="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"], 0x0) syz_emit_ethernet(0x150, &(0x7f0000000200)={@random="5478ecbed8dd", @broadcast, @void, {@mpls_uc={0x8847, {[{0x1000, 0x0, 0x1}, {0x8, 0x0, 0x1}], @ipv6=@tcp={0x7, 0x6, "be024d", 0x112, 0x6, 0x1, @loopback, @private0, {[@routing={0x3c, 0xa, 0x0, 0x1, 0x0, [@private2, @mcast1, @empty, @remote, @ipv4={'\x00', '\xff\xff', @loopback}]}, @srh={0xff, 0x4, 0x4, 0x2, 0x0, 0x8, 0x3ff, [@mcast1, @remote]}], {{0x4e23, 0x4e21, r0, r1, 0x1, 0x0, 0x13, 0x2, 0x9, 0x0, 0x100, {[@fastopen={0x22, 0xc, "4a2deabd332f156ae94a"}, @exp_fastopen={0xfe, 0xf, 0xf989, "7637b0d5e82682d4452db7"}, @timestamp={0x8, 0xa, 0x7, 0x1}, @eol, @exp_fastopen={0xfe, 0x11, 0xf989, "9028283403e1cb62ffa9108503"}]}}, {"18545938774c5f27988903f91488d98803b9b59b98a39cad75298236ca216ab042a7bcc96ae8e29b583f02e7c87ae4cf1502acd554df6f2f7ba6f6ae256eab1ef5dba7c7afaf"}}}}}}}}, 0x0) 11:30:32 executing program 5: syz_emit_ethernet(0x7e, &(0x7f0000000080)={@link_local, @link_local, @void, {@ipv6={0x86dd, @generic={0xf, 0x6, "8fcaca", 0x48, 0x1d, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, {[], "3fa4282a921f45506405b9347d511ad159bfdfe96d6a66ad314e8dc53700ab47da6cedc4ff0f83b22a3d7782d32b501b131976ed51745fea34008f57b1b81a94c479844f8a475642"}}}}}, 0x0) (async) syz_emit_ethernet(0xa1, &(0x7f0000000100)={@multicast, @multicast, @void, {@generic={0x8809, "3a0d160ea62323b5f180e83d9cc18231f54116033eb665741418f1323e3c9a037ff9c40863e30bb1d511b73c7234a251e528e6451e7920bb56aba90a26ce1cf03346692f199e246c9ffb16f1adade7b88878324629115a326a803e8261b61799f6adef4c2f820e6427b2c7121503ca7a03bf629f4967b6f2f499b0258dca600dbc2d1bb974d3cbbfc23c9a17ba96a5c3767a9b"}}}, &(0x7f0000000000)={0x1, 0x2, [0xdb7, 0x86c, 0xb4b, 0x694]}) 11:30:32 executing program 2: setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f00000000c0)=0x5, 0x4) socket$inet_tcp(0x2, 0x1, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x80002, 0x4000) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$amidi(&(0x7f0000000100), 0x8, 0x200) setsockopt$inet_tcp_int(r1, 0x6, 0x22, &(0x7f0000000000)=0x5, 0x4) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 11:30:32 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000340)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl(r0, 0xc06c4124, &(0x7f00000000c0)="e3bec16801e26b4c574add0ef596f91c7dc5c7a58092618f7e350be35c3ecba2af1b421f4657978b4fe680ceba7e76fe437317969d2aaa163836183157e2255087cdccfe2d22422a4e65893b3dbd2ab61b9da3c4add5cc3116c73548ac47d0fd7160c446f689eb0eea881f352a7988465e9dc39ef69fef99019c5ac27071930595c4de7d2fab763dbe9a04926aa80579cd05b54f43716c61ec389a3c9d53893ce5bc7aafeb3097d20501444e84f1c7") 11:30:32 executing program 2: setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f00000000c0)=0x5, 0x4) socket$inet_tcp(0x2, 0x1, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x80002, 0x4000) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$amidi(&(0x7f0000000100), 0x8, 0x200) setsockopt$inet_tcp_int(r1, 0x6, 0x22, &(0x7f0000000000)=0x5, 0x4) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f00000000c0)=0x5, 0x4) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x80002, 0x4000) (async) dup(r0) (async) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) syz_open_dev$amidi(&(0x7f0000000100), 0x8, 0x200) (async) setsockopt$inet_tcp_int(r1, 0x6, 0x22, &(0x7f0000000000)=0x5, 0x4) (async) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) 11:30:32 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000040), 0x0, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000340)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) (async) ioctl(r0, 0xc06c4124, &(0x7f00000000c0)="e3bec16801e26b4c574add0ef596f91c7dc5c7a58092618f7e350be35c3ecba2af1b421f4657978b4fe680ceba7e76fe437317969d2aaa163836183157e2255087cdccfe2d22422a4e65893b3dbd2ab61b9da3c4add5cc3116c73548ac47d0fd7160c446f689eb0eea881f352a7988465e9dc39ef69fef99019c5ac27071930595c4de7d2fab763dbe9a04926aa80579cd05b54f43716c61ec389a3c9d53893ce5bc7aafeb3097d20501444e84f1c7") 11:30:33 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000340)=ANY=[], 0xfea7) r2 = accept4$alg(r1, 0x0, 0x0, 0x80c00) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x9, 0x1010, r2, 0xe1f7000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r0, 0xc0884123, &(0x7f00000000c0)={0x2, "2dbea7119c026ebfb0bfd4a012691f842d442859b84a12bc56c3e521b3fa2120f5f9c328f29baf63e779e08c87c70369a1125c7f738b234c4533105006bfcf76", {0x63058a81, 0xff}}) ioctl(r0, 0xc06c4124, &(0x7f0000000040)) 11:30:33 executing program 5: syz_emit_ethernet(0x22, &(0x7f0000000040)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @val={@void}, {@can={0xc, {{0x3, 0x1, 0x1}, 0x7, 0x1, 0x0, 0x0, "c3132d40e4710c71"}}}}, 0x0) syz_emit_ethernet(0x2f, &(0x7f0000000000)={@remote, @random="4b4721027d1a", @void, {@llc={0x4, {@snap={0x54, 0x0, "d277", "ecf4b3", 0x6007, "dbc28796c8d2336c62c2e9504f8ee657d65450c4091812ff"}}}}}, 0x0) 11:30:33 executing program 2: setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f00000000c0)=0x5, 0x4) socket$inet_tcp(0x2, 0x1, 0x0) (async) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x80002, 0x4000) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) syz_open_dev$amidi(&(0x7f0000000100), 0x8, 0x200) (async) setsockopt$inet_tcp_int(r1, 0x6, 0x22, &(0x7f0000000000)=0x5, 0x4) (async) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 11:30:33 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/12, 0x8}], 0x1) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) (async, rerun: 64) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) (async, rerun: 64) r1 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) (async, rerun: 32) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r2, 0x54a3) (async, rerun: 32) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 11:30:33 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000040), 0x40, 0x42a00) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000340)=ANY=[], 0xfea7) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af25, &(0x7f0000000000)) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x10400, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r2, 0x50009417, &(0x7f00000004c0)={{r3}, 0x0, 0x4, @inherit={0x78, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000000000000006007c0000000000ff0100000000000000020000000000070000000000000000ff070000000000003f000000000000000000000009000000000000000900884352a024e99be8cceced02000000000000000400000000050000000000000000000000000029caf9537cad4a16b28af2ea3303485ee8c7e2ef8a867b06472e4a7a7a7e6af907b99f89b007fe59884627962e051ff9bcc6017bd4b7cfe4f08a7554bce19ecfd89d1cbfe029d2d851f3d19a97bf498887a63885ccd1721cb07e481e95aca42e60c2c9a54b0e42f1181d9e5fc50852aa637a4f0fd98a90"]}, @devid}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000001cc0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, &(0x7f00000003c0)=ANY=[@ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00', @ANYRESDEC=r4, @ANYBLOB="3a6d61783cbfeea54b57764258d1835b99b01d0d266d1ea40f00f8e782a2c043c4dfeb7175b90667318583950314d5ff65551dce5bc56c7f978f22aeabc089a2a1f398ed55fe663ba9ed1eea2892dc6a7244a2ef06e29fbdc5025e9d5aba9f4875d454320530f47fb6588c55f8db365edde48268fff8147dc2a5e3a48d8df3030d0251d8ee5a1567bdd48d8ee90808ed9de1f2594a7b249710d555a46aaa3500"]) ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af24, &(0x7f0000000000)) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f00000014c0)={0x0, r3}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000780)={r4, 0x8, 0x0, [0x10001, 0xfffffffffffffff8, 0x4, 0xa0f5, 0x9], [0x7fffffff, 0x9, 0x80000000, 0x4, 0x1000, 0x5, 0xb53f, 0x8000, 0x8, 0x7fffffff, 0x80000001, 0x3, 0x5, 0x9, 0x469, 0xfffffffffffffffd, 0x0, 0x7, 0x5, 0x7, 0x4, 0xbfbc, 0xfffffffffffffffc, 0x2, 0x20, 0x7, 0x8000000000000000, 0x4, 0x7fffffff, 0x8000, 0x1, 0x8, 0xa9b, 0x9, 0x7273, 0x5, 0x7, 0x3ff, 0xfff, 0x3f, 0x3ff, 0x3f, 0x0, 0x6, 0x8, 0xa8a2, 0x1, 0xfffffffffffffe00, 0xff, 0x4de7, 0x5, 0xfffffffffffffffb, 0x7fff, 0x1, 0x4, 0x395, 0x0, 0x2, 0x6f, 0x6e, 0x0, 0x81, 0x7, 0x80000000, 0x101, 0x3f, 0x2, 0x0, 0x0, 0x8, 0x0, 0x5, 0x9, 0xaf, 0x6, 0x6908, 0x9, 0xff, 0x3f, 0x8, 0x4, 0x800, 0xa200, 0x6, 0x8, 0x2, 0x3, 0x40, 0x7f800000000, 0x5, 0x1, 0x8, 0x719, 0x8001, 0x53, 0x1, 0xb5c6, 0x20000000, 0x8000, 0x1, 0x2b, 0x7ff, 0x2, 0x8000, 0x100000001, 0x8, 0x8, 0x6, 0x0, 0x2, 0x3ff, 0x200, 0x0, 0x80000001, 0x3ff, 0x5, 0x8, 0x3e, 0x7, 0xa5, 0x921]}) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000140)={r4, 0x38000000000000, 0x401, 0x1}) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1, 0x10012, r0, 0x0) ioctl(r0, 0xc06c4124, &(0x7f0000000040)) r5 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) splice(r5, &(0x7f00000000c0)=0x4, r5, &(0x7f0000000100)=0x8, 0x86a, 0x2) r6 = dup(r5) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0x1) read$watch_queue(r6, &(0x7f0000000000)=""/10, 0xa) 11:30:33 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000340)=ANY=[], 0xfea7) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) (async) ioctl(r0, 0xc06c4124, &(0x7f00000000c0)="e3bec16801e26b4c574add0ef596f91c7dc5c7a58092618f7e350be35c3ecba2af1b421f4657978b4fe680ceba7e76fe437317969d2aaa163836183157e2255087cdccfe2d22422a4e65893b3dbd2ab61b9da3c4add5cc3116c73548ac47d0fd7160c446f689eb0eea881f352a7988465e9dc39ef69fef99019c5ac27071930595c4de7d2fab763dbe9a04926aa80579cd05b54f43716c61ec389a3c9d53893ce5bc7aafeb3097d20501444e84f1c7") 11:30:33 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r3 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x3c, r2, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r3}]}, 0x3c}}, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, r2, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private2}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DEBUG={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x200088c5}, 0x20000000) 11:30:33 executing program 5: syz_emit_ethernet(0x22, &(0x7f0000000040)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @val={@void}, {@can={0xc, {{0x3, 0x1, 0x1}, 0x7, 0x1, 0x0, 0x0, "c3132d40e4710c71"}}}}, 0x0) (async) syz_emit_ethernet(0x2f, &(0x7f0000000000)={@remote, @random="4b4721027d1a", @void, {@llc={0x4, {@snap={0x54, 0x0, "d277", "ecf4b3", 0x6007, "dbc28796c8d2336c62c2e9504f8ee657d65450c4091812ff"}}}}}, 0x0) 11:30:33 executing program 2: fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0xffff, r2}, [@IFLA_CARRIER={0x5}]}, 0x28}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f00000000c0)={'ip6_vti0\x00', 0x0, 0x2f, 0x0, 0x4e, 0x8, 0x18, @rand_addr=' \x01\x00', @mcast2, 0x80, 0x700, 0x134a, 0x2}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'ip6_vti0\x00', &(0x7f0000000200)={'ip6tnl0\x00', 0x0, 0x2f, 0x6, 0x35, 0x40, 0x24, @private0={0xfc, 0x0, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x40, 0x8, 0x81, 0x40}}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0xffff, r7}, [@IFLA_CARRIER={0x5}]}, 0x28}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)=@RTM_NEWMDB={0xd8, 0x54, 0x4, 0x70bd27, 0x25dfdbff, {0x7, r2}, [@MDBA_SET_ENTRY={0x20, 0x1, {r3, 0x1, 0x3, 0x2, {@in6_addr=@empty, 0x8edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x1, 0x1, 0x3, {@in6_addr=@remote, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x3, 0x2, {@ip4=@empty}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r7, 0x0, 0x0, 0x4, {@ip4=@loopback, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x1, 0x0, {@in6_addr=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x3, 0x0, {@in6_addr=@private2={0xfc, 0x2, '\x00', 0x1}}}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4001}, 0x48000) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r8, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) 11:30:33 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/12, 0x8}], 0x1) (async, rerun: 64) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) (async, rerun: 64) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) (async, rerun: 64) r1 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) (rerun: 64) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r2, 0x54a3) (async, rerun: 32) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) (async, rerun: 32) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 11:30:33 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000040), 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140), 0x8001, 0x0) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r1, 0xc0884123, &(0x7f0000000180)={0x6, "89f7acca3469b1f45db09e16f732fd78049bdf772136ceea9ff5126aec7ff187cd109ff694bd2ad081469db3e364d1dda11a018665423fb9e536f75b4ca7633d", {0x7, 0x7f}}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000340)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x1158c0, 0x0) splice(r3, &(0x7f00000000c0), r0, &(0x7f0000000100)=0x1, 0x100, 0x5) pipe(&(0x7f0000000240)={0xffffffffffffffff}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000002100)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b26]}) pipe2(&(0x7f0000000300)={0xffffffffffffffff}, 0x80880) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl(r7, 0xc06c4124, &(0x7f0000000040)) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f00000002c0)={0x0, 0x1, 0x2, 0xfa8}) 11:30:33 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000340)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl(r0, 0xc06c4124, &(0x7f0000000040)) getsockname$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000380)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0xffff, r5}, [@IFLA_CARRIER={0x5}]}, 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="280000001000010000000000000000000000ffff", @ANYRES32=r8, @ANYBLOB="07000000000000000500210000000000"], 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0xffff, r11}, [@IFLA_CARRIER={0x5}]}, 0x28}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000440)={'syztnl1\x00', &(0x7f00000003c0)={'ip6tnl0\x00', 0x0, 0x2f, 0x3, 0x4, 0x6a, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, @remote, 0x8060, 0x10, 0x7, 0x35}}) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000001b80)={0xa88, 0x0, 0x100, 0x70bd27, 0x25dfdbff, {}, [{{0x8}, {0x224, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2fa}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xc7}}}]}}, {{0x8}, {0x130, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x800}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x81}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x100, 0x2, 0x0, 0x1, [{0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x1, 0x0, 0x6, 0x40}, {0x7f, 0x0, 0x5, 0x8}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}]}}, {{0x8}, {0xf0, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffd}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x1c8, 0x2, 0x0, 0x1, [{0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x1ff, 0x5, 0x0, 0x4}, {0xf1f, 0xbd, 0x7, 0x80000000}, {0x1, 0x9, 0x3, 0xffffffff}, {0x7, 0x5, 0x3, 0x9}, {0x8, 0xb6, 0x3, 0x6}]}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xc164}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xff}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffff3d4}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}, {{0x8, 0x1, r2}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x220, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x63e}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x800}}, {0x8}}}]}}, {{0x8}, {0x4}}, {{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r12}}}]}}]}, 0xa88}}, 0x4008080) 11:30:33 executing program 5: syz_emit_ethernet(0x22, &(0x7f0000000040)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @val={@void}, {@can={0xc, {{0x3, 0x1, 0x1}, 0x7, 0x1, 0x0, 0x0, "c3132d40e4710c71"}}}}, 0x0) (async) syz_emit_ethernet(0x2f, &(0x7f0000000000)={@remote, @random="4b4721027d1a", @void, {@llc={0x4, {@snap={0x54, 0x0, "d277", "ecf4b3", 0x6007, "dbc28796c8d2336c62c2e9504f8ee657d65450c4091812ff"}}}}}, 0x0) 11:30:33 executing program 5: r0 = socket(0xa, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) setsockopt$inet_dccp_int(r0, 0x88, 0x6, 0x0, 0x0) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x101081, 0x0) ioctl$SNDCTL_DSP_GETBLKSIZE(r3, 0xc0045004, &(0x7f0000000100)) fgetxattr(0xffffffffffffffff, &(0x7f0000000000)=@random={'osx.', '\x00'}, &(0x7f0000000040)=""/54, 0x36) syz_emit_ethernet(0x72, &(0x7f00000001c0)={@link_local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4d857", 0x3c, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "47e393", 0x0, 0x88, 0x0, @remote, @mcast1, [], "3da468344a1af97a4754334f"}}}}}}}, 0x0) 11:30:33 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$mouse(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000280), 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r5 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES64=r2], 0x14}}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x47) write(0xffffffffffffffff, &(0x7f0000000000)="0553ad72e4a6bd03194e1b125e9cd0a9416df02e0e025410a7248d6813e4fe7b19c1bd5338e3ee9966b568b82c48", 0x97d08) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 11:30:33 executing program 2: fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0xffff, r2}, [@IFLA_CARRIER={0x5}]}, 0x28}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f00000000c0)={'ip6_vti0\x00', 0x0, 0x2f, 0x0, 0x4e, 0x8, 0x18, @rand_addr=' \x01\x00', @mcast2, 0x80, 0x700, 0x134a, 0x2}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'ip6_vti0\x00', &(0x7f0000000200)={'ip6tnl0\x00', 0x0, 0x2f, 0x6, 0x35, 0x40, 0x24, @private0={0xfc, 0x0, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x40, 0x8, 0x81, 0x40}}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0xffff, r7}, [@IFLA_CARRIER={0x5}]}, 0x28}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)=@RTM_NEWMDB={0xd8, 0x54, 0x4, 0x70bd27, 0x25dfdbff, {0x7, r2}, [@MDBA_SET_ENTRY={0x20, 0x1, {r3, 0x1, 0x3, 0x2, {@in6_addr=@empty, 0x8edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x1, 0x1, 0x3, {@in6_addr=@remote, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x3, 0x2, {@ip4=@empty}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r7, 0x0, 0x0, 0x4, {@ip4=@loopback, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x1, 0x0, {@in6_addr=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x3, 0x0, {@in6_addr=@private2={0xfc, 0x2, '\x00', 0x1}}}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4001}, 0x48000) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r8, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, 0x2) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6(0xa, 0x1000000000002, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'syz_tun\x00'}) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0xffff, r2}, [@IFLA_CARRIER={0x5}]}, 0x28}}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f00000000c0)={'ip6_vti0\x00', 0x0, 0x2f, 0x0, 0x4e, 0x8, 0x18, @rand_addr=' \x01\x00', @mcast2, 0x80, 0x700, 0x134a, 0x2}}) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'ip6_vti0\x00', &(0x7f0000000200)={'ip6tnl0\x00', 0x0, 0x2f, 0x6, 0x35, 0x40, 0x24, @private0={0xfc, 0x0, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x40, 0x8, 0x81, 0x40}}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6(0xa, 0x1000000000002, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'syz_tun\x00'}) (async) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0xffff, r7}, [@IFLA_CARRIER={0x5}]}, 0x28}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)=@RTM_NEWMDB={0xd8, 0x54, 0x4, 0x70bd27, 0x25dfdbff, {0x7, r2}, [@MDBA_SET_ENTRY={0x20, 0x1, {r3, 0x1, 0x3, 0x2, {@in6_addr=@empty, 0x8edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x1, 0x1, 0x3, {@in6_addr=@remote, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x3, 0x2, {@ip4=@empty}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r7, 0x0, 0x0, 0x4, {@ip4=@loopback, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x1, 0x0, {@in6_addr=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x3, 0x0, {@in6_addr=@private2={0xfc, 0x2, '\x00', 0x1}}}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4001}, 0x48000) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) ioctl$sock_inet_SIOCDELRT(r8, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) (async) 11:30:33 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000040), 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140), 0x8001, 0x0) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r1, 0xc0884123, &(0x7f0000000180)={0x6, "89f7acca3469b1f45db09e16f732fd78049bdf772136ceea9ff5126aec7ff187cd109ff694bd2ad081469db3e364d1dda11a018665423fb9e536f75b4ca7633d", {0x7, 0x7f}}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000340)=ANY=[], 0xfea7) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x1158c0, 0x0) splice(r3, &(0x7f00000000c0), r0, &(0x7f0000000100)=0x1, 0x100, 0x5) pipe(&(0x7f0000000240)={0xffffffffffffffff}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) (async) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000002100)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b26]}) (async) pipe2(&(0x7f0000000300)={0xffffffffffffffff}, 0x80880) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) (async) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl(r7, 0xc06c4124, &(0x7f0000000040)) (async) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f00000002c0)={0x0, 0x1, 0x2, 0xfa8}) 11:30:33 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x80000) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/12, 0x8}], 0x1) r1 = signalfd(r0, &(0x7f0000000080)={[0xa998]}, 0x8) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r1, 0x111, 0x3, 0x1, 0x4) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f00000025c0)) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000002880)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x37, 0x0, 0x0, 0x0, 0x3, 0x7}, {0x3, 0x7d78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xe0}, {0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000000000}]}) readv(r3, &(0x7f0000000380)=[{&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000000180)=""/88, 0x58}, {&(0x7f00000000c0)=""/43, 0x2b}, {&(0x7f0000000200)=""/103, 0x67}, {&(0x7f0000000280)=""/97, 0x61}, {&(0x7f0000000300)=""/83, 0x53}, {&(0x7f0000001600)=""/4096, 0x1000}], 0x7) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f00000002c0)=0x1) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000180)={0x2}) write$eventfd(0xffffffffffffffff, &(0x7f0000000040)=0xfffffffffffffffe, 0x8) io_submit(0x0, 0x3, &(0x7f0000002840)=[&(0x7f0000000400)={0x0, 0x0, 0x0, 0x6, 0x6, r2, &(0x7f00000004c0)="95f6d391ae58ac9ed2c55313cb5e46fa011df39a5868f66c928c51b8e88ef5aa75ca5dd3535ac0065fd6017c641a42a5c0b2fbcc2e65208a6a35d701e65d585a783a8f5b6f5d78578f69ebb5e7566f60bf1fc1c3e374197689ae6312f3d4fe2081cb7d16b47261828fa168199743224a92cec369b810a9db337d05ca15fd1be883ded4f90965334303d142daceda38b65eef6c0a38ffb6a72b599acb69dc812acc2845fa11510d4bb0c888d798c91c0ee92fe0e83e5f96c2e6504b250e2fc0925c547011e667188eb6250a70c439723e457b03e9cb94d886aa367557c15d88172358fa02e98f287fc53ff63d3fef9489c88b2b24f59aee2106", 0xf9, 0xd913, 0x0, 0x1}, &(0x7f00000026c0)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f0000002640)="21f98f3326cc8f660e4b102dca13923e8e3ce46952ae20c7ddc650a0f02f92b6049a15e8c4f8eb02f29ad2c102d8f21c2cdd964d583b83b66fd9573c2622b2d25f5e6f72752f65c78b4970ae80dbf679efab38800def8b87ade3c19d6131ac6737d13675d5fb11b30580c99957fdcdb1fb9cab5a", 0x74, 0x3, 0x0, 0x2, r1}, &(0x7f0000002800)={0x0, 0x0, 0x0, 0x8, 0x8, 0xffffffffffffffff, &(0x7f0000002740)="55b8cbfd7d8c7690eed35c10dd596d38e3d393782c80b216715021a60ca8fdb9fadad87f151377e9ff234ebf4eeb4549bd25322a22be11719b6e40b056a680360889b20aeff2cb70ac9660312d5d1b731566641ef62082b2ebda7de525004c365b9d2dc39b5f2ba59f84e63ebdabdb626295a994dc24091ee8aef67b378768358e3b7d654e20e0dc58dbd3c6c28c6ae41c987705101d07f8b1e8a8b48f6766732a6fb62e8ac0f7afb0c3cffa83a833391bcb61efc3a5a0", 0xb7, 0x1, 0x0, 0x1}]) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 11:30:33 executing program 2: fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0xffff, r2}, [@IFLA_CARRIER={0x5}]}, 0x28}}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f00000000c0)={'ip6_vti0\x00', 0x0, 0x2f, 0x0, 0x4e, 0x8, 0x18, @rand_addr=' \x01\x00', @mcast2, 0x80, 0x700, 0x134a, 0x2}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'ip6_vti0\x00', &(0x7f0000000200)={'ip6tnl0\x00', 0x0, 0x2f, 0x6, 0x35, 0x40, 0x24, @private0={0xfc, 0x0, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x40, 0x8, 0x81, 0x40}}) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0xffff, r7}, [@IFLA_CARRIER={0x5}]}, 0x28}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)=@RTM_NEWMDB={0xd8, 0x54, 0x4, 0x70bd27, 0x25dfdbff, {0x7, r2}, [@MDBA_SET_ENTRY={0x20, 0x1, {r3, 0x1, 0x3, 0x2, {@in6_addr=@empty, 0x8edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x1, 0x1, 0x3, {@in6_addr=@remote, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x3, 0x2, {@ip4=@empty}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r7, 0x0, 0x0, 0x4, {@ip4=@loopback, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x1, 0x0, {@in6_addr=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x3, 0x0, {@in6_addr=@private2={0xfc, 0x2, '\x00', 0x1}}}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4001}, 0x48000) (async) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r8, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) 11:30:33 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000040), 0x0, 0x0) (async) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140), 0x8001, 0x0) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r1, 0xc0884123, &(0x7f0000000180)={0x6, "89f7acca3469b1f45db09e16f732fd78049bdf772136ceea9ff5126aec7ff187cd109ff694bd2ad081469db3e364d1dda11a018665423fb9e536f75b4ca7633d", {0x7, 0x7f}}) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000340)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x1158c0, 0x0) splice(r3, &(0x7f00000000c0), r0, &(0x7f0000000100)=0x1, 0x100, 0x5) pipe(&(0x7f0000000240)={0xffffffffffffffff}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) (async) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000002100)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b26]}) (async) pipe2(&(0x7f0000000300)={0xffffffffffffffff}, 0x80880) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async) ioctl(r7, 0xc06c4124, &(0x7f0000000040)) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f00000002c0)={0x0, 0x1, 0x2, 0xfa8}) 11:30:33 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$mouse(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000280), 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r5 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES64], 0x14}}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x47) write(r2, &(0x7f0000000000)="0553ad72e4a6bd03194e1b125e9cd0a9416df02e0e025410a7248d6813e4fe7b19c1bd5338e3ee9966b568b82c48", 0x97d08) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 11:30:33 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x4e23, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) r1 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x234380) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000000)=[{0x7ff, 0x9, 0x4, 0x1}, {0x3f6, 0xcb, 0x7, 0x401}]}, 0x10) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f0000000040)) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000100)) 11:30:33 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x80000) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/12, 0x8}], 0x1) (async) r1 = signalfd(r0, &(0x7f0000000080)={[0xa998]}, 0x8) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r1, 0x111, 0x3, 0x1, 0x4) (async) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) (async) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f00000025c0)) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000002880)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x37, 0x0, 0x0, 0x0, 0x3, 0x7}, {0x3, 0x7d78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xe0}, {0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000000000}]}) (async) readv(r3, &(0x7f0000000380)=[{&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000000180)=""/88, 0x58}, {&(0x7f00000000c0)=""/43, 0x2b}, {&(0x7f0000000200)=""/103, 0x67}, {&(0x7f0000000280)=""/97, 0x61}, {&(0x7f0000000300)=""/83, 0x53}, {&(0x7f0000001600)=""/4096, 0x1000}], 0x7) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) (async) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f00000002c0)=0x1) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000180)={0x2}) (async) write$eventfd(0xffffffffffffffff, &(0x7f0000000040)=0xfffffffffffffffe, 0x8) (async) io_submit(0x0, 0x3, &(0x7f0000002840)=[&(0x7f0000000400)={0x0, 0x0, 0x0, 0x6, 0x6, r2, &(0x7f00000004c0)="95f6d391ae58ac9ed2c55313cb5e46fa011df39a5868f66c928c51b8e88ef5aa75ca5dd3535ac0065fd6017c641a42a5c0b2fbcc2e65208a6a35d701e65d585a783a8f5b6f5d78578f69ebb5e7566f60bf1fc1c3e374197689ae6312f3d4fe2081cb7d16b47261828fa168199743224a92cec369b810a9db337d05ca15fd1be883ded4f90965334303d142daceda38b65eef6c0a38ffb6a72b599acb69dc812acc2845fa11510d4bb0c888d798c91c0ee92fe0e83e5f96c2e6504b250e2fc0925c547011e667188eb6250a70c439723e457b03e9cb94d886aa367557c15d88172358fa02e98f287fc53ff63d3fef9489c88b2b24f59aee2106", 0xf9, 0xd913, 0x0, 0x1}, &(0x7f00000026c0)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f0000002640)="21f98f3326cc8f660e4b102dca13923e8e3ce46952ae20c7ddc650a0f02f92b6049a15e8c4f8eb02f29ad2c102d8f21c2cdd964d583b83b66fd9573c2622b2d25f5e6f72752f65c78b4970ae80dbf679efab38800def8b87ade3c19d6131ac6737d13675d5fb11b30580c99957fdcdb1fb9cab5a", 0x74, 0x3, 0x0, 0x2, r1}, &(0x7f0000002800)={0x0, 0x0, 0x0, 0x8, 0x8, 0xffffffffffffffff, &(0x7f0000002740)="55b8cbfd7d8c7690eed35c10dd596d38e3d393782c80b216715021a60ca8fdb9fadad87f151377e9ff234ebf4eeb4549bd25322a22be11719b6e40b056a680360889b20aeff2cb70ac9660312d5d1b731566641ef62082b2ebda7de525004c365b9d2dc39b5f2ba59f84e63ebdabdb626295a994dc24091ee8aef67b378768358e3b7d654e20e0dc58dbd3c6c28c6ae41c987705101d07f8b1e8a8b48f6766732a6fb62e8ac0f7afb0c3cffa83a833391bcb61efc3a5a0", 0xb7, 0x1, 0x0, 0x1}]) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 11:30:33 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000340)=ANY=[], 0xfea7) sendmsg$TIPC_NL_KEY_FLUSH(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c010000", @ANYRES16=0x0, @ANYBLOB="04002dbd7000fbdbdf25180000000c00038008000200010000006c0004802400078008000200dc000000080001000900000008000300ce86f83908000100200000002c0007800800010011000000080001000a000000080004000300000008000400ff07000008000400020000000900010073797a31000004000000010073797a30000000000c0009800800010081000000940001800d0001007564703a73797a300000000008000300010000000c0002800800030007000000150001006574683a7465616d5f736c6176655f30000000004400028008000300070000000800010020000000080004000600000008000400e2b8000008000200350000000800040003000000080001000b00000008000200020000000d0001007564703a73797a3000000000100001800c0002800802020001000000"], 0x13c}, 0x1, 0x0, 0x0, 0x4094}, 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = signalfd4(r1, &(0x7f00000002c0)={[0x7fffffffffffffff]}, 0x8, 0x80000) ioctl$AUTOFS_DEV_IOCTL_VERSION(r5, 0xc0189371, &(0x7f0000000300)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f00000025c0)) ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f0000000000)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}]}) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0xc, 0x12, r4, 0xee51b000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000340)={0x4, 0x7fffffffffffffff, 0x2}) ioctl(r0, 0xc06c4124, &(0x7f0000000040)) 11:30:33 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x80000) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/12, 0x8}], 0x1) r1 = signalfd(r0, &(0x7f0000000080)={[0xa998]}, 0x8) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r1, 0x111, 0x3, 0x1, 0x4) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f00000025c0)) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000002880)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x37, 0x0, 0x0, 0x0, 0x3, 0x7}, {0x3, 0x7d78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xe0}, {0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000000000}]}) readv(r3, &(0x7f0000000380)=[{&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000000180)=""/88, 0x58}, {&(0x7f00000000c0)=""/43, 0x2b}, {&(0x7f0000000200)=""/103, 0x67}, {&(0x7f0000000280)=""/97, 0x61}, {&(0x7f0000000300)=""/83, 0x53}, {&(0x7f0000001600)=""/4096, 0x1000}], 0x7) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f00000002c0)=0x1) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000180)={0x2}) write$eventfd(0xffffffffffffffff, &(0x7f0000000040)=0xfffffffffffffffe, 0x8) io_submit(0x0, 0x3, &(0x7f0000002840)=[&(0x7f0000000400)={0x0, 0x0, 0x0, 0x6, 0x6, r2, &(0x7f00000004c0)="95f6d391ae58ac9ed2c55313cb5e46fa011df39a5868f66c928c51b8e88ef5aa75ca5dd3535ac0065fd6017c641a42a5c0b2fbcc2e65208a6a35d701e65d585a783a8f5b6f5d78578f69ebb5e7566f60bf1fc1c3e374197689ae6312f3d4fe2081cb7d16b47261828fa168199743224a92cec369b810a9db337d05ca15fd1be883ded4f90965334303d142daceda38b65eef6c0a38ffb6a72b599acb69dc812acc2845fa11510d4bb0c888d798c91c0ee92fe0e83e5f96c2e6504b250e2fc0925c547011e667188eb6250a70c439723e457b03e9cb94d886aa367557c15d88172358fa02e98f287fc53ff63d3fef9489c88b2b24f59aee2106", 0xf9, 0xd913, 0x0, 0x1}, &(0x7f00000026c0)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f0000002640)="21f98f3326cc8f660e4b102dca13923e8e3ce46952ae20c7ddc650a0f02f92b6049a15e8c4f8eb02f29ad2c102d8f21c2cdd964d583b83b66fd9573c2622b2d25f5e6f72752f65c78b4970ae80dbf679efab38800def8b87ade3c19d6131ac6737d13675d5fb11b30580c99957fdcdb1fb9cab5a", 0x74, 0x3, 0x0, 0x2, r1}, &(0x7f0000002800)={0x0, 0x0, 0x0, 0x8, 0x8, 0xffffffffffffffff, &(0x7f0000002740)="55b8cbfd7d8c7690eed35c10dd596d38e3d393782c80b216715021a60ca8fdb9fadad87f151377e9ff234ebf4eeb4549bd25322a22be11719b6e40b056a680360889b20aeff2cb70ac9660312d5d1b731566641ef62082b2ebda7de525004c365b9d2dc39b5f2ba59f84e63ebdabdb626295a994dc24091ee8aef67b378768358e3b7d654e20e0dc58dbd3c6c28c6ae41c987705101d07f8b1e8a8b48f6766732a6fb62e8ac0f7afb0c3cffa83a833391bcb61efc3a5a0", 0xb7, 0x1, 0x0, 0x1}]) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x80000) (async) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/12, 0x8}], 0x1) (async) signalfd(r0, &(0x7f0000000080)={[0xa998]}, 0x8) (async) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r1, 0x111, 0x3, 0x1, 0x4) (async) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) (async) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f00000025c0)) (async) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000002880)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x37, 0x0, 0x0, 0x0, 0x3, 0x7}, {0x3, 0x7d78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xe0}, {0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000000000}]}) (async) readv(r3, &(0x7f0000000380)=[{&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000000180)=""/88, 0x58}, {&(0x7f00000000c0)=""/43, 0x2b}, {&(0x7f0000000200)=""/103, 0x67}, {&(0x7f0000000280)=""/97, 0x61}, {&(0x7f0000000300)=""/83, 0x53}, {&(0x7f0000001600)=""/4096, 0x1000}], 0x7) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) (async) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f00000002c0)=0x1) (async) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000180)={0x2}) (async) write$eventfd(0xffffffffffffffff, &(0x7f0000000040)=0xfffffffffffffffe, 0x8) (async) io_submit(0x0, 0x3, &(0x7f0000002840)=[&(0x7f0000000400)={0x0, 0x0, 0x0, 0x6, 0x6, r2, &(0x7f00000004c0)="95f6d391ae58ac9ed2c55313cb5e46fa011df39a5868f66c928c51b8e88ef5aa75ca5dd3535ac0065fd6017c641a42a5c0b2fbcc2e65208a6a35d701e65d585a783a8f5b6f5d78578f69ebb5e7566f60bf1fc1c3e374197689ae6312f3d4fe2081cb7d16b47261828fa168199743224a92cec369b810a9db337d05ca15fd1be883ded4f90965334303d142daceda38b65eef6c0a38ffb6a72b599acb69dc812acc2845fa11510d4bb0c888d798c91c0ee92fe0e83e5f96c2e6504b250e2fc0925c547011e667188eb6250a70c439723e457b03e9cb94d886aa367557c15d88172358fa02e98f287fc53ff63d3fef9489c88b2b24f59aee2106", 0xf9, 0xd913, 0x0, 0x1}, &(0x7f00000026c0)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f0000002640)="21f98f3326cc8f660e4b102dca13923e8e3ce46952ae20c7ddc650a0f02f92b6049a15e8c4f8eb02f29ad2c102d8f21c2cdd964d583b83b66fd9573c2622b2d25f5e6f72752f65c78b4970ae80dbf679efab38800def8b87ade3c19d6131ac6737d13675d5fb11b30580c99957fdcdb1fb9cab5a", 0x74, 0x3, 0x0, 0x2, r1}, &(0x7f0000002800)={0x0, 0x0, 0x0, 0x8, 0x8, 0xffffffffffffffff, &(0x7f0000002740)="55b8cbfd7d8c7690eed35c10dd596d38e3d393782c80b216715021a60ca8fdb9fadad87f151377e9ff234ebf4eeb4549bd25322a22be11719b6e40b056a680360889b20aeff2cb70ac9660312d5d1b731566641ef62082b2ebda7de525004c365b9d2dc39b5f2ba59f84e63ebdabdb626295a994dc24091ee8aef67b378768358e3b7d654e20e0dc58dbd3c6c28c6ae41c987705101d07f8b1e8a8b48f6766732a6fb62e8ac0f7afb0c3cffa83a833391bcb61efc3a5a0", 0xb7, 0x1, 0x0, 0x1}]) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) (async) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) (async) 11:30:34 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x4e23, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) (async, rerun: 32) r1 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x234380) (rerun: 32) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000000)=[{0x7ff, 0x9, 0x4, 0x1}, {0x3f6, 0xcb, 0x7, 0x401}]}, 0x10) (async, rerun: 32) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f0000000040)) (rerun: 32) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000100)) 11:30:34 executing program 5: r0 = socket(0xa, 0x2, 0x0) (async, rerun: 32) r1 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) (rerun: 32) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) (async) setsockopt$inet_dccp_int(r0, 0x88, 0x6, 0x0, 0x0) (async) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x101081, 0x0) ioctl$SNDCTL_DSP_GETBLKSIZE(r3, 0xc0045004, &(0x7f0000000100)) fgetxattr(0xffffffffffffffff, &(0x7f0000000000)=@random={'osx.', '\x00'}, &(0x7f0000000040)=""/54, 0x36) (async) syz_emit_ethernet(0x72, &(0x7f00000001c0)={@link_local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4d857", 0x3c, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "47e393", 0x0, 0x88, 0x0, @remote, @mcast1, [], "3da468344a1af97a4754334f"}}}}}}}, 0x0) 11:30:34 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x4e23, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) r1 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x234380) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000000)=[{0x7ff, 0x9, 0x4, 0x1}, {0x3f6, 0xcb, 0x7, 0x401}]}, 0x10) (async) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f0000000040)) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000100)) 11:30:34 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000040), 0x0, 0x0) (async, rerun: 32) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) (rerun: 32) write$binfmt_script(r1, &(0x7f0000000340)=ANY=[], 0xfea7) sendmsg$TIPC_NL_KEY_FLUSH(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x13c}, 0x1, 0x0, 0x0, 0x4094}, 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) (async) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = signalfd4(r1, &(0x7f00000002c0)={[0x7fffffffffffffff]}, 0x8, 0x80000) ioctl$AUTOFS_DEV_IOCTL_VERSION(r5, 0xc0189371, &(0x7f0000000300)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) (async) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f00000025c0)) (async) ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f0000000000)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}]}) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0xc, 0x12, r4, 0xee51b000) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) (async) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000340)={0x4, 0x7fffffffffffffff, 0x2}) (async) ioctl(r0, 0xc06c4124, &(0x7f0000000040)) 11:30:34 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000025c0)) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000000)={[{0x0, 0x0, 0x40, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x57}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x8d}, {0x0, 0x1}]}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000002100)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b26]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000002100)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b26]}) syz_emit_ethernet(0x72, &(0x7f00000000c0)=ANY=[@ANYRES16=r7], 0x0) 11:30:34 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000)={0x3, 0x6, 0x671f, 0xb190, 0x4}, 0x14) ioctl$sock_inet_SIOCDELRT(r0, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002f00)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x24, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "20f4a740a9a2eb60"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="f4b495cb301a3d3297d1db898c9a2407"}]}]}, 0x40}}, 0x0) listen(r1, 0x4) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r5, 0xf507, 0x0) 11:30:34 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/12, 0x8}], 0x1) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f0000000080)=""/21) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r1, 0xf50f, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x5, 0x20000006, 0xffffffff, 0x0, 0x5}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af12, &(0x7f00000001c0)={0x2, 0x10000}) 11:30:34 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$mouse(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000280), 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r5 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES64], 0x14}}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x47) write(r2, &(0x7f0000000000)="0553ad72e4a6bd03194e1b125e9cd0a9416df02e0e025410a7248d6813e4fe7b19c1bd5338e3ee9966b568b82c48", 0x97d08) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 11:30:34 executing program 5: r0 = socket(0xa, 0x2, 0x0) (async) r1 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) (async) setsockopt$inet_dccp_int(r0, 0x88, 0x6, 0x0, 0x0) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x101081, 0x0) ioctl$SNDCTL_DSP_GETBLKSIZE(r3, 0xc0045004, &(0x7f0000000100)) (async) fgetxattr(0xffffffffffffffff, &(0x7f0000000000)=@random={'osx.', '\x00'}, &(0x7f0000000040)=""/54, 0x36) (async, rerun: 64) syz_emit_ethernet(0x72, &(0x7f00000001c0)={@link_local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4d857", 0x3c, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "47e393", 0x0, 0x88, 0x0, @remote, @mcast1, [], "3da468344a1af97a4754334f"}}}}}}}, 0x0) (rerun: 64) 11:30:34 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000)={0x3, 0x6, 0x671f, 0xb190, 0x4}, 0x14) ioctl$sock_inet_SIOCDELRT(r0, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002f00)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x24, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "20f4a740a9a2eb60"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="f4b495cb301a3d3297d1db898c9a2407"}]}]}, 0x40}}, 0x0) listen(r1, 0x4) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r5, 0xf507, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000)={0x3, 0x6, 0x671f, 0xb190, 0x4}, 0x14) (async) ioctl$sock_inet_SIOCDELRT(r0, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002f00)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x24, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "20f4a740a9a2eb60"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="f4b495cb301a3d3297d1db898c9a2407"}]}]}, 0x40}}, 0x0) (async) listen(r1, 0x4) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r5, 0xf507, 0x0) (async) 11:30:35 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000)={0x3, 0x6, 0x671f, 0xb190, 0x4}, 0x14) (async) ioctl$sock_inet_SIOCDELRT(r0, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002f00)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x24, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "20f4a740a9a2eb60"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="f4b495cb301a3d3297d1db898c9a2407"}]}]}, 0x40}}, 0x0) (async) listen(r1, 0x4) (async) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r5, 0xf507, 0x0) 11:30:35 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x16}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}) r1 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x2, 0x264, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200001c0], 0x0, &(0x7f0000000000), &(0x7f00000001c0)=ANY=[@ANYBLOB="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"]}, 0x2dc) 11:30:35 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000340)=ANY=[], 0xfea7) sendmsg$TIPC_NL_KEY_FLUSH(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x13c}, 0x1, 0x0, 0x0, 0x4094}, 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = signalfd4(r1, &(0x7f00000002c0)={[0x7fffffffffffffff]}, 0x8, 0x80000) ioctl$AUTOFS_DEV_IOCTL_VERSION(r5, 0xc0189371, &(0x7f0000000300)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f00000025c0)) ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f0000000000)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}]}) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0xc, 0x12, r4, 0xee51b000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000340)={0x4, 0x7fffffffffffffff, 0x2}) ioctl(r0, 0xc06c4124, &(0x7f0000000040)) syz_open_dev$sndpcmc(&(0x7f0000000040), 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) (async) write$binfmt_script(r1, &(0x7f0000000340)=ANY=[], 0xfea7) (async) sendmsg$TIPC_NL_KEY_FLUSH(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x13c}, 0x1, 0x0, 0x0, 0x4094}, 0x10) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) (async) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) signalfd4(r1, &(0x7f00000002c0)={[0x7fffffffffffffff]}, 0x8, 0x80000) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(r5, 0xc0189371, &(0x7f0000000300)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) (async) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f00000025c0)) (async) ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f0000000000)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}]}) (async) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0xc, 0x12, r4, 0xee51b000) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) (async) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000340)={0x4, 0x7fffffffffffffff, 0x2}) (async) ioctl(r0, 0xc06c4124, &(0x7f0000000040)) (async) 11:30:35 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/12, 0x8}], 0x1) (async) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) (async) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f0000000080)=""/21) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r1, 0xf50f, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x5, 0x20000006, 0xffffffff, 0x0, 0x5}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af12, &(0x7f00000001c0)={0x2, 0x10000}) 11:30:35 executing program 5: syz_emit_ethernet(0x72, &(0x7f00000001c0)={@link_local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4d857", 0x3c, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "47e393", 0x0, 0x88, 0x0, @remote, @local, [], "3da468344a1af97a4754334f"}}}}}}}, 0x0) 11:30:36 executing program 5: syz_emit_ethernet(0x72, &(0x7f00000001c0)={@link_local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4d857", 0x3c, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "47e393", 0x0, 0x88, 0x0, @remote, @local, [], "3da468344a1af97a4754334f"}}}}}}}, 0x0) syz_emit_ethernet(0x72, &(0x7f00000001c0)={@link_local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4d857", 0x3c, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "47e393", 0x0, 0x88, 0x0, @remote, @local, [], "3da468344a1af97a4754334f"}}}}}}}, 0x0) (async) 11:30:36 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000025c0)) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000000)={[{0x0, 0x0, 0x40, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x57}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x8d}, {0x0, 0x1}]}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000002100)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b26]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000002100)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b26]}) syz_emit_ethernet(0x72, &(0x7f00000000c0)=ANY=[@ANYRES16=r7], 0x0) 11:30:36 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/12, 0x8}], 0x1) (async) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) (async) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f0000000080)=""/21) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r1, 0xf50f, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x5, 0x20000006, 0xffffffff, 0x0, 0x5}) (async) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) (async) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af12, &(0x7f00000001c0)={0x2, 0x10000}) 11:30:36 executing program 5: syz_emit_ethernet(0x72, &(0x7f00000001c0)={@link_local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4d857", 0x3c, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "47e393", 0x0, 0x88, 0x0, @remote, @local, [], "3da468344a1af97a4754334f"}}}}}}}, 0x0) 11:30:36 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x16}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}) r1 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x2, 0x264, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200001c0], 0x0, &(0x7f0000000000), &(0x7f00000001c0)=ANY=[@ANYBLOB="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"]}, 0x2dc) 11:30:36 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$mouse(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000280), 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r5 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES64], 0x14}}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x47) write(r2, &(0x7f0000000000)="0553ad72e4a6bd03194e1b125e9cd0a9416df02e0e025410a7248d6813e4fe7b19c1bd5338e3ee9966b568b82c48", 0x97d08) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 11:30:36 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000340)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl(r0, 0xc06c4124, &(0x7f00000000c0)="170a59667d77b5c881790531e11219cafbd31a84e45da3dd73789d63774b81679fe85e163e297ab5dbf58b11d0328f7efbbe0d773bb97528916af050c77d40c83ed6f949866e61499362bb98c116447270e08bf856cdc9a324e0bd17ad55d95728a77a62a85ba12f429058187a3b5b1ff4554426cbd84ef805147755defb55e0086f0004974ec1b39cb73ea32b6dbd2a6795f035853ac7cc8ffef9761ce22e25eb889b6e74") r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x115602, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000002100)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b26]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = dup3(r1, 0xffffffffffffffff, 0x80000) r6 = creat(&(0x7f0000000000)='./file0\x00', 0x20) r7 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000002100)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b26]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r6, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="c4e17c5306b9310b00000f32b951030000b83a000000ba000000000f30650f221edbc50f20d835200000000f22d89a0e3400001c0166baf80cb858f0d782ef66bafc0cb80c980000ef0f211766b87d008ee8", 0x52}], 0x1, 0x4, &(0x7f0000000240)=[@cr0={0x0, 0x8000002c}, @dstype0={0x6, 0xb}], 0x2) 11:30:36 executing program 5: syz_emit_ethernet(0x72, &(0x7f00000001c0)={@link_local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4d857", 0x3c, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0xfe, '\x00', {0x0, 0x6, "47e393", 0x0, 0x88, 0x0, @remote, @mcast1, [], "3da468344a1af97a4754334f"}}}}}}}, 0x0) 11:30:36 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000340)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl(r0, 0xc06c4124, &(0x7f00000000c0)="170a59667d77b5c881790531e11219cafbd31a84e45da3dd73789d63774b81679fe85e163e297ab5dbf58b11d0328f7efbbe0d773bb97528916af050c77d40c83ed6f949866e61499362bb98c116447270e08bf856cdc9a324e0bd17ad55d95728a77a62a85ba12f429058187a3b5b1ff4554426cbd84ef805147755defb55e0086f0004974ec1b39cb73ea32b6dbd2a6795f035853ac7cc8ffef9761ce22e25eb889b6e74") r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x115602, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000002100)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b26]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = dup3(r1, 0xffffffffffffffff, 0x80000) r6 = creat(&(0x7f0000000000)='./file0\x00', 0x20) r7 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000002100)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b26]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r6, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="c4e17c5306b9310b00000f32b951030000b83a000000ba000000000f30650f221edbc50f20d835200000000f22d89a0e3400001c0166baf80cb858f0d782ef66bafc0cb80c980000ef0f211766b87d008ee8", 0x52}], 0x1, 0x4, &(0x7f0000000240)=[@cr0={0x0, 0x8000002c}, @dstype0={0x6, 0xb}], 0x2) syz_open_dev$sndpcmc(&(0x7f0000000040), 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) (async) write$binfmt_script(r1, &(0x7f0000000340)=ANY=[], 0xfea7) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) (async) ioctl(r0, 0xc06c4124, &(0x7f00000000c0)="170a59667d77b5c881790531e11219cafbd31a84e45da3dd73789d63774b81679fe85e163e297ab5dbf58b11d0328f7efbbe0d773bb97528916af050c77d40c83ed6f949866e61499362bb98c116447270e08bf856cdc9a324e0bd17ad55d95728a77a62a85ba12f429058187a3b5b1ff4554426cbd84ef805147755defb55e0086f0004974ec1b39cb73ea32b6dbd2a6795f035853ac7cc8ffef9761ce22e25eb889b6e74") (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x115602, 0x0) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) (async) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000002100)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b26]}) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) dup3(r1, 0xffffffffffffffff, 0x80000) (async) creat(&(0x7f0000000000)='./file0\x00', 0x20) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000002100)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b26]}) (async) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async) syz_kvm_setup_cpu$x86(r6, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="c4e17c5306b9310b00000f32b951030000b83a000000ba000000000f30650f221edbc50f20d835200000000f22d89a0e3400001c0166baf80cb858f0d782ef66bafc0cb80c980000ef0f211766b87d008ee8", 0x52}], 0x1, 0x4, &(0x7f0000000240)=[@cr0={0x0, 0x8000002c}, @dstype0={0x6, 0xb}], 0x2) (async) 11:30:36 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/12, 0x8}], 0x1) syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$SNDRV_TIMER_IOCTL_TREAD(r2, 0x40045402, &(0x7f0000000140)=0x1) sendfile(r2, r2, 0x0, 0x0) r3 = openat(r2, &(0x7f00000000c0)='./file0\x00', 0x20000, 0x77) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0xfffffffd, 0x0, 0xd}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) accept4$vsock_stream(r4, &(0x7f00000001c0)={0x28, 0x0, 0x2711, @host}, 0x10, 0x80800) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 11:30:36 executing program 5: syz_emit_ethernet(0x72, &(0x7f00000001c0)={@link_local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4d857", 0x3c, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0xfe, '\x00', {0x0, 0x6, "47e393", 0x0, 0x88, 0x0, @remote, @mcast1, [], "3da468344a1af97a4754334f"}}}}}}}, 0x0) syz_emit_ethernet(0x72, &(0x7f00000001c0)={@link_local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4d857", 0x3c, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0xfe, '\x00', {0x0, 0x6, "47e393", 0x0, 0x88, 0x0, @remote, @mcast1, [], "3da468344a1af97a4754334f"}}}}}}}, 0x0) (async) 11:30:36 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000040), 0x0, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000340)=ANY=[], 0xfea7) (async, rerun: 64) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) (async, rerun: 64) ioctl(r0, 0xc06c4124, &(0x7f00000000c0)="170a59667d77b5c881790531e11219cafbd31a84e45da3dd73789d63774b81679fe85e163e297ab5dbf58b11d0328f7efbbe0d773bb97528916af050c77d40c83ed6f949866e61499362bb98c116447270e08bf856cdc9a324e0bd17ad55d95728a77a62a85ba12f429058187a3b5b1ff4554426cbd84ef805147755defb55e0086f0004974ec1b39cb73ea32b6dbd2a6795f035853ac7cc8ffef9761ce22e25eb889b6e74") r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x115602, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) (async) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000002100)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b26]}) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = dup3(r1, 0xffffffffffffffff, 0x80000) (async, rerun: 64) r6 = creat(&(0x7f0000000000)='./file0\x00', 0x20) (async, rerun: 64) r7 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000002100)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b26]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r6, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="c4e17c5306b9310b00000f32b951030000b83a000000ba000000000f30650f221edbc50f20d835200000000f22d89a0e3400001c0166baf80cb858f0d782ef66bafc0cb80c980000ef0f211766b87d008ee8", 0x52}], 0x1, 0x4, &(0x7f0000000240)=[@cr0={0x0, 0x8000002c}, @dstype0={0x6, 0xb}], 0x2) 11:30:36 executing program 5: syz_emit_ethernet(0x72, &(0x7f00000001c0)={@link_local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4d857", 0x3c, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0xfe, '\x00', {0x0, 0x6, "47e393", 0x0, 0x88, 0x0, @remote, @mcast1, [], "3da468344a1af97a4754334f"}}}}}}}, 0x0) syz_emit_ethernet(0x72, &(0x7f00000001c0)={@link_local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4d857", 0x3c, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0xfe, '\x00', {0x0, 0x6, "47e393", 0x0, 0x88, 0x0, @remote, @mcast1, [], "3da468344a1af97a4754334f"}}}}}}}, 0x0) (async) 11:30:37 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$mouse(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000280), 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r5 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[], 0x14}}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x47) write(r2, &(0x7f0000000000)="0553ad72e4a6bd03194e1b125e9cd0a9416df02e0e025410a7248d6813e4fe7b19c1bd5338e3ee9966b568b82c48", 0x97d08) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 11:30:37 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000002100)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b26]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000180)=ANY=[@ANYRESOCT=r2], 0x0) syz_emit_ethernet(0x5c2, &(0x7f0000000040)=ANY=[], &(0x7f0000000000)={0x1, 0x1, [0xeac, 0x496, 0x4c3, 0x225]}) syz_emit_ethernet(0x2d, &(0x7f0000000040)={@link_local, @multicast, @void, {@mpls_mc={0x8848, {[{0xab}], @generic="a0f6885e6c4989312866352086a11b823a4b0b40afdcf72f617611"}}}}, &(0x7f0000000080)={0x0, 0x2, [0xc6b, 0x4, 0x3eb, 0x192]}) syz_emit_ethernet(0x7e, &(0x7f00000000c0)={@empty, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@x25={0x805, {0x2, 0x1, 0xf3, "53ef7980b880292648655aeedb5c72dbcc7d7f578588d0c386b65fbb59dbb984f025934579b2999e929a8e65de85eb260d7fb34b4f28f271b307d0b89f79e547400e38939fdb5db05e587196400d673667297ef892eba1f35788eff680e80ec41a8714176004dbf1a4f1a4046f"}}}}, &(0x7f0000000140)={0x1, 0x3, [0x624, 0x7cc, 0xb8c, 0x395]}) 11:30:37 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) preadv(r0, &(0x7f0000000540)=[{&(0x7f00000001c0)=""/79, 0x4f}, {&(0x7f0000000240)=""/17, 0x11}, {&(0x7f0000000280)=""/161, 0xa1}, {&(0x7f0000000340)=""/14, 0xe}, {&(0x7f0000000380)=""/20, 0x14}, {&(0x7f00000003c0)=""/65, 0x41}, {&(0x7f0000000440)=""/203, 0xcb}], 0x7, 0x7, 0x7a41) write$binfmt_script(r1, &(0x7f0000000340)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x80000000, 0x606c42) ioctl$FS_IOC_GETFSLABEL(r2, 0x81009431, &(0x7f00000000c0)) ioctl(r0, 0xc06c4124, &(0x7f0000000040)) 11:30:37 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x16}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}) r1 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x2, 0x264, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200001c0], 0x0, &(0x7f0000000000), &(0x7f00000001c0)=ANY=[@ANYBLOB="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"]}, 0x2dc) socket$inet_tcp(0x2, 0x1, 0x0) (async) ioctl$sock_inet_SIOCDELRT(r0, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x16}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}) (async) syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) (async) dup(r1) (async) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) (async) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x2, 0x264, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200001c0], 0x0, &(0x7f0000000000), &(0x7f00000001c0)=ANY=[@ANYBLOB="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"]}, 0x2dc) (async) 11:30:37 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/12, 0x8}], 0x1) (async) syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) (async) ioctl$SNDRV_TIMER_IOCTL_TREAD(r2, 0x40045402, &(0x7f0000000140)=0x1) (async) sendfile(r2, r2, 0x0, 0x0) r3 = openat(r2, &(0x7f00000000c0)='./file0\x00', 0x20000, 0x77) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0xfffffffd, 0x0, 0xd}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) accept4$vsock_stream(r4, &(0x7f00000001c0)={0x28, 0x0, 0x2711, @host}, 0x10, 0x80800) (async) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 11:30:37 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$mouse(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000280), 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r5 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[], 0x14}}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x47) write(r2, &(0x7f0000000000)="0553ad72e4a6bd03194e1b125e9cd0a9416df02e0e025410a7248d6813e4fe7b19c1bd5338e3ee9966b568b82c48", 0x97d08) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 11:30:37 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000002100)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b26]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000180)=ANY=[@ANYRESOCT=r2], 0x0) syz_emit_ethernet(0x5c2, &(0x7f0000000040)=ANY=[], &(0x7f0000000000)={0x1, 0x1, [0xeac, 0x496, 0x4c3, 0x225]}) syz_emit_ethernet(0x2d, &(0x7f0000000040)={@link_local, @multicast, @void, {@mpls_mc={0x8848, {[{0xab}], @generic="a0f6885e6c4989312866352086a11b823a4b0b40afdcf72f617611"}}}}, &(0x7f0000000080)={0x0, 0x2, [0xc6b, 0x4, 0x3eb, 0x192]}) syz_emit_ethernet(0x7e, &(0x7f00000000c0)={@empty, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@x25={0x805, {0x2, 0x1, 0xf3, "53ef7980b880292648655aeedb5c72dbcc7d7f578588d0c386b65fbb59dbb984f025934579b2999e929a8e65de85eb260d7fb34b4f28f271b307d0b89f79e547400e38939fdb5db05e587196400d673667297ef892eba1f35788eff680e80ec41a8714176004dbf1a4f1a4046f"}}}}, &(0x7f0000000140)={0x1, 0x3, [0x624, 0x7cc, 0xb8c, 0x395]}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000002100)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b26]}) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) syz_emit_ethernet(0x72, &(0x7f0000000180)=ANY=[@ANYRESOCT=r2], 0x0) (async) syz_emit_ethernet(0x5c2, &(0x7f0000000040)=ANY=[], &(0x7f0000000000)={0x1, 0x1, [0xeac, 0x496, 0x4c3, 0x225]}) (async) syz_emit_ethernet(0x2d, &(0x7f0000000040)={@link_local, @multicast, @void, {@mpls_mc={0x8848, {[{0xab}], @generic="a0f6885e6c4989312866352086a11b823a4b0b40afdcf72f617611"}}}}, &(0x7f0000000080)={0x0, 0x2, [0xc6b, 0x4, 0x3eb, 0x192]}) (async) syz_emit_ethernet(0x7e, &(0x7f00000000c0)={@empty, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@x25={0x805, {0x2, 0x1, 0xf3, "53ef7980b880292648655aeedb5c72dbcc7d7f578588d0c386b65fbb59dbb984f025934579b2999e929a8e65de85eb260d7fb34b4f28f271b307d0b89f79e547400e38939fdb5db05e587196400d673667297ef892eba1f35788eff680e80ec41a8714176004dbf1a4f1a4046f"}}}}, &(0x7f0000000140)={0x1, 0x3, [0x624, 0x7cc, 0xb8c, 0x395]}) (async) 11:30:37 executing program 2: socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)='lp\x00', 0x3) 11:30:37 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) preadv(r0, &(0x7f0000000540)=[{&(0x7f00000001c0)=""/79, 0x4f}, {&(0x7f0000000240)=""/17, 0x11}, {&(0x7f0000000280)=""/161, 0xa1}, {&(0x7f0000000340)=""/14, 0xe}, {&(0x7f0000000380)=""/20, 0x14}, {&(0x7f00000003c0)=""/65, 0x41}, {&(0x7f0000000440)=""/203, 0xcb}], 0x7, 0x7, 0x7a41) write$binfmt_script(r1, &(0x7f0000000340)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x80000000, 0x606c42) ioctl$FS_IOC_GETFSLABEL(r2, 0x81009431, &(0x7f00000000c0)) ioctl(r0, 0xc06c4124, &(0x7f0000000040)) syz_open_dev$sndpcmc(&(0x7f0000000040), 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) (async) preadv(r0, &(0x7f0000000540)=[{&(0x7f00000001c0)=""/79, 0x4f}, {&(0x7f0000000240)=""/17, 0x11}, {&(0x7f0000000280)=""/161, 0xa1}, {&(0x7f0000000340)=""/14, 0xe}, {&(0x7f0000000380)=""/20, 0x14}, {&(0x7f00000003c0)=""/65, 0x41}, {&(0x7f0000000440)=""/203, 0xcb}], 0x7, 0x7, 0x7a41) (async) write$binfmt_script(r1, &(0x7f0000000340)=ANY=[], 0xfea7) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) (async) syz_open_dev$sndctrl(&(0x7f0000000000), 0x80000000, 0x606c42) (async) ioctl$FS_IOC_GETFSLABEL(r2, 0x81009431, &(0x7f00000000c0)) (async) ioctl(r0, 0xc06c4124, &(0x7f0000000040)) (async) 11:30:37 executing program 2: socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)='lp\x00', 0x3) 11:30:37 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) preadv(r0, &(0x7f0000000540)=[{&(0x7f00000001c0)=""/79, 0x4f}, {&(0x7f0000000240)=""/17, 0x11}, {&(0x7f0000000280)=""/161, 0xa1}, {&(0x7f0000000340)=""/14, 0xe}, {&(0x7f0000000380)=""/20, 0x14}, {&(0x7f00000003c0)=""/65, 0x41}, {&(0x7f0000000440)=""/203, 0xcb}], 0x7, 0x7, 0x7a41) (async) write$binfmt_script(r1, &(0x7f0000000340)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) (async) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x80000000, 0x606c42) ioctl$FS_IOC_GETFSLABEL(r2, 0x81009431, &(0x7f00000000c0)) (async) ioctl(r0, 0xc06c4124, &(0x7f0000000040)) 11:30:37 executing program 2: socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)='lp\x00', 0x3) 11:30:38 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$mouse(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000280), 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r5 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x47) write(r2, &(0x7f0000000000)="0553ad72e4a6bd03194e1b125e9cd0a9416df02e0e025410a7248d6813e4fe7b19c1bd5338e3ee9966b568b82c48", 0x97d08) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 11:30:38 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000340)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$SNDRV_PCM_IOCTL_INFO(r0, 0x81204101, &(0x7f00000000c0)) ioctl(r0, 0xc06c4124, &(0x7f0000000040)) 11:30:38 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/12, 0x8}], 0x1) syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$SNDRV_TIMER_IOCTL_TREAD(r2, 0x40045402, &(0x7f0000000140)=0x1) sendfile(r2, r2, 0x0, 0x0) r3 = openat(r2, &(0x7f00000000c0)='./file0\x00', 0x20000, 0x77) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0xfffffffd, 0x0, 0xd}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) accept4$vsock_stream(r4, &(0x7f00000001c0)={0x28, 0x0, 0x2711, @host}, 0x10, 0x80800) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/12, 0x8}], 0x1) (async) syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) dup(r1) (async) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) (async) ioctl$SNDRV_TIMER_IOCTL_TREAD(r2, 0x40045402, &(0x7f0000000140)=0x1) (async) sendfile(r2, r2, 0x0, 0x0) (async) openat(r2, &(0x7f00000000c0)='./file0\x00', 0x20000, 0x77) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0xfffffffd, 0x0, 0xd}) (async) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) (async) accept4$vsock_stream(r4, &(0x7f00000001c0)={0x28, 0x0, 0x2711, @host}, 0x10, 0x80800) (async) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) (async) 11:30:38 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000002100)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b26]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000180)=ANY=[@ANYRESOCT=r2], 0x0) syz_emit_ethernet(0x5c2, &(0x7f0000000040)=ANY=[], &(0x7f0000000000)={0x1, 0x1, [0xeac, 0x496, 0x4c3, 0x225]}) syz_emit_ethernet(0x2d, &(0x7f0000000040)={@link_local, @multicast, @void, {@mpls_mc={0x8848, {[{0xab}], @generic="a0f6885e6c4989312866352086a11b823a4b0b40afdcf72f617611"}}}}, &(0x7f0000000080)={0x0, 0x2, [0xc6b, 0x4, 0x3eb, 0x192]}) syz_emit_ethernet(0x7e, &(0x7f00000000c0)={@empty, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@x25={0x805, {0x2, 0x1, 0xf3, "53ef7980b880292648655aeedb5c72dbcc7d7f578588d0c386b65fbb59dbb984f025934579b2999e929a8e65de85eb260d7fb34b4f28f271b307d0b89f79e547400e38939fdb5db05e587196400d673667297ef892eba1f35788eff680e80ec41a8714176004dbf1a4f1a4046f"}}}}, &(0x7f0000000140)={0x1, 0x3, [0x624, 0x7cc, 0xb8c, 0x395]}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000002100)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b26]}) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) syz_emit_ethernet(0x72, &(0x7f0000000180)=ANY=[@ANYRESOCT=r2], 0x0) (async) syz_emit_ethernet(0x5c2, &(0x7f0000000040)=ANY=[], &(0x7f0000000000)={0x1, 0x1, [0xeac, 0x496, 0x4c3, 0x225]}) (async) syz_emit_ethernet(0x2d, &(0x7f0000000040)={@link_local, @multicast, @void, {@mpls_mc={0x8848, {[{0xab}], @generic="a0f6885e6c4989312866352086a11b823a4b0b40afdcf72f617611"}}}}, &(0x7f0000000080)={0x0, 0x2, [0xc6b, 0x4, 0x3eb, 0x192]}) (async) syz_emit_ethernet(0x7e, &(0x7f00000000c0)={@empty, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@x25={0x805, {0x2, 0x1, 0xf3, "53ef7980b880292648655aeedb5c72dbcc7d7f578588d0c386b65fbb59dbb984f025934579b2999e929a8e65de85eb260d7fb34b4f28f271b307d0b89f79e547400e38939fdb5db05e587196400d673667297ef892eba1f35788eff680e80ec41a8714176004dbf1a4f1a4046f"}}}}, &(0x7f0000000140)={0x1, 0x3, [0x624, 0x7cc, 0xb8c, 0x395]}) (async) 11:30:38 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4) ioctl$sock_inet_SIOCDELRT(r0, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0xffff}) 11:30:38 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000340)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$SNDRV_PCM_IOCTL_INFO(r0, 0x81204101, &(0x7f00000000c0)) ioctl(r0, 0xc06c4124, &(0x7f0000000040)) syz_open_dev$sndpcmc(&(0x7f0000000040), 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) (async) write$binfmt_script(r1, &(0x7f0000000340)=ANY=[], 0xfea7) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) (async) ioctl$SNDRV_PCM_IOCTL_INFO(r0, 0x81204101, &(0x7f00000000c0)) (async) ioctl(r0, 0xc06c4124, &(0x7f0000000040)) (async) 11:30:38 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4) (async) ioctl$sock_inet_SIOCDELRT(r0, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0xffff}) 11:30:38 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) clock_gettime(0x0, &(0x7f0000000d40)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000cc0)=[{{&(0x7f00000001c0), 0x80, &(0x7f0000000a00)=[{&(0x7f0000000240)=""/95, 0x5f}, {&(0x7f0000000440)=""/180, 0xb4}, {&(0x7f0000000500)=""/188, 0xbc}, {&(0x7f00000005c0)=""/229, 0xe5}, {&(0x7f00000002c0)=""/45, 0x2d}, {&(0x7f00000006c0)=""/212, 0xd4}, {&(0x7f00000007c0)=""/111, 0x6f}, {&(0x7f0000000840)=""/201, 0xc9}, {&(0x7f0000000940)=""/156, 0x9c}, {&(0x7f0000000300)}], 0xa, &(0x7f0000000ac0)=""/102, 0x66}, 0x4}, {{&(0x7f0000000b40)=@nl=@proc, 0x80, &(0x7f0000000380)=[{&(0x7f0000000bc0)=""/173, 0xad}], 0x1, &(0x7f0000000c80)=""/46, 0x2e}, 0x3}], 0x2, 0x40002122, &(0x7f0000000d80)={r1, r2+60000000}) syz_emit_ethernet(0x8a, &(0x7f0000000100)={@link_local, @random="a687c06fdba6", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4d857", 0x54, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @loopback, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "47e393", 0x3, 0x88, 0x0, @remote, @mcast1, [@srh={0x32, 0x2, 0x4, 0x1, 0x1, 0x20, 0x95, [@local]}], "3da468344a1af97a4754334f"}}}}}}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x1c, 0x4, 0x6, 0x703, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x98, &(0x7f0000000000)={@multicast, @broadcast, @val={@void, {0x8100, 0x0, 0x1, 0x4}}, {@generic={0x88a2, "8e7f101955ff891e18e992e6c079bc5de0c26585955cbeda8c372481f19717b0b3f30a8e9ddb9ddd2908699bd65b6a757964551216632e6721ae960b6dbfc05b160bfc826e07c5213a7a73968520d56cacf76f21873c8fe60b8c81d40ba26de2a169a32ef039e8cf6ba40a87d9e72f767099c835e794cb8f8bb6810e7aa1116bd0a7f5385ddd"}}}, &(0x7f00000000c0)={0x0, 0x4, [0x14, 0x907, 0x494, 0x70c]}) 11:30:38 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$mouse(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000280), 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r5 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x47) write(r2, &(0x7f0000000000)="0553ad72e4a6bd03194e1b125e9cd0a9416df02e0e025410a7248d6813e4fe7b19c1bd5338e3ee9966b568b82c48", 0x97d08) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 11:30:38 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/12, 0x8}], 0x1) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080), 0x220000, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 11:30:38 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4) ioctl$sock_inet_SIOCDELRT(r0, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0xffff}) 11:30:38 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000340)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$SNDRV_PCM_IOCTL_INFO(r0, 0x81204101, &(0x7f00000000c0)) ioctl(r0, 0xc06c4124, &(0x7f0000000040)) syz_open_dev$sndpcmc(&(0x7f0000000040), 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) (async) write$binfmt_script(r1, &(0x7f0000000340)=ANY=[], 0xfea7) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) (async) ioctl$SNDRV_PCM_IOCTL_INFO(r0, 0x81204101, &(0x7f00000000c0)) (async) ioctl(r0, 0xc06c4124, &(0x7f0000000040)) (async) 11:30:39 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/12, 0x8}], 0x1) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080), 0x220000, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/12, 0x8}], 0x1) (async) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080), 0x220000, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) (async) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) (async) 11:30:39 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) 11:30:39 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.dequeue\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000340)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl(r0, 0xc06c4124, &(0x7f0000000040)) 11:30:39 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$mouse(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000280), 0x0) creat(&(0x7f0000000080)='./file0\x00', 0xe1) r5 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES64=r2], 0x14}}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x47) write(r2, &(0x7f0000000000), 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 11:30:39 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) socket$inet_tcp(0x2, 0x1, 0x0) (async) ioctl$sock_inet_SIOCDELRT(r0, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) (async) 11:30:39 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/12, 0x8}], 0x1) (async) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080), 0x220000, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) (async) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 11:30:39 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.dequeue\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000340)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl(r0, 0xc06c4124, &(0x7f0000000040)) syz_open_dev$sndpcmc(&(0x7f0000000040), 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.dequeue\x00', 0x275a, 0x0) (async) write$binfmt_script(r1, &(0x7f0000000340)=ANY=[], 0xfea7) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) (async) ioctl(r0, 0xc06c4124, &(0x7f0000000040)) (async) 11:30:39 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) (async) clock_gettime(0x0, &(0x7f0000000d40)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000cc0)=[{{&(0x7f00000001c0), 0x80, &(0x7f0000000a00)=[{&(0x7f0000000240)=""/95, 0x5f}, {&(0x7f0000000440)=""/180, 0xb4}, {&(0x7f0000000500)=""/188, 0xbc}, {&(0x7f00000005c0)=""/229, 0xe5}, {&(0x7f00000002c0)=""/45, 0x2d}, {&(0x7f00000006c0)=""/212, 0xd4}, {&(0x7f00000007c0)=""/111, 0x6f}, {&(0x7f0000000840)=""/201, 0xc9}, {&(0x7f0000000940)=""/156, 0x9c}, {&(0x7f0000000300)}], 0xa, &(0x7f0000000ac0)=""/102, 0x66}, 0x4}, {{&(0x7f0000000b40)=@nl=@proc, 0x80, &(0x7f0000000380)=[{&(0x7f0000000bc0)=""/173, 0xad}], 0x1, &(0x7f0000000c80)=""/46, 0x2e}, 0x3}], 0x2, 0x40002122, &(0x7f0000000d80)={r1, r2+60000000}) (async) syz_emit_ethernet(0x8a, &(0x7f0000000100)={@link_local, @random="a687c06fdba6", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4d857", 0x54, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @loopback, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "47e393", 0x3, 0x88, 0x0, @remote, @mcast1, [@srh={0x32, 0x2, 0x4, 0x1, 0x1, 0x20, 0x95, [@local]}], "3da468344a1af97a4754334f"}}}}}}}, 0x0) (async, rerun: 32) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x1c, 0x4, 0x6, 0x703, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x98, &(0x7f0000000000)={@multicast, @broadcast, @val={@void, {0x8100, 0x0, 0x1, 0x4}}, {@generic={0x88a2, "8e7f101955ff891e18e992e6c079bc5de0c26585955cbeda8c372481f19717b0b3f30a8e9ddb9ddd2908699bd65b6a757964551216632e6721ae960b6dbfc05b160bfc826e07c5213a7a73968520d56cacf76f21873c8fe60b8c81d40ba26de2a169a32ef039e8cf6ba40a87d9e72f767099c835e794cb8f8bb6810e7aa1116bd0a7f5385ddd"}}}, &(0x7f00000000c0)={0x0, 0x4, [0x14, 0x907, 0x494, 0x70c]}) 11:30:39 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$mouse(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000280), 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r5 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x47) write(r2, &(0x7f0000000000)="0553ad72e4a6bd03194e1b125e9cd0a9416df02e0e025410a7248d6813e4fe7b19c1bd5338e3ee9966b568b82c48", 0x97d08) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 11:30:39 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) 11:30:39 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000040), 0x0, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.dequeue\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000340)=ANY=[], 0xfea7) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) (async) ioctl(r0, 0xc06c4124, &(0x7f0000000040)) 11:30:39 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/12, 0x8}], 0x1) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x8, 0x20000006, 0x0, 0x0, 0x5}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 11:30:39 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @local}, {0x2, 0x4e23, @multicast1}, {0x2, 0x0, @multicast1}, 0x142}) 11:30:40 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x101300, 0x0) openat$cgroup_ro(r2, &(0x7f00000000c0)='cgroup.events\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000340)=ANY=[], 0xfea7) ioctl(r0, 0xc06c4124, &(0x7f0000000040)) ioctl$SNDRV_PCM_IOCTL_HW_FREE(r1, 0x4112, 0x0) 11:30:40 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/12, 0x8}], 0x1) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x8, 0x20000006, 0x0, 0x0, 0x5}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/12, 0x8}], 0x1) (async) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x8, 0x20000006, 0x0, 0x0, 0x5}) (async) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) (async) 11:30:40 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) (async) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x101300, 0x0) openat$cgroup_ro(r2, &(0x7f00000000c0)='cgroup.events\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000340)=ANY=[], 0xfea7) ioctl(r0, 0xc06c4124, &(0x7f0000000040)) (async) ioctl$SNDRV_PCM_IOCTL_HW_FREE(r1, 0x4112, 0x0) 11:30:40 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @local}, {0x2, 0x4e23, @multicast1}, {0x2, 0x0, @multicast1}, 0x142}) socket$inet_tcp(0x2, 0x1, 0x0) (async) ioctl$sock_inet_SIOCDELRT(r0, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @local}, {0x2, 0x4e23, @multicast1}, {0x2, 0x0, @multicast1}, 0x142}) (async) 11:30:40 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/12, 0x8}], 0x1) (async) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x8, 0x20000006, 0x0, 0x0, 0x5}) (async) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 11:30:40 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) clock_gettime(0x0, &(0x7f0000000d40)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000cc0)=[{{&(0x7f00000001c0), 0x80, &(0x7f0000000a00)=[{&(0x7f0000000240)=""/95, 0x5f}, {&(0x7f0000000440)=""/180, 0xb4}, {&(0x7f0000000500)=""/188, 0xbc}, {&(0x7f00000005c0)=""/229, 0xe5}, {&(0x7f00000002c0)=""/45, 0x2d}, {&(0x7f00000006c0)=""/212, 0xd4}, {&(0x7f00000007c0)=""/111, 0x6f}, {&(0x7f0000000840)=""/201, 0xc9}, {&(0x7f0000000940)=""/156, 0x9c}, {&(0x7f0000000300)}], 0xa, &(0x7f0000000ac0)=""/102, 0x66}, 0x4}, {{&(0x7f0000000b40)=@nl=@proc, 0x80, &(0x7f0000000380)=[{&(0x7f0000000bc0)=""/173, 0xad}], 0x1, &(0x7f0000000c80)=""/46, 0x2e}, 0x3}], 0x2, 0x40002122, &(0x7f0000000d80)={r1, r2+60000000}) syz_emit_ethernet(0x8a, &(0x7f0000000100)={@link_local, @random="a687c06fdba6", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4d857", 0x54, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @loopback, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "47e393", 0x3, 0x88, 0x0, @remote, @mcast1, [@srh={0x32, 0x2, 0x4, 0x1, 0x1, 0x20, 0x95, [@local]}], "3da468344a1af97a4754334f"}}}}}}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x1c, 0x4, 0x6, 0x703, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x98, &(0x7f0000000000)={@multicast, @broadcast, @val={@void, {0x8100, 0x0, 0x1, 0x4}}, {@generic={0x88a2, "8e7f101955ff891e18e992e6c079bc5de0c26585955cbeda8c372481f19717b0b3f30a8e9ddb9ddd2908699bd65b6a757964551216632e6721ae960b6dbfc05b160bfc826e07c5213a7a73968520d56cacf76f21873c8fe60b8c81d40ba26de2a169a32ef039e8cf6ba40a87d9e72f767099c835e794cb8f8bb6810e7aa1116bd0a7f5385ddd"}}}, &(0x7f00000000c0)={0x0, 0x4, [0x14, 0x907, 0x494, 0x70c]}) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) (async) clock_gettime(0x0, &(0x7f0000000d40)) (async) recvmmsg(r0, &(0x7f0000000cc0)=[{{&(0x7f00000001c0), 0x80, &(0x7f0000000a00)=[{&(0x7f0000000240)=""/95, 0x5f}, {&(0x7f0000000440)=""/180, 0xb4}, {&(0x7f0000000500)=""/188, 0xbc}, {&(0x7f00000005c0)=""/229, 0xe5}, {&(0x7f00000002c0)=""/45, 0x2d}, {&(0x7f00000006c0)=""/212, 0xd4}, {&(0x7f00000007c0)=""/111, 0x6f}, {&(0x7f0000000840)=""/201, 0xc9}, {&(0x7f0000000940)=""/156, 0x9c}, {&(0x7f0000000300)}], 0xa, &(0x7f0000000ac0)=""/102, 0x66}, 0x4}, {{&(0x7f0000000b40)=@nl=@proc, 0x80, &(0x7f0000000380)=[{&(0x7f0000000bc0)=""/173, 0xad}], 0x1, &(0x7f0000000c80)=""/46, 0x2e}, 0x3}], 0x2, 0x40002122, &(0x7f0000000d80)={r1, r2+60000000}) (async) syz_emit_ethernet(0x8a, &(0x7f0000000100)={@link_local, @random="a687c06fdba6", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4d857", 0x54, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @loopback, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "47e393", 0x3, 0x88, 0x0, @remote, @mcast1, [@srh={0x32, 0x2, 0x4, 0x1, 0x1, 0x20, 0x95, [@local]}], "3da468344a1af97a4754334f"}}}}}}}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x1c, 0x4, 0x6, 0x703, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) syz_emit_ethernet(0x98, &(0x7f0000000000)={@multicast, @broadcast, @val={@void, {0x8100, 0x0, 0x1, 0x4}}, {@generic={0x88a2, "8e7f101955ff891e18e992e6c079bc5de0c26585955cbeda8c372481f19717b0b3f30a8e9ddb9ddd2908699bd65b6a757964551216632e6721ae960b6dbfc05b160bfc826e07c5213a7a73968520d56cacf76f21873c8fe60b8c81d40ba26de2a169a32ef039e8cf6ba40a87d9e72f767099c835e794cb8f8bb6810e7aa1116bd0a7f5385ddd"}}}, &(0x7f00000000c0)={0x0, 0x4, [0x14, 0x907, 0x494, 0x70c]}) (async) 11:30:40 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$mouse(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000280), 0x0) creat(&(0x7f0000000080)='./file0\x00', 0xe1) r5 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES64=r2], 0x14}}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x47) write(0xffffffffffffffff, &(0x7f0000000000)="0553ad72e4a6bd03194e1b125e9cd0a9416df02e0e025410a7248d6813e4fe7b19c1bd5338e3ee9966b568b82c48", 0x97d08) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 11:30:41 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @local}, {0x2, 0x4e23, @multicast1}, {0x2, 0x0, @multicast1}, 0x142}) 11:30:41 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) (async) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x101300, 0x0) openat$cgroup_ro(r2, &(0x7f00000000c0)='cgroup.events\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000340)=ANY=[], 0xfea7) ioctl(r0, 0xc06c4124, &(0x7f0000000040)) ioctl$SNDRV_PCM_IOCTL_HW_FREE(r1, 0x4112, 0x0) 11:30:41 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/12, 0x8}], 0x1) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) r1 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x7}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) 11:30:41 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000080)={{0xffffffffffffffff, 0x3, 0xfffffc01, 0x1}}) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/12, 0x8}], 0x1) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) r3 = syz_open_dev$amidi(&(0x7f00000000c0), 0x7, 0x81) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r3, 0x80045700, &(0x7f0000000180)) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) 11:30:41 executing program 5: syz_emit_ethernet(0x95, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@llc_tr={0x11, {@snap={0x0, 0x0, ',5', "f38bbc", 0x4, "bec5147f4a55eec5758ea6b1708d67aba4c186b654ab6e366efeb0e7a9beca78fb863dbf47d9d675410145d2711bc11306dde7fe40c32811cd21cacff278134dd8efead319106dfae93b3af40ee89496e65f5a44b0717018624bd218539226b05ef90ba970a5689b01c8fd875fceb78eba4702020cd896a624d0fb15ed59"}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@local, @remote, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x4, @empty, @local, @empty, @private=0xa010101}}}}, &(0x7f0000000100)={0x0, 0x2, [0xaaf, 0xc3e, 0x520, 0x989]}) 11:30:41 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}, 0x200, 0x0, 0x0, 0x0, 0xffff}) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x29, @broadcast, 0x4e24, 0x3, 'none\x00', 0x208198a24d05f57d, 0x0, 0x3a}, {@multicast1, 0x4e24, 0x2000, 0xfffff3cb, 0x1907, 0x8d0}}, 0x44) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0xffff, r3}, [@IFLA_CARRIER={0x5}]}, 0x28}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@ipv6_getaddrlabel={0x38, 0x4a, 0x2, 0x70bd2c, 0x25dfdbfd, {0xa, 0x0, 0x1, 0x0, r3, 0xfffffffe}, [@IFAL_LABEL={0x8, 0x2, 0x5}, @IFAL_ADDRESS={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x38}}, 0x90) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000080)={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x1}, 0x46, {0x2, 0x4e23, @loopback}, 'virt_wifi0\x00'}) 11:30:41 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000340)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl(r0, 0xc06c4124, &(0x7f0000000040)) syz_io_uring_setup(0x3a4d, &(0x7f00000000c0)={0x0, 0x6fff, 0x0, 0x1, 0x1d6}, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000d39000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000140)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, {0x0, r3}}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000200)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r1, 0x0, &(0x7f0000000180)="b9a961cca3ee0e0d1ba43b699d41faa5b528a39fb83a0e414b70b5d1abea253a2ab33c4db8ff54d494b509dbb609cc853707ef118b0842d2c6f88555ae688a03974c17c9590b50932b18f831f700a04cc9838839092b1515e16731ea40e11b8d5824e31a50ece0a0039303bfbaf55df2", 0x70, 0x40, 0x1, {0x0, r3}}, 0x2) 11:30:41 executing program 5: syz_emit_ethernet(0x95, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@llc_tr={0x11, {@snap={0x0, 0x0, ',5', "f38bbc", 0x4, "bec5147f4a55eec5758ea6b1708d67aba4c186b654ab6e366efeb0e7a9beca78fb863dbf47d9d675410145d2711bc11306dde7fe40c32811cd21cacff278134dd8efead319106dfae93b3af40ee89496e65f5a44b0717018624bd218539226b05ef90ba970a5689b01c8fd875fceb78eba4702020cd896a624d0fb15ed59"}}}}}, 0x0) (async) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@local, @remote, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x4, @empty, @local, @empty, @private=0xa010101}}}}, &(0x7f0000000100)={0x0, 0x2, [0xaaf, 0xc3e, 0x520, 0x989]}) 11:30:41 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000040), 0x0, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000340)=ANY=[], 0xfea7) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) (async) ioctl(r0, 0xc06c4124, &(0x7f0000000040)) (async) syz_io_uring_setup(0x3a4d, &(0x7f00000000c0)={0x0, 0x6fff, 0x0, 0x1, 0x1d6}, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000d39000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000140)=0x0) (async) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, {0x0, r3}}, 0x0) (async) syz_io_uring_submit(0x0, r2, &(0x7f0000000200)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r1, 0x0, &(0x7f0000000180)="b9a961cca3ee0e0d1ba43b699d41faa5b528a39fb83a0e414b70b5d1abea253a2ab33c4db8ff54d494b509dbb609cc853707ef118b0842d2c6f88555ae688a03974c17c9590b50932b18f831f700a04cc9838839092b1515e16731ea40e11b8d5824e31a50ece0a0039303bfbaf55df2", 0x70, 0x40, 0x1, {0x0, r3}}, 0x2) 11:30:41 executing program 5: syz_emit_ethernet(0x95, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@llc_tr={0x11, {@snap={0x0, 0x0, ',5', "f38bbc", 0x4, "bec5147f4a55eec5758ea6b1708d67aba4c186b654ab6e366efeb0e7a9beca78fb863dbf47d9d675410145d2711bc11306dde7fe40c32811cd21cacff278134dd8efead319106dfae93b3af40ee89496e65f5a44b0717018624bd218539226b05ef90ba970a5689b01c8fd875fceb78eba4702020cd896a624d0fb15ed59"}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@local, @remote, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x4, @empty, @local, @empty, @private=0xa010101}}}}, &(0x7f0000000100)={0x0, 0x2, [0xaaf, 0xc3e, 0x520, 0x989]}) syz_emit_ethernet(0x95, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@llc_tr={0x11, {@snap={0x0, 0x0, ',5', "f38bbc", 0x4, "bec5147f4a55eec5758ea6b1708d67aba4c186b654ab6e366efeb0e7a9beca78fb863dbf47d9d675410145d2711bc11306dde7fe40c32811cd21cacff278134dd8efead319106dfae93b3af40ee89496e65f5a44b0717018624bd218539226b05ef90ba970a5689b01c8fd875fceb78eba4702020cd896a624d0fb15ed59"}}}}}, 0x0) (async) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@local, @remote, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x4, @empty, @local, @empty, @private=0xa010101}}}}, &(0x7f0000000100)={0x0, 0x2, [0xaaf, 0xc3e, 0x520, 0x989]}) (async) [ 2822.838601][ T5213] IPVS: set_ctl: invalid protocol: 41 255.255.255.255:20004 11:30:41 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}, 0x200, 0x0, 0x0, 0x0, 0xffff}) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x29, @broadcast, 0x4e24, 0x3, 'none\x00', 0x208198a24d05f57d, 0x0, 0x3a}, {@multicast1, 0x4e24, 0x2000, 0xfffff3cb, 0x1907, 0x8d0}}, 0x44) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0xffff, r3}, [@IFLA_CARRIER={0x5}]}, 0x28}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@ipv6_getaddrlabel={0x38, 0x4a, 0x2, 0x70bd2c, 0x25dfdbfd, {0xa, 0x0, 0x1, 0x0, r3, 0xfffffffe}, [@IFAL_LABEL={0x8, 0x2, 0x5}, @IFAL_ADDRESS={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x38}}, 0x90) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000080)={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x1}, 0x46, {0x2, 0x4e23, @loopback}, 'virt_wifi0\x00'}) socket$inet_tcp(0x2, 0x1, 0x0) (async) ioctl$sock_inet_SIOCDELRT(r0, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}, 0x200, 0x0, 0x0, 0x0, 0xffff}) (async) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x29, @broadcast, 0x4e24, 0x3, 'none\x00', 0x208198a24d05f57d, 0x0, 0x3a}, {@multicast1, 0x4e24, 0x2000, 0xfffff3cb, 0x1907, 0x8d0}}, 0x44) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6(0xa, 0x1000000000002, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'syz_tun\x00'}) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0xffff, r3}, [@IFLA_CARRIER={0x5}]}, 0x28}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@ipv6_getaddrlabel={0x38, 0x4a, 0x2, 0x70bd2c, 0x25dfdbfd, {0xa, 0x0, 0x1, 0x0, r3, 0xfffffffe}, [@IFAL_LABEL={0x8, 0x2, 0x5}, @IFAL_ADDRESS={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x38}}, 0x90) (async) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000080)={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x1}, 0x46, {0x2, 0x4e23, @loopback}, 'virt_wifi0\x00'}) (async) [ 2822.954031][ T5218] IPVS: set_ctl: invalid protocol: 41 255.255.255.255:20004 [ 2822.987900][ T5220] IPVS: set_ctl: invalid protocol: 1472 0.0.0.0:10240 11:30:41 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$mouse(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000280), 0x0) creat(&(0x7f0000000080)='./file0\x00', 0xe1) r5 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES64=r2], 0x14}}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x47) write(0xffffffffffffffff, &(0x7f0000000000)="0553ad72e4a6bd03194e1b125e9cd0a9416df02e0e025410a7248d6813e4fe7b19c1bd5338e3ee9966b568b82c48", 0x97d08) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 11:30:41 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}, 0x200, 0x0, 0x0, 0x0, 0xffff}) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x29, @broadcast, 0x4e24, 0x3, 'none\x00', 0x208198a24d05f57d, 0x0, 0x3a}, {@multicast1, 0x4e24, 0x2000, 0xfffff3cb, 0x1907, 0x8d0}}, 0x44) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0xffff, r3}, [@IFLA_CARRIER={0x5}]}, 0x28}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@ipv6_getaddrlabel={0x38, 0x4a, 0x2, 0x70bd2c, 0x25dfdbfd, {0xa, 0x0, 0x1, 0x0, r3, 0xfffffffe}, [@IFAL_LABEL={0x8, 0x2, 0x5}, @IFAL_ADDRESS={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x38}}, 0x90) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000080)={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x1}, 0x46, {0x2, 0x4e23, @loopback}, 'virt_wifi0\x00'}) socket$inet_tcp(0x2, 0x1, 0x0) (async) ioctl$sock_inet_SIOCDELRT(r0, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}, 0x200, 0x0, 0x0, 0x0, 0xffff}) (async) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x29, @broadcast, 0x4e24, 0x3, 'none\x00', 0x208198a24d05f57d, 0x0, 0x3a}, {@multicast1, 0x4e24, 0x2000, 0xfffff3cb, 0x1907, 0x8d0}}, 0x44) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6(0xa, 0x1000000000002, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'syz_tun\x00'}) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0xffff, r3}, [@IFLA_CARRIER={0x5}]}, 0x28}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@ipv6_getaddrlabel={0x38, 0x4a, 0x2, 0x70bd2c, 0x25dfdbfd, {0xa, 0x0, 0x1, 0x0, r3, 0xfffffffe}, [@IFAL_LABEL={0x8, 0x2, 0x5}, @IFAL_ADDRESS={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x38}}, 0x90) (async) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000080)={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x1}, 0x46, {0x2, 0x4e23, @loopback}, 'virt_wifi0\x00'}) (async) 11:30:41 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000340)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl(r0, 0xc06c4124, &(0x7f0000000040)) syz_io_uring_setup(0x3a4d, &(0x7f00000000c0)={0x0, 0x6fff, 0x0, 0x1, 0x1d6}, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000d39000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000140)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, {0x0, r3}}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000200)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r1, 0x0, &(0x7f0000000180)="b9a961cca3ee0e0d1ba43b699d41faa5b528a39fb83a0e414b70b5d1abea253a2ab33c4db8ff54d494b509dbb609cc853707ef118b0842d2c6f88555ae688a03974c17c9590b50932b18f831f700a04cc9838839092b1515e16731ea40e11b8d5824e31a50ece0a0039303bfbaf55df2", 0x70, 0x40, 0x1, {0x0, r3}}, 0x2) syz_open_dev$sndpcmc(&(0x7f0000000040), 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) (async) write$binfmt_script(r1, &(0x7f0000000340)=ANY=[], 0xfea7) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) (async) ioctl(r0, 0xc06c4124, &(0x7f0000000040)) (async) syz_io_uring_setup(0x3a4d, &(0x7f00000000c0)={0x0, 0x6fff, 0x0, 0x1, 0x1d6}, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000d39000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000140)) (async) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, {0x0, r3}}, 0x0) (async) syz_io_uring_submit(0x0, r2, &(0x7f0000000200)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r1, 0x0, &(0x7f0000000180)="b9a961cca3ee0e0d1ba43b699d41faa5b528a39fb83a0e414b70b5d1abea253a2ab33c4db8ff54d494b509dbb609cc853707ef118b0842d2c6f88555ae688a03974c17c9590b50932b18f831f700a04cc9838839092b1515e16731ea40e11b8d5824e31a50ece0a0039303bfbaf55df2", 0x70, 0x40, 0x1, {0x0, r3}}, 0x2) (async) [ 2823.396638][ T5236] IPVS: set_ctl: invalid protocol: 41 255.255.255.255:20004 [ 2823.416464][ T5240] IPVS: set_ctl: invalid protocol: 41 255.255.255.255:20004 11:30:42 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/12, 0x8}], 0x1) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) r1 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x7}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/12, 0x8}], 0x1) (async) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) (async) syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) (async) dup(r1) (async) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x7}}) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) (async) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) (async) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) (async) 11:30:42 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000080)={{0xffffffffffffffff, 0x3, 0xfffffc01, 0x1}}) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/12, 0x8}], 0x1) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) r3 = syz_open_dev$amidi(&(0x7f00000000c0), 0x7, 0x81) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r3, 0x80045700, &(0x7f0000000180)) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) 11:30:42 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x547307) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$KDENABIO(r1, 0x4b36) 11:30:42 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r0, 0xc0884123, &(0x7f0000000140)={0x4, "72101bf11ed3f6aea6957b8dda903b71d5ec8da18360fa9a74f8565c8fae3787289c9c8b17dab243f6a50ef0937f193f23db18bcd219d808dd30ddfe7f5c691f", {0x1, 0x7}}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r2 = fsmount(r1, 0x1, 0x4) r3 = openat$cgroup_pressure(r2, &(0x7f00000002c0)='cpu.pressure\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3, {0x800, 0x1}}, './file0\x00'}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000002100)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff081]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) write$binfmt_script(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="fcd72100"/16, @ANYRESOCT=r5], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) ioctl$SNDCTL_DSP_NONBLOCK(r8, 0x500e, 0x0) ioctl(r0, 0xc06c4124, &(0x7f0000000040)) openat$cgroup_ro(r2, &(0x7f0000000200)='cpuacct.usage_user\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r1) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(0xffffffffffffffff, 0xc0305615, &(0x7f0000000100)={0x0, {0xe2, 0x3}}) 11:30:42 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e23, @multicast1}, {0x2, 0x4e24, @broadcast}, 0x100}) 11:30:42 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x547307) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) ioctl$KDENABIO(r1, 0x4b36) 11:30:42 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e23, @multicast1}, {0x2, 0x4e24, @broadcast}, 0x100}) socket$inet_tcp(0x2, 0x1, 0x0) (async) ioctl$sock_inet_SIOCDELRT(r0, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e23, @multicast1}, {0x2, 0x4e24, @broadcast}, 0x100}) (async) 11:30:42 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/12, 0x8}], 0x1) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) r1 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x7}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/12, 0x8}], 0x1) (async) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) (async) syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) (async) dup(r1) (async) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x7}}) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) (async) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) (async) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) (async) 11:30:42 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x547307) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$KDENABIO(r1, 0x4b36) syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x547307) (async) dup(r0) (async) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) ioctl$KDENABIO(r1, 0x4b36) (async) 11:30:42 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$mouse(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000280), 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r5 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES64=r2], 0x14}}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x47) write(r2, &(0x7f0000000000)="0553ad72e4a6bd03194e1b125e9cd0a9416df02e0e025410a7248d6813e4fe7b19c1bd5338e3ee9966b568b82c48", 0x97d08) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 11:30:42 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e23, @multicast1}, {0x2, 0x4e24, @broadcast}, 0x100}) 11:30:42 executing program 5: syz_emit_ethernet(0x72, &(0x7f00000001c0)=ANY=[@ANYBLOB="0180c20000000380c200000086dd60f4d857003c3a0000000000000000000000ffff7f000001ff02000000000000000000000000000101009078000000006047e39300008800fe8000000000000000000000000000bbff0100000000000000000000000000013da468344a1af97a4754334f"], 0x0) 11:30:42 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r0, 0xc0884123, &(0x7f0000000140)={0x4, "72101bf11ed3f6aea6957b8dda903b71d5ec8da18360fa9a74f8565c8fae3787289c9c8b17dab243f6a50ef0937f193f23db18bcd219d808dd30ddfe7f5c691f", {0x1, 0x7}}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r2 = fsmount(r1, 0x1, 0x4) r3 = openat$cgroup_pressure(r2, &(0x7f00000002c0)='cpu.pressure\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3, {0x800, 0x1}}, './file0\x00'}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) (async, rerun: 32) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) (rerun: 32) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000002100)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff081]}) (async) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async) write$binfmt_script(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="fcd72100"/16, @ANYRESOCT=r5], 0xfea7) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) ioctl$SNDCTL_DSP_NONBLOCK(r8, 0x500e, 0x0) ioctl(r0, 0xc06c4124, &(0x7f0000000040)) openat$cgroup_ro(r2, &(0x7f0000000200)='cpuacct.usage_user\x00', 0x0, 0x0) (async, rerun: 64) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r1) (rerun: 64) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(0xffffffffffffffff, 0xc0305615, &(0x7f0000000100)={0x0, {0xe2, 0x3}}) 11:30:43 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$mouse(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000280), 0x0) creat(&(0x7f0000000080)='./file0\x00', 0xe1) r5 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[], 0x14}}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x47) write(r2, &(0x7f0000000000)="0553ad72e4a6bd03194e1b125e9cd0a9416df02e0e025410a7248d6813e4fe7b19c1bd5338e3ee9966b568b82c48", 0x97d08) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 11:30:43 executing program 4: msgget$private(0x0, 0x200) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x8000) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f0000000600)=""/4096) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) r1 = msgget$private(0x0, 0x0) msgrcv(r1, 0x0, 0x0, 0x99ec7f2353ae0a67, 0x0) msgrcv(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="0000000000000000000002000000000000"], 0x11, 0x2, 0x3000) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x1, 0x9, 0x5, 0x0, 0x81, 0x4, 0x600, 0x7], 0x8, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f0000000180)={0x1, 0x8, 0x3, 0x0, 0x1}) 11:30:43 executing program 5: syz_emit_ethernet(0x72, &(0x7f00000001c0)=ANY=[@ANYBLOB="0180c20000000380c200000086dd60f4d857003c3a0000000000000000000000ffff7f000001ff02000000000000000000000000000101009078000000006047e39300008800fe8000000000000000000000000000bbff0100000000000000000000000000013da468344a1af97a4754334f"], 0x0) 11:30:43 executing program 2: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e24, @multicast1}, {0x2, 0x0, @broadcast}, 0x251}) 11:30:43 executing program 2: socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e24, @multicast1}, {0x2, 0x0, @broadcast}, 0x251}) 11:30:43 executing program 5: syz_emit_ethernet(0x72, &(0x7f00000001c0)=ANY=[@ANYBLOB="0180c20000000380c200000086dd60f4d857003c3a0000000000000000000000ffff7f000001ff02000000000000000000000000000101009078000000006047e39300008800fe8000000000000000000000000000bbff0100000000000000000000000000013da468344a1af97a4754334f"], 0x0) 11:30:43 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f00000002c0)={0x0, 0xffff, 0xdc}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000025c0)) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000000)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}]}) syz_emit_ethernet(0x72, &(0x7f0000000080)=ANY=[@ANYRES32=r1], 0x0) 11:30:43 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r0, 0xc0884123, &(0x7f0000000140)={0x4, "72101bf11ed3f6aea6957b8dda903b71d5ec8da18360fa9a74f8565c8fae3787289c9c8b17dab243f6a50ef0937f193f23db18bcd219d808dd30ddfe7f5c691f", {0x1, 0x7}}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r2 = fsmount(r1, 0x1, 0x4) r3 = openat$cgroup_pressure(r2, &(0x7f00000002c0)='cpu.pressure\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3, {0x800, 0x1}}, './file0\x00'}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000002100)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff081]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) write$binfmt_script(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="fcd72100"/16, @ANYRESOCT=r5], 0xfea7) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) ioctl$SNDCTL_DSP_NONBLOCK(r8, 0x500e, 0x0) ioctl(r0, 0xc06c4124, &(0x7f0000000040)) openat$cgroup_ro(r2, &(0x7f0000000200)='cpuacct.usage_user\x00', 0x0, 0x0) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r1) (async) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(0xffffffffffffffff, 0xc0305615, &(0x7f0000000100)={0x0, {0xe2, 0x3}}) 11:30:44 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000040), 0x0, 0x521240) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000340)=ANY=[], 0xfea7) r2 = fspick(r1, &(0x7f0000000200)='./file0\x00', 0x0) sendto$inet6(r1, &(0x7f0000000400)="b98ad29951859319f707699246f1", 0xe, 0x20000040, &(0x7f0000000440)={0xa, 0x4e24, 0x2, @loopback, 0x80000001}, 0x1c) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000002c0)='!t^]&({++${+\x00', 0x0, r1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x50, r1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000004f00000008000300", @ANYRES32=r6, @ANYBLOB="24007a800c00030020f4a740a9a2eb6014000100f4b495cb301a3d3297d1db898c9a2407fe51059f23e8baa591fdbc72878086456fb1e41b24d6d594b202c8132ae9202a04e40047f0579e7e023318fa092e4193bbb9ce0ce1561e8e7e9affc2"], 0x40}}, 0x0) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r4, 0x200, 0x70bd28, 0x25dfdbfc, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x44084}, 0x8010) ioctl(r0, 0xc06c4124, &(0x7f0000000040)) sendmsg$L2TP_CMD_TUNNEL_GET(r5, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0x40000) 11:30:44 executing program 2: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e24, @multicast1}, {0x2, 0x0, @broadcast}, 0x251}) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) ioctl$sock_inet_SIOCDELRT(r0, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e24, @multicast1}, {0x2, 0x0, @broadcast}, 0x251}) (async) 11:30:44 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f00000002c0)={0x0, 0xffff, 0xdc}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000025c0)) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000000)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}]}) syz_emit_ethernet(0x72, &(0x7f0000000080)=ANY=[@ANYRES32=r1], 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f00000002c0)={0x0, 0xffff, 0xdc}) (async) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000025c0)) (async) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000000)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}]}) (async) syz_emit_ethernet(0x72, &(0x7f0000000080)=ANY=[@ANYRES32=r1], 0x0) (async) 11:30:44 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$mouse(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000280), 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r5 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES64=r2], 0x14}}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x47) write(r2, &(0x7f0000000000)="0553ad72e4a6bd03194e1b125e9cd0a9416df02e0e025410a7248d6813e4fe7b19c1bd5338e3ee9966b568b82c48", 0x97d08) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 11:30:44 executing program 4: msgget$private(0x0, 0x200) (async) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x8000) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) (async) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f0000000600)=""/4096) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) (async) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) r1 = msgget$private(0x0, 0x0) msgrcv(r1, 0x0, 0x0, 0x99ec7f2353ae0a67, 0x0) (async) msgrcv(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="0000000000000000000002000000000000"], 0x11, 0x2, 0x3000) (async) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x1, 0x9, 0x5, 0x0, 0x81, 0x4, 0x600, 0x7], 0x8, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f0000000180)={0x1, 0x8, 0x3, 0x0, 0x1}) 11:30:44 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000000)) ioctl$sock_inet_SIOCDELRT(r0, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) 11:30:44 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000040), 0x0, 0x521240) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000340)=ANY=[], 0xfea7) r2 = fspick(r1, &(0x7f0000000200)='./file0\x00', 0x0) sendto$inet6(r1, &(0x7f0000000400)="b98ad29951859319f707699246f1", 0xe, 0x20000040, &(0x7f0000000440)={0xa, 0x4e24, 0x2, @loopback, 0x80000001}, 0x1c) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000002c0)='!t^]&({++${+\x00', 0x0, r1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x50, r1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000004f00000008000300", @ANYRES32=r6, @ANYBLOB="24007a800c00030020f4a740a9a2eb6014000100f4b495cb301a3d3297d1db898c9a2407fe51059f23e8baa591fdbc72878086456fb1e41b24d6d594b202c8132ae9202a04e40047f0579e7e023318fa092e4193bbb9ce0ce1561e8e7e9affc2"], 0x40}}, 0x0) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r4, 0x200, 0x70bd28, 0x25dfdbfc, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x44084}, 0x8010) ioctl(r0, 0xc06c4124, &(0x7f0000000040)) sendmsg$L2TP_CMD_TUNNEL_GET(r5, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0x40000) syz_open_dev$sndpcmc(&(0x7f0000000040), 0x0, 0x521240) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) (async) write$binfmt_script(r1, &(0x7f0000000340)=ANY=[], 0xfea7) (async) fspick(r1, &(0x7f0000000200)='./file0\x00', 0x0) (async) sendto$inet6(r1, &(0x7f0000000400)="b98ad29951859319f707699246f1", 0xe, 0x20000040, &(0x7f0000000440)={0xa, 0x4e24, 0x2, @loopback, 0x80000001}, 0x1c) (async) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000002c0)='!t^]&({++${+\x00', 0x0, r1) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x50, r1, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000004f00000008000300", @ANYRES32=r6, @ANYBLOB="24007a800c00030020f4a740a9a2eb6014000100f4b495cb301a3d3297d1db898c9a2407fe51059f23e8baa591fdbc72878086456fb1e41b24d6d594b202c8132ae9202a04e40047f0579e7e023318fa092e4193bbb9ce0ce1561e8e7e9affc2"], 0x40}}, 0x0) (async) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r4, 0x200, 0x70bd28, 0x25dfdbfc, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x44084}, 0x8010) (async) ioctl(r0, 0xc06c4124, &(0x7f0000000040)) (async) sendmsg$L2TP_CMD_TUNNEL_GET(r5, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0x40000) (async) 11:30:44 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f00000002c0)={0x0, 0xffff, 0xdc}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000025c0)) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000000)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}]}) syz_emit_ethernet(0x72, &(0x7f0000000080)=ANY=[@ANYRES32=r1], 0x0) 11:30:44 executing program 4: msgget$private(0x0, 0x200) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x8000) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f0000000600)=""/4096) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) r1 = msgget$private(0x0, 0x0) msgrcv(r1, 0x0, 0x0, 0x99ec7f2353ae0a67, 0x0) msgrcv(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="0000000000000000000002000000000000"], 0x11, 0x2, 0x3000) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x1, 0x9, 0x5, 0x0, 0x81, 0x4, 0x600, 0x7], 0x8, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f0000000180)={0x1, 0x8, 0x3, 0x0, 0x1}) msgget$private(0x0, 0x200) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x8000) (async) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) (async) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f0000000600)=""/4096) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) (async) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) (async) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) (async) msgget$private(0x0, 0x0) (async) msgrcv(r1, 0x0, 0x0, 0x99ec7f2353ae0a67, 0x0) (async) msgrcv(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="0000000000000000000002000000000000"], 0x11, 0x2, 0x3000) (async) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x1, 0x9, 0x5, 0x0, 0x81, 0x4, 0x600, 0x7], 0x8, 0x80800}) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f0000000180)={0x1, 0x8, 0x3, 0x0, 0x1}) (async) 11:30:44 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000000)) ioctl$sock_inet_SIOCDELRT(r0, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) socket$inet_tcp(0x2, 0x1, 0x0) (async) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000000)) (async) ioctl$sock_inet_SIOCDELRT(r0, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) (async) 11:30:44 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000040), 0x0, 0x521240) (async) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000340)=ANY=[], 0xfea7) (async) r2 = fspick(r1, &(0x7f0000000200)='./file0\x00', 0x0) sendto$inet6(r1, &(0x7f0000000400)="b98ad29951859319f707699246f1", 0xe, 0x20000040, &(0x7f0000000440)={0xa, 0x4e24, 0x2, @loopback, 0x80000001}, 0x1c) (async) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000002c0)='!t^]&({++${+\x00', 0x0, r1) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x50, r1, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000004f00000008000300", @ANYRES32=r6, @ANYBLOB="24007a800c00030020f4a740a9a2eb6014000100f4b495cb301a3d3297d1db898c9a2407fe51059f23e8baa591fdbc72878086456fb1e41b24d6d594b202c8132ae9202a04e40047f0579e7e023318fa092e4193bbb9ce0ce1561e8e7e9affc2"], 0x40}}, 0x0) (async) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r4, 0x200, 0x70bd28, 0x25dfdbfc, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x44084}, 0x8010) (async) ioctl(r0, 0xc06c4124, &(0x7f0000000040)) sendmsg$L2TP_CMD_TUNNEL_GET(r5, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0x40000) 11:30:44 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f00000002c0)={0x0, 0xffff, 0xdc}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000025c0)) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000000)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}]}) syz_emit_ethernet(0x72, &(0x7f0000000080)=ANY=[@ANYRES32=r1], 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f00000002c0)={0x0, 0xffff, 0xdc}) (async) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000025c0)) (async) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000000)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}]}) (async) syz_emit_ethernet(0x72, &(0x7f0000000080)=ANY=[@ANYRES32=r1], 0x0) (async) 11:30:44 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000000)) ioctl$sock_inet_SIOCDELRT(r0, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) 11:30:45 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$mouse(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000280), 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r5 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES64=r2], 0x14}}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x47) write(r2, &(0x7f0000000000)="0553ad72e4a6bd03194e1b125e9cd0a9416df02e0e025410a7248d6813e4fe7b19c1bd5338e3ee9966b568b82c48", 0x97d08) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 11:30:45 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) socket$inet_tcp(0x2, 0x1, 0x0) 11:30:45 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000340)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl(r0, 0xc06c4124, &(0x7f00000000c0)="3840f7a229b886f08bb53966810e325f05bc9a690906d24e1dd2430579917c15462b938d022cbe2ef303573a19c53638813df64f5cfbdca920785f8edf694b91db51410686b92808d77ce56436950a45292b5345bda60ce56848e0cdc155a5c844684cfa8d983083a6e5e4debd6ae03152ef87a55534a387b90b13acae16c1d3ab18770b95715f6168fa933ef47f059da4d76fe61e8135") 11:30:45 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f00000002c0)={0x0, 0xffff, 0xdc}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000025c0)) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000000)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}]}) syz_emit_ethernet(0x72, &(0x7f0000000080)=ANY=[@ANYRES32=r1], 0x0) 11:30:45 executing program 4: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x3) r0 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000080), 0x101, 0x30) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000180)="660fc77103dd160f01c8c4e149544ada0f780b0f07b805000000b97d1c00000f01d9ea028242450800b80a0000000f23c00f21f835020003000f23f8672ef30f09", 0x41}], 0x1, 0x41, &(0x7f0000000200)=[@cr0={0x0, 0x40000009}], 0x1) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000240), 0x40080) readv(r1, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/12, 0x8}], 0x1) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) ioctl$SNDRV_TIMER_IOCTL_TREAD(r1, 0x40045402, &(0x7f0000000140)=0x1) r2 = syz_open_dev$sndmidi(&(0x7f0000000080), 0xffffffffffffffff, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000100)={{0x3, 0x0, 0x0, 0x0, 0xfffffffd}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$KVM_SET_PIT(r0, 0x8048ae66, &(0x7f0000000280)={[{0x0, 0x800, 0x9, 0x3f, 0x1, 0x1, 0x5, 0x8, 0x0, 0x1f, 0x0, 0x0, 0x8f}, {0x5, 0xf78a, 0x3, 0x4, 0x80, 0x2, 0x80, 0xff, 0x4, 0x2, 0x9f, 0x9, 0xa08}, {0xb6cb, 0xb4, 0x0, 0x81, 0x7, 0x3, 0x98, 0x6, 0x1, 0x4, 0x7, 0x7, 0x80000001}], 0x9}) 11:30:45 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x50d000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f0000000080)={0xbe, 0x0, 0x1}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000025c0)) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000000)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4000000000}]}) syz_emit_ethernet(0x72, &(0x7f0000000080)=ANY=[], 0x0) 11:30:45 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) (async) socket$inet_tcp(0x2, 0x1, 0x0) 11:30:45 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x50d000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f0000000080)={0xbe, 0x0, 0x1}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000025c0)) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000000)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4000000000}]}) (async) syz_emit_ethernet(0x72, &(0x7f0000000080)=ANY=[], 0x0) 11:30:45 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000040), 0x0, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000340)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) (async) ioctl(r0, 0xc06c4124, &(0x7f00000000c0)="3840f7a229b886f08bb53966810e325f05bc9a690906d24e1dd2430579917c15462b938d022cbe2ef303573a19c53638813df64f5cfbdca920785f8edf694b91db51410686b92808d77ce56436950a45292b5345bda60ce56848e0cdc155a5c844684cfa8d983083a6e5e4debd6ae03152ef87a55534a387b90b13acae16c1d3ab18770b95715f6168fa933ef47f059da4d76fe61e8135") 11:30:45 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) socket$inet_tcp(0x2, 0x1, 0x0) 11:30:45 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x50d000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f0000000080)={0xbe, 0x0, 0x1}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000025c0)) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000000)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4000000000}]}) syz_emit_ethernet(0x72, &(0x7f0000000080)=ANY=[], 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x50d000, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f0000000080)={0xbe, 0x0, 0x1}) (async) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000025c0)) (async) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000000)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4000000000}]}) (async) syz_emit_ethernet(0x72, &(0x7f0000000080)=ANY=[], 0x0) (async) 11:30:45 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000340)=ANY=[], 0xfea7) (async, rerun: 32) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) (async, rerun: 32) ioctl(r0, 0xc06c4124, &(0x7f00000000c0)="3840f7a229b886f08bb53966810e325f05bc9a690906d24e1dd2430579917c15462b938d022cbe2ef303573a19c53638813df64f5cfbdca920785f8edf694b91db51410686b92808d77ce56436950a45292b5345bda60ce56848e0cdc155a5c844684cfa8d983083a6e5e4debd6ae03152ef87a55534a387b90b13acae16c1d3ab18770b95715f6168fa933ef47f059da4d76fe61e8135") 11:30:45 executing program 0: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r0, 0x8010500d, 0xffffffffffffffff) ioctl$SOUND_PCM_READ_CHANNELS(r0, 0x80045006, &(0x7f00000000c0)) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) readv(r1, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/12, 0x8}], 0x1) ioctl$SNDRV_TIMER_IOCTL_TREAD(r1, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x3}}) poll(&(0x7f0000000080)=[{r1, 0x3440}, {r1, 0x9222}, {r1, 0x4020}, {r1, 0x1}], 0x4, 0x99) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) 11:30:45 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmmsg$sock(r1, &(0x7f0000001f40)=[{{&(0x7f0000000000)=@tipc=@name={0x1e, 0x2, 0x3, {{0x42, 0x1}, 0x4}}, 0x80, &(0x7f0000000540)=[{&(0x7f00000001c0)="3c1763db6150e64c2d4f5441e803034068363415e4f652fcd9eeafae718af8e29e5f6d863f83dd4e14da9f00117405b38d22c24109da3c2d45b413ce883957e246bfeb440e77f5aaeaa9c11641b5463833051318adea9bbbc56624d7203eec443d0bf997585ded41c468df7b47a60a69669c4cf7c4ddd0a5744f0726f1f7ae333cb884e97e9c9449bfa44fd0b41e7413627c6087190ddfa3905efdaf7d825d804a06b40a9c0316eec84b1b41dead7b97dfd7236d5aa30d9fe927891e39ea7e2a39dea33e63b3577a6b", 0xc9}, {&(0x7f00000002c0)="b3d911b2a93e74fd5f292d9e46e6f5fc4f6ebb581f0410fbe09951841f15e3f2471431867712d430c027515f81b62d481dd718a6c2278f0382e970c59fd436ed97b0c631323241dd671c1aefb26de53fbfd44679749f1ed534dc1f841ea942fabc0350fa15489a8446f06255a23a2ca5c8b5a8706f0d5ee1921a596f6ca82c4360e9d8a4386e4c2554949c8e7452182b7b61cb94e545b01b21a2639115416a311853b4b71f8f9c0ccc37de636728a364fd2f268a2916867d65fc52282ce070b7f7c85cadf0d259357552cec97a2b2d793fdfa3d2a935e58cdd2b501188aa", 0xde}, {&(0x7f0000000080)="3f9977630de2f7dfd69903d0e8d8cd53d2d99c417ce1bd3743993a5535e34777168ef509b769", 0x26}, {&(0x7f00000000c0)="ee338a77b9929e9195e508b2", 0xc}, {&(0x7f00000003c0)="610411fbca75578415e4992effe06e9b24069a784a3184b1795bc0838a245a816c690b89eecc0f80276f3a52e5bc9ca86b83dcf3c282f69714e21dc54809b36e414e", 0x42}, {&(0x7f0000000100)="3325b66455d86b2922d94cf1ef89b86a88435eefaae9abdf72f9714124c1bf1308c3bf2b2a91131dad5210b4c365347aaf349976b315bc9b49ad", 0x3a}, {&(0x7f0000000440)="c9ddc894002f7ea234cb195a9512749e3c7fc4efdbbc113652178d16db90aa85f23d0629b4d802e3b4aceb579057a12a97dd40aff8f04faaa26cdc1667ac6afcb9733b416e2e8518d7d7bc4d927679e71577ac8279df1383d6835ca43b54cd175d6cb0641f745d3b40388d73a59a07e90d895c5cd53f2549caae8da0e893b856add8d9486eb113a4f7616839e5962204946ff87af2dae1962ea0e2097d72b212cee5938c0f312c113b98a7f77efe8f0c5233130d05f9ff52a818f623204fffe5eff642a035d0a8c68c5c394668dc9bdf95ae5d36839471bc75dc7b2503729d760f", 0xe1}], 0x7, &(0x7f00000005c0)=[@txtime={{0x18, 0x1, 0x3d, 0x8000000000000000}}, @txtime={{0x18, 0x1, 0x3d, 0x10000}}], 0x30}}, {{&(0x7f0000000600)=@nfc_llcp={0x27, 0x1, 0x2, 0x45a4fe47acc78487, 0x40, 0x2, "0753d576f716d4e9ef8f7232f9bde6c2bfacdf0c0b4c9ab2125cccf2ff282c6aabf16a817352c20acdeaaab11097400a830fe2c9f4e311b9016bfc49f8710b", 0x30}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000680)="34da0afc56e1de9acc93caa3661f69717232307e861014614f9ae86556bf0ad9a2ed3016eefa14539d9bd33a9c07c2153a6281d0d80553884d55e54d2c47f51711e6338d3fc899a0327359fa3b82d9e9530bb5e3b6be61dfe20ac952b879642ec297c96188165b841b87f45b6082ed", 0x6f}, {&(0x7f0000000700)="337067b0d53fc6658ecf3f27c388c9e1adda5f24b5bb99790bea74bdeac0277837ee59d0200e49b351f9ad1fda919e89ce2b9444fcdd4d0a1224d1753f", 0x3d}, {&(0x7f0000000740)="5d6d25bc62ff5bc87e6d2d51b1e8f3195792ce6be8beb72a4e6240f7c23b8161bbb1276e051e9b89f5b62b0dab839ef0b4be3b352d6b1c9412876f6f5dde9f6e164512f03f1c8695deb07e5b6777a6dd12d5399f8c963a732fe518771deae4d3178ac146bd9aab03e5e1317cfaf91bf8246e85afc4ec64334f9550ae4f617acd850e569df204a3483e4016b36e6f80361bf50c1974820e662cbd0a7ad96c91f8fbab3ac14178b4b64adc56dfbe2db76b6822931aded53d1d4a02e02b1fff", 0xbe}, {&(0x7f0000000800)="53bee4ec9aaa6551a2e8016a80ff83ea0c4aaf1e87526b5df038780d59aace751dd2d917909c2fa7abcd7e3b5c723a471d82e5e0513b5aefe9a1a49dd820abdb023ea14af6dca0b32a1bf5968ec981ae54afc6f232a82254daa773ba8d84d2ae06f004ef7d30749f2bdd65fa35d8f7705a4e833e5dae11acf0363b3fcb463f952cab975bc842ee80cb2a91a0985e19d151b17a37247d2e7b27aef80c3207d1714a9841f361", 0xa5}, {&(0x7f00000008c0)="03cf07068f1ddd90fd4d81f29ca7b74f809443d9c6ec1a2051d831a12f6ed88611a01d99fa128b64c518d9add4ce972b50f9181e6ab878a8268073d5447c28644846e2ea0e469bf4528d185b0e0b7e5ab0fcc050315fe7e9ef32a77c2e702582a1c1ea04c2ed66c1934dd23889367e9feeaaab17a5e28154c3119d386cdc38b98a372e901e40de5cb4", 0x89}, {&(0x7f0000000980)="4903f529e22da6688e67281dfedbe4c5c25c04ada76305d35f6fea0c64199a26657dd0fb13ad083dc4ccfcf215048406b89836f294026afc846e31ad0e2aa6bf88f63b5f14e9c82621ae10e6ca2b6e928711ff0b590f10ccde54156b2a71a775a9d254135241695a3b57bc86f70d137a93ecfb9ba9785fe0ff4b", 0x7a}], 0x6, &(0x7f0000000a80)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @mark={{0x14, 0x1, 0x24, 0x9}}], 0x30}}, {{&(0x7f0000000ac0)=@hci={0x1f, 0xffffffffffffffff}, 0x80, &(0x7f0000001e40)=[{&(0x7f0000000b40)="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", 0x1000}, {&(0x7f0000001b40)="eedd634194f1ca0a2e86f09021a3", 0xe}, {&(0x7f0000001b80)="6d165deccac918d71415572cdb5e3703f600327e5a12d903f761313cf53706864fefd43b0ec306fb1f197396fa41a14dde98517184c7fe362a896ac0066a0afeb7e10cae94044b2aaffb95e8b8cf6683b83fcdbd1cae", 0x56}, {&(0x7f0000001c00)="d037f2c5524053639cdd501f89a439b46895232ab1e93425ecfa1aa5fcb05ee6464683d4c3260670cc685c201fd6ee6ccfdab3591ccb27e7b940ea45858bed1024fb4b10c2f74dfefbe4346b5e4a6083dd6b852a82706a3cdbe8071b35268e6f835cd1f893bb", 0x66}, {&(0x7f0000001c80)="82110a96189ebe4239203b154fb9056ac9463389bd29ab11be1a5b34be5a5e9f42b405f80caa3036e2212b55da21cd593881769510a0b7a198081739e31bb293db397eaf08a50e71865918a8476945b87724de7a873c9261f1ae62ba2611eb502bc9f5cecd9b4add510cfeb9149936e968f8436f39c55b50b190432f47a0ca535b0ad17e2ede5e8080acf92362890f142ca92b34db0ffd351c6bbc7c1990c245514f01ed007a270fb818724439483435406ad8b0da05db65c7dfe7479e0fd11d63e62bef991dfa3f73158f", 0xcb}, {&(0x7f0000001d80)="c7766a61161594a9c2ddec8bc1a83a0447a1d14af6", 0x15}, {&(0x7f0000001dc0)="ca0ec446d378667760944b27c44f13686983e1ede64916021423c6d51b344f971cf0c7834b63065cc0c0de4a6625af5f11a79f6061a328485c020c2af89a5fdc92a2d0cbf83c159df43802d0b726679cc2d757f8bbb4593e327556a713c61d602d2f1ee8889f8004b8bd337f22ccfb8210", 0x71}], 0x7, &(0x7f0000001ec0)=[@mark={{0x14, 0x1, 0x24, 0x3}}, @timestamping={{0x14, 0x1, 0x25, 0x800}}, @mark={{0x14, 0x1, 0x24, 0x8}}], 0x48}}], 0x3, 0x0) 11:30:45 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$mouse(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000280), 0x0) creat(&(0x7f0000000080)='./file0\x00', 0xe1) r5 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[], 0x14}}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x47) write(r2, &(0x7f0000000000)="0553ad72e4a6bd03194e1b125e9cd0a9416df02e0e025410a7248d6813e4fe7b19c1bd5338e3ee9966b568b82c48", 0x97d08) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 11:30:45 executing program 5: timer_settime(0x0, 0x1, &(0x7f0000000000)={{0x77359400}, {0x77359400}}, &(0x7f0000000040)) syz_emit_ethernet(0x72, &(0x7f00000001c0)={@link_local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4d857", 0x3c, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "47e393", 0x0, 0x88, 0x0, @remote, @mcast1, [], "3da468344a1af97a4754334f"}}}}}}}, 0x0) 11:30:45 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000340)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x8, 0x11, r1, 0xd22fb000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl(r0, 0xc06c4124, &(0x7f0000000040)) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, &(0x7f0000000000)) 11:30:45 executing program 4: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x3) r0 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000080), 0x101, 0x30) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000180)="660fc77103dd160f01c8c4e149544ada0f780b0f07b805000000b97d1c00000f01d9ea028242450800b80a0000000f23c00f21f835020003000f23f8672ef30f09", 0x41}], 0x1, 0x41, &(0x7f0000000200)=[@cr0={0x0, 0x40000009}], 0x1) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000240), 0x40080) readv(r1, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/12, 0x8}], 0x1) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) ioctl$SNDRV_TIMER_IOCTL_TREAD(r1, 0x40045402, &(0x7f0000000140)=0x1) r2 = syz_open_dev$sndmidi(&(0x7f0000000080), 0xffffffffffffffff, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000100)={{0x3, 0x0, 0x0, 0x0, 0xfffffffd}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$KVM_SET_PIT(r0, 0x8048ae66, &(0x7f0000000280)={[{0x0, 0x800, 0x9, 0x3f, 0x1, 0x1, 0x5, 0x8, 0x0, 0x1f, 0x0, 0x0, 0x8f}, {0x5, 0xf78a, 0x3, 0x4, 0x80, 0x2, 0x80, 0xff, 0x4, 0x2, 0x9f, 0x9, 0xa08}, {0xb6cb, 0xb4, 0x0, 0x81, 0x7, 0x3, 0x98, 0x6, 0x1, 0x4, 0x7, 0x7, 0x80000001}], 0x9}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x3) (async) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000080), 0x101, 0x30) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000180)="660fc77103dd160f01c8c4e149544ada0f780b0f07b805000000b97d1c00000f01d9ea028242450800b80a0000000f23c00f21f835020003000f23f8672ef30f09", 0x41}], 0x1, 0x41, &(0x7f0000000200)=[@cr0={0x0, 0x40000009}], 0x1) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000240), 0x40080) (async) readv(r1, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/12, 0x8}], 0x1) (async) ioctl$KVM_RUN(r0, 0xae80, 0x0) (async) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) (async) ioctl$SNDRV_TIMER_IOCTL_TREAD(r1, 0x40045402, &(0x7f0000000140)=0x1) (async) syz_open_dev$sndmidi(&(0x7f0000000080), 0xffffffffffffffff, 0x141101) (async) dup(r2) (async) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000100)={{0x3, 0x0, 0x0, 0x0, 0xfffffffd}}) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) (async) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) (async) ioctl$KVM_SET_PIT(r0, 0x8048ae66, &(0x7f0000000280)={[{0x0, 0x800, 0x9, 0x3f, 0x1, 0x1, 0x5, 0x8, 0x0, 0x1f, 0x0, 0x0, 0x8f}, {0x5, 0xf78a, 0x3, 0x4, 0x80, 0x2, 0x80, 0xff, 0x4, 0x2, 0x9f, 0x9, 0xa08}, {0xb6cb, 0xb4, 0x0, 0x81, 0x7, 0x3, 0x98, 0x6, 0x1, 0x4, 0x7, 0x7, 0x80000001}], 0x9}) (async) 11:30:45 executing program 5: timer_settime(0x0, 0x1, &(0x7f0000000000)={{0x77359400}, {0x77359400}}, &(0x7f0000000040)) (async) syz_emit_ethernet(0x72, &(0x7f00000001c0)={@link_local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4d857", 0x3c, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "47e393", 0x0, 0x88, 0x0, @remote, @mcast1, [], "3da468344a1af97a4754334f"}}}}}}}, 0x0) 11:30:45 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000340)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x8, 0x11, r1, 0xd22fb000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl(r0, 0xc06c4124, &(0x7f0000000040)) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, &(0x7f0000000000)) syz_open_dev$sndpcmc(&(0x7f0000000040), 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) (async) write$binfmt_script(r1, &(0x7f0000000340)=ANY=[], 0xfea7) (async) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x8, 0x11, r1, 0xd22fb000) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) (async) ioctl(r0, 0xc06c4124, &(0x7f0000000040)) (async) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, &(0x7f0000000000)) (async) 11:30:46 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) (async) sendmmsg$sock(r1, &(0x7f0000001f40)=[{{&(0x7f0000000000)=@tipc=@name={0x1e, 0x2, 0x3, {{0x42, 0x1}, 0x4}}, 0x80, &(0x7f0000000540)=[{&(0x7f00000001c0)="3c1763db6150e64c2d4f5441e803034068363415e4f652fcd9eeafae718af8e29e5f6d863f83dd4e14da9f00117405b38d22c24109da3c2d45b413ce883957e246bfeb440e77f5aaeaa9c11641b5463833051318adea9bbbc56624d7203eec443d0bf997585ded41c468df7b47a60a69669c4cf7c4ddd0a5744f0726f1f7ae333cb884e97e9c9449bfa44fd0b41e7413627c6087190ddfa3905efdaf7d825d804a06b40a9c0316eec84b1b41dead7b97dfd7236d5aa30d9fe927891e39ea7e2a39dea33e63b3577a6b", 0xc9}, {&(0x7f00000002c0)="b3d911b2a93e74fd5f292d9e46e6f5fc4f6ebb581f0410fbe09951841f15e3f2471431867712d430c027515f81b62d481dd718a6c2278f0382e970c59fd436ed97b0c631323241dd671c1aefb26de53fbfd44679749f1ed534dc1f841ea942fabc0350fa15489a8446f06255a23a2ca5c8b5a8706f0d5ee1921a596f6ca82c4360e9d8a4386e4c2554949c8e7452182b7b61cb94e545b01b21a2639115416a311853b4b71f8f9c0ccc37de636728a364fd2f268a2916867d65fc52282ce070b7f7c85cadf0d259357552cec97a2b2d793fdfa3d2a935e58cdd2b501188aa", 0xde}, {&(0x7f0000000080)="3f9977630de2f7dfd69903d0e8d8cd53d2d99c417ce1bd3743993a5535e34777168ef509b769", 0x26}, {&(0x7f00000000c0)="ee338a77b9929e9195e508b2", 0xc}, {&(0x7f00000003c0)="610411fbca75578415e4992effe06e9b24069a784a3184b1795bc0838a245a816c690b89eecc0f80276f3a52e5bc9ca86b83dcf3c282f69714e21dc54809b36e414e", 0x42}, {&(0x7f0000000100)="3325b66455d86b2922d94cf1ef89b86a88435eefaae9abdf72f9714124c1bf1308c3bf2b2a91131dad5210b4c365347aaf349976b315bc9b49ad", 0x3a}, {&(0x7f0000000440)="c9ddc894002f7ea234cb195a9512749e3c7fc4efdbbc113652178d16db90aa85f23d0629b4d802e3b4aceb579057a12a97dd40aff8f04faaa26cdc1667ac6afcb9733b416e2e8518d7d7bc4d927679e71577ac8279df1383d6835ca43b54cd175d6cb0641f745d3b40388d73a59a07e90d895c5cd53f2549caae8da0e893b856add8d9486eb113a4f7616839e5962204946ff87af2dae1962ea0e2097d72b212cee5938c0f312c113b98a7f77efe8f0c5233130d05f9ff52a818f623204fffe5eff642a035d0a8c68c5c394668dc9bdf95ae5d36839471bc75dc7b2503729d760f", 0xe1}], 0x7, &(0x7f00000005c0)=[@txtime={{0x18, 0x1, 0x3d, 0x8000000000000000}}, @txtime={{0x18, 0x1, 0x3d, 0x10000}}], 0x30}}, {{&(0x7f0000000600)=@nfc_llcp={0x27, 0x1, 0x2, 0x45a4fe47acc78487, 0x40, 0x2, "0753d576f716d4e9ef8f7232f9bde6c2bfacdf0c0b4c9ab2125cccf2ff282c6aabf16a817352c20acdeaaab11097400a830fe2c9f4e311b9016bfc49f8710b", 0x30}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000680)="34da0afc56e1de9acc93caa3661f69717232307e861014614f9ae86556bf0ad9a2ed3016eefa14539d9bd33a9c07c2153a6281d0d80553884d55e54d2c47f51711e6338d3fc899a0327359fa3b82d9e9530bb5e3b6be61dfe20ac952b879642ec297c96188165b841b87f45b6082ed", 0x6f}, {&(0x7f0000000700)="337067b0d53fc6658ecf3f27c388c9e1adda5f24b5bb99790bea74bdeac0277837ee59d0200e49b351f9ad1fda919e89ce2b9444fcdd4d0a1224d1753f", 0x3d}, {&(0x7f0000000740)="5d6d25bc62ff5bc87e6d2d51b1e8f3195792ce6be8beb72a4e6240f7c23b8161bbb1276e051e9b89f5b62b0dab839ef0b4be3b352d6b1c9412876f6f5dde9f6e164512f03f1c8695deb07e5b6777a6dd12d5399f8c963a732fe518771deae4d3178ac146bd9aab03e5e1317cfaf91bf8246e85afc4ec64334f9550ae4f617acd850e569df204a3483e4016b36e6f80361bf50c1974820e662cbd0a7ad96c91f8fbab3ac14178b4b64adc56dfbe2db76b6822931aded53d1d4a02e02b1fff", 0xbe}, {&(0x7f0000000800)="53bee4ec9aaa6551a2e8016a80ff83ea0c4aaf1e87526b5df038780d59aace751dd2d917909c2fa7abcd7e3b5c723a471d82e5e0513b5aefe9a1a49dd820abdb023ea14af6dca0b32a1bf5968ec981ae54afc6f232a82254daa773ba8d84d2ae06f004ef7d30749f2bdd65fa35d8f7705a4e833e5dae11acf0363b3fcb463f952cab975bc842ee80cb2a91a0985e19d151b17a37247d2e7b27aef80c3207d1714a9841f361", 0xa5}, {&(0x7f00000008c0)="03cf07068f1ddd90fd4d81f29ca7b74f809443d9c6ec1a2051d831a12f6ed88611a01d99fa128b64c518d9add4ce972b50f9181e6ab878a8268073d5447c28644846e2ea0e469bf4528d185b0e0b7e5ab0fcc050315fe7e9ef32a77c2e702582a1c1ea04c2ed66c1934dd23889367e9feeaaab17a5e28154c3119d386cdc38b98a372e901e40de5cb4", 0x89}, {&(0x7f0000000980)="4903f529e22da6688e67281dfedbe4c5c25c04ada76305d35f6fea0c64199a26657dd0fb13ad083dc4ccfcf215048406b89836f294026afc846e31ad0e2aa6bf88f63b5f14e9c82621ae10e6ca2b6e928711ff0b590f10ccde54156b2a71a775a9d254135241695a3b57bc86f70d137a93ecfb9ba9785fe0ff4b", 0x7a}], 0x6, &(0x7f0000000a80)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @mark={{0x14, 0x1, 0x24, 0x9}}], 0x30}}, {{&(0x7f0000000ac0)=@hci={0x1f, 0xffffffffffffffff}, 0x80, &(0x7f0000001e40)=[{&(0x7f0000000b40)="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", 0x1000}, {&(0x7f0000001b40)="eedd634194f1ca0a2e86f09021a3", 0xe}, {&(0x7f0000001b80)="6d165deccac918d71415572cdb5e3703f600327e5a12d903f761313cf53706864fefd43b0ec306fb1f197396fa41a14dde98517184c7fe362a896ac0066a0afeb7e10cae94044b2aaffb95e8b8cf6683b83fcdbd1cae", 0x56}, {&(0x7f0000001c00)="d037f2c5524053639cdd501f89a439b46895232ab1e93425ecfa1aa5fcb05ee6464683d4c3260670cc685c201fd6ee6ccfdab3591ccb27e7b940ea45858bed1024fb4b10c2f74dfefbe4346b5e4a6083dd6b852a82706a3cdbe8071b35268e6f835cd1f893bb", 0x66}, {&(0x7f0000001c80)="82110a96189ebe4239203b154fb9056ac9463389bd29ab11be1a5b34be5a5e9f42b405f80caa3036e2212b55da21cd593881769510a0b7a198081739e31bb293db397eaf08a50e71865918a8476945b87724de7a873c9261f1ae62ba2611eb502bc9f5cecd9b4add510cfeb9149936e968f8436f39c55b50b190432f47a0ca535b0ad17e2ede5e8080acf92362890f142ca92b34db0ffd351c6bbc7c1990c245514f01ed007a270fb818724439483435406ad8b0da05db65c7dfe7479e0fd11d63e62bef991dfa3f73158f", 0xcb}, {&(0x7f0000001d80)="c7766a61161594a9c2ddec8bc1a83a0447a1d14af6", 0x15}, {&(0x7f0000001dc0)="ca0ec446d378667760944b27c44f13686983e1ede64916021423c6d51b344f971cf0c7834b63065cc0c0de4a6625af5f11a79f6061a328485c020c2af89a5fdc92a2d0cbf83c159df43802d0b726679cc2d757f8bbb4593e327556a713c61d602d2f1ee8889f8004b8bd337f22ccfb8210", 0x71}], 0x7, &(0x7f0000001ec0)=[@mark={{0x14, 0x1, 0x24, 0x3}}, @timestamping={{0x14, 0x1, 0x25, 0x800}}, @mark={{0x14, 0x1, 0x24, 0x8}}], 0x48}}], 0x3, 0x0) 11:30:46 executing program 5: timer_settime(0x0, 0x1, &(0x7f0000000000)={{0x77359400}, {0x77359400}}, &(0x7f0000000040)) syz_emit_ethernet(0x72, &(0x7f00000001c0)={@link_local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4d857", 0x3c, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "47e393", 0x0, 0x88, 0x0, @remote, @mcast1, [], "3da468344a1af97a4754334f"}}}}}}}, 0x0) 11:30:46 executing program 4: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x3) r0 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000080), 0x101, 0x30) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000180)="660fc77103dd160f01c8c4e149544ada0f780b0f07b805000000b97d1c00000f01d9ea028242450800b80a0000000f23c00f21f835020003000f23f8672ef30f09", 0x41}], 0x1, 0x41, &(0x7f0000000200)=[@cr0={0x0, 0x40000009}], 0x1) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000240), 0x40080) readv(r1, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/12, 0x8}], 0x1) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) ioctl$SNDRV_TIMER_IOCTL_TREAD(r1, 0x40045402, &(0x7f0000000140)=0x1) r2 = syz_open_dev$sndmidi(&(0x7f0000000080), 0xffffffffffffffff, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000100)={{0x3, 0x0, 0x0, 0x0, 0xfffffffd}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$KVM_SET_PIT(r0, 0x8048ae66, &(0x7f0000000280)={[{0x0, 0x800, 0x9, 0x3f, 0x1, 0x1, 0x5, 0x8, 0x0, 0x1f, 0x0, 0x0, 0x8f}, {0x5, 0xf78a, 0x3, 0x4, 0x80, 0x2, 0x80, 0xff, 0x4, 0x2, 0x9f, 0x9, 0xa08}, {0xb6cb, 0xb4, 0x0, 0x81, 0x7, 0x3, 0x98, 0x6, 0x1, 0x4, 0x7, 0x7, 0x80000001}], 0x9}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x3) (async) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000080), 0x101, 0x30) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000180)="660fc77103dd160f01c8c4e149544ada0f780b0f07b805000000b97d1c00000f01d9ea028242450800b80a0000000f23c00f21f835020003000f23f8672ef30f09", 0x41}], 0x1, 0x41, &(0x7f0000000200)=[@cr0={0x0, 0x40000009}], 0x1) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000240), 0x40080) (async) readv(r1, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/12, 0x8}], 0x1) (async) ioctl$KVM_RUN(r0, 0xae80, 0x0) (async) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) (async) ioctl$SNDRV_TIMER_IOCTL_TREAD(r1, 0x40045402, &(0x7f0000000140)=0x1) (async) syz_open_dev$sndmidi(&(0x7f0000000080), 0xffffffffffffffff, 0x141101) (async) dup(r2) (async) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000100)={{0x3, 0x0, 0x0, 0x0, 0xfffffffd}}) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) (async) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) (async) ioctl$KVM_SET_PIT(r0, 0x8048ae66, &(0x7f0000000280)={[{0x0, 0x800, 0x9, 0x3f, 0x1, 0x1, 0x5, 0x8, 0x0, 0x1f, 0x0, 0x0, 0x8f}, {0x5, 0xf78a, 0x3, 0x4, 0x80, 0x2, 0x80, 0xff, 0x4, 0x2, 0x9f, 0x9, 0xa08}, {0xb6cb, 0xb4, 0x0, 0x81, 0x7, 0x3, 0x98, 0x6, 0x1, 0x4, 0x7, 0x7, 0x80000001}], 0x9}) (async) 11:30:46 executing program 0: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r0, 0x8010500d, 0xffffffffffffffff) ioctl$SOUND_PCM_READ_CHANNELS(r0, 0x80045006, &(0x7f00000000c0)) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) readv(r1, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/12, 0x8}], 0x1) ioctl$SNDRV_TIMER_IOCTL_TREAD(r1, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x3}}) poll(&(0x7f0000000080)=[{r1, 0x3440}, {r1, 0x9222}, {r1, 0x4020}, {r1, 0x1}], 0x4, 0x99) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) 11:30:46 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) (async) sendmmsg$sock(r1, &(0x7f0000001f40)=[{{&(0x7f0000000000)=@tipc=@name={0x1e, 0x2, 0x3, {{0x42, 0x1}, 0x4}}, 0x80, &(0x7f0000000540)=[{&(0x7f00000001c0)="3c1763db6150e64c2d4f5441e803034068363415e4f652fcd9eeafae718af8e29e5f6d863f83dd4e14da9f00117405b38d22c24109da3c2d45b413ce883957e246bfeb440e77f5aaeaa9c11641b5463833051318adea9bbbc56624d7203eec443d0bf997585ded41c468df7b47a60a69669c4cf7c4ddd0a5744f0726f1f7ae333cb884e97e9c9449bfa44fd0b41e7413627c6087190ddfa3905efdaf7d825d804a06b40a9c0316eec84b1b41dead7b97dfd7236d5aa30d9fe927891e39ea7e2a39dea33e63b3577a6b", 0xc9}, {&(0x7f00000002c0)="b3d911b2a93e74fd5f292d9e46e6f5fc4f6ebb581f0410fbe09951841f15e3f2471431867712d430c027515f81b62d481dd718a6c2278f0382e970c59fd436ed97b0c631323241dd671c1aefb26de53fbfd44679749f1ed534dc1f841ea942fabc0350fa15489a8446f06255a23a2ca5c8b5a8706f0d5ee1921a596f6ca82c4360e9d8a4386e4c2554949c8e7452182b7b61cb94e545b01b21a2639115416a311853b4b71f8f9c0ccc37de636728a364fd2f268a2916867d65fc52282ce070b7f7c85cadf0d259357552cec97a2b2d793fdfa3d2a935e58cdd2b501188aa", 0xde}, {&(0x7f0000000080)="3f9977630de2f7dfd69903d0e8d8cd53d2d99c417ce1bd3743993a5535e34777168ef509b769", 0x26}, {&(0x7f00000000c0)="ee338a77b9929e9195e508b2", 0xc}, {&(0x7f00000003c0)="610411fbca75578415e4992effe06e9b24069a784a3184b1795bc0838a245a816c690b89eecc0f80276f3a52e5bc9ca86b83dcf3c282f69714e21dc54809b36e414e", 0x42}, {&(0x7f0000000100)="3325b66455d86b2922d94cf1ef89b86a88435eefaae9abdf72f9714124c1bf1308c3bf2b2a91131dad5210b4c365347aaf349976b315bc9b49ad", 0x3a}, {&(0x7f0000000440)="c9ddc894002f7ea234cb195a9512749e3c7fc4efdbbc113652178d16db90aa85f23d0629b4d802e3b4aceb579057a12a97dd40aff8f04faaa26cdc1667ac6afcb9733b416e2e8518d7d7bc4d927679e71577ac8279df1383d6835ca43b54cd175d6cb0641f745d3b40388d73a59a07e90d895c5cd53f2549caae8da0e893b856add8d9486eb113a4f7616839e5962204946ff87af2dae1962ea0e2097d72b212cee5938c0f312c113b98a7f77efe8f0c5233130d05f9ff52a818f623204fffe5eff642a035d0a8c68c5c394668dc9bdf95ae5d36839471bc75dc7b2503729d760f", 0xe1}], 0x7, &(0x7f00000005c0)=[@txtime={{0x18, 0x1, 0x3d, 0x8000000000000000}}, @txtime={{0x18, 0x1, 0x3d, 0x10000}}], 0x30}}, {{&(0x7f0000000600)=@nfc_llcp={0x27, 0x1, 0x2, 0x45a4fe47acc78487, 0x40, 0x2, "0753d576f716d4e9ef8f7232f9bde6c2bfacdf0c0b4c9ab2125cccf2ff282c6aabf16a817352c20acdeaaab11097400a830fe2c9f4e311b9016bfc49f8710b", 0x30}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000680)="34da0afc56e1de9acc93caa3661f69717232307e861014614f9ae86556bf0ad9a2ed3016eefa14539d9bd33a9c07c2153a6281d0d80553884d55e54d2c47f51711e6338d3fc899a0327359fa3b82d9e9530bb5e3b6be61dfe20ac952b879642ec297c96188165b841b87f45b6082ed", 0x6f}, {&(0x7f0000000700)="337067b0d53fc6658ecf3f27c388c9e1adda5f24b5bb99790bea74bdeac0277837ee59d0200e49b351f9ad1fda919e89ce2b9444fcdd4d0a1224d1753f", 0x3d}, {&(0x7f0000000740)="5d6d25bc62ff5bc87e6d2d51b1e8f3195792ce6be8beb72a4e6240f7c23b8161bbb1276e051e9b89f5b62b0dab839ef0b4be3b352d6b1c9412876f6f5dde9f6e164512f03f1c8695deb07e5b6777a6dd12d5399f8c963a732fe518771deae4d3178ac146bd9aab03e5e1317cfaf91bf8246e85afc4ec64334f9550ae4f617acd850e569df204a3483e4016b36e6f80361bf50c1974820e662cbd0a7ad96c91f8fbab3ac14178b4b64adc56dfbe2db76b6822931aded53d1d4a02e02b1fff", 0xbe}, {&(0x7f0000000800)="53bee4ec9aaa6551a2e8016a80ff83ea0c4aaf1e87526b5df038780d59aace751dd2d917909c2fa7abcd7e3b5c723a471d82e5e0513b5aefe9a1a49dd820abdb023ea14af6dca0b32a1bf5968ec981ae54afc6f232a82254daa773ba8d84d2ae06f004ef7d30749f2bdd65fa35d8f7705a4e833e5dae11acf0363b3fcb463f952cab975bc842ee80cb2a91a0985e19d151b17a37247d2e7b27aef80c3207d1714a9841f361", 0xa5}, {&(0x7f00000008c0)="03cf07068f1ddd90fd4d81f29ca7b74f809443d9c6ec1a2051d831a12f6ed88611a01d99fa128b64c518d9add4ce972b50f9181e6ab878a8268073d5447c28644846e2ea0e469bf4528d185b0e0b7e5ab0fcc050315fe7e9ef32a77c2e702582a1c1ea04c2ed66c1934dd23889367e9feeaaab17a5e28154c3119d386cdc38b98a372e901e40de5cb4", 0x89}, {&(0x7f0000000980)="4903f529e22da6688e67281dfedbe4c5c25c04ada76305d35f6fea0c64199a26657dd0fb13ad083dc4ccfcf215048406b89836f294026afc846e31ad0e2aa6bf88f63b5f14e9c82621ae10e6ca2b6e928711ff0b590f10ccde54156b2a71a775a9d254135241695a3b57bc86f70d137a93ecfb9ba9785fe0ff4b", 0x7a}], 0x6, &(0x7f0000000a80)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @mark={{0x14, 0x1, 0x24, 0x9}}], 0x30}}, {{&(0x7f0000000ac0)=@hci={0x1f, 0xffffffffffffffff}, 0x80, &(0x7f0000001e40)=[{&(0x7f0000000b40)="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", 0x1000}, {&(0x7f0000001b40)="eedd634194f1ca0a2e86f09021a3", 0xe}, {&(0x7f0000001b80)="6d165deccac918d71415572cdb5e3703f600327e5a12d903f761313cf53706864fefd43b0ec306fb1f197396fa41a14dde98517184c7fe362a896ac0066a0afeb7e10cae94044b2aaffb95e8b8cf6683b83fcdbd1cae", 0x56}, {&(0x7f0000001c00)="d037f2c5524053639cdd501f89a439b46895232ab1e93425ecfa1aa5fcb05ee6464683d4c3260670cc685c201fd6ee6ccfdab3591ccb27e7b940ea45858bed1024fb4b10c2f74dfefbe4346b5e4a6083dd6b852a82706a3cdbe8071b35268e6f835cd1f893bb", 0x66}, {&(0x7f0000001c80)="82110a96189ebe4239203b154fb9056ac9463389bd29ab11be1a5b34be5a5e9f42b405f80caa3036e2212b55da21cd593881769510a0b7a198081739e31bb293db397eaf08a50e71865918a8476945b87724de7a873c9261f1ae62ba2611eb502bc9f5cecd9b4add510cfeb9149936e968f8436f39c55b50b190432f47a0ca535b0ad17e2ede5e8080acf92362890f142ca92b34db0ffd351c6bbc7c1990c245514f01ed007a270fb818724439483435406ad8b0da05db65c7dfe7479e0fd11d63e62bef991dfa3f73158f", 0xcb}, {&(0x7f0000001d80)="c7766a61161594a9c2ddec8bc1a83a0447a1d14af6", 0x15}, {&(0x7f0000001dc0)="ca0ec446d378667760944b27c44f13686983e1ede64916021423c6d51b344f971cf0c7834b63065cc0c0de4a6625af5f11a79f6061a328485c020c2af89a5fdc92a2d0cbf83c159df43802d0b726679cc2d757f8bbb4593e327556a713c61d602d2f1ee8889f8004b8bd337f22ccfb8210", 0x71}], 0x7, &(0x7f0000001ec0)=[@mark={{0x14, 0x1, 0x24, 0x3}}, @timestamping={{0x14, 0x1, 0x25, 0x800}}, @mark={{0x14, 0x1, 0x24, 0x8}}], 0x48}}], 0x3, 0x0) 11:30:46 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000040), 0x0, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000340)=ANY=[], 0xfea7) (async) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x8, 0x11, r1, 0xd22fb000) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) (async) ioctl(r0, 0xc06c4124, &(0x7f0000000040)) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, &(0x7f0000000000)) 11:30:46 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$mouse(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000280), 0x0) creat(&(0x7f0000000080)='./file0\x00', 0xe1) r5 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x47) write(r2, &(0x7f0000000000)="0553ad72e4a6bd03194e1b125e9cd0a9416df02e0e025410a7248d6813e4fe7b19c1bd5338e3ee9966b568b82c48", 0x97d08) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 11:30:46 executing program 5: ioctl$SNDRV_PCM_IOCTL_READN_FRAMES(0xffffffffffffffff, 0x80184153, &(0x7f0000000140)={0x0, &(0x7f0000000100)=[&(0x7f0000000000)="ab87fb22ff9f1b6de5b0e88d6590ccc48d7f0453f3f14d56046c325acb9a6adb4a8094b25916a9fb12a8fea3b98be9eee43f7b89e4f7f2939d3d81916f1683166dc1943942d7cdb610431ba06cc789e110d37aad8ea128da29691de33664dada1fedd3233d716bbead6113769c8b0ec7f9383f6de8abe5f3db701a2a9f07e102ae0cb87e0d9f11331f6d8ba76c9a8bbfb1cb4f3e2a7c6fcf5a34257a6affdb9c23fbe6dfcc91e139c1111ddc5b217ddba736d0a05369be40cf3626d1303572f6aedd71b0adaa8f46623e93eab8b76ad74f9552f6bb9fa0e19e89f0aec62b087a6b0b5910b237c262d569edd9"]}) syz_emit_ethernet(0x72, &(0x7f00000002c0)=ANY=[@ANYBLOB="01800020000000000000000086dd60f4d857003c3a00000000184dfc28000000ffff7f000001ff02000000000000000000000000000101009078000000006047e39300008800fe8000000040000000000000000000bbff0100000000000000000000000000013da468344a1af97a4754334f575d75680f8667a74c8f3a858132c6887bba29fe5bdabcb84f92928fc777fcf91c4a08d032e7cb75eb2f01000000b8d2ed4dfeeb7207d2d1716c4d16c2419dd46380e82c8410bb6d9dd2082511ee1746da7281"], 0x0) 11:30:46 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10) 11:30:46 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f00000025c0)) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000000)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}]}) r4 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000000c0)='tasks\x00', 0x2, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000180)={0x0, 0x10000, 0x6, 0x0, 0x0, [{{}, 0x100}, {{r1}, 0x5f}, {{r3}, 0x1}, {{r0}, 0x8}, {{r4}, 0x101}, {{r5}, 0x5}]}) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/12, 0x8}], 0x1) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 11:30:46 executing program 3: syz_open_dev$sndpcmc(&(0x7f0000000040), 0xfffffffffffffffc, 0x502) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x161101) r2 = dup(r1) writev(0xffffffffffffffff, 0x0, 0x0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r4, r3, 0x0, 0x262) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r5, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r5, &(0x7f0000000240)=ANY=[], 0xa) close(0xffffffffffffffff) socket(0x10, 0x3, 0x0) writev(r5, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) write$binfmt_misc(r5, &(0x7f0000000140)=ANY=[], 0xfef0) write$binfmt_script(r0, &(0x7f0000000340)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) 11:30:46 executing program 0: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r0, 0x8010500d, 0xffffffffffffffff) ioctl$SOUND_PCM_READ_CHANNELS(r0, 0x80045006, &(0x7f00000000c0)) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) readv(r1, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/12, 0x8}], 0x1) ioctl$SNDRV_TIMER_IOCTL_TREAD(r1, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x3}}) poll(&(0x7f0000000080)=[{r1, 0x3440}, {r1, 0x9222}, {r1, 0x4020}, {r1, 0x1}], 0x4, 0x99) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) 11:30:46 executing program 5: ioctl$SNDRV_PCM_IOCTL_READN_FRAMES(0xffffffffffffffff, 0x80184153, &(0x7f0000000140)={0x0, &(0x7f0000000100)=[&(0x7f0000000000)="ab87fb22ff9f1b6de5b0e88d6590ccc48d7f0453f3f14d56046c325acb9a6adb4a8094b25916a9fb12a8fea3b98be9eee43f7b89e4f7f2939d3d81916f1683166dc1943942d7cdb610431ba06cc789e110d37aad8ea128da29691de33664dada1fedd3233d716bbead6113769c8b0ec7f9383f6de8abe5f3db701a2a9f07e102ae0cb87e0d9f11331f6d8ba76c9a8bbfb1cb4f3e2a7c6fcf5a34257a6affdb9c23fbe6dfcc91e139c1111ddc5b217ddba736d0a05369be40cf3626d1303572f6aedd71b0adaa8f46623e93eab8b76ad74f9552f6bb9fa0e19e89f0aec62b087a6b0b5910b237c262d569edd9"]}) syz_emit_ethernet(0x72, &(0x7f00000002c0)=ANY=[@ANYBLOB="01800020000000000000000086dd60f4d857003c3a00000000184dfc28000000ffff7f000001ff02000000000000000000000000000101009078000000006047e39300008800fe8000000040000000000000000000bbff0100000000000000000000000000013da468344a1af97a4754334f575d75680f8667a74c8f3a858132c6887bba29fe5bdabcb84f92928fc777fcf91c4a08d032e7cb75eb2f01000000b8d2ed4dfeeb7207d2d1716c4d16c2419dd46380e82c8410bb6d9dd2082511ee1746da7281"], 0x0) 11:30:46 executing program 5: ioctl$SNDRV_PCM_IOCTL_READN_FRAMES(0xffffffffffffffff, 0x80184153, &(0x7f0000000140)={0x0, &(0x7f0000000100)=[&(0x7f0000000000)="ab87fb22ff9f1b6de5b0e88d6590ccc48d7f0453f3f14d56046c325acb9a6adb4a8094b25916a9fb12a8fea3b98be9eee43f7b89e4f7f2939d3d81916f1683166dc1943942d7cdb610431ba06cc789e110d37aad8ea128da29691de33664dada1fedd3233d716bbead6113769c8b0ec7f9383f6de8abe5f3db701a2a9f07e102ae0cb87e0d9f11331f6d8ba76c9a8bbfb1cb4f3e2a7c6fcf5a34257a6affdb9c23fbe6dfcc91e139c1111ddc5b217ddba736d0a05369be40cf3626d1303572f6aedd71b0adaa8f46623e93eab8b76ad74f9552f6bb9fa0e19e89f0aec62b087a6b0b5910b237c262d569edd9"]}) syz_emit_ethernet(0x72, &(0x7f00000002c0)=ANY=[@ANYBLOB="01800020000000000000000086dd60f4d857003c3a00000000184dfc28000000ffff7f000001ff02000000000000000000000000000101009078000000006047e39300008800fe8000000040000000000000000000bbff0100000000000000000000000000013da468344a1af97a4754334f575d75680f8667a74c8f3a858132c6887bba29fe5bdabcb84f92928fc777fcf91c4a08d032e7cb75eb2f01000000b8d2ed4dfeeb7207d2d1716c4d16c2419dd46380e82c8410bb6d9dd2082511ee1746da7281"], 0x0) ioctl$SNDRV_PCM_IOCTL_READN_FRAMES(0xffffffffffffffff, 0x80184153, &(0x7f0000000140)={0x0, &(0x7f0000000100)=[&(0x7f0000000000)="ab87fb22ff9f1b6de5b0e88d6590ccc48d7f0453f3f14d56046c325acb9a6adb4a8094b25916a9fb12a8fea3b98be9eee43f7b89e4f7f2939d3d81916f1683166dc1943942d7cdb610431ba06cc789e110d37aad8ea128da29691de33664dada1fedd3233d716bbead6113769c8b0ec7f9383f6de8abe5f3db701a2a9f07e102ae0cb87e0d9f11331f6d8ba76c9a8bbfb1cb4f3e2a7c6fcf5a34257a6affdb9c23fbe6dfcc91e139c1111ddc5b217ddba736d0a05369be40cf3626d1303572f6aedd71b0adaa8f46623e93eab8b76ad74f9552f6bb9fa0e19e89f0aec62b087a6b0b5910b237c262d569edd9"]}) (async) syz_emit_ethernet(0x72, &(0x7f00000002c0)=ANY=[@ANYBLOB="01800020000000000000000086dd60f4d857003c3a00000000184dfc28000000ffff7f000001ff02000000000000000000000000000101009078000000006047e39300008800fe8000000040000000000000000000bbff0100000000000000000000000000013da468344a1af97a4754334f575d75680f8667a74c8f3a858132c6887bba29fe5bdabcb84f92928fc777fcf91c4a08d032e7cb75eb2f01000000b8d2ed4dfeeb7207d2d1716c4d16c2419dd46380e82c8410bb6d9dd2082511ee1746da7281"], 0x0) (async) 11:30:46 executing program 0: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r0, 0x8010500d, 0xffffffffffffffff) ioctl$SOUND_PCM_READ_CHANNELS(r0, 0x80045006, &(0x7f00000000c0)) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) readv(r1, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/12, 0x8}], 0x1) ioctl$SNDRV_TIMER_IOCTL_TREAD(r1, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x3}}) poll(&(0x7f0000000080)=[{r1, 0x3440}, {r1, 0x9222}, {r1, 0x4020}, {r1, 0x1}], 0x4, 0x99) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) 11:30:47 executing program 5: syz_emit_ethernet(0x19d, &(0x7f0000000280)={@link_local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\x00 ', 0x167, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x7, {0x0, 0x6, "1ca2e3", 0x597, 0x3a, 0x1, @dev={0xfe, 0x80, '\x00', 0x19}, @private1, [@dstopts={0x7b, 0x11, '\x00', [@padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x3}, @enc_lim, @ra={0x5, 0x2, 0x6}, @calipso={0x7, 0x58, {0x0, 0x14, 0xa, 0xfff, [0x80000001, 0x4, 0x0, 0xa338, 0x5, 0xfffffffffffeffff, 0x7, 0xc9a, 0x762, 0x3f]}}, @hao={0xc9, 0x10, @remote}, @ra={0x5, 0x2, 0x8}, @jumbo]}, @fragment={0x1, 0x0, 0x1, 0x0, 0x0, 0x7, 0x66}, @fragment={0xab, 0x0, 0x7, 0x0, 0x0, 0x4, 0x64}, @hopopts={0x13, 0xf, '\x00', [@jumbo={0xc2, 0x4, 0x5}, @enc_lim, @generic={0x0, 0x6a, "31f353ff7554b38cbca5a77478bab4a90b7e23accd7fca5d3900c87f0e8f60bc7bd0f0371fb32b6fec00bd7d8df2a957e9f6344b99ab9d5c1691399ab9de537e7c1e8b1076e4e81656d00434921061a28fa41839fa28cd441c413943d9ee2c5efee8bc020f12f9e7d939"}, @enc_lim={0x4, 0x1, 0x1}, @padn={0x1, 0x2, [0x0, 0x0]}]}], "20ef7edd7be57b"}}}}}}}, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}, @void, {@canfd={0xd, {{0x1, 0x1, 0x1}, 0xc, 0x2, 0x0, 0x0, "e674f6a48c83495b68b1a3d8806270914a80e5ff7624a2fad5be34265c90f783903461bd4bc610d6d4c514ec522873278b3704b79f33142ad9808f8528b9513e"}}}}, &(0x7f0000000080)={0x1, 0x1, [0x4f4, 0xc9a, 0x12, 0xbeb]}) 11:30:47 executing program 5: syz_emit_ethernet(0x19d, &(0x7f0000000280)={@link_local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\x00 ', 0x167, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x7, {0x0, 0x6, "1ca2e3", 0x597, 0x3a, 0x1, @dev={0xfe, 0x80, '\x00', 0x19}, @private1, [@dstopts={0x7b, 0x11, '\x00', [@padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x3}, @enc_lim, @ra={0x5, 0x2, 0x6}, @calipso={0x7, 0x58, {0x0, 0x14, 0xa, 0xfff, [0x80000001, 0x4, 0x0, 0xa338, 0x5, 0xfffffffffffeffff, 0x7, 0xc9a, 0x762, 0x3f]}}, @hao={0xc9, 0x10, @remote}, @ra={0x5, 0x2, 0x8}, @jumbo]}, @fragment={0x1, 0x0, 0x1, 0x0, 0x0, 0x7, 0x66}, @fragment={0xab, 0x0, 0x7, 0x0, 0x0, 0x4, 0x64}, @hopopts={0x13, 0xf, '\x00', [@jumbo={0xc2, 0x4, 0x5}, @enc_lim, @generic={0x0, 0x6a, "31f353ff7554b38cbca5a77478bab4a90b7e23accd7fca5d3900c87f0e8f60bc7bd0f0371fb32b6fec00bd7d8df2a957e9f6344b99ab9d5c1691399ab9de537e7c1e8b1076e4e81656d00434921061a28fa41839fa28cd441c413943d9ee2c5efee8bc020f12f9e7d939"}, @enc_lim={0x4, 0x1, 0x1}, @padn={0x1, 0x2, [0x0, 0x0]}]}], "20ef7edd7be57b"}}}}}}}, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}, @void, {@canfd={0xd, {{0x1, 0x1, 0x1}, 0xc, 0x2, 0x0, 0x0, "e674f6a48c83495b68b1a3d8806270914a80e5ff7624a2fad5be34265c90f783903461bd4bc610d6d4c514ec522873278b3704b79f33142ad9808f8528b9513e"}}}}, &(0x7f0000000080)={0x1, 0x1, [0x4f4, 0xc9a, 0x12, 0xbeb]}) 11:30:47 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f00000025c0)) (async) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000000)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}]}) (async) r4 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r5 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000000c0)='tasks\x00', 0x2, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000180)={0x0, 0x10000, 0x6, 0x0, 0x0, [{{}, 0x100}, {{r1}, 0x5f}, {{r3}, 0x1}, {{r0}, 0x8}, {{r4}, 0x101}, {{r5}, 0x5}]}) (async) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/12, 0x8}], 0x1) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) (async) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 11:30:47 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$mouse(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000280), 0x0) creat(0x0, 0xe1) r5 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES64=r2], 0x14}}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x47) write(r2, &(0x7f0000000000)="0553ad72e4a6bd03194e1b125e9cd0a9416df02e0e025410a7248d6813e4fe7b19c1bd5338e3ee9966b568b82c48", 0x97d08) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 11:30:47 executing program 5: syz_emit_ethernet(0x19d, &(0x7f0000000280)={@link_local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\x00 ', 0x167, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x7, {0x0, 0x6, "1ca2e3", 0x597, 0x3a, 0x1, @dev={0xfe, 0x80, '\x00', 0x19}, @private1, [@dstopts={0x7b, 0x11, '\x00', [@padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x3}, @enc_lim, @ra={0x5, 0x2, 0x6}, @calipso={0x7, 0x58, {0x0, 0x14, 0xa, 0xfff, [0x80000001, 0x4, 0x0, 0xa338, 0x5, 0xfffffffffffeffff, 0x7, 0xc9a, 0x762, 0x3f]}}, @hao={0xc9, 0x10, @remote}, @ra={0x5, 0x2, 0x8}, @jumbo]}, @fragment={0x1, 0x0, 0x1, 0x0, 0x0, 0x7, 0x66}, @fragment={0xab, 0x0, 0x7, 0x0, 0x0, 0x4, 0x64}, @hopopts={0x13, 0xf, '\x00', [@jumbo={0xc2, 0x4, 0x5}, @enc_lim, @generic={0x0, 0x6a, "31f353ff7554b38cbca5a77478bab4a90b7e23accd7fca5d3900c87f0e8f60bc7bd0f0371fb32b6fec00bd7d8df2a957e9f6344b99ab9d5c1691399ab9de537e7c1e8b1076e4e81656d00434921061a28fa41839fa28cd441c413943d9ee2c5efee8bc020f12f9e7d939"}, @enc_lim={0x4, 0x1, 0x1}, @padn={0x1, 0x2, [0x0, 0x0]}]}], "20ef7edd7be57b"}}}}}}}, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}, @void, {@canfd={0xd, {{0x1, 0x1, 0x1}, 0xc, 0x2, 0x0, 0x0, "e674f6a48c83495b68b1a3d8806270914a80e5ff7624a2fad5be34265c90f783903461bd4bc610d6d4c514ec522873278b3704b79f33142ad9808f8528b9513e"}}}}, &(0x7f0000000080)={0x1, 0x1, [0x4f4, 0xc9a, 0x12, 0xbeb]}) syz_emit_ethernet(0x19d, &(0x7f0000000280)={@link_local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\x00 ', 0x167, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x7, {0x0, 0x6, "1ca2e3", 0x597, 0x3a, 0x1, @dev={0xfe, 0x80, '\x00', 0x19}, @private1, [@dstopts={0x7b, 0x11, '\x00', [@padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x3}, @enc_lim, @ra={0x5, 0x2, 0x6}, @calipso={0x7, 0x58, {0x0, 0x14, 0xa, 0xfff, [0x80000001, 0x4, 0x0, 0xa338, 0x5, 0xfffffffffffeffff, 0x7, 0xc9a, 0x762, 0x3f]}}, @hao={0xc9, 0x10, @remote}, @ra={0x5, 0x2, 0x8}, @jumbo]}, @fragment={0x1, 0x0, 0x1, 0x0, 0x0, 0x7, 0x66}, @fragment={0xab, 0x0, 0x7, 0x0, 0x0, 0x4, 0x64}, @hopopts={0x13, 0xf, '\x00', [@jumbo={0xc2, 0x4, 0x5}, @enc_lim, @generic={0x0, 0x6a, "31f353ff7554b38cbca5a77478bab4a90b7e23accd7fca5d3900c87f0e8f60bc7bd0f0371fb32b6fec00bd7d8df2a957e9f6344b99ab9d5c1691399ab9de537e7c1e8b1076e4e81656d00434921061a28fa41839fa28cd441c413943d9ee2c5efee8bc020f12f9e7d939"}, @enc_lim={0x4, 0x1, 0x1}, @padn={0x1, 0x2, [0x0, 0x0]}]}], "20ef7edd7be57b"}}}}}}}, 0x0) (async) syz_emit_ethernet(0x56, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}, @void, {@canfd={0xd, {{0x1, 0x1, 0x1}, 0xc, 0x2, 0x0, 0x0, "e674f6a48c83495b68b1a3d8806270914a80e5ff7624a2fad5be34265c90f783903461bd4bc610d6d4c514ec522873278b3704b79f33142ad9808f8528b9513e"}}}}, &(0x7f0000000080)={0x1, 0x1, [0x4f4, 0xc9a, 0x12, 0xbeb]}) (async) 11:30:47 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f00000025c0)) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000000)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}]}) r4 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000000c0)='tasks\x00', 0x2, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000180)={0x0, 0x10000, 0x6, 0x0, 0x0, [{{}, 0x100}, {{r1}, 0x5f}, {{r3}, 0x1}, {{r0}, 0x8}, {{r4}, 0x101}, {{r5}, 0x5}]}) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/12, 0x8}], 0x1) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) fcntl$dupfd(r0, 0x0, r0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) (async) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f00000025c0)) (async) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000000)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}]}) (async) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000000c0)='tasks\x00', 0x2, 0x0) (async) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000180)={0x0, 0x10000, 0x6, 0x0, 0x0, [{{}, 0x100}, {{r1}, 0x5f}, {{r3}, 0x1}, {{r0}, 0x8}, {{r4}, 0x101}, {{r5}, 0x5}]}) (async) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/12, 0x8}], 0x1) (async) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) (async) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) (async) 11:30:47 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10) 11:30:49 executing program 3: syz_open_dev$sndpcmc(&(0x7f0000000040), 0xfffffffffffffffc, 0x502) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x161101) r2 = dup(r1) writev(0xffffffffffffffff, 0x0, 0x0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r4, r3, 0x0, 0x262) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r5, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r5, &(0x7f0000000240)=ANY=[], 0xa) close(0xffffffffffffffff) socket(0x10, 0x3, 0x0) writev(r5, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) write$binfmt_misc(r5, &(0x7f0000000140)=ANY=[], 0xfef0) write$binfmt_script(r0, &(0x7f0000000340)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000040), 0xfffffffffffffffc, 0x502) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) (async) syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x161101) (async) dup(r1) (async) writev(0xffffffffffffffff, 0x0, 0x0) (async) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) (async) openat$sysctl(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) (async) sendfile(r4, r3, 0x0, 0x262) (async) pipe(&(0x7f0000000140)) (async) writev(r5, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) (async) write$binfmt_elf64(r5, &(0x7f0000000240)=ANY=[], 0xa) (async) close(0xffffffffffffffff) (async) socket(0x10, 0x3, 0x0) (async) writev(r5, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) (async) write$binfmt_misc(r5, &(0x7f0000000140)=ANY=[], 0xfef0) (async) write$binfmt_script(r0, &(0x7f0000000340)=ANY=[], 0xfea7) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) (async) 11:30:49 executing program 5: syz_emit_ethernet(0x1ec, &(0x7f0000000240)={@link_local, @link_local, @void, {@ipv6={0x86dd, @generic={0x5, 0x6, "deba0f", 0x1b6, 0x6a9621b5bcba82c8, 0x1, @mcast2, @private1, {[@fragment={0x62, 0x0, 0x5, 0x1, 0x0, 0x7, 0x66}, @routing={0x73, 0x12, 0x1, 0xfe, 0x0, [@loopback, @remote, @loopback, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, @private2]}, @routing={0x0, 0x14, 0x0, 0x5, 0x0, [@private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, @private1, @loopback, @mcast2, @empty, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}, @srh={0x2e, 0x0, 0x4, 0x0, 0xd3, 0x20, 0x3}], "d462fdaec2c1ae75b7638e57682618504098fe7f5699bc6d86817b464e1832ac685021667924a5d6406943a170490b9da364e00c13ba670015fb3a30b90381bd0039dbe0bc7034429e3bb56bfa4361d64820bacabb5b1417ca176f602cd6e7b432e63ee694c5"}}}}}, 0x0) syz_emit_ethernet(0x1019, &(0x7f0000000440)={@local, @multicast, @val={@val={0x9100, 0x1, 0x0, 0x4}, {0x8100, 0x6, 0x1, 0x2}}, {@x25={0x805, {0x2, 0x72, 0x1f, "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"}}}}, &(0x7f0000000080)={0x1, 0x2, [0xa66, 0x28f, 0xafc, 0x3b0]}) syz_emit_ethernet(0x56, &(0x7f0000000000)={@empty, @local, @void, {@canfd={0xd, {{0x4, 0x1, 0x1}, 0x3f, 0x3, 0x0, 0x0, "eb3d738cec63b80817ddbbb10f5fc539c3b3c68b7c09628603ecd80db7b6db3d7fd4e463b5ab1c574a9fb284d16cae5cea0552be9537cc33f8076a67e2d849ec"}}}}, 0x0) syz_emit_ethernet(0xb2, &(0x7f00000014c0)=ANY=[@ANYBLOB="aaaaaaaaaabbd6b906954e4e08004bce00a4006500001f029078ac1414bb7f000001940400004444ea33ac14142280000000e000000200000002ac1414390000bc92ac1414aa000000066401010200000fffe00000010000000964010102000000080a01010200000080070326440c1601e000000200000080002614fafeda2b6bd3a6f44b7eed3589a84f239200fefffffffffffff23e69eab7bac52b90d75bee076635cbd07a1db55ca80433da84c5ce3932430ea33baaf18920cdcf982a3954d9ee77dddc1ea9351bd0a72ed45836e9d99e30dd68763044b097a3c3bd03605908c5837a1ac356b23ca9483280607294543a4772b2bf"], &(0x7f0000000180)={0x0, 0x400, [0xd21, 0x8, 0x618, 0xa7]}) syz_emit_ethernet(0x5a, &(0x7f00000001c0)={@remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @val={@void, {0x8100, 0x7, 0x0, 0x1}}, {@canfd={0xd, {{0x4, 0x1, 0x0, 0x1}, 0x33, 0x0, 0x0, 0x0, "aa782caa9747e038a4412d066fbe00305e7d67173e35a706d6e11f2d26964150c1036361035873e1ce856b751d627e4780b1fee7aeec66abe6c9b6b978e777bf"}}}}, &(0x7f0000001480)={0x0, 0x1, [0xca1, 0xa0e, 0x472, 0x6ba]}) 11:30:49 executing program 0: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r0, 0x8010500d, 0xffffffffffffffff) ioctl$SOUND_PCM_READ_CHANNELS(r0, 0x80045006, &(0x7f00000000c0)) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) readv(r1, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/12, 0x8}], 0x1) ioctl$SNDRV_TIMER_IOCTL_TREAD(r1, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x3}}) poll(&(0x7f0000000080)=[{r1, 0x3440}, {r1, 0x9222}, {r1, 0x4020}, {r1, 0x1}], 0x4, 0x99) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) 11:30:49 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/12, 0x8}], 0x1) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x40040) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) socket(0x1d, 0x1, 0x7) 11:30:49 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) (async, rerun: 32) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10) (rerun: 32) 11:30:49 executing program 1: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r0, 0x8010500d, 0xffffffffffffffff) ioctl$SOUND_PCM_READ_CHANNELS(r0, 0x80045006, &(0x7f00000000c0)) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) readv(r1, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/12, 0x8}], 0x1) ioctl$SNDRV_TIMER_IOCTL_TREAD(r1, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x3}}) poll(&(0x7f0000000080)=[{r1, 0x3440}, {r1, 0x9222}, {r1, 0x4020}, {r1, 0x1}], 0x4, 0x99) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) 11:30:50 executing program 5: syz_emit_ethernet(0x1ec, &(0x7f0000000240)={@link_local, @link_local, @void, {@ipv6={0x86dd, @generic={0x5, 0x6, "deba0f", 0x1b6, 0x6a9621b5bcba82c8, 0x1, @mcast2, @private1, {[@fragment={0x62, 0x0, 0x5, 0x1, 0x0, 0x7, 0x66}, @routing={0x73, 0x12, 0x1, 0xfe, 0x0, [@loopback, @remote, @loopback, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, @private2]}, @routing={0x0, 0x14, 0x0, 0x5, 0x0, [@private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, @private1, @loopback, @mcast2, @empty, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}, @srh={0x2e, 0x0, 0x4, 0x0, 0xd3, 0x20, 0x3}], "d462fdaec2c1ae75b7638e57682618504098fe7f5699bc6d86817b464e1832ac685021667924a5d6406943a170490b9da364e00c13ba670015fb3a30b90381bd0039dbe0bc7034429e3bb56bfa4361d64820bacabb5b1417ca176f602cd6e7b432e63ee694c5"}}}}}, 0x0) (async) syz_emit_ethernet(0x1019, &(0x7f0000000440)={@local, @multicast, @val={@val={0x9100, 0x1, 0x0, 0x4}, {0x8100, 0x6, 0x1, 0x2}}, {@x25={0x805, {0x2, 0x72, 0x1f, "0fe25c8d9cf7042b0c3008ba88dac26cb9a5533bb5eebddef24d2f7f6a71cb145b4e7c54a97f0e3c6074e991ce1186c04760b21e1f6e80a7e3b1dd5420c17afb49e66b045aef5352e310382d644d3119533952dcc3035eeea0c5dc4a86b23ec2d140b74e30854dfca37178f277ff732c6c4a50f2f8950b6fb3267eec055b41dd4a6b8ebc60e5efcd2152ddf98959105eac87a71689916ac94fbad09b6e4521ed62f4d22b39fb7500ca5184df257fe7e1a9cf25e8a0b04b9706a2192b323980e224a23647ba78ec79c9849da1d49911c10ec2c1cfd7102480040dfd8a2b5bb31bfa42445620299877bfc4ccb8e1867f47eaf0d262f819281f70ea403cd18d385423fb40eb88182fb4005a83f0ca9420f2508f38f649097d85a6537e21ed3542128d201f78e08c2e262294be788b07152ff5686136bba9940a77902eed128b11bf9c271c2353610cbc5d4fab21b5f60a9bb514a1c71971b96bc2433d0e15187f18583acd17db44328efa2cc75bd7373a7024c8e1ad9747c4fff06f5f1ade04eb87bbbeae7798d9a83d27d58e8408201d3ef9c9057a40eb8a1180164b9303bb9d48229dd05669594dfe70ad98b634afe21059dbb3bd68ad88616383599bbce130f6406e08e99c663bc8a069281d180b473798ffe0b51c9edba225e6dce841861de32ebc1facd42acfbab8d040f69196c396f3442e1ec50edea8d44cb84825de709a5aa6fdfb644115ee84cf2d9a70adf4211c8336d4a45431e7cd5f44cea96cb4f175f540d50083527db1009c5278539bd886cb29fa4ca72c1e46aed9534ac889308310a63379860c672e1bce555103b25f3ec601c09ba3d30fd82700ef001047197d12a23dbe1d9cc69bcbfdc6e8d78539beac758305982224dc2aab31cda24c96bea01c8a2ca5842574da002e2b65c533e76eddcde619818bef0529ae46821c672464ce5f69933d6d22b843b0e035d5f181747a9459c747eec44df71f687371b451112ae443b5aa2cd2dc75d09a300d9c419061007ea7d6efee1e562e785ae891a326bc409b0c6cfdf502df654252e5c96ad5d2a93d3ff41f75896caf3cb283268bc56f671a3a0fa8f9592cdec80cbf19697f8e9eabb0d81b909dfb60d4f18f19c452cbf14c91cdfa6b6a011967ba2dc3b436c418e62504578aaf8bc7ae2c6e951acb214a24e51eece31266bbd9c90f742156739f4da1a67c526f589fe28a57d65b7eb189d9cb57d46a5c18cb83210397a8b609ec473ba342191aeceafb2be9125add24561034bf44b89aa23738e2d241fe20d7d833c1affbb6a2c712ba3d24615b0491302ef2d5dedb9a26dfa5501ed17bc62be7d123fe00b15fc659c9604d2d2c4f8c55d88b56421a8ba8ce57a3e3957c33bec12b07b59a9c32f654d486b8c95bef08f9da26e5fec57ca35e4e9598e15ba8a1fd2c251dec134195e220e09b07673b2b3c028b3d64cc0d3fa05e1ec3dd013e83d714a29b722b52f5e9bff903008872692a05e7787985b9bb136b1b282818a408e78f2834f3e0485343a0859e5c7fd4e29942b6dfbd28cba51d5d71c261d949e9e659028df3399b5b8c9a49636a1a1e52d8e162902a4b8009c84cd6ac7459915356dd0ab22434af2ac1373812788de98c096f9ab95443b56d653d96036fde84d871fd3c5206f292edecffc2125652a553515f3f28de1684f819166c9d62275dc42dd40202ae05dc8a27f0ec6a9ce41e03e9046de99acbae25af304e9a0cd9a1d391eefbb0326cc6bc7571a339a23698bdeb66af2c2a759c6022b99abaa03839bcee135bb2d503ef2aeae16bfcbd4629080a91699340a557f17618f5d11d7be1cf85034a7902b1c42da813cfd214ee2b22c68cbfcf6e4fa1239019cd964491e972e7d2dcd66798dce7336d54adcb4fd5e4a3f3fc2629f5bfad9595854e0931527d20d836d55446957ae1d0e1974d2749b0032068aa874d657924985963cdeaa9bdfe88ba7e20c846e0deb9dcf070c62482a0e7ab041e8f36c8917b65fbc7af5201722f74f24403ce7d1c91ac2c1e3affcefc561b283519594ec6b60f3633acc544a1f205bc7b4d6e23daa36e42f8e1d8e79df92bd76c0a1da70d48f3841252ed0a4a25a8b002b5b79820da1a61f4e9fef8e3c6ad4069cc0ffdf55844e437c20d71f1ad16abe3cc3daf1a60defb15a4c969ebe1e9398d6f29cecf3a003c78847110da2d8f6a449f6bb0bbd76523fd6c0837a8115a8d948d5a93844bf7654f47aded4ece42596ba046f6f816d297f13399e34d0eb8da9ce33c3b36c906360874f0d210c911e8396a8ba2cd75308cb6445d8e7fab169ba2628536d8ff93bf998caa20c5a6bcdbd6da424e391d9b5aec3f53d3c2e5013304d9835a4cfae2050814cf0c12c81b9fe566e37969161ac17b9b92eb44280f311b0fa8ecdb8d540e066724e628ffe40f61d174e5e8101a795052ff9d2603833007fb573670b14fe29b8a342fc5a8ab500b1c34dfde465b6b12fcdef77ae5defcf4b8231dd6b7dd893f78c26ff52019b333fbbafcfdb86a9a37dd165ed031d5f5c167c556c687fd41227369f73dede4973f69f950bebca59c2196875a1547172a35f3c51ae1097272fc9f3f9925a4c28cf95b4acf052884999be8059954fefb6ccf080169af92d172cf2aef88f6a9c18ddd8b0e261da1c5c47c327dfb637a5d518d915c02bac3474d089814e392ca25184d66902e4aa8d2a8adc5af71ad84762b2a77fdd26806b3e0ebd6b13ba69ebc68cbe0c0b7c7a1a7ae54def872ff0eee4595a514790fee6523f3cd19b2c47bfe6477b08a89bcbc25a1354f18280690a96b5cc74a997e4274e763f90ffd26e082a3f84edc36f04da1bfa9c00cd41670adcae041e5c65b4341221b64fd5127eed722ffc3363fae82e3fcc43f47bfc611484ecc8c4a81b30cee9e47fc22b751d5ee51422f8b9ff934c9f522fb5a07f069c451a15d110799b141b7ef0fa1d27fbdf819e0ed8ce5f4fb6b675cfb982260d3e42b5909594027490dbc5ba959f7466aa9de390cb71cc98e8de7169994db6adfe34ffd0759de611dde3e48ee435729f3e4a2f0f94217da20e645ba10cfbdf5ec57baa6a7fa1579410d21f05bb2fe40efdee1cb716ef6e93a9ea51385b9ff4a5f78584c081bf780cdd8b02345b1093c10f728af2048e1ef3f7a1c67515b985eda16a0c6fde763894f7cbe2ee06fdecec36b80459e1584b61a9c6026b7cdd2e22813867d7ca82930d352aad378cd1f9d320f9231c3bb4edd7505bcbead4f427a361ff232a8af11cd0290e964e9256fbeaa21aa2041723291cd863ff1469a48bbd405f54c9a66fc514917657f572a1faf9cbad06dd53cef4df41d53b4ce061bb85ebaedd2040a629dd285abdf1e6a8d4279861827140656f892e44499710729291c5f6b46fe637da3c6cfb05a8090d2c94e7622b8f758189b06b9ffd5d048589f401e1995b51423214c92e3e5faaaf562b7795015f076ff3dfedba90af6f406fd3b5caee9cdda1d89baac6dd0030eb0a80bed56e35a2e3998469154e2a0401483996184b90b2302a5368d83b47c34ed6384f36307572b310c5cf72a83de521d6345ee96f842717e8b69fa8736d8f274719f91df673d3370cad881a789ccebcc2d8c77a538453dca3c4398f889d76014bd789a96a3bc316bcef2a4c6397d112c0068157d726bdaf07405b5ea390143c1283d78fe4429d05749f208c1268c2c41905c669a12529c97338f1639b7b21f2d098f80b9b10843b8e581cf49ea27de319f8bc853a47195b963e7312b41bb2959ff176da29ad19e5db26cbcf2acb488813c8d9f1880c9fff1cadcbea80e76a2c816985aff06219b081e8cb3eede7d1d0ac847e2d35a6f319e484aba375263ed3a71a61a95bba1e9a3ac17a2c30664de788f8b5aea5e3d398f567684d94326f76908683b527efb23fe238c7c489384392adaba3e990a026ca473197ee88535dc920d4226ba0866395ab9290f0d0df0d73cd3e9f8dde78335b43da288a4ec3ad527dd25b527c680272c0ab75fff4ae570bfefd41961938a20bbbb4ab1d3a6a95ce0ef6ce95a1c88ef910a1066dba106d326e93cc4f57aed52012a9c9ddc39f3abca739fef975ecea1790c394cd5e707f49a642881b362601a11bb756b343210979cdbc036e89517a32687e9262272db04e52e040dba3d01ceefa6cad23c4ad6d3381df75e0deebcb94ce5e830727615915a27d0852c03108439dba337930d490b5f844f5f0ae760c529312c8f54a95a8c1756d11260941e1f8d6a7bc7fc449737a7c706ae13e1b656d4960f7659aa8b7e97aa2781d108921f444ab56f62423d799ce1530b548a8101aaa24fc388de7a3cd9cd69f01088e284c2156596df111ba08048c140db3816bccdfacff76b442c4f59c03fa96f33e982cc63973a147c7ed3d343e23721b9bfbc2c17b37434b1f9c6bf25de03e19d8d067afb05989cb4947b44c67a1c2b33ae5d1cd9ab4326a825bfd956eb4528dc9b98debca531d6ad481bb113febf257094cce803603ca4b1443c9705f13ea9537008182c3cd35f24b69d2d23a60351e30e5818e2ae8bf8c876186395849171608a54eddcfc21e82496439beaa88a363447c969baabed22bbeb7aabeb4ca3047b7c1a29116258d010d2b38c2ec473ad32327bd2fa276e74b1cc187435661e2edde0a720b154b885d04c54952f042688f3a49b3dd0fea44de05f4842e3c42765c3bc1f4af55d8615ebccb4ad80e7ffabb2718630d9b7299d44ef932f0ca3ab9e1971a612437fa93a913c9657c1fc91286b56e7a558dfe0ce98b6a9ad8e827c422325632f46969bfa6a8d8bd3024c990b48d7e8bfa30a12a58d8cd14f2ebe5804af68629bbf62502f607e4c9dfe0b130ba803c7a2951ca57cbb1d070b852c6053af904f8733b433e34d0d242c03ee4c5a314301132992187566f7dd8669e79b7e3e350f83b4808bc5eb74408c03841cf03f0104612629d109ef1830a8c36c5bec974f5885df25df20325288566b2235381b1fa3a1123785cbac14b7e1913c7eb1ae0022219ccc63b84a8404366b94740ceb972d8d08e1c62f9a62a77b65b5302a9977dd76e10892b297ebbfcc9142ce0ec689e6517784b12f7078e30b7e924894cad1fff0aca1b46d357b975a36bab68d556f463c22bad853c610d4407f43cd9aba8a9b325bc742220c12528a0199d607c325d0067f091e7974a767593df25d21edcc99fe253ae923c12d0d19106f9a901a6b355d6ab6cd955cafd80ddca87a46f42bd02b3ad03021fa8ff14aedbd4e19126bbd673aa8e9e4dc14cd490a06cfeae838bdfd18c22fcd09e23ca3018613ce2c9c52e82ff8a634eaab4e977748acf98cd8dfc00658ff7f510bca43a68391cb8164385ce61bc990646fe98d47a9cb88a92338cfdee697a9814941da88948e62bf071804d027c42b2f63e899bbfd06d49640850a892ac9ebc5defd9223f0ec657163e09721cf2b4d9e1196ab1935464a8ae0b3f7b3cf54c201240412cff23f7ac645a3f9171b1565394df0cdc154e9946efc8ff790da3fa9a01aa50444a5ccc03e55c76b31001522815555354e28fe9ac3e36fc664051f0a462955e7413d9e0f9373fd73b54ed82d13555d19bcbc0db302c07d79dc14f15fd2f20799096ed0e59ddcd1280a1a9fc8d7a43c7fcd6aff723f769b03fdd6a3547268e8cf96a41217c1d1f761072a68bd59da316a61598ac2378f37114a7f2707b236484ca38a5355fc547a75ddabd4bb9d58164f7007d6405cd0eb6b1019fe179e899bed7c9404fdccab376162f75bfea0"}}}}, &(0x7f0000000080)={0x1, 0x2, [0xa66, 0x28f, 0xafc, 0x3b0]}) syz_emit_ethernet(0x56, &(0x7f0000000000)={@empty, @local, @void, {@canfd={0xd, {{0x4, 0x1, 0x1}, 0x3f, 0x3, 0x0, 0x0, "eb3d738cec63b80817ddbbb10f5fc539c3b3c68b7c09628603ecd80db7b6db3d7fd4e463b5ab1c574a9fb284d16cae5cea0552be9537cc33f8076a67e2d849ec"}}}}, 0x0) (async) syz_emit_ethernet(0xb2, &(0x7f00000014c0)=ANY=[@ANYBLOB="aaaaaaaaaabbd6b906954e4e08004bce00a4006500001f029078ac1414bb7f000001940400004444ea33ac14142280000000e000000200000002ac1414390000bc92ac1414aa000000066401010200000fffe00000010000000964010102000000080a01010200000080070326440c1601e000000200000080002614fafeda2b6bd3a6f44b7eed3589a84f239200fefffffffffffff23e69eab7bac52b90d75bee076635cbd07a1db55ca80433da84c5ce3932430ea33baaf18920cdcf982a3954d9ee77dddc1ea9351bd0a72ed45836e9d99e30dd68763044b097a3c3bd03605908c5837a1ac356b23ca9483280607294543a4772b2bf"], &(0x7f0000000180)={0x0, 0x400, [0xd21, 0x8, 0x618, 0xa7]}) (async) syz_emit_ethernet(0x5a, &(0x7f00000001c0)={@remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @val={@void, {0x8100, 0x7, 0x0, 0x1}}, {@canfd={0xd, {{0x4, 0x1, 0x0, 0x1}, 0x33, 0x0, 0x0, 0x0, "aa782caa9747e038a4412d066fbe00305e7d67173e35a706d6e11f2d26964150c1036361035873e1ce856b751d627e4780b1fee7aeec66abe6c9b6b978e777bf"}}}}, &(0x7f0000001480)={0x0, 0x1, [0xca1, 0xa0e, 0x472, 0x6ba]}) 11:30:50 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/12, 0x8}], 0x1) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x40040) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) socket(0x1d, 0x1, 0x7) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/12, 0x8}], 0x1) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x40040) (async) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) (async) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) (async) socket(0x1d, 0x1, 0x7) (async) 11:30:50 executing program 5: syz_emit_ethernet(0x1ec, &(0x7f0000000240)={@link_local, @link_local, @void, {@ipv6={0x86dd, @generic={0x5, 0x6, "deba0f", 0x1b6, 0x6a9621b5bcba82c8, 0x1, @mcast2, @private1, {[@fragment={0x62, 0x0, 0x5, 0x1, 0x0, 0x7, 0x66}, @routing={0x73, 0x12, 0x1, 0xfe, 0x0, [@loopback, @remote, @loopback, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, @private2]}, @routing={0x0, 0x14, 0x0, 0x5, 0x0, [@private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, @private1, @loopback, @mcast2, @empty, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}, @srh={0x2e, 0x0, 0x4, 0x0, 0xd3, 0x20, 0x3}], "d462fdaec2c1ae75b7638e57682618504098fe7f5699bc6d86817b464e1832ac685021667924a5d6406943a170490b9da364e00c13ba670015fb3a30b90381bd0039dbe0bc7034429e3bb56bfa4361d64820bacabb5b1417ca176f602cd6e7b432e63ee694c5"}}}}}, 0x0) (async) syz_emit_ethernet(0x1019, &(0x7f0000000440)={@local, @multicast, @val={@val={0x9100, 0x1, 0x0, 0x4}, {0x8100, 0x6, 0x1, 0x2}}, {@x25={0x805, {0x2, 0x72, 0x1f, "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"}}}}, &(0x7f0000000080)={0x1, 0x2, [0xa66, 0x28f, 0xafc, 0x3b0]}) (async) syz_emit_ethernet(0x56, &(0x7f0000000000)={@empty, @local, @void, {@canfd={0xd, {{0x4, 0x1, 0x1}, 0x3f, 0x3, 0x0, 0x0, "eb3d738cec63b80817ddbbb10f5fc539c3b3c68b7c09628603ecd80db7b6db3d7fd4e463b5ab1c574a9fb284d16cae5cea0552be9537cc33f8076a67e2d849ec"}}}}, 0x0) (async, rerun: 32) syz_emit_ethernet(0xb2, &(0x7f00000014c0)=ANY=[@ANYBLOB="aaaaaaaaaabbd6b906954e4e08004bce00a4006500001f029078ac1414bb7f000001940400004444ea33ac14142280000000e000000200000002ac1414390000bc92ac1414aa000000066401010200000fffe00000010000000964010102000000080a01010200000080070326440c1601e000000200000080002614fafeda2b6bd3a6f44b7eed3589a84f239200fefffffffffffff23e69eab7bac52b90d75bee076635cbd07a1db55ca80433da84c5ce3932430ea33baaf18920cdcf982a3954d9ee77dddc1ea9351bd0a72ed45836e9d99e30dd68763044b097a3c3bd03605908c5837a1ac356b23ca9483280607294543a4772b2bf"], &(0x7f0000000180)={0x0, 0x400, [0xd21, 0x8, 0x618, 0xa7]}) (async, rerun: 32) syz_emit_ethernet(0x5a, &(0x7f00000001c0)={@remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @val={@void, {0x8100, 0x7, 0x0, 0x1}}, {@canfd={0xd, {{0x4, 0x1, 0x0, 0x1}, 0x33, 0x0, 0x0, 0x0, "aa782caa9747e038a4412d066fbe00305e7d67173e35a706d6e11f2d26964150c1036361035873e1ce856b751d627e4780b1fee7aeec66abe6c9b6b978e777bf"}}}}, &(0x7f0000001480)={0x0, 0x1, [0xca1, 0xa0e, 0x472, 0x6ba]}) 11:30:50 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/12, 0x8}], 0x1) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x40040) (async) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) (async) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) (async) socket(0x1d, 0x1, 0x7) 11:30:50 executing program 3: syz_open_dev$sndpcmc(&(0x7f0000000040), 0xfffffffffffffffc, 0x502) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x161101) r2 = dup(r1) writev(0xffffffffffffffff, 0x0, 0x0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r4, r3, 0x0, 0x262) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r5, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r5, &(0x7f0000000240)=ANY=[], 0xa) close(0xffffffffffffffff) socket(0x10, 0x3, 0x0) writev(r5, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) write$binfmt_misc(r5, &(0x7f0000000140)=ANY=[], 0xfef0) write$binfmt_script(r0, &(0x7f0000000340)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000040), 0xfffffffffffffffc, 0x502) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) (async) syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x161101) (async) dup(r1) (async) writev(0xffffffffffffffff, 0x0, 0x0) (async) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) (async) openat$sysctl(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) (async) sendfile(r4, r3, 0x0, 0x262) (async) pipe(&(0x7f0000000140)) (async) writev(r5, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) (async) write$binfmt_elf64(r5, &(0x7f0000000240)=ANY=[], 0xa) (async) close(0xffffffffffffffff) (async) socket(0x10, 0x3, 0x0) (async) writev(r5, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) (async) write$binfmt_misc(r5, &(0x7f0000000140)=ANY=[], 0xfef0) (async) write$binfmt_script(r0, &(0x7f0000000340)=ANY=[], 0xfea7) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) (async) 11:30:50 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x345140) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/12, 0x8}], 0x1) r1 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f00000000c0)={{0x1, 0x1, 0x815, 0x3, 0x200}}) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/12, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, &(0x7f0000000440)={0x4, 0xa, 0x0, 0x0, 0x6}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 11:30:50 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) readv(r0, &(0x7f00000005c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x1, 0x3, 0x3, 0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) syz_io_uring_setup(0x491c, &(0x7f0000000040)={0x0, 0xdba0, 0x13, 0x1, 0x375}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000180)) syz_io_uring_setup(0x3ede, &(0x7f00000000c0), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000300)=@IORING_OP_STATX={0x15, 0x1, 0x0, 0xffffffffffffff9c, &(0x7f00000001c0), &(0x7f00000002c0)='./file0\x00', 0x1, 0x4000, 0x1}, 0x7) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 11:30:50 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) readv(r0, &(0x7f00000005c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x1, 0x3, 0x3, 0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) syz_io_uring_setup(0x491c, &(0x7f0000000040)={0x0, 0xdba0, 0x13, 0x1, 0x375}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000180)) syz_io_uring_setup(0x3ede, &(0x7f00000000c0), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000300)=@IORING_OP_STATX={0x15, 0x1, 0x0, 0xffffffffffffff9c, &(0x7f00000001c0), &(0x7f00000002c0)='./file0\x00', 0x1, 0x4000, 0x1}, 0x7) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 11:30:50 executing program 0: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r0, 0x8010500d, 0xffffffffffffffff) ioctl$SOUND_PCM_READ_CHANNELS(r0, 0x80045006, &(0x7f00000000c0)) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) readv(r1, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/12, 0x8}], 0x1) ioctl$SNDRV_TIMER_IOCTL_TREAD(r1, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x3}}) poll(&(0x7f0000000080)=[{r1, 0x3440}, {r1, 0x9222}, {r1, 0x4020}, {r1, 0x1}], 0x4, 0x99) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) 11:30:50 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) setsockopt$inet_tcp_int(r2, 0x6, 0x4, &(0x7f0000000000)=0x5, 0x4) ioctl$sock_inet_SIOCDELRT(r0, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) 11:30:50 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$mouse(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, 0x0, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0xe1) r5 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES64=r2], 0x14}}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x47) write(r2, &(0x7f0000000000)="0553ad72e4a6bd03194e1b125e9cd0a9416df02e0e025410a7248d6813e4fe7b19c1bd5338e3ee9966b568b82c48", 0x97d08) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 11:30:50 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$mouse(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, 0x0, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0xe1) r5 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES64=r2], 0x14}}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x47) write(r2, &(0x7f0000000000)="0553ad72e4a6bd03194e1b125e9cd0a9416df02e0e025410a7248d6813e4fe7b19c1bd5338e3ee9966b568b82c48", 0x97d08) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 11:30:51 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x345140) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/12, 0x8}], 0x1) r1 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f00000000c0)={{0x1, 0x1, 0x815, 0x3, 0x200}}) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/12, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, &(0x7f0000000440)={0x4, 0xa, 0x0, 0x0, 0x6}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x345140) (async) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/12, 0x8}], 0x1) (async) syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) (async) dup(r1) (async) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f00000000c0)={{0x1, 0x1, 0x815, 0x3, 0x200}}) (async) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) (async) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/12, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, &(0x7f0000000440)={0x4, 0xa, 0x0, 0x0, 0x6}) (async) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) (async) 11:30:51 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x345140) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/12, 0x8}], 0x1) r1 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f00000000c0)={{0x1, 0x1, 0x815, 0x3, 0x200}}) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/12, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, &(0x7f0000000440)={0x4, 0xa, 0x0, 0x0, 0x6}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x345140) (async) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/12, 0x8}], 0x1) (async) syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) (async) dup(r1) (async) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f00000000c0)={{0x1, 0x1, 0x815, 0x3, 0x200}}) (async) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) (async) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/12, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, &(0x7f0000000440)={0x4, 0xa, 0x0, 0x0, 0x6}) (async) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) (async) 11:30:51 executing program 0: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r0, 0x8010500d, 0xffffffffffffffff) ioctl$SOUND_PCM_READ_CHANNELS(r0, 0x80045006, &(0x7f00000000c0)) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) readv(r1, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/12, 0x8}], 0x1) ioctl$SNDRV_TIMER_IOCTL_TREAD(r1, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) 11:30:51 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) (async) r1 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) (async) setsockopt$inet_tcp_int(r2, 0x6, 0x4, &(0x7f0000000000)=0x5, 0x4) ioctl$sock_inet_SIOCDELRT(r0, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) 11:30:51 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/12, 0x8}], 0x1) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x2, 0x3, 0x0, 0x3}}) r1 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, &(0x7f0000000180)={0x2, 0x7, 0x0, 0x0, 0x12}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 11:30:52 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$mouse(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, 0x0, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0xe1) r5 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES64=r2], 0x14}}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x47) write(r2, &(0x7f0000000000)="0553ad72e4a6bd03194e1b125e9cd0a9416df02e0e025410a7248d6813e4fe7b19c1bd5338e3ee9966b568b82c48", 0x97d08) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 11:30:52 executing program 0: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r0, 0x8010500d, 0xffffffffffffffff) ioctl$SOUND_PCM_READ_CHANNELS(r0, 0x80045006, &(0x7f00000000c0)) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) readv(r1, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/12, 0x8}], 0x1) ioctl$SNDRV_TIMER_IOCTL_TREAD(r1, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) 11:30:52 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000000c0)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000280), 0x0) creat(&(0x7f0000000080)='./file0\x00', 0xe1) r4 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES64=r2], 0x14}}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x47) write(r2, &(0x7f0000000000)="0553ad72e4a6bd03194e1b125e9cd0a9416df02e0e025410a7248d6813e4fe7b19c1bd5338e3ee9966b568b82c48", 0x97d08) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 11:30:52 executing program 5: syz_emit_ethernet(0x72, &(0x7f00000001c0)={@link_local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4d857", 0x3c, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "47e393", 0x0, 0x88, 0x0, @remote, @mcast1, [], "3da468344a1af97a4754334f"}}}}}}}, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000240)={0x41424344}, 0x1, 0x0) r1 = msgget$private(0x0, 0xfffffffffffffffd) msgsnd(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x87, 0x800) msgsnd(r1, &(0x7f00000008c0)=ANY=[@ANYBLOB="210000a75a17db"], 0xee, 0x0) msgrcv(r1, &(0x7f0000000900)=ANY=[@ANYRESOCT, @ANYRESHEX=r1, @ANYRESHEX=r0, @ANYRES16, @ANYRES64], 0x94, 0x1, 0x800) syz_emit_ethernet(0x122, &(0x7f00000003c0)=ANY=[@ANYBLOB="000000000000fffffeffffff86dd66a9a46e00ec6ca97f62b1a420ca77b7382441cfcee1c50aff02000000000000000000000000000101400109650000001d00ff69640000000101000000cb06000001090001000105000000000000000003000138660000004e234e22", @ANYRES32=r0, @ANYRES32=0x41424344, @ANYBLOB="700200069078010105060000000000000c012487e5f60b44316c7d5bee2f42749f13a6d11963d1b434f39be69509c191c26f8d2037bcec06e2c48251c7da4e842b0733c263158804bb070299a50b729214c21fc36c4138b12dbb41177f26314ff05b25c11608644cf66d8b6335769c73ce31a0e831cd2e780d30b8d1629f10dccee89b26c212e04ddb0b21f6cdaa10c107201783a4decb3df29a910b3f2bed6a0dd60316576ba290b684ce828d95b49c"], 0x0) syz_emit_ethernet(0x19b, &(0x7f0000000980)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa08004616018d006700060870907800000000000000a0010000004e234e22", @ANYRES32=0x41424344, @ANYRES32=r0, @ANYBLOB="f010040190788000052600010001000000030000a4c1fffffffa0000000100000eb600000008000000030000000900000c50b2377dd372e6fc3bad080a00000003ffff8001080a800000010000003a1312c17ae7f9e69ff1f23a2b7b91370b5793130a40e41c357e619ee60000000000538a45a28a26d48ab8de71b3d744b3bb25d48eee617bb73307631e8cdfe6c07d11c3a0de3ba64fbedcf9cb896e1e295bdbeaf6204a276df95825196dba2e72a37b31b39ca9e2c0fdde5fff6fe2dadfb88e07b73a5da956c1b6adcbbc41531cebb51d9555a95f94076d114cc2783bb30e26c27f4f589471c439c83441d35dc586fd24b98f5ddc43ac5ed5fb56daa4ca2afdd1bc935d0baf55293bc6de0000cd55c68dfde64b93843f2e23d75bac9852e9a8205af6d30fe4c28bfc666ac755b0a324f7cf2ffd41f74ea2d1936cc37ad39a4cf8f94d2bc31fbe8d0f21602c6315a4dba61f8ef73916709b39249103ace5092d814f52eb5cba653d0dc1a746cd2421df8f58eb09fcecc6687d317c5a9fcc7bf68965fd947cd7ec8b3a7b3d62b50411ad9e29572b83bb7905e2716c924674a9bcef9085b54b04eb22fa1b60b177e0bcbc2075007db642002b17a4f11ab508ba9e9a21eb830a679a1132cd88d4a32ef9cd8d5fb4c5dbb0fca4446c33226a288eb96170b780f876afd072979a06a0e1f1dc1e0c828c327a9ed8ccbfd5e77cfadec224d935a5bf3c5888d87c988ec67b8d67e900000000"], 0x0) syz_emit_ethernet(0x405, &(0x7f0000000240)={@remote, @local, @val={@val={0x9100, 0x5, 0x1, 0x2}, {0x8100, 0x0, 0x1}}, {@mpls_uc={0x8847, {[{0xa9}, {0x3f, 0x0, 0x1}, {0x5}, {0x1000, 0x0, 0x1}, {0x47}, {0xfff00, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0xbd6, 0x0, 0x1}], @ipv6=@tcp={0x4, 0x6, "c83ed9", 0x39f, 0x6, 0xff, @dev={0xfe, 0x80, '\x00', 0x40}, @mcast2, {[@dstopts={0x2c, 0x1a, '\x00', [@padn={0x1, 0x1, [0x0]}, @generic={0x5, 0xcc, "796a7654510ebd1ede5f86a0c4122bffaa8474f1c68cdd2643fe382372acbce431ac4b76acec47cc91e22c1f2c3f531679d046be835879e2109a0b079c5e60687a2a6a13b6fdbd2b338105e553080c00c7727d85f87e9335e8a9f39f5df6cd30f7f290d91e551cc61dc114f24f399ab663c5de9df7237f58f6ddd71a5972e0035dfa181b87b3423caeb9a7de15b1c5ce49b22feb7413d1673a3971240a7de3b59063c028b33afcc158fc32a8a12a392b66e7d5686b8e95b19a32b05d1b04eb036462774de2535d87e7058ada"}]}, @dstopts={0x3a, 0x7, '\x00', [@padn={0x1, 0x1, [0x0]}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @calipso={0x7, 0x30, {0x2, 0xa, 0x40, 0x1e, [0x100, 0x4, 0x3ff, 0xffffffffffffffff, 0x80000001]}}]}, @routing={0x53, 0x2, 0x2, 0xf9, 0x0, [@local]}, @routing={0x87, 0x10, 0x2, 0x0, 0x0, [@local, @mcast2, @private2, @ipv4={'\x00', '\xff\xff', @multicast2}, @empty, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local]}, @hopopts={0x1, 0xb, '\x00', [@padn={0x1, 0x2, [0x0, 0x0]}, @generic={0xff, 0x52, "de352bbd970416f07bc393eff5c4fa4741d72c7177b02be5ce94c0863c06300a63263f2808f043f2c9a3fb17d4776878289eeb45a1bb50687cc1e20ec83d2a128c6505f5f406c284bb358d02a1edcd4f854f"}, @enc_lim={0x4, 0x1, 0x5}]}, @dstopts={0x0, 0x5, '\x00', [@hao={0xc9, 0x10, @empty}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @ra={0x5, 0x2, 0x5}]}], {{0x4e24, 0x4e20, 0x41424344, r0, 0x0, 0x0, 0x11, 0x42, 0x4, 0x0, 0x7f, {[@mss={0x2, 0x4, 0xff}, @mptcp=@ack={0x1e, 0x18, 0xf80, 0x4, "a6e7921094b3f1de2d4a5d4f32d377bb4498a777"}, @nop, @mptcp=@mp_join={0x1e, 0x3, 0x8}, @nop, @exp_smc={0xfe, 0x6}, @exp_fastopen={0xfe, 0x6, 0xf989, "ed75"}]}}, {"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"}}}}}}}}, &(0x7f00000000c0)={0x0, 0x1, [0x620, 0xc2f, 0x71e, 0xe70]}) syz_emit_ethernet(0x65, &(0x7f0000000000)={@random="2151a0afefba", @multicast, @void, {@x25={0x805, {0x2, 0x1f, 0x17, "e94b18e5854c6a50682164edfc0fcf63ade11804e0b37dff2217d59a9edc63dfdced20f754bda9bf76243b8c34cae4ead88ce3ee2882c60d2edb5424474ad134634b197f1d71e88daa4602249d5074a6347ee6d7"}}}}, &(0x7f0000000080)={0x0, 0x1, [0x548, 0x32, 0x35a, 0xb03]}) 11:30:52 executing program 5: syz_emit_ethernet(0x72, &(0x7f00000001c0)={@link_local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4d857", 0x3c, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "47e393", 0x0, 0x88, 0x0, @remote, @mcast1, [], "3da468344a1af97a4754334f"}}}}}}}, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000240)={0x41424344}, 0x1, 0x0) (async) r1 = msgget$private(0x0, 0xfffffffffffffffd) msgsnd(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000000000000374e10cb8882146965755ccd3c76f95e85dcb3f9993a787f6fc6eaec2addf283de460f0000f2fb73906b143696cd68953913e7c3ed41c88c5d073c225629403d84055ec6929f92dce92c0168d91cee8f80e64b3085740ddb04ab8bdeee98d65fdbbe92ab9445444fee0aa5df126e8e51e84344803ac474bd306f9740c6976cd50737eb1402d2c19cad8fd9634fdc4aafbfc76ae348592895e05095755c5b1a0f6ba2bc0db06fb394adf86e067308c34ec60933d2b376f91418c5c1de2df32aed3e6069e1b8bfcabd82d18586469d7ee78ae6dc13f3cae163975b85a0b2425939894b59d7090eda441dca2e74796f0f03c398399b148c6fcf9fe83e3d01e1c2eb40c01f8b3231441169640c02ca1f72134364030e3d464d4c275bc1dc0949da8fdbfbdd76b42bde3d81e54c967564381a840cb65fd5d522582eab686d7c94dc4be5c197dfc14f16b1a0dbc543664c464a04a8854be30137553d527a7ad6f7b5d13feffe197dc5eab2948319"], 0x87, 0x800) (async) msgsnd(r1, &(0x7f00000008c0)=ANY=[@ANYBLOB="210000a75a17db"], 0xee, 0x0) msgrcv(r1, &(0x7f0000000900)=ANY=[@ANYRESOCT, @ANYRESHEX=r1, @ANYRESHEX=r0, @ANYRES16, @ANYRES64], 0x94, 0x1, 0x800) (async) syz_emit_ethernet(0x122, &(0x7f00000003c0)=ANY=[@ANYBLOB="000000000000fffffeffffff86dd66a9a46e00ec6ca97f62b1a420ca77b7382441cfcee1c50aff02000000000000000000000000000101400109650000001d00ff69640000000101000000cb06000001090001000105000000000000000003000138660000004e234e22", @ANYRES32=r0, @ANYRES32=0x41424344, @ANYBLOB="700200069078010105060000000000000c012487e5f60b44316c7d5bee2f42749f13a6d11963d1b434f39be69509c191c26f8d2037bcec06e2c48251c7da4e842b0733c263158804bb070299a50b729214c21fc36c4138b12dbb41177f26314ff05b25c11608644cf66d8b6335769c73ce31a0e831cd2e780d30b8d1629f10dccee89b26c212e04ddb0b21f6cdaa10c107201783a4decb3df29a910b3f2bed6a0dd60316576ba290b684ce828d95b49c"], 0x0) (async) syz_emit_ethernet(0x19b, &(0x7f0000000980)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa08004616018d006700060870907800000000000000a0010000004e234e22", @ANYRES32=0x41424344, @ANYRES32=r0, @ANYBLOB="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"], 0x0) (async) syz_emit_ethernet(0x405, &(0x7f0000000240)={@remote, @local, @val={@val={0x9100, 0x5, 0x1, 0x2}, {0x8100, 0x0, 0x1}}, {@mpls_uc={0x8847, {[{0xa9}, {0x3f, 0x0, 0x1}, {0x5}, {0x1000, 0x0, 0x1}, {0x47}, {0xfff00, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0xbd6, 0x0, 0x1}], @ipv6=@tcp={0x4, 0x6, "c83ed9", 0x39f, 0x6, 0xff, @dev={0xfe, 0x80, '\x00', 0x40}, @mcast2, {[@dstopts={0x2c, 0x1a, '\x00', [@padn={0x1, 0x1, [0x0]}, @generic={0x5, 0xcc, "796a7654510ebd1ede5f86a0c4122bffaa8474f1c68cdd2643fe382372acbce431ac4b76acec47cc91e22c1f2c3f531679d046be835879e2109a0b079c5e60687a2a6a13b6fdbd2b338105e553080c00c7727d85f87e9335e8a9f39f5df6cd30f7f290d91e551cc61dc114f24f399ab663c5de9df7237f58f6ddd71a5972e0035dfa181b87b3423caeb9a7de15b1c5ce49b22feb7413d1673a3971240a7de3b59063c028b33afcc158fc32a8a12a392b66e7d5686b8e95b19a32b05d1b04eb036462774de2535d87e7058ada"}]}, @dstopts={0x3a, 0x7, '\x00', [@padn={0x1, 0x1, [0x0]}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @calipso={0x7, 0x30, {0x2, 0xa, 0x40, 0x1e, [0x100, 0x4, 0x3ff, 0xffffffffffffffff, 0x80000001]}}]}, @routing={0x53, 0x2, 0x2, 0xf9, 0x0, [@local]}, @routing={0x87, 0x10, 0x2, 0x0, 0x0, [@local, @mcast2, @private2, @ipv4={'\x00', '\xff\xff', @multicast2}, @empty, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local]}, @hopopts={0x1, 0xb, '\x00', [@padn={0x1, 0x2, [0x0, 0x0]}, @generic={0xff, 0x52, "de352bbd970416f07bc393eff5c4fa4741d72c7177b02be5ce94c0863c06300a63263f2808f043f2c9a3fb17d4776878289eeb45a1bb50687cc1e20ec83d2a128c6505f5f406c284bb358d02a1edcd4f854f"}, @enc_lim={0x4, 0x1, 0x5}]}, @dstopts={0x0, 0x5, '\x00', [@hao={0xc9, 0x10, @empty}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @ra={0x5, 0x2, 0x5}]}], {{0x4e24, 0x4e20, 0x41424344, r0, 0x0, 0x0, 0x11, 0x42, 0x4, 0x0, 0x7f, {[@mss={0x2, 0x4, 0xff}, @mptcp=@ack={0x1e, 0x18, 0xf80, 0x4, "a6e7921094b3f1de2d4a5d4f32d377bb4498a777"}, @nop, @mptcp=@mp_join={0x1e, 0x3, 0x8}, @nop, @exp_smc={0xfe, 0x6}, @exp_fastopen={0xfe, 0x6, 0xf989, "ed75"}]}}, {"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"}}}}}}}}, &(0x7f00000000c0)={0x0, 0x1, [0x620, 0xc2f, 0x71e, 0xe70]}) (async) syz_emit_ethernet(0x65, &(0x7f0000000000)={@random="2151a0afefba", @multicast, @void, {@x25={0x805, {0x2, 0x1f, 0x17, "e94b18e5854c6a50682164edfc0fcf63ade11804e0b37dff2217d59a9edc63dfdced20f754bda9bf76243b8c34cae4ead88ce3ee2882c60d2edb5424474ad134634b197f1d71e88daa4602249d5074a6347ee6d7"}}}}, &(0x7f0000000080)={0x0, 0x1, [0x548, 0x32, 0x35a, 0xb03]}) 11:30:52 executing program 0: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r0, 0x8010500d, 0xffffffffffffffff) ioctl$SOUND_PCM_READ_CHANNELS(r0, 0x80045006, &(0x7f00000000c0)) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) readv(r1, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/12, 0x8}], 0x1) ioctl$SNDRV_TIMER_IOCTL_TREAD(r1, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) 11:30:52 executing program 5: syz_emit_ethernet(0x72, &(0x7f00000001c0)={@link_local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4d857", 0x3c, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "47e393", 0x0, 0x88, 0x0, @remote, @mcast1, [], "3da468344a1af97a4754334f"}}}}}}}, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000240)={0x41424344}, 0x1, 0x0) r1 = msgget$private(0x0, 0xfffffffffffffffd) msgsnd(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x87, 0x800) (async) msgsnd(r1, &(0x7f00000008c0)=ANY=[@ANYBLOB="210000a75a17db"], 0xee, 0x0) (async) msgrcv(r1, &(0x7f0000000900)=ANY=[@ANYRESOCT, @ANYRESHEX=r1, @ANYRESHEX=r0, @ANYRES16, @ANYRES64], 0x94, 0x1, 0x800) (async) syz_emit_ethernet(0x122, &(0x7f00000003c0)=ANY=[@ANYBLOB="000000000000fffffeffffff86dd66a9a46e00ec6ca97f62b1a420ca77b7382441cfcee1c50aff02000000000000000000000000000101400109650000001d00ff69640000000101000000cb06000001090001000105000000000000000003000138660000004e234e22", @ANYRES32=r0, @ANYRES32=0x41424344, @ANYBLOB="700200069078010105060000000000000c012487e5f60b44316c7d5bee2f42749f13a6d11963d1b434f39be69509c191c26f8d2037bcec06e2c48251c7da4e842b0733c263158804bb070299a50b729214c21fc36c4138b12dbb41177f26314ff05b25c11608644cf66d8b6335769c73ce31a0e831cd2e780d30b8d1629f10dccee89b26c212e04ddb0b21f6cdaa10c107201783a4decb3df29a910b3f2bed6a0dd60316576ba290b684ce828d95b49c"], 0x0) syz_emit_ethernet(0x19b, &(0x7f0000000980)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa08004616018d006700060870907800000000000000a0010000004e234e22", @ANYRES32=0x41424344, @ANYRES32=r0, @ANYBLOB="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"], 0x0) syz_emit_ethernet(0x405, &(0x7f0000000240)={@remote, @local, @val={@val={0x9100, 0x5, 0x1, 0x2}, {0x8100, 0x0, 0x1}}, {@mpls_uc={0x8847, {[{0xa9}, {0x3f, 0x0, 0x1}, {0x5}, {0x1000, 0x0, 0x1}, {0x47}, {0xfff00, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0xbd6, 0x0, 0x1}], @ipv6=@tcp={0x4, 0x6, "c83ed9", 0x39f, 0x6, 0xff, @dev={0xfe, 0x80, '\x00', 0x40}, @mcast2, {[@dstopts={0x2c, 0x1a, '\x00', [@padn={0x1, 0x1, [0x0]}, @generic={0x5, 0xcc, "796a7654510ebd1ede5f86a0c4122bffaa8474f1c68cdd2643fe382372acbce431ac4b76acec47cc91e22c1f2c3f531679d046be835879e2109a0b079c5e60687a2a6a13b6fdbd2b338105e553080c00c7727d85f87e9335e8a9f39f5df6cd30f7f290d91e551cc61dc114f24f399ab663c5de9df7237f58f6ddd71a5972e0035dfa181b87b3423caeb9a7de15b1c5ce49b22feb7413d1673a3971240a7de3b59063c028b33afcc158fc32a8a12a392b66e7d5686b8e95b19a32b05d1b04eb036462774de2535d87e7058ada"}]}, @dstopts={0x3a, 0x7, '\x00', [@padn={0x1, 0x1, [0x0]}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @calipso={0x7, 0x30, {0x2, 0xa, 0x40, 0x1e, [0x100, 0x4, 0x3ff, 0xffffffffffffffff, 0x80000001]}}]}, @routing={0x53, 0x2, 0x2, 0xf9, 0x0, [@local]}, @routing={0x87, 0x10, 0x2, 0x0, 0x0, [@local, @mcast2, @private2, @ipv4={'\x00', '\xff\xff', @multicast2}, @empty, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local]}, @hopopts={0x1, 0xb, '\x00', [@padn={0x1, 0x2, [0x0, 0x0]}, @generic={0xff, 0x52, "de352bbd970416f07bc393eff5c4fa4741d72c7177b02be5ce94c0863c06300a63263f2808f043f2c9a3fb17d4776878289eeb45a1bb50687cc1e20ec83d2a128c6505f5f406c284bb358d02a1edcd4f854f"}, @enc_lim={0x4, 0x1, 0x5}]}, @dstopts={0x0, 0x5, '\x00', [@hao={0xc9, 0x10, @empty}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @ra={0x5, 0x2, 0x5}]}], {{0x4e24, 0x4e20, 0x41424344, r0, 0x0, 0x0, 0x11, 0x42, 0x4, 0x0, 0x7f, {[@mss={0x2, 0x4, 0xff}, @mptcp=@ack={0x1e, 0x18, 0xf80, 0x4, "a6e7921094b3f1de2d4a5d4f32d377bb4498a777"}, @nop, @mptcp=@mp_join={0x1e, 0x3, 0x8}, @nop, @exp_smc={0xfe, 0x6}, @exp_fastopen={0xfe, 0x6, 0xf989, "ed75"}]}}, {"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"}}}}}}}}, &(0x7f00000000c0)={0x0, 0x1, [0x620, 0xc2f, 0x71e, 0xe70]}) (async) syz_emit_ethernet(0x65, &(0x7f0000000000)={@random="2151a0afefba", @multicast, @void, {@x25={0x805, {0x2, 0x1f, 0x17, "e94b18e5854c6a50682164edfc0fcf63ade11804e0b37dff2217d59a9edc63dfdced20f754bda9bf76243b8c34cae4ead88ce3ee2882c60d2edb5424474ad134634b197f1d71e88daa4602249d5074a6347ee6d7"}}}}, &(0x7f0000000080)={0x0, 0x1, [0x548, 0x32, 0x35a, 0xb03]}) 11:30:52 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) setsockopt$inet_tcp_int(r2, 0x6, 0x4, &(0x7f0000000000)=0x5, 0x4) ioctl$sock_inet_SIOCDELRT(r0, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) socket$inet_tcp(0x2, 0x1, 0x0) (async) syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) (async) dup(r1) (async) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) (async) setsockopt$inet_tcp_int(r2, 0x6, 0x4, &(0x7f0000000000)=0x5, 0x4) (async) ioctl$sock_inet_SIOCDELRT(r0, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) (async) 11:30:52 executing program 5: syz_emit_ethernet(0x72, &(0x7f00000001c0)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4d857", 0x3c, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, @dev={0xfe, 0x80, '\x00', 0x1c}, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "47e393", 0x0, 0x88, 0x0, @remote, @mcast1, [], "3da468344a1af97a4754334f"}}}}}}}, 0x0) 11:30:52 executing program 0: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r0, 0x8010500d, 0xffffffffffffffff) ioctl$SOUND_PCM_READ_CHANNELS(r0, 0x80045006, &(0x7f00000000c0)) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) readv(r1, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/12, 0x8}], 0x1) ioctl$SNDRV_TIMER_IOCTL_TREAD(r1, 0x40045402, &(0x7f0000000140)=0x1) poll(&(0x7f0000000080)=[{r1, 0x3440}, {r1, 0x9222}, {r1, 0x4020}, {r1, 0x1}], 0x4, 0x99) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) 11:30:52 executing program 5: syz_emit_ethernet(0x72, &(0x7f00000001c0)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4d857", 0x3c, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, @dev={0xfe, 0x80, '\x00', 0x1c}, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "47e393", 0x0, 0x88, 0x0, @remote, @mcast1, [], "3da468344a1af97a4754334f"}}}}}}}, 0x0) 11:30:52 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/12, 0x8}], 0x1) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x2, 0x3, 0x0, 0x3}}) r1 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, &(0x7f0000000180)={0x2, 0x7, 0x0, 0x0, 0x12}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/12, 0x8}], 0x1) (async) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x2, 0x3, 0x0, 0x3}}) (async) syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) (async) dup(r1) (async) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) (async) syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) (async) dup(r3) (async) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, &(0x7f0000000180)={0x2, 0x7, 0x0, 0x0, 0x12}) (async) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) (async) 11:30:53 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$mouse(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, 0x0, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0xe1) r5 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES64=r2], 0x14}}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x47) write(r2, &(0x7f0000000000)="0553ad72e4a6bd03194e1b125e9cd0a9416df02e0e025410a7248d6813e4fe7b19c1bd5338e3ee9966b568b82c48", 0x97d08) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 11:30:53 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = openat$cgroup_ro(r2, &(0x7f0000000000)='cpuset.effective_cpus\x00', 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000003, 0x2010, r3, 0x0) syz_io_uring_setup(0x6ee6, &(0x7f00000000c0)={0x0, 0x915d, 0x8, 0x1, 0x20d, 0x0, r2}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)=0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000240)=@IORING_OP_POLL_ADD={0x6, 0x3, 0x0, @fd=r6, 0x0, 0x0, 0x0, {0x1d3}}, 0x401) ioctl$sock_inet_SIOCDELRT(r0, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) openat$cgroup_int(r3, &(0x7f0000000280)='cpu.max.burst\x00', 0x2, 0x0) 11:30:53 executing program 1: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r0, 0x8010500d, 0xffffffffffffffff) ioctl$SOUND_PCM_READ_CHANNELS(r0, 0x80045006, &(0x7f00000000c0)) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) readv(r1, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/12, 0x8}], 0x1) ioctl$SNDRV_TIMER_IOCTL_TREAD(r1, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) 11:30:53 executing program 5: syz_emit_ethernet(0x72, &(0x7f00000001c0)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4d857", 0x3c, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, @dev={0xfe, 0x80, '\x00', 0x1c}, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "47e393", 0x0, 0x88, 0x0, @remote, @mcast1, [], "3da468344a1af97a4754334f"}}}}}}}, 0x0) 11:30:53 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/12, 0x8}], 0x1) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x2, 0x3, 0x0, 0x3}}) r1 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, &(0x7f0000000180)={0x2, 0x7, 0x0, 0x0, 0x12}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/12, 0x8}], 0x1) (async) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x2, 0x3, 0x0, 0x3}}) (async) syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) (async) dup(r1) (async) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) (async) syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) (async) dup(r3) (async) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, &(0x7f0000000180)={0x2, 0x7, 0x0, 0x0, 0x12}) (async) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) (async) 11:30:53 executing program 5: syz_emit_ethernet(0x72, &(0x7f00000001c0)={@link_local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4d857", 0x3c, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "47e393", 0x0, 0x88, 0x0, @remote, @mcast1, [], "3da468344a1af97a4754334f"}}}}}}}, 0x0) syz_emit_ethernet(0x7f, &(0x7f0000000000)={@remote, @broadcast, @void, {@x25={0x805, {0x1, 0x40, 0xfb, "efcc75b7879fa21ca72ef2f2a5dba9d05db6e9ea80854007069430cf505528b6e8582d002bf19373dfbc6b600c12d03c9369be1a6a32f22eeda3e6bcb5b90e9aa27998c8fb1ea5430df26ca3721e51b273ba971f7506041e5ec04f66cc64002b48f3e3d5c63b27cd484963cfa88b"}}}}, &(0x7f0000000080)={0x0, 0x4, [0xfb0, 0x56c, 0x37, 0x6a0]}) 11:30:53 executing program 5: syz_emit_ethernet(0x72, &(0x7f00000001c0)={@link_local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4d857", 0x3c, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "47e393", 0x0, 0x88, 0x0, @remote, @mcast1, [], "3da468344a1af97a4754334f"}}}}}}}, 0x0) (async) syz_emit_ethernet(0x7f, &(0x7f0000000000)={@remote, @broadcast, @void, {@x25={0x805, {0x1, 0x40, 0xfb, "efcc75b7879fa21ca72ef2f2a5dba9d05db6e9ea80854007069430cf505528b6e8582d002bf19373dfbc6b600c12d03c9369be1a6a32f22eeda3e6bcb5b90e9aa27998c8fb1ea5430df26ca3721e51b273ba971f7506041e5ec04f66cc64002b48f3e3d5c63b27cd484963cfa88b"}}}}, &(0x7f0000000080)={0x0, 0x4, [0xfb0, 0x56c, 0x37, 0x6a0]}) 11:30:53 executing program 0: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r0, 0x8010500d, 0xffffffffffffffff) ioctl$SOUND_PCM_READ_CHANNELS(r0, 0x80045006, &(0x7f00000000c0)) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) readv(r1, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/12, 0x8}], 0x1) ioctl$SNDRV_TIMER_IOCTL_TREAD(r1, 0x40045402, &(0x7f0000000140)=0x1) poll(&(0x7f0000000080)=[{r1, 0x3440}, {r1, 0x9222}, {r1, 0x4020}, {r1, 0x1}], 0x4, 0x99) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) 11:30:53 executing program 1: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r0, 0x8010500d, 0xffffffffffffffff) ioctl$SOUND_PCM_READ_CHANNELS(r0, 0x80045006, &(0x7f00000000c0)) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) readv(r1, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/12, 0x8}], 0x1) ioctl$SNDRV_TIMER_IOCTL_TREAD(r1, 0x40045402, &(0x7f0000000140)=0x1) poll(&(0x7f0000000080)=[{r1, 0x3440}, {r1, 0x9222}, {r1, 0x4020}, {r1, 0x1}], 0x4, 0x99) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) 11:30:53 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/12, 0x8}], 0x1) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000180)={0x0, 0x20000006, 0xfffffffe, 0x0, 0x7}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 11:30:53 executing program 5: syz_emit_ethernet(0x72, &(0x7f00000001c0)={@link_local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4d857", 0x3c, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "47e393", 0x0, 0x88, 0x0, @remote, @mcast1, [], "3da468344a1af97a4754334f"}}}}}}}, 0x0) syz_emit_ethernet(0x7f, &(0x7f0000000000)={@remote, @broadcast, @void, {@x25={0x805, {0x1, 0x40, 0xfb, "efcc75b7879fa21ca72ef2f2a5dba9d05db6e9ea80854007069430cf505528b6e8582d002bf19373dfbc6b600c12d03c9369be1a6a32f22eeda3e6bcb5b90e9aa27998c8fb1ea5430df26ca3721e51b273ba971f7506041e5ec04f66cc64002b48f3e3d5c63b27cd484963cfa88b"}}}}, &(0x7f0000000080)={0x0, 0x4, [0xfb0, 0x56c, 0x37, 0x6a0]}) syz_emit_ethernet(0x72, &(0x7f00000001c0)={@link_local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4d857", 0x3c, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "47e393", 0x0, 0x88, 0x0, @remote, @mcast1, [], "3da468344a1af97a4754334f"}}}}}}}, 0x0) (async) syz_emit_ethernet(0x7f, &(0x7f0000000000)={@remote, @broadcast, @void, {@x25={0x805, {0x1, 0x40, 0xfb, "efcc75b7879fa21ca72ef2f2a5dba9d05db6e9ea80854007069430cf505528b6e8582d002bf19373dfbc6b600c12d03c9369be1a6a32f22eeda3e6bcb5b90e9aa27998c8fb1ea5430df26ca3721e51b273ba971f7506041e5ec04f66cc64002b48f3e3d5c63b27cd484963cfa88b"}}}}, &(0x7f0000000080)={0x0, 0x4, [0xfb0, 0x56c, 0x37, 0x6a0]}) (async) 11:30:54 executing program 5: syz_emit_ethernet(0x10bb, &(0x7f00000004c0)={@multicast, @link_local, @void, {@ipv6={0x86dd, @tipc_packet={0xe, 0x6, "94e434", 0x1085, 0x6, 0xff, @remote, @mcast2, {[@fragment={0x0, 0x0, 0x45, 0x1, 0x0, 0x1, 0x64}, @routing={0x21, 0x8, 0x2, 0x1, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}, @remote, @mcast1]}, @dstopts={0x3c, 0x200, '\x00', [@generic={0x20, 0x1000, "76aeabe1f1a152b7170019d062c8e98aa8d9246d6acef3f97c102482b7728b4d0dcb47f51ff5c77fbb7a2c7333be6ab1c28a070947c509ab372524abdbf6206eacb59a1f7cf235ba2c9e075cbbc9587f2db071ccaab4f6ba747b4c72e6c1f1505087073d1ccadc803caee9d3a72b66bd168f3968f45523b158038aad30dc2c84c22020b7e802cccd25a0a11644357bd95bcf9031d9bec329c1bbbae77e21a8ec6f909a67a6278324ef2ba80dc10a53df3224e72dfe41ebafdfb5664e7fcb8b72284c784de1eeca565868fd019fc22b8ff5c0f90dcc5f5ba57cc1a9b1062fb778c3c30e9f7d2cac68a6810fbe86d74fe9efce9dad56a7f8bddb0aa4fe1f5dfb52ea765f45192338e05e24712626f965b81351e2abe774a7b71463bf169e82f73aa1904ea506a96499f40dc7909fbe038fe024df6bc0649339fcea62a06e9e48048cf73ccef3e34bdb312e058c4bbe8ab04f8d52a19c7a3874d273a8290502a0e496a9f631175cc13a84ccd1f2b663d7c8f73bbee10387486e1afe53d6b95e42dbd3c5777331b0acebdd52c761f54447e7340dcbbfa030c3098435cc7dcc2c6d2792e25c68b31b2e1185d77c930353778b8ec6ff52119ab55c5d70847b18d2a5ed0cc0ffcd443a5939fce84a6f885061a53604de277f6a2290cf2c7f93f0359d7265021997e7666f55b2905e584b18830028c9bf0c19112577ef79d3b50b7e0ad0d99bc40a08eb8c2c1f24b1d63fc7b84bbe0554c42a6bd396c45ead3fee974334a2296a00c2b0e126e70a14f0bbab44580b1aed782a91cdaee862d3bc05beaae5a5d7cf17d24497c9169512ca4839c345c5c845d3aaa13446fb188e5352e56a015efb6f4442ef324f75eb440bf1ef8c49bebb1761ff0a563d4aa94e886542b0e4933e30ddd7ca0604e94671869424100465dacebf393a5ce41102fea25715b2f49ccf2c47b2d5ebf0a78c91874624ab9bd703af071daad6a38dd1496355f5a3c71296031c1dee1af10a47442ba67f90bb7d4629f32367ecb13c86967a4bb4d523c556bcc62a4c3848307043c3c86c0ff942f634f355ab9031116c77dd79f305f391c23166349c3515a3978794c05f5e3cf4c1c9c34cf49a6ce2857331a2ca39e198365336b2f5c22bffc2604c021a2739f49c3736601d565de891bb1b207223081b1ab96aa4d7f97430f720599354a79ab3428526becb0273d4bb933227438baebc240d5ff7e282926a6d3fb44cb89d7d5240a656b8eaa646b23401e28ee8292ed90d601d0a63a34a4b1239ee4768d2910872aaf1416b0303ee4be6e025dc299dfca2a8c1a285168d12168f4961e2c50281ee70c9c2ea49bd6450b6978ae7094244ce35c663dfe55b6f5fc400c72dbd9a03d07707a4655c35f05e1dfe8ae95a6380f4b95aa4d052ca0403e78bbf929b0a3091165cf7ed55bd7efced0fef3593a1dc9f5fe80e84bc15088e007a30f17f93b991154300e9f993862713a067654c6afdf48e0dfda52d96542df5fb82047070e6775dd3a1d48591577e555182a08c8d3c0e331f9dcf7308ee47e90633a4734bd2da26d37cca4ee8ee04ac2cd89d248036784d8d124bf821978592d3f9e08f49b410e938cbca7947f117ad2e4c8fec40a6bd40680799118e50c725bc8dd3403448c6858baed8128bad1ece3facf24e7769d8897c36d9341a9800152f19e922ee6541755363d7cb12a6a169e22fcbe324fef132b2b9f43abea8a85ca7871631c8fd5b2f34d0b91d2f04bee82943781250d933ae4fd1ab69467b62e5b1229beebf3e4fb4f39500b464cc02a63fa1728638d95dd9c832e3ddfd4a108434349bd06ba58ba67d92e4274ae752f1566fd3b8912abdad32311bdb04dbca53ba1ff821c9b127e7b175e957691deaa740b0572836c6a23e871fda1db6029a411ebd929acf84700188ca2d018474652463f93997040e04415b6fb1e0f18075996d8b36d91941ff3b9a82acb7daa70bb7349e33c1278007469b2d8df5780a5264b04873c9e1dcddf4a1865df7f91f0be3462fb1dc5b4f02312a62a84d4282ce786293538d01baeeff4847384c08d52c333d73a598de1372a16c36e569357fe555b59acd483664a548eb9d5f3bedf3aa8beb8fb0440ad55e793a98730469423eac2f9215091ac38325efbad5ae579162420a8e4b38ea62e7115778ac8ec77a5b4c07216775082649279bb37ca1414e00a70e1c3ede1539da510a5c773f97aaab53b9832c6ebb62a2c452988e50cc62f8c8dea3795ba1be6a828b82c8b35b6d057667d34c6159c8dcff367575989bb2f0aa31545034776ee358100c8743091275e0555478cc51962347414468456619931500d2d8a1d70dd00d3940af430c079c0639390fa3a79fdedae870b31f4df760a3e650d50106ef10fc9171fa66e541091217eba2fdae3675d5adf5b1913b462ffa5000b8d4c37a087c11933f5ae38e68ff2c1d02ef4ceefcab6c36af2d5b4d2c14a145870deef3a50e4f84aeee8cb5196719bed0e58dd15bea2813abffb187107d5922e08d72f34c005cc8efef4658a7925cf4b03a9e2cd73a742e43be3468e33d7bd2058b73f958fce090ed3a49eaaaa82e244d06dc70690f22c47aa7445592d49731957d47ef11f195fd02d4cc2e47aaeb7991399af1725e178b362c805e134417d95a843ab6a1a531195372e2ab3624dfcd25bcd9021560ebf434d22b5c04cb4f280d0af70e4455795d1f6d21316c4e35f9f4a252fef5828223971860f7afddb7916146694add66f9c28d6921e8397e6078eba48577f098c6bf727eda4b656c0b5083a70bb278d1455fd5a312b0df9c8686dad216c3b6a2febd4b1a02ee459c9d5fdf2a70533598d8f92c2837adb1dc5d150f68eacce74694ad7ca80e98986096cb9a2c348f03864dd160ed817fff7310acafe24860f394489515f7c5738be405028c8e4e11cd44715a97793d1abe99d8481b3bef1842439940ccdb2ef4759637df6958dc3aeaa3a796c8e3ea8202c267ad3ab040cb1501ac6bab5a662f71523837b27b9b8102c9d6c319fea6dcaa1b667f4e63ab84de3d58adba94c0e35345411dac3af5b3541fbd6334cb7cd6b0bd4e7c97c96d99d396ee07adeccf1afa4af1af559560bd8081044bd7f386656e16b004f3ba0e464913db6e5a291c11926bd3b1ac621268d000a54d037c91502bbbc1841dd43e2ffab915aea53cbca6c6e06f5e27b1e0e6d0efe3ad0157219ef57ed5ac0386c94e2e1d088c187a209751972d32171557fac979b78e1361e917aab04b39c84963aa65b07bfe629b34b07a5073c981735c50dd042888eff9852d72b80208f2d87d4abc397b2087f3c66a2e60de5f560a2f952691c8472f5890485b8f5408c5f62a382412b652957a6bfb005be4473aada48dcb71ca9b5af2b20dc1cd46e87251a873bc77f819824e678a1a25ee6c0ac15d0380bfcd45e8047f6b8b82698e2488ab5fc277e3370b79210eab47eee4fadfb87e8b6893f0dc7a1a17c4e5c483e8ef87d31b980d3b7757519aaa85ef0b882e71afeb7a2c2fe13cd453357238f86d866528c9bcf5d91f2ed8961b7be3ce8f14e382857317351bc66d29f4fbd9630079afd56853127bc6614fd17cad1037f26dd0a7b528e096f63a625916b11019d79c8d48928f382a0deeac4f84b600cee0d4fcdb7baa1051a1744c144d00d64d9b973612f3dbc273a2f2e7caca1017e133622cb2e39533a849bea177478b75edc840d616dbbb3e44ef3df029a8f15aef34fa862dbe71e3174017fa6b6e11089429820e97211307df9220653ef2c7d0d376c06275b82dd29092bf692523f36e09a7f9da9f471aff992016f8f501c361d3e600c295026a0dac1af5fc23d012f429953aaace7f37d33e4b42aa8b6afc1d77ff84718a9df15b27391e34fcb510043e6e33b24fec4327e7c4a2202898778fe4326339b947861f2aa49b0489536af87b97fcadb618737ac521ebe06773e6ab2ef961362f576d9ee96e4cc6bde72cb103f101b31aba91963abf124bf5c4e963bd7bea055d4838dd3ca69f3ed80a453a1ea31e04f6959158b58d5d1b12f5bc5ffefe7b7d0701d689c3cbc490dd49a0bd1b68fcb15bd0eb214b226956f20f74be8d031f3a9f90934951a6d9549ad9f32a223997a4ebde3a7046b275c774bbe1da890885d2eb9c4a9bf6d8184dd8f6f4cfc2acf30b1fae334e5a83592a97850252c413d78f013010612ff2b15f548456cb27ca1139e7a8b9bda22785f0fc7fb45a2fd639c7764049d22e31fd506b59b1e58fc8a7f82d02950bdd75a0a94f21a37c0f00cb37330eba8910eb430eacaa0205b36ddec2fc312bbd2ba3c6aab0d0424ef25a507b391fab64563f3c02a44d3869941e803551c764a81541c0e67043d7373a3162b09e94e7c0787794668167fde1d143e012ce193e12fd6a7f355953ee14c93286a18969acc7737cfb860f0ecf1f6077ad51e65a14514f251a950c8a59d7b08839a46683b082178584c26ca4208e95299067cd2fc9bd573f5328d850dac20bf735722095ef8b11bbfe891575912f75203e98c6c65ebd3ee8c0e318e90ed60224d9a6eeb4e1db971824d07123fbf01a05e9ee6abc6f54516ce2da0745de460021503ef7598cd0fdb921f05f0d884983b1e4d1e9894728654e963c42322a845c502b1cb05bd4259e9ddec5cd4290ac2409da6a7f4d0e54aa26e438106f0cd5ecb42f73c5663ed8d8209fe97ac2c56ce42d051ffa70f3eaaf99e9c86ca16aaf68198f0ad243238be13476bc9c814715a56de3b19de2bcce841a97bcfef8f6e214357d9a59543968b7996f0889c44b69acc6e03db9fce471e85e5c62faf5b9fd19c1aedda853f8febf9cebd77c393c5dc8b13b535ef71aeb412ad179875507de097f2eeeb0050d0563f67e2b321e8bf8662afb2c07b2eea5196fd6117ed1d5902df19e45999c4f228802799d2cb8a6293effd63477dad62dfd016f17e0e6e288f33a3f897efe06c1fb2ac07cb4fb70017f97c63c1d32cad383728196ac40e812510984d06d33253e007e9c6f323702ec30505b4acbe4a92ea9f7c7764bcf9555c0fc98db9b8faf3d465b8538bd663b33a0fded171c7f23e1ff5e119c692f1df4431df47b5f4443211bade955221e87fa781011bd0c684e010182ddc5de40fe561571a517c0576bccbac728446600fdaa4ff2f879cb8512640b7d431fd9cc133ec4fd41195c65613bb1246101b0335f4e1c99f6ffa50cfb0d407f835c1a5471768e2a62dae846b89262d69152e08537d821ea91fc08ee170a6fe32cd77f2132552beccb8596b479612115f5e51f4ef13507db42849faeed9f47a2978628868f57b277a33db7285ceeb382c3dbbb017477b184a20db947bb5d004e5299cd8fbd7cf9b50ae6d20cbedb8e82fc960c3e6f5e3390a14a96cbf06326c061b458410d05110af749ffacc04147cdc8389a46c0b05aaaea02980ae400a928368d7e9bad3c54f13ce571a850219a214f70aaf278a1a628eede04a66da970b2e92c884ca2e44aa32dc218e18dec9fdf48aa086eec2360f0db2464cfab16f39e0038b473d6ea5f7f66bddf0a5eea85ab67bee29f39f76bc91c3b8a4f5010d49aedcea31be2c867aba4c942c997dd42b63c1fde626916e372dcffbda4153cadfa928f4ad7674b0e9f85eb514256cfa4dfebb59bcb8adf1b0c2985827a2561c07e77f0dbd94b0af7b5b9ead898acad3b337a14bf64e35808edcb0235d2139e1984fb4b31c2df7df7e0735212c64c1f547f7985b8598823a7f4e21298c0b1d74a64937b68e2ce9d4fd1d63b"}]}], @payload_direct={{{{0x25, 0x0, 0x0, 0x0, 0x1, 0x8, 0x1, 0x2, 0x5, 0x0, 0x3, 0xf, 0x2, 0x3, 0x40, 0xfff9, 0x1, 0x4e21, 0x4e22}, 0x0, 0x80000001}}, [0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) syz_emit_ethernet(0x22, &(0x7f0000000000)={@broadcast, @multicast, @val={@void, {0x8100, 0x6, 0x1, 0x1}}, {@can={0xc, {{0x0, 0x0, 0x0, 0x1}, 0x4, 0x1, 0x0, 0x0, "904881b63e061851"}}}}, &(0x7f0000000040)={0x1, 0x4, [0x756, 0xc72, 0x3b4, 0xc6a]}) [ 2835.880643][ T1230] ieee802154 phy0 wpan0: encryption failed: -22 [ 2835.880691][ T1230] ieee802154 phy1 wpan1: encryption failed: -22 11:30:54 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000000c0)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000280), 0x0) creat(&(0x7f0000000080)='./file0\x00', 0xe1) r4 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES64=r2], 0x14}}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x47) write(r2, &(0x7f0000000000)="0553ad72e4a6bd03194e1b125e9cd0a9416df02e0e025410a7248d6813e4fe7b19c1bd5338e3ee9966b568b82c48", 0x97d08) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 11:30:54 executing program 5: syz_emit_ethernet(0x10bb, &(0x7f00000004c0)={@multicast, @link_local, @void, {@ipv6={0x86dd, @tipc_packet={0xe, 0x6, "94e434", 0x1085, 0x6, 0xff, @remote, @mcast2, {[@fragment={0x0, 0x0, 0x45, 0x1, 0x0, 0x1, 0x64}, @routing={0x21, 0x8, 0x2, 0x1, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}, @remote, @mcast1]}, @dstopts={0x3c, 0x200, '\x00', [@generic={0x20, 0x1000, "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"}]}], @payload_direct={{{{0x25, 0x0, 0x0, 0x0, 0x1, 0x8, 0x1, 0x2, 0x5, 0x0, 0x3, 0xf, 0x2, 0x3, 0x40, 0xfff9, 0x1, 0x4e21, 0x4e22}, 0x0, 0x80000001}}, [0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) (async) syz_emit_ethernet(0x22, &(0x7f0000000000)={@broadcast, @multicast, @val={@void, {0x8100, 0x6, 0x1, 0x1}}, {@can={0xc, {{0x0, 0x0, 0x0, 0x1}, 0x4, 0x1, 0x0, 0x0, "904881b63e061851"}}}}, &(0x7f0000000040)={0x1, 0x4, [0x756, 0xc72, 0x3b4, 0xc6a]}) 11:30:54 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = openat$cgroup_ro(r2, &(0x7f0000000000)='cpuset.effective_cpus\x00', 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000003, 0x2010, r3, 0x0) (async, rerun: 64) syz_io_uring_setup(0x6ee6, &(0x7f00000000c0)={0x0, 0x915d, 0x8, 0x1, 0x20d, 0x0, r2}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)=0x0) (async, rerun: 64) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000240)=@IORING_OP_POLL_ADD={0x6, 0x3, 0x0, @fd=r6, 0x0, 0x0, 0x0, {0x1d3}}, 0x401) (async) ioctl$sock_inet_SIOCDELRT(r0, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) (async, rerun: 32) openat$cgroup_int(r3, &(0x7f0000000280)='cpu.max.burst\x00', 0x2, 0x0) (rerun: 32) 11:30:54 executing program 5: syz_emit_ethernet(0x10bb, &(0x7f00000004c0)={@multicast, @link_local, @void, {@ipv6={0x86dd, @tipc_packet={0xe, 0x6, "94e434", 0x1085, 0x6, 0xff, @remote, @mcast2, {[@fragment={0x0, 0x0, 0x45, 0x1, 0x0, 0x1, 0x64}, @routing={0x21, 0x8, 0x2, 0x1, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}, @remote, @mcast1]}, @dstopts={0x3c, 0x200, '\x00', [@generic={0x20, 0x1000, "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"}]}], @payload_direct={{{{0x25, 0x0, 0x0, 0x0, 0x1, 0x8, 0x1, 0x2, 0x5, 0x0, 0x3, 0xf, 0x2, 0x3, 0x40, 0xfff9, 0x1, 0x4e21, 0x4e22}, 0x0, 0x80000001}}, [0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) (async, rerun: 32) syz_emit_ethernet(0x22, &(0x7f0000000000)={@broadcast, @multicast, @val={@void, {0x8100, 0x6, 0x1, 0x1}}, {@can={0xc, {{0x0, 0x0, 0x0, 0x1}, 0x4, 0x1, 0x0, 0x0, "904881b63e061851"}}}}, &(0x7f0000000040)={0x1, 0x4, [0x756, 0xc72, 0x3b4, 0xc6a]}) (rerun: 32) 11:30:54 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r2, 0x40189429, &(0x7f0000000040)={0x1, 0x8}) syz_emit_ethernet(0x72, &(0x7f00000001c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4d857", 0x3c, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "47e345", 0x0, 0x88, 0x0, @remote, @mcast1, [], "3da468344a1af97a4754334f"}}}}}}}, 0x0) 11:30:54 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = openat$cgroup_ro(r2, &(0x7f0000000000)='cpuset.effective_cpus\x00', 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000003, 0x2010, r3, 0x0) syz_io_uring_setup(0x6ee6, &(0x7f00000000c0)={0x0, 0x915d, 0x8, 0x1, 0x20d, 0x0, r2}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)=0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000240)=@IORING_OP_POLL_ADD={0x6, 0x3, 0x0, @fd=r6, 0x0, 0x0, 0x0, {0x1d3}}, 0x401) ioctl$sock_inet_SIOCDELRT(r0, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) openat$cgroup_int(r3, &(0x7f0000000280)='cpu.max.burst\x00', 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) (async) dup(r1) (async) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) (async) openat$cgroup_ro(r2, &(0x7f0000000000)='cpuset.effective_cpus\x00', 0x0, 0x0) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000003, 0x2010, r3, 0x0) (async) syz_io_uring_setup(0x6ee6, &(0x7f00000000c0)={0x0, 0x915d, 0x8, 0x1, 0x20d, 0x0, r2}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0) (async) syz_io_uring_submit(r4, r5, &(0x7f0000000240)=@IORING_OP_POLL_ADD={0x6, 0x3, 0x0, @fd=r6, 0x0, 0x0, 0x0, {0x1d3}}, 0x401) (async) ioctl$sock_inet_SIOCDELRT(r0, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) (async) openat$cgroup_int(r3, &(0x7f0000000280)='cpu.max.burst\x00', 0x2, 0x0) (async) 11:30:54 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$mouse(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000280), 0x0) creat(&(0x7f0000000080)='./file0\x00', 0xe1) r5 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x47) write(r2, &(0x7f0000000000)="0553ad72e4a6bd03194e1b125e9cd0a9416df02e0e025410a7248d6813e4fe7b19c1bd5338e3ee9966b568b82c48", 0x97d08) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 11:30:54 executing program 0: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r0, 0x8010500d, 0xffffffffffffffff) ioctl$SOUND_PCM_READ_CHANNELS(r0, 0x80045006, &(0x7f00000000c0)) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) readv(r1, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/12, 0x8}], 0x1) ioctl$SNDRV_TIMER_IOCTL_TREAD(r1, 0x40045402, &(0x7f0000000140)=0x1) poll(&(0x7f0000000080)=[{r1, 0x3440}, {r1, 0x9222}, {r1, 0x4020}, {r1, 0x1}], 0x4, 0x99) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) 11:30:54 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/12, 0x8}], 0x1) (async) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000180)={0x0, 0x20000006, 0xfffffffe, 0x0, 0x7}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 11:30:54 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/12, 0x8}], 0x1) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000180)={0x0, 0x20000006, 0xfffffffe, 0x0, 0x7}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/12, 0x8}], 0x1) (async) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000180)={0x0, 0x20000006, 0xfffffffe, 0x0, 0x7}) (async) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) (async) 11:30:54 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='highspeed\x00', 0xa) ioctl$sock_inet_SIOCDELRT(r0, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x19}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x2}) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000000)=@gcm_128={{0x304}, "6884d392512ce670", "95169daa6c459effde8e88b1b187c240", "09b08484", "b6d2e32b15578934"}, 0x28) 11:30:55 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/12, 0x8}], 0x1) sendto$unix(0xffffffffffffffff, &(0x7f0000000080)="ce636a5deaa07e26974b33f9cd1b480bce3405d880c37857d43bd0d0480a011e499e66fdaf3c4248cc4135f0e8f982797290a7c7520d7214dab8d1ac6d55bd5b780cbe7a68e5c737b4eb9bf5d3b3ab01298b849b08c17ef6ec9bddfd679002366edcce", 0x63, 0x4004, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e20}, 0x6e) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 11:30:55 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000000c0)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000280), 0x0) creat(&(0x7f0000000080)='./file0\x00', 0xe1) r4 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES64=r2], 0x14}}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x47) write(r2, &(0x7f0000000000)="0553ad72e4a6bd03194e1b125e9cd0a9416df02e0e025410a7248d6813e4fe7b19c1bd5338e3ee9966b568b82c48", 0x97d08) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 11:30:55 executing program 0: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r0, 0x8010500d, 0xffffffffffffffff) ioctl$SOUND_PCM_READ_CHANNELS(r0, 0x80045006, &(0x7f00000000c0)) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) readv(r1, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/12, 0x8}], 0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x3}}) poll(&(0x7f0000000080)=[{r1, 0x3440}, {r1, 0x9222}, {r1, 0x4020}, {r1, 0x1}], 0x4, 0x99) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) 11:30:55 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='highspeed\x00', 0xa) (async) ioctl$sock_inet_SIOCDELRT(r0, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x19}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x2}) (async) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000000)=@gcm_128={{0x304}, "6884d392512ce670", "95169daa6c459effde8e88b1b187c240", "09b08484", "b6d2e32b15578934"}, 0x28) 11:30:55 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/12, 0x8}], 0x1) sendto$unix(0xffffffffffffffff, &(0x7f0000000080)="ce636a5deaa07e26974b33f9cd1b480bce3405d880c37857d43bd0d0480a011e499e66fdaf3c4248cc4135f0e8f982797290a7c7520d7214dab8d1ac6d55bd5b780cbe7a68e5c737b4eb9bf5d3b3ab01298b849b08c17ef6ec9bddfd679002366edcce", 0x63, 0x4004, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e20}, 0x6e) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/12, 0x8}], 0x1) (async) sendto$unix(0xffffffffffffffff, &(0x7f0000000080)="ce636a5deaa07e26974b33f9cd1b480bce3405d880c37857d43bd0d0480a011e499e66fdaf3c4248cc4135f0e8f982797290a7c7520d7214dab8d1ac6d55bd5b780cbe7a68e5c737b4eb9bf5d3b3ab01298b849b08c17ef6ec9bddfd679002366edcce", 0x63, 0x4004, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e20}, 0x6e) (async) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) (async) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) (async) 11:30:55 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r2, 0x40189429, &(0x7f0000000040)={0x1, 0x8}) (async, rerun: 64) syz_emit_ethernet(0x72, &(0x7f00000001c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4d857", 0x3c, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "47e345", 0x0, 0x88, 0x0, @remote, @mcast1, [], "3da468344a1af97a4754334f"}}}}}}}, 0x0) (rerun: 64) 11:30:55 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='highspeed\x00', 0xa) (async) ioctl$sock_inet_SIOCDELRT(r0, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x19}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x2}) (async) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000000)=@gcm_128={{0x304}, "6884d392512ce670", "95169daa6c459effde8e88b1b187c240", "09b08484", "b6d2e32b15578934"}, 0x28) 11:30:56 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$mouse(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000280), 0x0) creat(&(0x7f0000000080)='./file0\x00', 0xe1) r5 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x47) write(r2, &(0x7f0000000000)="0553ad72e4a6bd03194e1b125e9cd0a9416df02e0e025410a7248d6813e4fe7b19c1bd5338e3ee9966b568b82c48", 0x97d08) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 11:30:56 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/12, 0x8}], 0x1) sendto$unix(0xffffffffffffffff, &(0x7f0000000080)="ce636a5deaa07e26974b33f9cd1b480bce3405d880c37857d43bd0d0480a011e499e66fdaf3c4248cc4135f0e8f982797290a7c7520d7214dab8d1ac6d55bd5b780cbe7a68e5c737b4eb9bf5d3b3ab01298b849b08c17ef6ec9bddfd679002366edcce", 0x63, 0x4004, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e20}, 0x6e) (async) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) (async) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 11:30:56 executing program 2: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x400200) sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYRESDEC=r0, @ANYBLOB="ab71ab72818b4fadeed608d4ee1db10a90dad030b632474cff36d299361aa3890bd90401f85adeb2ab948ce54b6497f82ad93c91f85550c61e68873913ce469a3ea5d4467cace25748fce5fc01c90e6ea48c0554268edd5d456442ac4f12e918a8b09c5cec3dcf1d9e63faae2e4def70902cb0a908b8cd59b9ede782d8a87f028bf94bc621abe782c4951d470c2c93e752f4fc584b82e04cce79e0bd9329222a85844c9672be2e109dc263c88232fe7b389b16b1d02761a8b80648f2cb315d77cbe49cb648fb683b757d5de7746aa80082e1881baf4973a875e1e0caf8b44d8840a7c4a78d8d72869dece03d22a01f03397af8f08b4b5d", @ANYBLOB="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"], 0x128}, 0x1, 0x0, 0x0, 0x20010080}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r1, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @multicast2}, {0x2, 0x0, @multicast1}, {0x2, 0xfffe, @broadcast}}) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='westwood\x00', 0x9) setsockopt$sock_int(r0, 0x1, 0x4, &(0x7f00000001c0)=0xb7, 0x4) 11:30:56 executing program 2: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x400200) sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYRESDEC=r0, @ANYBLOB="ab71ab72818b4fadeed608d4ee1db10a90dad030b632474cff36d299361aa3890bd90401f85adeb2ab948ce54b6497f82ad93c91f85550c61e68873913ce469a3ea5d4467cace25748fce5fc01c90e6ea48c0554268edd5d456442ac4f12e918a8b09c5cec3dcf1d9e63faae2e4def70902cb0a908b8cd59b9ede782d8a87f028bf94bc621abe782c4951d470c2c93e752f4fc584b82e04cce79e0bd9329222a85844c9672be2e109dc263c88232fe7b389b16b1d02761a8b80648f2cb315d77cbe49cb648fb683b757d5de7746aa80082e1881baf4973a875e1e0caf8b44d8840a7c4a78d8d72869dece03d22a01f03397af8f08b4b5d", @ANYBLOB="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"], 0x128}, 0x1, 0x0, 0x0, 0x20010080}, 0x0) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r1, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @multicast2}, {0x2, 0x0, @multicast1}, {0x2, 0xfffe, @broadcast}}) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='westwood\x00', 0x9) (async) setsockopt$sock_int(r0, 0x1, 0x4, &(0x7f00000001c0)=0xb7, 0x4) 11:30:56 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/12, 0x8}], 0x1) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3, 0x0, 0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 11:30:56 executing program 2: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x400200) sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYRESDEC=r0, @ANYBLOB="ab71ab72818b4fadeed608d4ee1db10a90dad030b632474cff36d299361aa3890bd90401f85adeb2ab948ce54b6497f82ad93c91f85550c61e68873913ce469a3ea5d4467cace25748fce5fc01c90e6ea48c0554268edd5d456442ac4f12e918a8b09c5cec3dcf1d9e63faae2e4def70902cb0a908b8cd59b9ede782d8a87f028bf94bc621abe782c4951d470c2c93e752f4fc584b82e04cce79e0bd9329222a85844c9672be2e109dc263c88232fe7b389b16b1d02761a8b80648f2cb315d77cbe49cb648fb683b757d5de7746aa80082e1881baf4973a875e1e0caf8b44d8840a7c4a78d8d72869dece03d22a01f03397af8f08b4b5d", @ANYBLOB="10002cbd7000fcdbdf2507000000280002800800010004000000080001008100000008000200040000000400040008000100ff07000064000280040004005400038008000200710d000008000100070000000800020000000000080001000300000008000100fbffffff08000100ff07000008000200ffffff7f0800020000010000080001000010000008000100030000000800010000000e004c00078008000100050000000c000400070000000000000008000200020000000c000300010000000000000008000200080000000c000400ffffffffffffffff0c00030005000000000000003c000180380004001400010002004e200a0101000000000000000000200002000a004e2400000000ff020000000000000000000000000001a1000000"], 0x128}, 0x1, 0x0, 0x0, 0x20010080}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r1, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @multicast2}, {0x2, 0x0, @multicast1}, {0x2, 0xfffe, @broadcast}}) (async) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='westwood\x00', 0x9) (async) setsockopt$sock_int(r0, 0x1, 0x4, &(0x7f00000001c0)=0xb7, 0x4) 11:30:56 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) r1 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040), 0x4) getsockopt$inet_tcp_buf(r0, 0x6, 0x3b, &(0x7f00000001c0)=""/4096, &(0x7f0000000000)=0x1000) 11:30:56 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r2, 0x40189429, &(0x7f0000000040)={0x1, 0x8}) syz_emit_ethernet(0x72, &(0x7f00000001c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4d857", 0x3c, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "47e345", 0x0, 0x88, 0x0, @remote, @mcast1, [], "3da468344a1af97a4754334f"}}}}}}}, 0x0) syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) (async) dup(r0) (async) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18}, './file0\x00'}) (async) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r2, 0x40189429, &(0x7f0000000040)={0x1, 0x8}) (async) syz_emit_ethernet(0x72, &(0x7f00000001c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4d857", 0x3c, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "47e345", 0x0, 0x88, 0x0, @remote, @mcast1, [], "3da468344a1af97a4754334f"}}}}}}}, 0x0) (async) 11:30:56 executing program 0: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r0, 0x8010500d, 0xffffffffffffffff) ioctl$SOUND_PCM_READ_CHANNELS(r0, 0x80045006, &(0x7f00000000c0)) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) readv(r1, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/12, 0x8}], 0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x3}}) poll(&(0x7f0000000080)=[{r1, 0x3440}, {r1, 0x9222}, {r1, 0x4020}, {r1, 0x1}], 0x4, 0x99) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) 11:30:56 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000000c0)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000280), 0x0) creat(&(0x7f0000000080)='./file0\x00', 0xe1) r4 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES64=r2], 0x14}}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x47) write(r2, &(0x7f0000000000)="0553ad72e4a6bd03194e1b125e9cd0a9416df02e0e025410a7248d6813e4fe7b19c1bd5338e3ee9966b568b82c48", 0x97d08) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 11:30:57 executing program 5: syz_emit_ethernet(0x76, &(0x7f0000000000)={@link_local, @link_local, @val={@void, {0x8100, 0x7, 0x1}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4d857", 0x3c, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "47e393", 0x0, 0x88, 0x0, @remote, @mcast1, [], "3da468344a1af97a4754334f"}}}}}}}, 0x0) 11:30:57 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/12, 0x8}], 0x1) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3, 0x0, 0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/12, 0x8}], 0x1) (async) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3, 0x0, 0x0, 0x1}}) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) (async) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) (async) 11:30:57 executing program 5: syz_emit_ethernet(0x76, &(0x7f0000000000)={@link_local, @link_local, @val={@void, {0x8100, 0x7, 0x1}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4d857", 0x3c, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "47e393", 0x0, 0x88, 0x0, @remote, @mcast1, [], "3da468344a1af97a4754334f"}}}}}}}, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000000)={@link_local, @link_local, @val={@void, {0x8100, 0x7, 0x1}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4d857", 0x3c, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "47e393", 0x0, 0x88, 0x0, @remote, @mcast1, [], "3da468344a1af97a4754334f"}}}}}}}, 0x0) (async) 11:30:57 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000000c0)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000280), 0x0) creat(&(0x7f0000000080)='./file0\x00', 0xe1) r4 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES64=r2], 0x14}}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x47) write(r2, &(0x7f0000000000)="0553ad72e4a6bd03194e1b125e9cd0a9416df02e0e025410a7248d6813e4fe7b19c1bd5338e3ee9966b568b82c48", 0x97d08) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 11:30:57 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/12, 0x8}], 0x1) (async) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3, 0x0, 0x0, 0x1}}) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 11:30:57 executing program 5: syz_emit_ethernet(0x76, &(0x7f0000000000)={@link_local, @link_local, @val={@void, {0x8100, 0x7, 0x1}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4d857", 0x3c, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "47e393", 0x0, 0x88, 0x0, @remote, @mcast1, [], "3da468344a1af97a4754334f"}}}}}}}, 0x0) 11:30:57 executing program 5: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x16) syz_emit_ethernet(0x72, &(0x7f00000001c0)={@link_local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4d857", 0x3c, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "47e393", 0x0, 0x88, 0x0, @remote, @mcast1, [], "3da468344a1af97a4754334f"}}}}}}}, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x80404509, &(0x7f0000000080)=""/46) syz_emit_ethernet(0x3c, &(0x7f0000000040)={@broadcast, @multicast, @val={@val={0x9100, 0x0, 0x0, 0x2}, {0x8100, 0x3, 0x1, 0x2}}, {@llc_tr={0x11, {@snap={0x1, 0xaa, "b5", "df7da3", 0x11, "36f5bc0a47effa21f9fe3524aa3242d764c2cfb89cc1aaa95bb235520c25"}}}}}, 0x0) 11:30:57 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000200)=""/12, 0xc}], 0x1) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000006800100900bd7000fbdbdf25020020dc3c9b9bc2f7bfc35903944b01080000000400"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x40801) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 11:30:58 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) (async, rerun: 32) r1 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) (rerun: 32) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) (async) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040), 0x4) (async) getsockopt$inet_tcp_buf(r0, 0x6, 0x3b, &(0x7f00000001c0)=""/4096, &(0x7f0000000000)=0x1000) 11:30:58 executing program 5: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x16) syz_emit_ethernet(0x72, &(0x7f00000001c0)={@link_local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4d857", 0x3c, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "47e393", 0x0, 0x88, 0x0, @remote, @mcast1, [], "3da468344a1af97a4754334f"}}}}}}}, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x80404509, &(0x7f0000000080)=""/46) syz_emit_ethernet(0x3c, &(0x7f0000000040)={@broadcast, @multicast, @val={@val={0x9100, 0x0, 0x0, 0x2}, {0x8100, 0x3, 0x1, 0x2}}, {@llc_tr={0x11, {@snap={0x1, 0xaa, "b5", "df7da3", 0x11, "36f5bc0a47effa21f9fe3524aa3242d764c2cfb89cc1aaa95bb235520c25"}}}}}, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x16) (async) syz_emit_ethernet(0x72, &(0x7f00000001c0)={@link_local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4d857", 0x3c, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "47e393", 0x0, 0x88, 0x0, @remote, @mcast1, [], "3da468344a1af97a4754334f"}}}}}}}, 0x0) (async) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x80404509, &(0x7f0000000080)=""/46) (async) syz_emit_ethernet(0x3c, &(0x7f0000000040)={@broadcast, @multicast, @val={@val={0x9100, 0x0, 0x0, 0x2}, {0x8100, 0x3, 0x1, 0x2}}, {@llc_tr={0x11, {@snap={0x1, 0xaa, "b5", "df7da3", 0x11, "36f5bc0a47effa21f9fe3524aa3242d764c2cfb89cc1aaa95bb235520c25"}}}}}, 0x0) (async) 11:30:58 executing program 0: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r0, 0x8010500d, 0xffffffffffffffff) ioctl$SOUND_PCM_READ_CHANNELS(r0, 0x80045006, &(0x7f00000000c0)) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) readv(r1, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/12, 0x8}], 0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x3}}) poll(&(0x7f0000000080)=[{r1, 0x3440}, {r1, 0x9222}, {r1, 0x4020}, {r1, 0x1}], 0x4, 0x99) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) 11:30:58 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000200)=""/12, 0xc}], 0x1) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000006800100900bd7000fbdbdf25020020dc3c9b9bc2f7bfc35903944b01080000000400"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x40801) (async) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 11:30:58 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000000c0)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000280), 0x0) creat(&(0x7f0000000080)='./file0\x00', 0xe1) r4 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES64=r2], 0x14}}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x47) write(r2, &(0x7f0000000000)="0553ad72e4a6bd03194e1b125e9cd0a9416df02e0e025410a7248d6813e4fe7b19c1bd5338e3ee9966b568b82c48", 0x97d08) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 11:30:58 executing program 5: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x16) (async, rerun: 32) syz_emit_ethernet(0x72, &(0x7f00000001c0)={@link_local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4d857", 0x3c, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "47e393", 0x0, 0x88, 0x0, @remote, @mcast1, [], "3da468344a1af97a4754334f"}}}}}}}, 0x0) (async, rerun: 32) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x80404509, &(0x7f0000000080)=""/46) syz_emit_ethernet(0x3c, &(0x7f0000000040)={@broadcast, @multicast, @val={@val={0x9100, 0x0, 0x0, 0x2}, {0x8100, 0x3, 0x1, 0x2}}, {@llc_tr={0x11, {@snap={0x1, 0xaa, "b5", "df7da3", 0x11, "36f5bc0a47effa21f9fe3524aa3242d764c2cfb89cc1aaa95bb235520c25"}}}}}, 0x0) 11:30:58 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000200)=""/12, 0xc}], 0x1) (async) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000006800100900bd7000fbdbdf25020020dc3c9b9bc2f7bfc35903944b01080000000400"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x40801) (async) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 11:30:58 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$mouse(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000280), 0x0) creat(&(0x7f0000000080)='./file0\x00', 0xe1) r5 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES64=r2], 0x14}}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x47) write(r2, &(0x7f0000000000)="0553ad72e4a6bd03194e1b125e9cd0a9416df02e0e025410a7248d6813e4fe7b19c1bd5338e3ee9966b568b82c48", 0x97d08) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 11:30:58 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) (async) r1 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040), 0x4) (async) getsockopt$inet_tcp_buf(r0, 0x6, 0x3b, &(0x7f00000001c0)=""/4096, &(0x7f0000000000)=0x1000) 11:30:58 executing program 5: syz_emit_ethernet(0x56, &(0x7f0000000240)={@link_local, @link_local, @val={@val={0x9100, 0x3, 0x1}, {0x8100, 0x4, 0x1, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4d857", 0x18, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast2, {[], @mld={0x82, 0x0, 0x0, 0x1, 0x3f, @private2={0xfc, 0x2, '\x00', 0x1}}}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, @remote, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @local, @local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}, &(0x7f0000000040)={0x1, 0x4, [0xd2d, 0x96e, 0x3cd, 0xc2a]}) syz_emit_ethernet(0xca, &(0x7f0000000080)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}, @broadcast, @val={@val={0x9100, 0x2, 0x1, 0x3}, {0x8100, 0x0, 0x1}}, {@generic={0x806, "db9a985904ba12b78948f355382764b78414c2e07b6b6d177a9cb84cc299aec08a01bd22c1f445a24a32e569eb774d5a3b3237cf554ae1b271d5a210475d047aebc63558c4c6886d11d8aee4af6bc931bc8c7a49564b884e5db2ec561016855afd4bdbebb93eab272e93eddd6f76d439cfb7b7597e2b369a0314b8805815275dac4836e2c76e14a75e731b18cd78102b4c998f16c904a60ebe0787f015882ec99f37c85c559a16a365aec959afe548e3029673ec"}}}, &(0x7f0000000180)={0x1, 0x1, [0x9af, 0xbfd, 0xdae, 0xc90]}) 11:30:58 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = socket$unix(0x1, 0x2, 0x0) readv(r1, &(0x7f00000005c0)=[{&(0x7f0000000080)=""/12, 0xc}], 0x1) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000180)={{0x2, 0x3, 0x800}, 0x40000000000, 0x4, 0x9}) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x40800, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) 11:30:58 executing program 3: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r0, 0x8010500d, 0xffffffffffffffff) ioctl$SOUND_PCM_READ_CHANNELS(r0, 0x80045006, &(0x7f00000000c0)) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) readv(r1, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/12, 0x8}], 0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x3}}) poll(&(0x7f0000000080)=[{r1, 0x3440}, {r1, 0x9222}, {r1, 0x4020}, {r1, 0x1}], 0x4, 0x99) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) 11:30:58 executing program 5: syz_emit_ethernet(0x56, &(0x7f0000000240)={@link_local, @link_local, @val={@val={0x9100, 0x3, 0x1}, {0x8100, 0x4, 0x1, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4d857", 0x18, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast2, {[], @mld={0x82, 0x0, 0x0, 0x1, 0x3f, @private2={0xfc, 0x2, '\x00', 0x1}}}}}}}, 0x0) (async, rerun: 64) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, @remote, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @local, @local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}, &(0x7f0000000040)={0x1, 0x4, [0xd2d, 0x96e, 0x3cd, 0xc2a]}) (async, rerun: 64) syz_emit_ethernet(0xca, &(0x7f0000000080)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}, @broadcast, @val={@val={0x9100, 0x2, 0x1, 0x3}, {0x8100, 0x0, 0x1}}, {@generic={0x806, "db9a985904ba12b78948f355382764b78414c2e07b6b6d177a9cb84cc299aec08a01bd22c1f445a24a32e569eb774d5a3b3237cf554ae1b271d5a210475d047aebc63558c4c6886d11d8aee4af6bc931bc8c7a49564b884e5db2ec561016855afd4bdbebb93eab272e93eddd6f76d439cfb7b7597e2b369a0314b8805815275dac4836e2c76e14a75e731b18cd78102b4c998f16c904a60ebe0787f015882ec99f37c85c559a16a365aec959afe548e3029673ec"}}}, &(0x7f0000000180)={0x1, 0x1, [0x9af, 0xbfd, 0xdae, 0xc90]}) 11:30:58 executing program 5: syz_emit_ethernet(0x56, &(0x7f0000000240)={@link_local, @link_local, @val={@val={0x9100, 0x3, 0x1}, {0x8100, 0x4, 0x1, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4d857", 0x18, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast2, {[], @mld={0x82, 0x0, 0x0, 0x1, 0x3f, @private2={0xfc, 0x2, '\x00', 0x1}}}}}}}, 0x0) (async) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, @remote, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @local, @local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}, &(0x7f0000000040)={0x1, 0x4, [0xd2d, 0x96e, 0x3cd, 0xc2a]}) syz_emit_ethernet(0xca, &(0x7f0000000080)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}, @broadcast, @val={@val={0x9100, 0x2, 0x1, 0x3}, {0x8100, 0x0, 0x1}}, {@generic={0x806, "db9a985904ba12b78948f355382764b78414c2e07b6b6d177a9cb84cc299aec08a01bd22c1f445a24a32e569eb774d5a3b3237cf554ae1b271d5a210475d047aebc63558c4c6886d11d8aee4af6bc931bc8c7a49564b884e5db2ec561016855afd4bdbebb93eab272e93eddd6f76d439cfb7b7597e2b369a0314b8805815275dac4836e2c76e14a75e731b18cd78102b4c998f16c904a60ebe0787f015882ec99f37c85c559a16a365aec959afe548e3029673ec"}}}, &(0x7f0000000180)={0x1, 0x1, [0x9af, 0xbfd, 0xdae, 0xc90]}) 11:30:58 executing program 5: syz_emit_ethernet(0x72, &(0x7f00000001c0)={@link_local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4d857", 0x3c, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "47e393", 0x0, 0x88, 0x0, @remote, @mcast1, [], "3da468344a1af97a4754334f"}}}}}}}, 0x0) syz_emit_ethernet(0xde, &(0x7f0000000000)={@multicast, @random="9ae7b4bff335", @void, {@ipv4={0x800, @icmp={{0x32, 0x4, 0x0, 0x5, 0xd0, 0x65, 0x0, 0x4, 0x1, 0x0, @loopback, @local, {[@ra={0x94, 0x4}, @timestamp_prespec={0x44, 0xc, 0xc0, 0x3, 0x3, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x24000000}]}, @rr={0x7, 0x13, 0xce, [@dev={0xac, 0x14, 0x14, 0x15}, @remote, @local, @broadcast]}, @cipso={0x86, 0x32, 0x1, [{0x5, 0x8, "1179396c5f4f"}, {0x0, 0xe, "6fee76cb2207cfa9e9b5fc74"}, {0x5, 0x4, "6da4"}, {0x2, 0x12, "fe0310cdd72f15983a7b26ed90f7df06"}]}, @rr={0x7, 0x7, 0xf, [@multicast1]}, @timestamp_addr={0x44, 0x1c, 0xac, 0x1, 0x6, [{@loopback, 0x8000}, {@broadcast, 0x1}, {@empty, 0x4}]}, @ssrr={0x89, 0x13, 0xe7, [@local, @dev={0xac, 0x14, 0x14, 0x34}, @loopback, @remote]}, @lsrr={0x83, 0x27, 0xd6, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @local, @multicast1, @loopback, @multicast1, @loopback, @broadcast, @multicast1]}]}}, @address_reply={0x12, 0x0, 0x0, 0x81}}}}}, 0x0) 11:30:58 executing program 0: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r0, 0x8010500d, 0xffffffffffffffff) ioctl$SOUND_PCM_READ_CHANNELS(r0, 0x80045006, &(0x7f00000000c0)) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r1, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x3}}) poll(&(0x7f0000000080)=[{r1, 0x3440}, {r1, 0x9222}, {r1, 0x4020}, {r1, 0x1}], 0x4, 0x99) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) 11:30:58 executing program 5: syz_emit_ethernet(0x72, &(0x7f00000001c0)={@link_local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4d857", 0x3c, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "47e393", 0x0, 0x88, 0x0, @remote, @mcast1, [], "3da468344a1af97a4754334f"}}}}}}}, 0x0) syz_emit_ethernet(0xde, &(0x7f0000000000)={@multicast, @random="9ae7b4bff335", @void, {@ipv4={0x800, @icmp={{0x32, 0x4, 0x0, 0x5, 0xd0, 0x65, 0x0, 0x4, 0x1, 0x0, @loopback, @local, {[@ra={0x94, 0x4}, @timestamp_prespec={0x44, 0xc, 0xc0, 0x3, 0x3, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x24000000}]}, @rr={0x7, 0x13, 0xce, [@dev={0xac, 0x14, 0x14, 0x15}, @remote, @local, @broadcast]}, @cipso={0x86, 0x32, 0x1, [{0x5, 0x8, "1179396c5f4f"}, {0x0, 0xe, "6fee76cb2207cfa9e9b5fc74"}, {0x5, 0x4, "6da4"}, {0x2, 0x12, "fe0310cdd72f15983a7b26ed90f7df06"}]}, @rr={0x7, 0x7, 0xf, [@multicast1]}, @timestamp_addr={0x44, 0x1c, 0xac, 0x1, 0x6, [{@loopback, 0x8000}, {@broadcast, 0x1}, {@empty, 0x4}]}, @ssrr={0x89, 0x13, 0xe7, [@local, @dev={0xac, 0x14, 0x14, 0x34}, @loopback, @remote]}, @lsrr={0x83, 0x27, 0xd6, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @local, @multicast1, @loopback, @multicast1, @loopback, @broadcast, @multicast1]}]}}, @address_reply={0x12, 0x0, 0x0, 0x81}}}}}, 0x0) 11:30:59 executing program 5: syz_emit_ethernet(0x72, &(0x7f00000001c0)={@link_local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4d857", 0x3c, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "47e393", 0x0, 0x88, 0x0, @remote, @mcast1, [], "3da468344a1af97a4754334f"}}}}}}}, 0x0) syz_emit_ethernet(0xde, &(0x7f0000000000)={@multicast, @random="9ae7b4bff335", @void, {@ipv4={0x800, @icmp={{0x32, 0x4, 0x0, 0x5, 0xd0, 0x65, 0x0, 0x4, 0x1, 0x0, @loopback, @local, {[@ra={0x94, 0x4}, @timestamp_prespec={0x44, 0xc, 0xc0, 0x3, 0x3, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x24000000}]}, @rr={0x7, 0x13, 0xce, [@dev={0xac, 0x14, 0x14, 0x15}, @remote, @local, @broadcast]}, @cipso={0x86, 0x32, 0x1, [{0x5, 0x8, "1179396c5f4f"}, {0x0, 0xe, "6fee76cb2207cfa9e9b5fc74"}, {0x5, 0x4, "6da4"}, {0x2, 0x12, "fe0310cdd72f15983a7b26ed90f7df06"}]}, @rr={0x7, 0x7, 0xf, [@multicast1]}, @timestamp_addr={0x44, 0x1c, 0xac, 0x1, 0x6, [{@loopback, 0x8000}, {@broadcast, 0x1}, {@empty, 0x4}]}, @ssrr={0x89, 0x13, 0xe7, [@local, @dev={0xac, 0x14, 0x14, 0x34}, @loopback, @remote]}, @lsrr={0x83, 0x27, 0xd6, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @local, @multicast1, @loopback, @multicast1, @loopback, @broadcast, @multicast1]}]}}, @address_reply={0x12, 0x0, 0x0, 0x81}}}}}, 0x0) 11:30:59 executing program 5: unshare(0x8000000) socket$phonet_pipe(0x23, 0x5, 0x2) unshare(0x800) unshare(0x62000880) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000040)={0x1, 0x0, 0x3, &(0x7f0000000000)={0x22, "0f4e4ea7141cc507c219d06fa6d2f2fa5d999972b029b134f045ff4ad9d9fa35d4"}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000002100)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b26]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) dup3(r0, r3, 0x0) 11:30:59 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000000080)={'broute\x00', 0x0, 0x0, 0x0, [0x1ff, 0x3, 0x97b4, 0x3, 0x8, 0xb4], 0x1, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}], 0x0, [{}]}, 0x88) 11:30:59 executing program 0: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r0, 0x8010500d, 0xffffffffffffffff) ioctl$SOUND_PCM_READ_CHANNELS(r0, 0x80045006, &(0x7f00000000c0)) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000100)={{0x3}}) poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x3440}, {0xffffffffffffffff, 0x9222}, {0xffffffffffffffff, 0x4020}, {0xffffffffffffffff, 0x1}], 0x4, 0x99) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) 11:30:59 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) r1 = socket$unix(0x1, 0x2, 0x0) readv(r1, &(0x7f00000005c0)=[{&(0x7f0000000080)=""/12, 0xc}], 0x1) (async) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000180)={{0x2, 0x3, 0x800}, 0x40000000000, 0x4, 0x9}) (async) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x40800, 0x0) (async) r2 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) (async) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) 11:30:59 executing program 1: syz_emit_ethernet(0x72, &(0x7f00000001c0)={@link_local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4d857", 0x3c, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "47e393", 0x0, 0x88, 0x0, @remote, @mcast1, [], "3da468344a1af97a4754334f"}}}}}}}, 0x0) syz_emit_ethernet(0x22, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}, @link_local, @val={@void, {0x8100, 0x7, 0x1}}, {@can={0xc, {{0x2, 0x1}, 0x7, 0x3, 0x0, 0x0, "4d20fc08246df7e4"}}}}, &(0x7f0000000040)={0x1, 0x3, [0x1bb, 0x486, 0x3f1, 0x2df]}) 11:30:59 executing program 3: syz_emit_ethernet(0x72, &(0x7f00000001c0)={@link_local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4d857", 0x3c, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "47e393", 0x0, 0x88, 0x0, @remote, @mcast1, [], "3da468344a1af97a4754334f"}}}}}}}, 0x0) syz_emit_ethernet(0xde, &(0x7f0000000000)={@multicast, @random="9ae7b4bff335", @void, {@ipv4={0x800, @icmp={{0x32, 0x4, 0x0, 0x5, 0xd0, 0x65, 0x0, 0x4, 0x1, 0x0, @loopback, @local, {[@ra={0x94, 0x4}, @timestamp_prespec={0x44, 0xc, 0xc0, 0x3, 0x3, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x24000000}]}, @rr={0x7, 0x13, 0xce, [@dev={0xac, 0x14, 0x14, 0x15}, @remote, @local, @broadcast]}, @cipso={0x86, 0x32, 0x1, [{0x5, 0x8, "1179396c5f4f"}, {0x0, 0xe, "6fee76cb2207cfa9e9b5fc74"}, {0x5, 0x4, "6da4"}, {0x2, 0x12, "fe0310cdd72f15983a7b26ed90f7df06"}]}, @rr={0x7, 0x7, 0xf, [@multicast1]}, @timestamp_addr={0x44, 0x1c, 0xac, 0x1, 0x6, [{@loopback, 0x8000}, {@broadcast, 0x1}, {@empty, 0x4}]}, @ssrr={0x89, 0x13, 0xe7, [@local, @dev={0xac, 0x14, 0x14, 0x34}, @loopback, @remote]}, @lsrr={0x83, 0x27, 0xd6, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @local, @multicast1, @loopback, @multicast1, @loopback, @broadcast, @multicast1]}]}}, @address_reply={0x12, 0x0, 0x0, 0x81}}}}}, 0x0) 11:30:59 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) r1 = socket$unix(0x1, 0x2, 0x0) readv(r1, &(0x7f00000005c0)=[{&(0x7f0000000080)=""/12, 0xc}], 0x1) (async) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000180)={{0x2, 0x3, 0x800}, 0x40000000000, 0x4, 0x9}) (async) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x40800, 0x0) (async) r2 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) (async) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) 11:30:59 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$mouse(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000280), 0x0) creat(&(0x7f0000000080)='./file0\x00', 0xe1) r5 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES64=r2], 0x14}}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x47) write(r2, &(0x7f0000000000)="0553ad72e4a6bd03194e1b125e9cd0a9416df02e0e025410a7248d6813e4fe7b19c1bd5338e3ee9966b568b82c48", 0x97d08) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 11:30:59 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/12, 0x8}], 0x1) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000000c0)={r1, r2+10000000}, 0x1, 0x1, 0x1}, 0x4) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000001c0)={0x1, 0x2, 0x0, 0x0, 0x6}) write$binfmt_elf64(r0, &(0x7f0000001180)=ANY=[@ANYBLOB="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"/2895], 0xb4f) 11:30:59 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000000080)={'broute\x00', 0x0, 0x0, 0x0, [0x1ff, 0x3, 0x97b4, 0x3, 0x8, 0xb4], 0x1, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}], 0x0, [{}]}, 0x88) socket$inet_tcp(0x2, 0x1, 0x0) (async) ioctl$sock_inet_SIOCDELRT(r0, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) (async) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000000080)={'broute\x00', 0x0, 0x0, 0x0, [0x1ff, 0x3, 0x97b4, 0x3, 0x8, 0xb4], 0x1, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}], 0x0, [{}]}, 0x88) (async) 11:30:59 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCGRS485(r0, 0x542e, &(0x7f00000000c0)) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) readv(r1, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/12, 0x8}], 0x1) ioctl$SNDRV_TIMER_IOCTL_TREAD(r1, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x3, 0x0, 0x0, 0x0, 0x10000}}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000002100)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b26]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ppoll(&(0x7f0000000180)=[{r4, 0x9022}, {r0, 0x10}, {r1, 0xb042}, {r5, 0x4001}, {r1, 0x1}], 0x5, &(0x7f00000001c0), &(0x7f0000000200)={[0x2]}, 0x8) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000440)={0x0, 0x60000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) 11:30:59 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000000080)={'broute\x00', 0x0, 0x0, 0x0, [0x1ff, 0x3, 0x97b4, 0x3, 0x8, 0xb4], 0x1, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}], 0x0, [{}]}, 0x88) socket$inet_tcp(0x2, 0x1, 0x0) (async) ioctl$sock_inet_SIOCDELRT(r0, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) (async) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000000080)={'broute\x00', 0x0, 0x0, 0x0, [0x1ff, 0x3, 0x97b4, 0x3, 0x8, 0xb4], 0x1, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}], 0x0, [{}]}, 0x88) (async) 11:30:59 executing program 5: unshare(0x8000000) socket$phonet_pipe(0x23, 0x5, 0x2) unshare(0x800) unshare(0x62000880) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000040)={0x1, 0x0, 0x3, &(0x7f0000000000)={0x22, "0f4e4ea7141cc507c219d06fa6d2f2fa5d999972b029b134f045ff4ad9d9fa35d4"}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000002100)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b26]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) dup3(r0, r3, 0x0) unshare(0x8000000) (async) socket$phonet_pipe(0x23, 0x5, 0x2) (async) unshare(0x800) (async) unshare(0x62000880) (async) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000040)={0x1, 0x0, 0x3, &(0x7f0000000000)={0x22, "0f4e4ea7141cc507c219d06fa6d2f2fa5d999972b029b134f045ff4ad9d9fa35d4"}}) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000002100)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b26]}) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) dup3(r0, r3, 0x0) (async) 11:30:59 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$mouse(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000280), 0x0) creat(&(0x7f0000000080)='./file0\x00', 0xe1) r5 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES64=r2], 0x14}}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x47) write(r2, &(0x7f0000000000)="0553ad72e4a6bd03194e1b125e9cd0a9416df02e0e025410a7248d6813e4fe7b19c1bd5338e3ee9966b568b82c48", 0x97d08) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 11:30:59 executing program 0: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r0, 0x8010500d, 0xffffffffffffffff) ioctl$SOUND_PCM_READ_CHANNELS(r0, 0x80045006, &(0x7f00000000c0)) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000100)={{0x3}}) poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x3440}, {0xffffffffffffffff, 0x9222}, {0xffffffffffffffff, 0x4020}, {0xffffffffffffffff, 0x1}], 0x4, 0x99) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) 11:30:59 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000000)={0xffff, 0x8000, 0x9, 0x1, 0x4}, 0x14) ioctl$sock_inet_SIOCDELRT(r0, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) 11:31:00 executing program 0: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r0, 0x8010500d, 0xffffffffffffffff) ioctl$SOUND_PCM_READ_CHANNELS(r0, 0x80045006, &(0x7f00000000c0)) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000100)={{0x3}}) poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x3440}, {0xffffffffffffffff, 0x9222}, {0xffffffffffffffff, 0x4020}, {0xffffffffffffffff, 0x1}], 0x4, 0x99) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) 11:31:00 executing program 5: unshare(0x8000000) socket$phonet_pipe(0x23, 0x5, 0x2) (async) unshare(0x800) unshare(0x62000880) (async) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000040)={0x1, 0x0, 0x3, &(0x7f0000000000)={0x22, "0f4e4ea7141cc507c219d06fa6d2f2fa5d999972b029b134f045ff4ad9d9fa35d4"}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000002100)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b26]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) dup3(r0, r3, 0x0) 11:31:00 executing program 0: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r0, 0x8010500d, 0xffffffffffffffff) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r1, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x3}}) poll(&(0x7f0000000080)=[{r1, 0x3440}, {r1, 0x9222}, {r1, 0x4020}, {r1, 0x1}], 0x4, 0x99) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) 11:31:00 executing program 1: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r0, 0x8010500d, 0xffffffffffffffff) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r1, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x3}}) poll(&(0x7f0000000080)=[{r1, 0x3440}, {r1, 0x9222}, {r1, 0x4020}, {r1, 0x1}], 0x4, 0x99) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) 11:31:00 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCGRS485(r0, 0x542e, &(0x7f00000000c0)) (async) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) readv(r1, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/12, 0x8}], 0x1) ioctl$SNDRV_TIMER_IOCTL_TREAD(r1, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x3, 0x0, 0x0, 0x0, 0x10000}}) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000002100)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b26]}) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async, rerun: 32) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (rerun: 32) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) (async) ppoll(&(0x7f0000000180)=[{r4, 0x9022}, {r0, 0x10}, {r1, 0xb042}, {r5, 0x4001}, {r1, 0x1}], 0x5, &(0x7f00000001c0), &(0x7f0000000200)={[0x2]}, 0x8) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000440)={0x0, 0x60000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) 11:31:00 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) (async) r1 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) (async) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000000)={0xffff, 0x8000, 0x9, 0x1, 0x4}, 0x14) (async) ioctl$sock_inet_SIOCDELRT(r0, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) 11:31:00 executing program 0: openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) poll(&(0x7f0000000080)=[{r0, 0x3440}, {r0, 0x9222}, {r0, 0x4020}, {r0, 0x1}], 0x4, 0x99) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 11:31:00 executing program 5: syz_emit_ethernet(0x72, &(0x7f0000000040)=ANY=[@ANYRES64], 0x0) syz_emit_ethernet(0xac, &(0x7f0000000080)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}, @broadcast, @void, {@ipv4={0x800, @icmp={{0x1e, 0x4, 0x3, 0x35, 0x9e, 0x66, 0x0, 0x4b, 0x1, 0x0, @multicast1, @multicast1, {[@end, @lsrr={0x83, 0x7, 0xb4, [@multicast1]}, @cipso={0x86, 0x5c, 0x2, [{0x0, 0x9, "e1dc1cd2e28f74"}, {0x0, 0xd, "2168f0a561087cd366cfa1"}, {0x6, 0xf, "4dcc3acc75ab3ada6048644835"}, {0x2, 0xf, "4409b082e04546a3430534db9f"}, {0x6, 0x7, "72b1fc12a9"}, {0xecca571038cf5474, 0x6, "8eaa5054"}, {0x5, 0x11, "5446cd1a89f388cb411d652c16b71a"}, {0x1, 0x4, "29a5"}]}]}}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x6, 0x4, 0x1, 0x10, 0x20, 0x65, 0x1, 0x8, 0x16, 0x3ff, @empty, @broadcast, {[@ra={0x94, 0x4}]}}, "0f7e4fda41e1"}}}}}, &(0x7f0000000000)={0x1, 0x1, [0x4d1, 0x6cd, 0xf92, 0xb6]}) 11:31:00 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$mouse(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000280), 0x0) creat(&(0x7f0000000080)='./file0\x00', 0xe1) r5 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES64=r2], 0x14}}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x47) write(r2, &(0x7f0000000000)="0553ad72e4a6bd03194e1b125e9cd0a9416df02e0e025410a7248d6813e4fe7b19c1bd5338e3ee9966b568b82c48", 0x97d08) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 11:31:01 executing program 5: syz_emit_ethernet(0x72, &(0x7f0000000040)=ANY=[@ANYRES64], 0x0) syz_emit_ethernet(0xac, &(0x7f0000000080)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}, @broadcast, @void, {@ipv4={0x800, @icmp={{0x1e, 0x4, 0x3, 0x35, 0x9e, 0x66, 0x0, 0x4b, 0x1, 0x0, @multicast1, @multicast1, {[@end, @lsrr={0x83, 0x7, 0xb4, [@multicast1]}, @cipso={0x86, 0x5c, 0x2, [{0x0, 0x9, "e1dc1cd2e28f74"}, {0x0, 0xd, "2168f0a561087cd366cfa1"}, {0x6, 0xf, "4dcc3acc75ab3ada6048644835"}, {0x2, 0xf, "4409b082e04546a3430534db9f"}, {0x6, 0x7, "72b1fc12a9"}, {0xecca571038cf5474, 0x6, "8eaa5054"}, {0x5, 0x11, "5446cd1a89f388cb411d652c16b71a"}, {0x1, 0x4, "29a5"}]}]}}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x6, 0x4, 0x1, 0x10, 0x20, 0x65, 0x1, 0x8, 0x16, 0x3ff, @empty, @broadcast, {[@ra={0x94, 0x4}]}}, "0f7e4fda41e1"}}}}}, &(0x7f0000000000)={0x1, 0x1, [0x4d1, 0x6cd, 0xf92, 0xb6]}) 11:31:01 executing program 1: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r0, 0x8010500d, 0xffffffffffffffff) ioctl$SOUND_PCM_READ_CHANNELS(r0, 0x80045006, &(0x7f00000000c0)) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000100)={{0x3}}) poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x3440}, {0xffffffffffffffff, 0x9222}, {0xffffffffffffffff, 0x4020}, {0xffffffffffffffff, 0x1}], 0x4, 0x99) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) 11:31:01 executing program 5: syz_emit_ethernet(0x72, &(0x7f0000000040)=ANY=[@ANYRES64], 0x0) (async) syz_emit_ethernet(0xac, &(0x7f0000000080)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}, @broadcast, @void, {@ipv4={0x800, @icmp={{0x1e, 0x4, 0x3, 0x35, 0x9e, 0x66, 0x0, 0x4b, 0x1, 0x0, @multicast1, @multicast1, {[@end, @lsrr={0x83, 0x7, 0xb4, [@multicast1]}, @cipso={0x86, 0x5c, 0x2, [{0x0, 0x9, "e1dc1cd2e28f74"}, {0x0, 0xd, "2168f0a561087cd366cfa1"}, {0x6, 0xf, "4dcc3acc75ab3ada6048644835"}, {0x2, 0xf, "4409b082e04546a3430534db9f"}, {0x6, 0x7, "72b1fc12a9"}, {0xecca571038cf5474, 0x6, "8eaa5054"}, {0x5, 0x11, "5446cd1a89f388cb411d652c16b71a"}, {0x1, 0x4, "29a5"}]}]}}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x6, 0x4, 0x1, 0x10, 0x20, 0x65, 0x1, 0x8, 0x16, 0x3ff, @empty, @broadcast, {[@ra={0x94, 0x4}]}}, "0f7e4fda41e1"}}}}}, &(0x7f0000000000)={0x1, 0x1, [0x4d1, 0x6cd, 0xf92, 0xb6]}) 11:31:01 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) poll(&(0x7f0000000080)=[{r0, 0x3440}, {r0, 0x9222}, {r0, 0x4020}, {r0, 0x1}], 0x4, 0x99) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 11:31:01 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCGRS485(r0, 0x542e, &(0x7f00000000c0)) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) readv(r1, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/12, 0x8}], 0x1) ioctl$SNDRV_TIMER_IOCTL_TREAD(r1, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x3, 0x0, 0x0, 0x0, 0x10000}}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) (async) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000002100)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b26]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ppoll(&(0x7f0000000180)=[{r4, 0x9022}, {r0, 0x10}, {r1, 0xb042}, {r5, 0x4001}, {r1, 0x1}], 0x5, &(0x7f00000001c0), &(0x7f0000000200)={[0x2]}, 0x8) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000440)={0x0, 0x60000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) 11:31:01 executing program 5: dup(0xffffffffffffffff) syz_emit_ethernet(0x72, &(0x7f00000001c0)=ANY=[@ANYBLOB="0180c20000000180c200000086dd60f4d857003c3a0000000000000000000000ff000000000000000101009078000000006047e39300008800fe8000000000000000000000013da468344a1af97a4754334f00"/92], 0x0) 11:31:01 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) poll(&(0x7f0000000080)=[{r0, 0x3440}, {r0, 0x9222}, {r0, 0x4020}, {r0, 0x1}], 0x4, 0x99) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 11:31:01 executing program 5: dup(0xffffffffffffffff) syz_emit_ethernet(0x72, &(0x7f00000001c0)=ANY=[@ANYBLOB="0180c20000000180c200000086dd60f4d857003c3a0000000000000000000000ff000000000000000101009078000000006047e39300008800fe8000000000000000000000013da468344a1af97a4754334f00"/92], 0x0) dup(0xffffffffffffffff) (async) syz_emit_ethernet(0x72, &(0x7f00000001c0)=ANY=[@ANYBLOB="0180c20000000180c200000086dd60f4d857003c3a0000000000000000000000ff000000000000000101009078000000006047e39300008800fe8000000000000000000000013da468344a1af97a4754334f00"/92], 0x0) (async) 11:31:01 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) (async) r1 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000000)={0xffff, 0x8000, 0x9, 0x1, 0x4}, 0x14) (async) ioctl$sock_inet_SIOCDELRT(r0, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) 11:31:01 executing program 1: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r0, 0x8010500d, 0xffffffffffffffff) ioctl$SOUND_PCM_READ_CHANNELS(r0, 0x80045006, &(0x7f00000000c0)) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000100)={{0x3}}) poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x3440}, {0xffffffffffffffff, 0x9222}, {0xffffffffffffffff, 0x4020}, {0xffffffffffffffff, 0x1}], 0x4, 0x99) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) 11:31:01 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/12, 0x8}], 0x1) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) r1 = openat$incfs(0xffffffffffffffff, &(0x7f0000000080)='.pending_reads\x00', 0x1, 0x1c) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 11:31:02 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$mouse(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000280), 0x0) creat(&(0x7f0000000080)='./file0\x00', 0xe1) r5 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES64=r2], 0x14}}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x47) write(r2, &(0x7f0000000000)="0553ad72e4a6bd03194e1b125e9cd0a9416df02e0e025410a7248d6813e4fe7b19c1bd5338e3ee9966b568b82c48", 0x97d08) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 11:31:02 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) poll(&(0x7f0000000080)=[{r0, 0x3440}, {r0, 0x9222}, {r0, 0x4020}, {r0, 0x1}], 0x4, 0x99) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 11:31:02 executing program 5: dup(0xffffffffffffffff) (async, rerun: 32) syz_emit_ethernet(0x72, &(0x7f00000001c0)=ANY=[@ANYBLOB="0180c20000000180c200000086dd60f4d857003c3a0000000000000000000000ff000000000000000101009078000000006047e39300008800fe8000000000000000000000013da468344a1af97a4754334f00"/92], 0x0) (rerun: 32) 11:31:02 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/12, 0x8}], 0x1) (async) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) (async, rerun: 32) r1 = openat$incfs(0xffffffffffffffff, &(0x7f0000000080)='.pending_reads\x00', 0x1, 0x1c) (rerun: 32) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 11:31:02 executing program 5: syz_emit_ethernet(0x72, &(0x7f00000001c0)={@link_local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4d857", 0x3c, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "47e393", 0x0, 0x88, 0x0, @remote, @mcast1, [], "3da468344a1af97a4754334f"}}}}}}}, 0x0) syz_emit_ethernet(0xe2, &(0x7f0000000240)={@random="5a005b2f915a", @random="e5166dba7d9f", @val={@val={0x9100, 0x6, 0x0, 0x2}, {0x8100, 0x2, 0x1, 0x1}}, {@ipv4={0x800, @dccp={{0x25, 0x4, 0x3, 0x1e, 0xcc, 0x64, 0x0, 0x9, 0x21, 0x0, @remote, @local, {[@ssrr={0x89, 0x1b, 0x85, [@empty, @multicast1, @dev={0xac, 0x14, 0x14, 0x1c}, @multicast2, @multicast2, @multicast1]}, @cipso={0x86, 0x63, 0x3, [{0x2, 0x7, "a0bc2fba0d"}, {0x0, 0x12, "9c7914a0cb3a3bcf9def06d0fe91b176"}, {0x6, 0xa, "d6123895d078ee93"}, {0x7, 0x11, "c8574e0a3f5f23ebdf9c74c71959cb"}, {0x0, 0x2}, {0x0, 0xa, "31cb365cadf29627"}, {0x0, 0x6, "79408652"}, {0x7, 0x8, "96d8e4536ad2"}, {0x6, 0x3, 'T'}, {0x2, 0xc, "d551283aed8611fe9d79"}]}]}}, {{0x4e20, 0x4e22, 0x4, 0x1, 0xa, 0x0, 0x0, 0x5, 0x1, "f7a31b", 0x80, "f34984"}, "86b5a988ee62586daaf2d2c3ea37ed563a377a4af695ad594d484add883ef2e76c096ce65881805e"}}}}}, &(0x7f0000000040)={0x0, 0x3, [0xdc6, 0xf60, 0xcc2, 0x8fb]}) syz_emit_ethernet(0x152, &(0x7f0000000340)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @val={@val={0x9100, 0x6, 0x0, 0x3}, {0x8100, 0x1, 0x0, 0x1}}, {@ipv4={0x800, @icmp={{0x3e, 0x4, 0x1, 0x3, 0x13c, 0x66, 0x0, 0x6, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x1d}, @private=0xa010100, {[@timestamp_addr={0x44, 0x14, 0xbd, 0x1, 0x0, [{@local, 0x80000001}, {@private=0xa010100, 0x6}]}, @timestamp_addr={0x44, 0x34, 0x18, 0x1, 0x2, [{@broadcast, 0x401}, {@empty, 0x3}, {@remote, 0x6}, {@multicast1, 0x400}, {@local, 0x200}, {@rand_addr=0x64010102, 0xffffffff}]}, @cipso={0x86, 0x64, 0x3, [{0x5, 0x5, '+@I'}, {0x1, 0xf, "3587e6bd9b3651b4d4888882bf"}, {0x4, 0x11, "375f4ccd055cf7d9287603d58c342f"}, {0x6, 0xe, "7561f19ad6b480f85c86b6c0"}, {0x7, 0x7, "78616e5cf4"}, {0x0, 0x12, "f5ae4662f603347f3de23db812543694"}, {0x7, 0x6, "cd3abefc"}, {0x5, 0xc, "aa215a3785b42a81ac0d"}]}, @timestamp={0x44, 0x10, 0x7a, 0x0, 0xc, [0x20, 0x4, 0x712]}, @timestamp={0x44, 0x28, 0xdb, 0x0, 0xb, [0x5, 0xa00000, 0x2, 0x401, 0x3ea, 0x3f, 0x9, 0x100020, 0x4]}]}}, @redirect={0x5, 0x0, 0x0, @local, {0xe, 0x4, 0x1, 0x1, 0x8000, 0x68, 0x101, 0x1, 0x0, 0x6, @multicast1, @local, {[@timestamp_prespec={0x44, 0x24, 0xc6, 0x3, 0x7, [{@broadcast}, {@empty, 0x7fffffff}, {@remote, 0x1}, {@multicast1, 0x375e}]}]}}, "51f035b1"}}}}}, &(0x7f0000000000)={0x1, 0x4, [0x10001, 0x2b4, 0x45a, 0x437]}) 11:31:02 executing program 1: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r0, 0x8010500d, 0xffffffffffffffff) ioctl$SOUND_PCM_READ_CHANNELS(r0, 0x80045006, &(0x7f00000000c0)) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000100)={{0x3}}) poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x3440}, {0xffffffffffffffff, 0x9222}, {0xffffffffffffffff, 0x4020}, {0xffffffffffffffff, 0x1}], 0x4, 0x99) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) 11:31:02 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/12, 0x8}], 0x1) (async) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) (async) r1 = openat$incfs(0xffffffffffffffff, &(0x7f0000000080)='.pending_reads\x00', 0x1, 0x1c) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 11:31:02 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) poll(&(0x7f0000000080)=[{r0, 0x3440}, {r0, 0x9222}, {r0, 0x4020}, {r0, 0x1}], 0x4, 0x99) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 11:31:02 executing program 5: syz_emit_ethernet(0x72, &(0x7f00000001c0)={@link_local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4d857", 0x3c, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "47e393", 0x0, 0x88, 0x0, @remote, @mcast1, [], "3da468344a1af97a4754334f"}}}}}}}, 0x0) (async) syz_emit_ethernet(0xe2, &(0x7f0000000240)={@random="5a005b2f915a", @random="e5166dba7d9f", @val={@val={0x9100, 0x6, 0x0, 0x2}, {0x8100, 0x2, 0x1, 0x1}}, {@ipv4={0x800, @dccp={{0x25, 0x4, 0x3, 0x1e, 0xcc, 0x64, 0x0, 0x9, 0x21, 0x0, @remote, @local, {[@ssrr={0x89, 0x1b, 0x85, [@empty, @multicast1, @dev={0xac, 0x14, 0x14, 0x1c}, @multicast2, @multicast2, @multicast1]}, @cipso={0x86, 0x63, 0x3, [{0x2, 0x7, "a0bc2fba0d"}, {0x0, 0x12, "9c7914a0cb3a3bcf9def06d0fe91b176"}, {0x6, 0xa, "d6123895d078ee93"}, {0x7, 0x11, "c8574e0a3f5f23ebdf9c74c71959cb"}, {0x0, 0x2}, {0x0, 0xa, "31cb365cadf29627"}, {0x0, 0x6, "79408652"}, {0x7, 0x8, "96d8e4536ad2"}, {0x6, 0x3, 'T'}, {0x2, 0xc, "d551283aed8611fe9d79"}]}]}}, {{0x4e20, 0x4e22, 0x4, 0x1, 0xa, 0x0, 0x0, 0x5, 0x1, "f7a31b", 0x80, "f34984"}, "86b5a988ee62586daaf2d2c3ea37ed563a377a4af695ad594d484add883ef2e76c096ce65881805e"}}}}}, &(0x7f0000000040)={0x0, 0x3, [0xdc6, 0xf60, 0xcc2, 0x8fb]}) (async, rerun: 32) syz_emit_ethernet(0x152, &(0x7f0000000340)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @val={@val={0x9100, 0x6, 0x0, 0x3}, {0x8100, 0x1, 0x0, 0x1}}, {@ipv4={0x800, @icmp={{0x3e, 0x4, 0x1, 0x3, 0x13c, 0x66, 0x0, 0x6, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x1d}, @private=0xa010100, {[@timestamp_addr={0x44, 0x14, 0xbd, 0x1, 0x0, [{@local, 0x80000001}, {@private=0xa010100, 0x6}]}, @timestamp_addr={0x44, 0x34, 0x18, 0x1, 0x2, [{@broadcast, 0x401}, {@empty, 0x3}, {@remote, 0x6}, {@multicast1, 0x400}, {@local, 0x200}, {@rand_addr=0x64010102, 0xffffffff}]}, @cipso={0x86, 0x64, 0x3, [{0x5, 0x5, '+@I'}, {0x1, 0xf, "3587e6bd9b3651b4d4888882bf"}, {0x4, 0x11, "375f4ccd055cf7d9287603d58c342f"}, {0x6, 0xe, "7561f19ad6b480f85c86b6c0"}, {0x7, 0x7, "78616e5cf4"}, {0x0, 0x12, "f5ae4662f603347f3de23db812543694"}, {0x7, 0x6, "cd3abefc"}, {0x5, 0xc, "aa215a3785b42a81ac0d"}]}, @timestamp={0x44, 0x10, 0x7a, 0x0, 0xc, [0x20, 0x4, 0x712]}, @timestamp={0x44, 0x28, 0xdb, 0x0, 0xb, [0x5, 0xa00000, 0x2, 0x401, 0x3ea, 0x3f, 0x9, 0x100020, 0x4]}]}}, @redirect={0x5, 0x0, 0x0, @local, {0xe, 0x4, 0x1, 0x1, 0x8000, 0x68, 0x101, 0x1, 0x0, 0x6, @multicast1, @local, {[@timestamp_prespec={0x44, 0x24, 0xc6, 0x3, 0x7, [{@broadcast}, {@empty, 0x7fffffff}, {@remote, 0x1}, {@multicast1, 0x375e}]}]}}, "51f035b1"}}}}}, &(0x7f0000000000)={0x1, 0x4, [0x10001, 0x2b4, 0x45a, 0x437]}) (rerun: 32) 11:31:02 executing program 2: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8, 0x800}}, './file0/file0\x00'}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f00000025c0)) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000000)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}]}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x238202, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xee3d3eea05b21947}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0x18, 0x7ff, @udp='udp:syz2\x00'}}}, ["", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x24002000}, 0x24008010) ioctl$sock_inet_SIOCDELRT(r3, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e24, @multicast1}, {0x2, 0x0, @broadcast}}) 11:31:02 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f00000000c0)=0x2) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/12, 0x8}], 0x1) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) r1 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000100)={{0x3, 0x0, 0x200000, 0x0, 0xffffffff}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f00000025c0)) ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f0000000000)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x3, 0x7}, {0x0, 0xfffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x9}, {0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x4000000000}]}) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r4, 0x8010661b, &(0x7f0000000080)) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0xf503, 0x0) 11:31:02 executing program 5: syz_emit_ethernet(0x72, &(0x7f00000001c0)={@link_local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4d857", 0x3c, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "47e393", 0x0, 0x88, 0x0, @remote, @mcast1, [], "3da468344a1af97a4754334f"}}}}}}}, 0x0) (async) syz_emit_ethernet(0xe2, &(0x7f0000000240)={@random="5a005b2f915a", @random="e5166dba7d9f", @val={@val={0x9100, 0x6, 0x0, 0x2}, {0x8100, 0x2, 0x1, 0x1}}, {@ipv4={0x800, @dccp={{0x25, 0x4, 0x3, 0x1e, 0xcc, 0x64, 0x0, 0x9, 0x21, 0x0, @remote, @local, {[@ssrr={0x89, 0x1b, 0x85, [@empty, @multicast1, @dev={0xac, 0x14, 0x14, 0x1c}, @multicast2, @multicast2, @multicast1]}, @cipso={0x86, 0x63, 0x3, [{0x2, 0x7, "a0bc2fba0d"}, {0x0, 0x12, "9c7914a0cb3a3bcf9def06d0fe91b176"}, {0x6, 0xa, "d6123895d078ee93"}, {0x7, 0x11, "c8574e0a3f5f23ebdf9c74c71959cb"}, {0x0, 0x2}, {0x0, 0xa, "31cb365cadf29627"}, {0x0, 0x6, "79408652"}, {0x7, 0x8, "96d8e4536ad2"}, {0x6, 0x3, 'T'}, {0x2, 0xc, "d551283aed8611fe9d79"}]}]}}, {{0x4e20, 0x4e22, 0x4, 0x1, 0xa, 0x0, 0x0, 0x5, 0x1, "f7a31b", 0x80, "f34984"}, "86b5a988ee62586daaf2d2c3ea37ed563a377a4af695ad594d484add883ef2e76c096ce65881805e"}}}}}, &(0x7f0000000040)={0x0, 0x3, [0xdc6, 0xf60, 0xcc2, 0x8fb]}) syz_emit_ethernet(0x152, &(0x7f0000000340)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @val={@val={0x9100, 0x6, 0x0, 0x3}, {0x8100, 0x1, 0x0, 0x1}}, {@ipv4={0x800, @icmp={{0x3e, 0x4, 0x1, 0x3, 0x13c, 0x66, 0x0, 0x6, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x1d}, @private=0xa010100, {[@timestamp_addr={0x44, 0x14, 0xbd, 0x1, 0x0, [{@local, 0x80000001}, {@private=0xa010100, 0x6}]}, @timestamp_addr={0x44, 0x34, 0x18, 0x1, 0x2, [{@broadcast, 0x401}, {@empty, 0x3}, {@remote, 0x6}, {@multicast1, 0x400}, {@local, 0x200}, {@rand_addr=0x64010102, 0xffffffff}]}, @cipso={0x86, 0x64, 0x3, [{0x5, 0x5, '+@I'}, {0x1, 0xf, "3587e6bd9b3651b4d4888882bf"}, {0x4, 0x11, "375f4ccd055cf7d9287603d58c342f"}, {0x6, 0xe, "7561f19ad6b480f85c86b6c0"}, {0x7, 0x7, "78616e5cf4"}, {0x0, 0x12, "f5ae4662f603347f3de23db812543694"}, {0x7, 0x6, "cd3abefc"}, {0x5, 0xc, "aa215a3785b42a81ac0d"}]}, @timestamp={0x44, 0x10, 0x7a, 0x0, 0xc, [0x20, 0x4, 0x712]}, @timestamp={0x44, 0x28, 0xdb, 0x0, 0xb, [0x5, 0xa00000, 0x2, 0x401, 0x3ea, 0x3f, 0x9, 0x100020, 0x4]}]}}, @redirect={0x5, 0x0, 0x0, @local, {0xe, 0x4, 0x1, 0x1, 0x8000, 0x68, 0x101, 0x1, 0x0, 0x6, @multicast1, @local, {[@timestamp_prespec={0x44, 0x24, 0xc6, 0x3, 0x7, [{@broadcast}, {@empty, 0x7fffffff}, {@remote, 0x1}, {@multicast1, 0x375e}]}]}}, "51f035b1"}}}}}, &(0x7f0000000000)={0x1, 0x4, [0x10001, 0x2b4, 0x45a, 0x437]}) 11:31:03 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$mouse(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000280), 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r5 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES64=r2], 0x14}}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x47) write(r2, &(0x7f0000000000)="0553ad72e4a6bd03194e1b125e9cd0a9416df02e0e025410a7248d6813e4fe7b19c1bd5338e3ee9966b568b82c48", 0x97d08) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 11:31:03 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) poll(&(0x7f0000000080)=[{r0, 0x3440}, {r0, 0x9222}, {r0, 0x4020}, {r0, 0x1}], 0x4, 0x99) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 11:31:03 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$mouse(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f00000000c0)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000280), 0x0) creat(&(0x7f0000000080)='./file0\x00', 0xe1) r4 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES64=r2], 0x14}}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x47) write(r2, &(0x7f0000000000)="0553ad72e4a6bd03194e1b125e9cd0a9416df02e0e025410a7248d6813e4fe7b19c1bd5338e3ee9966b568b82c48", 0x97d08) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 11:31:03 executing program 5: syz_emit_ethernet(0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c20000000180c200000086dd60f4d857003c3a000000000000000000004c831dcb000001ff02000000000000000000000000000101009078000000006047e39300008800fe8000000000000000000000000000bbff0100000000000000000000000000013da468344a1af97a4754334fa696fe7025110c64f096a7012af811c966356259e154ea40707db214f966325f19fa0850e681b4ec3f8eb58af12f976d6fa6d8880856b6fd1a15ae5d4c845abe69466faf81458e11e77d6643fc7731cae0af6fc96e4d2a22476aaaeef0"], 0x0) 11:31:03 executing program 2: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8, 0x800}}, './file0/file0\x00'}) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f00000025c0)) (async) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000000)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}]}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x238202, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xee3d3eea05b21947}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0x18, 0x7ff, @udp='udp:syz2\x00'}}}, ["", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x24002000}, 0x24008010) (async) ioctl$sock_inet_SIOCDELRT(r3, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e24, @multicast1}, {0x2, 0x0, @broadcast}}) 11:31:03 executing program 5: syz_emit_ethernet(0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c20000000180c200000086dd60f4d857003c3a000000000000000000004c831dcb000001ff02000000000000000000000000000101009078000000006047e39300008800fe8000000000000000000000000000bbff0100000000000000000000000000013da468344a1af97a4754334fa696fe7025110c64f096a7012af811c966356259e154ea40707db214f966325f19fa0850e681b4ec3f8eb58af12f976d6fa6d8880856b6fd1a15ae5d4c845abe69466faf81458e11e77d6643fc7731cae0af6fc96e4d2a22476aaaeef0"], 0x0) 11:31:03 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) poll(&(0x7f0000000080)=[{r0, 0x3440}, {r0, 0x9222}, {r0, 0x4020}, {r0, 0x1}], 0x4, 0x99) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 11:31:03 executing program 5: syz_emit_ethernet(0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c20000000180c200000086dd60f4d857003c3a000000000000000000004c831dcb000001ff02000000000000000000000000000101009078000000006047e39300008800fe8000000000000000000000000000bbff0100000000000000000000000000013da468344a1af97a4754334fa696fe7025110c64f096a7012af811c966356259e154ea40707db214f966325f19fa0850e681b4ec3f8eb58af12f976d6fa6d8880856b6fd1a15ae5d4c845abe69466faf81458e11e77d6643fc7731cae0af6fc96e4d2a22476aaaeef0"], 0x0) 11:31:03 executing program 5: syz_emit_ethernet(0x72, &(0x7f00000001c0)={@link_local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4d857", 0x3c, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "47e393", 0x0, 0x88, 0x0, @remote, @mcast1, [], "3da468344a1af97a4754334f"}}}}}}}, 0x0) syz_emit_ethernet(0xfb, &(0x7f0000000000)={@local, @remote, @void, {@llc_tr={0x11, {@snap={0x1, 0xaa, '&', "6f56ba", 0x888e, "8273e6f381c07aa6281a6a6bf3242ff04389cb51c38be847db09af1ae1c84124dee2be630d66b9d0c0638ec1262c456d415fadd2b1338408d80eb7075cf232c84e64c53f9c1dc6d790bdf8613658f8d0a66bf7565ecac145fc96b01c27cc57224657b54c86176869983fbed9c2ed0add5d1858b6a687ab772e7d379fc3bd1ece1e08879946d99104c1774c68b848b00dc6584adaba4fb1deba525da1d030d2280e605dff541a00f2ce7c47c8de27c4a6e3de6e80730824f0bc17b48a477bdffaf9d4e25759a2a0c5969ba7e7ef0a0139a67adb3835191707f558a6ec7919f8d8e0fc45ac94"}}}}}, &(0x7f0000000100)={0x0, 0x4, [0x5, 0x93d, 0x94, 0x98e]}) syz_emit_ethernet(0x5a, &(0x7f0000000140)={@multicast, @local, @val={@void, {0x8100, 0x7}}, {@canfd={0xd, {{0x2, 0x1, 0x1, 0x1}, 0xd, 0x1, 0x0, 0x0, "4a90266d8f7f95864a3d79f4be1ecf50f94ff8520c02660e0057ff91616b6fbab8832ea17467e534f877e1280b99e0f149c0bb9895d86fd837acb3c5d1f9d0d8"}}}}, 0x0) 11:31:03 executing program 2: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8, 0x800}}, './file0/file0\x00'}) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f00000025c0)) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000000)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}]}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r2) (async) r3 = socket$inet_tcp(0x2, 0x1, 0x0) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x238202, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xee3d3eea05b21947}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0x18, 0x7ff, @udp='udp:syz2\x00'}}}, ["", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x24002000}, 0x24008010) (async) ioctl$sock_inet_SIOCDELRT(r3, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e24, @multicast1}, {0x2, 0x0, @broadcast}}) 11:31:03 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) poll(&(0x7f0000000080)=[{r0, 0x3440}, {r0, 0x9222}, {r0, 0x4020}, {r0, 0x1}], 0x4, 0x99) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 11:31:03 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) (async) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f00000000c0)=0x2) (async) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/12, 0x8}], 0x1) (async) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) (async) r1 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000100)={{0x3, 0x0, 0x200000, 0x0, 0xffffffff}}) (async) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f00000025c0)) (async) ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f0000000000)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x3, 0x7}, {0x0, 0xfffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x9}, {0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x4000000000}]}) (async) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r4, 0x8010661b, &(0x7f0000000080)) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0xf503, 0x0) 11:31:04 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$mouse(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000280), 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r5 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES64=r2], 0x14}}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x47) write(r2, &(0x7f0000000000)="0553ad72e4a6bd03194e1b125e9cd0a9416df02e0e025410a7248d6813e4fe7b19c1bd5338e3ee9966b568b82c48", 0x97d08) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 11:31:04 executing program 5: syz_emit_ethernet(0x72, &(0x7f00000001c0)={@link_local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4d857", 0x3c, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "47e393", 0x0, 0x88, 0x0, @remote, @mcast1, [], "3da468344a1af97a4754334f"}}}}}}}, 0x0) syz_emit_ethernet(0xfb, &(0x7f0000000000)={@local, @remote, @void, {@llc_tr={0x11, {@snap={0x1, 0xaa, '&', "6f56ba", 0x888e, "8273e6f381c07aa6281a6a6bf3242ff04389cb51c38be847db09af1ae1c84124dee2be630d66b9d0c0638ec1262c456d415fadd2b1338408d80eb7075cf232c84e64c53f9c1dc6d790bdf8613658f8d0a66bf7565ecac145fc96b01c27cc57224657b54c86176869983fbed9c2ed0add5d1858b6a687ab772e7d379fc3bd1ece1e08879946d99104c1774c68b848b00dc6584adaba4fb1deba525da1d030d2280e605dff541a00f2ce7c47c8de27c4a6e3de6e80730824f0bc17b48a477bdffaf9d4e25759a2a0c5969ba7e7ef0a0139a67adb3835191707f558a6ec7919f8d8e0fc45ac94"}}}}}, &(0x7f0000000100)={0x0, 0x4, [0x5, 0x93d, 0x94, 0x98e]}) syz_emit_ethernet(0x5a, &(0x7f0000000140)={@multicast, @local, @val={@void, {0x8100, 0x7}}, {@canfd={0xd, {{0x2, 0x1, 0x1, 0x1}, 0xd, 0x1, 0x0, 0x0, "4a90266d8f7f95864a3d79f4be1ecf50f94ff8520c02660e0057ff91616b6fbab8832ea17467e534f877e1280b99e0f149c0bb9895d86fd837acb3c5d1f9d0d8"}}}}, 0x0) syz_emit_ethernet(0x72, &(0x7f00000001c0)={@link_local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4d857", 0x3c, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "47e393", 0x0, 0x88, 0x0, @remote, @mcast1, [], "3da468344a1af97a4754334f"}}}}}}}, 0x0) (async) syz_emit_ethernet(0xfb, &(0x7f0000000000)={@local, @remote, @void, {@llc_tr={0x11, {@snap={0x1, 0xaa, '&', "6f56ba", 0x888e, "8273e6f381c07aa6281a6a6bf3242ff04389cb51c38be847db09af1ae1c84124dee2be630d66b9d0c0638ec1262c456d415fadd2b1338408d80eb7075cf232c84e64c53f9c1dc6d790bdf8613658f8d0a66bf7565ecac145fc96b01c27cc57224657b54c86176869983fbed9c2ed0add5d1858b6a687ab772e7d379fc3bd1ece1e08879946d99104c1774c68b848b00dc6584adaba4fb1deba525da1d030d2280e605dff541a00f2ce7c47c8de27c4a6e3de6e80730824f0bc17b48a477bdffaf9d4e25759a2a0c5969ba7e7ef0a0139a67adb3835191707f558a6ec7919f8d8e0fc45ac94"}}}}}, &(0x7f0000000100)={0x0, 0x4, [0x5, 0x93d, 0x94, 0x98e]}) (async) syz_emit_ethernet(0x5a, &(0x7f0000000140)={@multicast, @local, @val={@void, {0x8100, 0x7}}, {@canfd={0xd, {{0x2, 0x1, 0x1, 0x1}, 0xd, 0x1, 0x0, 0x0, "4a90266d8f7f95864a3d79f4be1ecf50f94ff8520c02660e0057ff91616b6fbab8832ea17467e534f877e1280b99e0f149c0bb9895d86fd837acb3c5d1f9d0d8"}}}}, 0x0) (async) 11:31:04 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$mouse(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000280), 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r5 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES64=r2], 0x14}}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x47) write(r2, &(0x7f0000000000)="0553ad72e4a6bd03194e1b125e9cd0a9416df02e0e025410a7248d6813e4fe7b19c1bd5338e3ee9966b568b82c48", 0x97d08) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 11:31:04 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x800, @broadcast}, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000001c0)=@raw={'raw\x00', 0x9, 0x3, 0x220, 0x90, 0xffffffff, 0xffffffff, 0x90, 0xffffffff, 0x188, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0x3, &(0x7f0000000000), {[{{@ip={@empty, @local, 0xff000000, 0xffffffff, 'gre0\x00', 'geneve1\x00', {0xff}, {0xff}, 0x33, 0x1, 0x5e}, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @local, 0x1, 0x4, [0x17, 0x34, 0x2a, 0x8, 0x6, 0x2a, 0xb, 0x34, 0x2c, 0x29, 0x3f, 0xa, 0x34, 0x2, 0x38, 0x40], 0x1, 0x1ff, 0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x280) 11:31:04 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) poll(&(0x7f0000000080)=[{r0, 0x3440}, {r0, 0x9222}, {r0, 0x4020}, {r0, 0x1}], 0x4, 0x99) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 11:31:04 executing program 5: syz_emit_ethernet(0x72, &(0x7f00000001c0)={@link_local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4d857", 0x3c, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "47e393", 0x0, 0x88, 0x0, @remote, @mcast1, [], "3da468344a1af97a4754334f"}}}}}}}, 0x0) syz_emit_ethernet(0xfb, &(0x7f0000000000)={@local, @remote, @void, {@llc_tr={0x11, {@snap={0x1, 0xaa, '&', "6f56ba", 0x888e, "8273e6f381c07aa6281a6a6bf3242ff04389cb51c38be847db09af1ae1c84124dee2be630d66b9d0c0638ec1262c456d415fadd2b1338408d80eb7075cf232c84e64c53f9c1dc6d790bdf8613658f8d0a66bf7565ecac145fc96b01c27cc57224657b54c86176869983fbed9c2ed0add5d1858b6a687ab772e7d379fc3bd1ece1e08879946d99104c1774c68b848b00dc6584adaba4fb1deba525da1d030d2280e605dff541a00f2ce7c47c8de27c4a6e3de6e80730824f0bc17b48a477bdffaf9d4e25759a2a0c5969ba7e7ef0a0139a67adb3835191707f558a6ec7919f8d8e0fc45ac94"}}}}}, &(0x7f0000000100)={0x0, 0x4, [0x5, 0x93d, 0x94, 0x98e]}) syz_emit_ethernet(0x5a, &(0x7f0000000140)={@multicast, @local, @val={@void, {0x8100, 0x7}}, {@canfd={0xd, {{0x2, 0x1, 0x1, 0x1}, 0xd, 0x1, 0x0, 0x0, "4a90266d8f7f95864a3d79f4be1ecf50f94ff8520c02660e0057ff91616b6fbab8832ea17467e534f877e1280b99e0f149c0bb9895d86fd837acb3c5d1f9d0d8"}}}}, 0x0) syz_emit_ethernet(0x72, &(0x7f00000001c0)={@link_local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4d857", 0x3c, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "47e393", 0x0, 0x88, 0x0, @remote, @mcast1, [], "3da468344a1af97a4754334f"}}}}}}}, 0x0) (async) syz_emit_ethernet(0xfb, &(0x7f0000000000)={@local, @remote, @void, {@llc_tr={0x11, {@snap={0x1, 0xaa, '&', "6f56ba", 0x888e, "8273e6f381c07aa6281a6a6bf3242ff04389cb51c38be847db09af1ae1c84124dee2be630d66b9d0c0638ec1262c456d415fadd2b1338408d80eb7075cf232c84e64c53f9c1dc6d790bdf8613658f8d0a66bf7565ecac145fc96b01c27cc57224657b54c86176869983fbed9c2ed0add5d1858b6a687ab772e7d379fc3bd1ece1e08879946d99104c1774c68b848b00dc6584adaba4fb1deba525da1d030d2280e605dff541a00f2ce7c47c8de27c4a6e3de6e80730824f0bc17b48a477bdffaf9d4e25759a2a0c5969ba7e7ef0a0139a67adb3835191707f558a6ec7919f8d8e0fc45ac94"}}}}}, &(0x7f0000000100)={0x0, 0x4, [0x5, 0x93d, 0x94, 0x98e]}) (async) syz_emit_ethernet(0x5a, &(0x7f0000000140)={@multicast, @local, @val={@void, {0x8100, 0x7}}, {@canfd={0xd, {{0x2, 0x1, 0x1, 0x1}, 0xd, 0x1, 0x0, 0x0, "4a90266d8f7f95864a3d79f4be1ecf50f94ff8520c02660e0057ff91616b6fbab8832ea17467e534f877e1280b99e0f149c0bb9895d86fd837acb3c5d1f9d0d8"}}}}, 0x0) (async) 11:31:04 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x800, @broadcast}, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000001c0)=@raw={'raw\x00', 0x9, 0x3, 0x220, 0x90, 0xffffffff, 0xffffffff, 0x90, 0xffffffff, 0x188, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0x3, &(0x7f0000000000), {[{{@ip={@empty, @local, 0xff000000, 0xffffffff, 'gre0\x00', 'geneve1\x00', {0xff}, {0xff}, 0x33, 0x1, 0x5e}, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @local, 0x1, 0x4, [0x17, 0x34, 0x2a, 0x8, 0x6, 0x2a, 0xb, 0x34, 0x2c, 0x29, 0x3f, 0xa, 0x34, 0x2, 0x38, 0x40], 0x1, 0x1ff, 0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x280) socket$inet_tcp(0x2, 0x1, 0x0) (async) ioctl$sock_inet_SIOCDELRT(r0, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x800, @broadcast}, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) (async) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000001c0)=@raw={'raw\x00', 0x9, 0x3, 0x220, 0x90, 0xffffffff, 0xffffffff, 0x90, 0xffffffff, 0x188, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0x3, &(0x7f0000000000), {[{{@ip={@empty, @local, 0xff000000, 0xffffffff, 'gre0\x00', 'geneve1\x00', {0xff}, {0xff}, 0x33, 0x1, 0x5e}, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @local, 0x1, 0x4, [0x17, 0x34, 0x2a, 0x8, 0x6, 0x2a, 0xb, 0x34, 0x2c, 0x29, 0x3f, 0xa, 0x34, 0x2, 0x38, 0x40], 0x1, 0x1ff, 0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x280) (async) 11:31:04 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) (async) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f00000000c0)=0x2) (async) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) (async) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/12, 0x8}], 0x1) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) (async) r1 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000100)={{0x3, 0x0, 0x200000, 0x0, 0xffffffff}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f00000025c0)) (async) ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f0000000000)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x3, 0x7}, {0x0, 0xfffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x9}, {0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x4000000000}]}) (async) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r4, 0x8010661b, &(0x7f0000000080)) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0xf503, 0x0) [ 2845.829664][ T6261] x_tables: duplicate underflow at hook 3 11:31:04 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) poll(&(0x7f0000000080)=[{r0, 0x3440}, {r0, 0x9222}, {r0, 0x4020}, {r0, 0x1}], 0x4, 0x99) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) [ 2845.882516][ T6270] x_tables: duplicate underflow at hook 3 [ 2845.900721][ T6278] x_tables: duplicate underflow at hook 3 11:31:04 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/12, 0x8}], 0x1) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3, 0x0, 0x0, 0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 11:31:04 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x800, @broadcast}, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000001c0)=@raw={'raw\x00', 0x9, 0x3, 0x220, 0x90, 0xffffffff, 0xffffffff, 0x90, 0xffffffff, 0x188, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0x3, &(0x7f0000000000), {[{{@ip={@empty, @local, 0xff000000, 0xffffffff, 'gre0\x00', 'geneve1\x00', {0xff}, {0xff}, 0x33, 0x1, 0x5e}, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @local, 0x1, 0x4, [0x17, 0x34, 0x2a, 0x8, 0x6, 0x2a, 0xb, 0x34, 0x2c, 0x29, 0x3f, 0xa, 0x34, 0x2, 0x38, 0x40], 0x1, 0x1ff, 0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x280) 11:31:04 executing program 5: syz_emit_ethernet(0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000180c200000086dd60f40fabb8cb3a0000000000000000000000ff7f000001b2ed0004000000000000000000000001010090780000c27ae73ca2a003a40798a06f53f0368700056047e39300008800fe800000000000000000000000002b00bbff0100000000000000000000000000013da468344a1af97a475433"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000002100)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b26]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_emit_ethernet(0xc1, &(0x7f0000000240)=ANY=[@ANYRESOCT=r2], 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000002100)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b26]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000080)={[0x10001, 0x6, 0x4, 0x4, 0xfff, 0x3406, 0xb08, 0x200, 0x4, 0x1, 0x1, 0x0, 0xfffffffffffff086, 0x92, 0x4, 0x100000001], 0x5001, 0x200480}) [ 2846.070720][ T6286] x_tables: duplicate underflow at hook 3 11:31:05 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$mouse(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000280), 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r5 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES64=r2], 0x14}}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x47) write(r2, &(0x7f0000000000)="0553ad72e4a6bd03194e1b125e9cd0a9416df02e0e025410a7248d6813e4fe7b19c1bd5338e3ee9966b568b82c48", 0x97d08) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 11:31:05 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @multicast2}}) 11:31:05 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$mouse(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000280), 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r5 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES64=r2], 0x14}}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x47) write(r2, &(0x7f0000000000)="0553ad72e4a6bd03194e1b125e9cd0a9416df02e0e025410a7248d6813e4fe7b19c1bd5338e3ee9966b568b82c48", 0x97d08) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 11:31:05 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @multicast2}}) 11:31:05 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) poll(&(0x7f0000000080)=[{r0, 0x3440}, {r0, 0x9222}, {r0, 0x4020}, {r0, 0x1}], 0x4, 0x99) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 11:31:05 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/12, 0x8}], 0x1) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3, 0x0, 0x0, 0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/12, 0x8}], 0x1) (async) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3, 0x0, 0x0, 0x0, 0x1}}) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) (async) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) (async) 11:31:05 executing program 5: syz_emit_ethernet(0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000180c200000086dd60f40fabb8cb3a0000000000000000000000ff7f000001b2ed0004000000000000000000000001010090780000c27ae73ca2a003a40798a06f53f0368700056047e39300008800fe800000000000000000000000002b00bbff0100000000000000000000000000013da468344a1af97a475433"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000002100)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b26]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_emit_ethernet(0xc1, &(0x7f0000000240)=ANY=[@ANYRESOCT=r2], 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000002100)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b26]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000080)={[0x10001, 0x6, 0x4, 0x4, 0xfff, 0x3406, 0xb08, 0x200, 0x4, 0x1, 0x1, 0x0, 0xfffffffffffff086, 0x92, 0x4, 0x100000001], 0x5001, 0x200480}) syz_emit_ethernet(0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000180c200000086dd60f40fabb8cb3a0000000000000000000000ff7f000001b2ed0004000000000000000000000001010090780000c27ae73ca2a003a40798a06f53f0368700056047e39300008800fe800000000000000000000000002b00bbff0100000000000000000000000000013da468344a1af97a475433"], 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000002100)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b26]}) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) syz_emit_ethernet(0xc1, &(0x7f0000000240)=ANY=[@ANYRESOCT=r2], 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) (async) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000002100)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b26]}) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000080)={[0x10001, 0x6, 0x4, 0x4, 0xfff, 0x3406, 0xb08, 0x200, 0x4, 0x1, 0x1, 0x0, 0xfffffffffffff086, 0x92, 0x4, 0x100000001], 0x5001, 0x200480}) (async) 11:31:05 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @multicast2}}) 11:31:05 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/12, 0x8}], 0x1) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3, 0x0, 0x0, 0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) (async, rerun: 32) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) (rerun: 32) 11:31:05 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r1, 0x0, 0x2b, &(0x7f0000000040)="e6e0f4587476b4fc426b55f5dfc642fd2eab8150c3feffffff5dffffff4c7e82f0b486ba06878a801003000000e34f", 0x2f) ioctl$sock_inet_SIOCDELRT(r0, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) setsockopt$inet_tcp_int(r0, 0x6, 0x1, &(0x7f0000000000)=0x5, 0x4) 11:31:05 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) poll(&(0x7f0000000080)=[{r0, 0x3440}, {r0, 0x9222}, {r0, 0x4020}, {r0, 0x1}], 0x4, 0x99) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 11:31:05 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r1, 0x0, 0x2b, &(0x7f0000000040)="e6e0f4587476b4fc426b55f5dfc642fd2eab8150c3feffffff5dffffff4c7e82f0b486ba06878a801003000000e34f", 0x2f) (async) ioctl$sock_inet_SIOCDELRT(r0, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) (async) setsockopt$inet_tcp_int(r0, 0x6, 0x1, &(0x7f0000000000)=0x5, 0x4) 11:31:06 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$mouse(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000280), 0x0) creat(&(0x7f0000000080)='./file0\x00', 0xe1) r5 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES64=r2], 0x14}}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x47) write(r2, &(0x7f0000000000)="0553ad72e4a6bd03194e1b125e9cd0a9416df02e0e025410a7248d6813e4fe7b19c1bd5338e3ee9966b568b82c48", 0x97d08) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 11:31:06 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/12, 0x8}], 0x1) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 11:31:06 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) poll(&(0x7f0000000080)=[{r0, 0x3440}, {r0, 0x9222}, {r0, 0x4020}, {r0, 0x1}], 0x4, 0x99) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 11:31:06 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r1, 0x0, 0x2b, &(0x7f0000000040)="e6e0f4587476b4fc426b55f5dfc642fd2eab8150c3feffffff5dffffff4c7e82f0b486ba06878a801003000000e34f", 0x2f) (async) ioctl$sock_inet_SIOCDELRT(r0, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) setsockopt$inet_tcp_int(r0, 0x6, 0x1, &(0x7f0000000000)=0x5, 0x4) 11:31:06 executing program 5: syz_emit_ethernet(0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000180c200000086dd60f40fabb8cb3a0000000000000000000000ff7f000001b2ed0004000000000000000000000001010090780000c27ae73ca2a003a40798a06f53f0368700056047e39300008800fe800000000000000000000000002b00bbff0100000000000000000000000000013da468344a1af97a475433"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000002100)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b26]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_emit_ethernet(0xc1, &(0x7f0000000240)=ANY=[@ANYRESOCT=r2], 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000002100)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b26]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000080)={[0x10001, 0x6, 0x4, 0x4, 0xfff, 0x3406, 0xb08, 0x200, 0x4, 0x1, 0x1, 0x0, 0xfffffffffffff086, 0x92, 0x4, 0x100000001], 0x5001, 0x200480}) syz_emit_ethernet(0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000180c200000086dd60f40fabb8cb3a0000000000000000000000ff7f000001b2ed0004000000000000000000000001010090780000c27ae73ca2a003a40798a06f53f0368700056047e39300008800fe800000000000000000000000002b00bbff0100000000000000000000000000013da468344a1af97a475433"], 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000002100)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b26]}) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) syz_emit_ethernet(0xc1, &(0x7f0000000240)=ANY=[@ANYRESOCT=r2], 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) (async) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000002100)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b26]}) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000080)={[0x10001, 0x6, 0x4, 0x4, 0xfff, 0x3406, 0xb08, 0x200, 0x4, 0x1, 0x1, 0x0, 0xfffffffffffff086, 0x92, 0x4, 0x100000001], 0x5001, 0x200480}) (async) 11:31:06 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$mouse(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000280), 0x0) creat(&(0x7f0000000080)='./file0\x00', 0xe1) r5 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES64=r2], 0x14}}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x47) write(r2, &(0x7f0000000000)="0553ad72e4a6bd03194e1b125e9cd0a9416df02e0e025410a7248d6813e4fe7b19c1bd5338e3ee9966b568b82c48", 0x97d08) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 11:31:06 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/12, 0x8}], 0x1) (async) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) (async) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 11:31:06 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/12, 0x8}], 0x1) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/12, 0x8}], 0x1) (async) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) (async) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) (async) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) (async) 11:31:06 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r3 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x3c, r2, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r3}]}, 0x3c}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x42000001}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, r2, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x1, 0x0}}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x808}, 0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000001c0)={0x0, 0x1, 0x9, 0x1}) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f00000005c0)={r4, 0x6, 0x0, [0x4, 0xf28, 0xffff, 0x2, 0x1], [0x7, 0x5, 0x5, 0x8d, 0x6, 0x2ce, 0x892, 0x7, 0x20, 0x9, 0x9, 0x4, 0x0, 0x2, 0x1, 0x9, 0x0, 0x5, 0x20, 0x7800000000000000, 0x2, 0x5, 0x1, 0x3, 0x6, 0xfffffffffffffeff, 0x80000000, 0x2, 0x40, 0x1, 0x213509c7, 0x56, 0x6, 0x8b7a, 0x8000000000000001, 0x0, 0x1, 0x1, 0x7f, 0x7f, 0x3f, 0x100000000, 0x9, 0x7, 0xe6, 0x0, 0x0, 0x4, 0x3, 0x3f, 0x1c1, 0x6, 0xa825, 0xaf, 0x66, 0x800, 0x200, 0x20, 0x5, 0xfffffffffffffe74, 0x6a, 0x7, 0x3, 0x4, 0x5, 0x9, 0x6a8, 0x4, 0x2, 0x4, 0x1, 0x9, 0x3f, 0x40, 0x80000001, 0x8, 0x79, 0x7, 0x6, 0x7fffffff, 0x3, 0x2, 0xac7, 0x98ee, 0x7fff, 0x8000000000000000, 0x3, 0x6, 0x100, 0x5, 0x101, 0x0, 0x1, 0xffffffff, 0x9, 0x8, 0x2, 0x7fffffff, 0x5, 0x92e, 0x1, 0x8000000000000001, 0x4, 0x0, 0x6, 0x1f, 0x7fffffff, 0x101, 0xb8f, 0x400, 0x40, 0x9, 0x1, 0x1, 0xfffffffffffffffc, 0xfffffffffffffbff, 0xa70, 0x4, 0xffff, 0x80, 0x8]}) 11:31:06 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) poll(&(0x7f0000000080)=[{r0, 0x3440}, {r0, 0x9222}, {r0, 0x4020}, {r0, 0x1}], 0x4, 0x99) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 11:31:06 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) (async) r3 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x3c, r2, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r3}]}, 0x3c}}, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x42000001}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, r2, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x1, 0x0}}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x808}, 0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000001c0)={0x0, 0x1, 0x9, 0x1}) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f00000005c0)={r4, 0x6, 0x0, [0x4, 0xf28, 0xffff, 0x2, 0x1], [0x7, 0x5, 0x5, 0x8d, 0x6, 0x2ce, 0x892, 0x7, 0x20, 0x9, 0x9, 0x4, 0x0, 0x2, 0x1, 0x9, 0x0, 0x5, 0x20, 0x7800000000000000, 0x2, 0x5, 0x1, 0x3, 0x6, 0xfffffffffffffeff, 0x80000000, 0x2, 0x40, 0x1, 0x213509c7, 0x56, 0x6, 0x8b7a, 0x8000000000000001, 0x0, 0x1, 0x1, 0x7f, 0x7f, 0x3f, 0x100000000, 0x9, 0x7, 0xe6, 0x0, 0x0, 0x4, 0x3, 0x3f, 0x1c1, 0x6, 0xa825, 0xaf, 0x66, 0x800, 0x200, 0x20, 0x5, 0xfffffffffffffe74, 0x6a, 0x7, 0x3, 0x4, 0x5, 0x9, 0x6a8, 0x4, 0x2, 0x4, 0x1, 0x9, 0x3f, 0x40, 0x80000001, 0x8, 0x79, 0x7, 0x6, 0x7fffffff, 0x3, 0x2, 0xac7, 0x98ee, 0x7fff, 0x8000000000000000, 0x3, 0x6, 0x100, 0x5, 0x101, 0x0, 0x1, 0xffffffff, 0x9, 0x8, 0x2, 0x7fffffff, 0x5, 0x92e, 0x1, 0x8000000000000001, 0x4, 0x0, 0x6, 0x1f, 0x7fffffff, 0x101, 0xb8f, 0x400, 0x40, 0x9, 0x1, 0x1, 0xfffffffffffffffc, 0xfffffffffffffbff, 0xa70, 0x4, 0xffff, 0x80, 0x8]}) 11:31:06 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/12, 0x8}], 0x1) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000080)) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) dup(r0) 11:31:07 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$mouse(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000280), 0x0) creat(&(0x7f0000000080)='./file0\x00', 0xe1) r5 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES64=r2], 0x14}}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x47) write(r2, &(0x7f0000000000)="0553ad72e4a6bd03194e1b125e9cd0a9416df02e0e025410a7248d6813e4fe7b19c1bd5338e3ee9966b568b82c48", 0x97d08) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 11:31:07 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r3 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x3c, r2, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r3}]}, 0x3c}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x42000001}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, r2, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x1, 0x0}}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x808}, 0x1) (async) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000001c0)={0x0, 0x1, 0x9, 0x1}) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f00000005c0)={r4, 0x6, 0x0, [0x4, 0xf28, 0xffff, 0x2, 0x1], [0x7, 0x5, 0x5, 0x8d, 0x6, 0x2ce, 0x892, 0x7, 0x20, 0x9, 0x9, 0x4, 0x0, 0x2, 0x1, 0x9, 0x0, 0x5, 0x20, 0x7800000000000000, 0x2, 0x5, 0x1, 0x3, 0x6, 0xfffffffffffffeff, 0x80000000, 0x2, 0x40, 0x1, 0x213509c7, 0x56, 0x6, 0x8b7a, 0x8000000000000001, 0x0, 0x1, 0x1, 0x7f, 0x7f, 0x3f, 0x100000000, 0x9, 0x7, 0xe6, 0x0, 0x0, 0x4, 0x3, 0x3f, 0x1c1, 0x6, 0xa825, 0xaf, 0x66, 0x800, 0x200, 0x20, 0x5, 0xfffffffffffffe74, 0x6a, 0x7, 0x3, 0x4, 0x5, 0x9, 0x6a8, 0x4, 0x2, 0x4, 0x1, 0x9, 0x3f, 0x40, 0x80000001, 0x8, 0x79, 0x7, 0x6, 0x7fffffff, 0x3, 0x2, 0xac7, 0x98ee, 0x7fff, 0x8000000000000000, 0x3, 0x6, 0x100, 0x5, 0x101, 0x0, 0x1, 0xffffffff, 0x9, 0x8, 0x2, 0x7fffffff, 0x5, 0x92e, 0x1, 0x8000000000000001, 0x4, 0x0, 0x6, 0x1f, 0x7fffffff, 0x101, 0xb8f, 0x400, 0x40, 0x9, 0x1, 0x1, 0xfffffffffffffffc, 0xfffffffffffffbff, 0xa70, 0x4, 0xffff, 0x80, 0x8]}) 11:31:07 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000100)={{0x3}}) poll(&(0x7f0000000080)=[{r0, 0x3440}, {r0, 0x9222}, {r0, 0x4020}, {r0, 0x1}], 0x4, 0x99) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 11:31:07 executing program 5: setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000080)=0x5421, 0x4) syz_emit_ethernet(0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c20000000180c200000086dd60f4d8969000000000000000000000000000ffff64010102ff02000000000000000000000000000101009078000000006047e3930000ff00fe8000000000000000000000000000bb0100000000000000000000000000013da468344a1af97a4754334f19ffb7dbcc1700"], 0x0) 11:31:07 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$mouse(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000280), 0x0) creat(&(0x7f0000000080)='./file0\x00', 0xe1) r5 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES64=r2], 0x14}}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x47) write(r2, &(0x7f0000000000)="0553ad72e4a6bd03194e1b125e9cd0a9416df02e0e025410a7248d6813e4fe7b19c1bd5338e3ee9966b568b82c48", 0x97d08) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 11:31:07 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @private=0xa010100}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}}) 11:31:07 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @private=0xa010100}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}}) 11:31:07 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/12, 0x8}], 0x1) (async) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000080)) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) (async) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) dup(r0) 11:31:07 executing program 5: setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000080)=0x5421, 0x4) (async) syz_emit_ethernet(0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c20000000180c200000086dd60f4d8969000000000000000000000000000ffff64010102ff02000000000000000000000000000101009078000000006047e3930000ff00fe8000000000000000000000000000bb0100000000000000000000000000013da468344a1af97a4754334f19ffb7dbcc1700"], 0x0) 11:31:07 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000100)={{0x3}}) poll(&(0x7f0000000080)=[{r0, 0x3440}, {r0, 0x9222}, {r0, 0x4020}, {r0, 0x1}], 0x4, 0x99) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 11:31:07 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @private=0xa010100}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}}) 11:31:07 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/12, 0x8}], 0x1) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000080)) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) (async) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) dup(r0) 11:31:08 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) r1 = dup2(0xffffffffffffffff, r0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000001c0)={{{@in6=@mcast1, @in6=@dev}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f00000000c0)=0xe8) 11:31:08 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$mouse(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000280), 0x0) creat(&(0x7f0000000080)='./file0\x00', 0xe1) r5 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES64=r2], 0x14}}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x47) write(r2, &(0x7f0000000000)="0553ad72e4a6bd03194e1b125e9cd0a9416df02e0e025410a7248d6813e4fe7b19c1bd5338e3ee9966b568b82c48", 0x97d08) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 11:31:08 executing program 5: setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000080)=0x5421, 0x4) syz_emit_ethernet(0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c20000000180c200000086dd60f4d8969000000000000000000000000000ffff64010102ff02000000000000000000000000000101009078000000006047e3930000ff00fe8000000000000000000000000000bb0100000000000000000000000000013da468344a1af97a4754334f19ffb7dbcc1700"], 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000080)=0x5421, 0x4) (async) syz_emit_ethernet(0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c20000000180c200000086dd60f4d8969000000000000000000000000000ffff64010102ff02000000000000000000000000000101009078000000006047e3930000ff00fe8000000000000000000000000000bb0100000000000000000000000000013da468344a1af97a4754334f19ffb7dbcc1700"], 0x0) (async) 11:31:08 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) fcntl$setpipe(r0, 0x407, 0x7fffffffffffffff) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/12, 0x8}], 0x1) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x41) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000000c0)={{0x3, 0x2, 0xfc3e, 0x0, 0xffffffff}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 11:31:08 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) (async) r1 = dup2(0xffffffffffffffff, r0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000001c0)={{{@in6=@mcast1, @in6=@dev}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f00000000c0)=0xe8) 11:31:08 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000100)={{0x3}}) poll(&(0x7f0000000080)=[{r0, 0x3440}, {r0, 0x9222}, {r0, 0x4020}, {r0, 0x1}], 0x4, 0x99) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 11:31:08 executing program 5: syz_emit_ethernet(0xc3, &(0x7f0000000000)={@link_local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4d857", 0x8d, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x9, 0x6, 0x100, 0x9, [{0x1f, 0xf, "120ebebf47ce3fe3278a78eba56689a2f2da6a343a0aeeb50cbbd8edf665e4671f863af4f73d212febe66b176a865b49e1dae4f6494168e712df5e4d7827d6df52a7f8488e53645a69cef648151af144b37d14b61a22a8670777d279876f3f73796cda31e2c31396b257bdda3fac04f1716f07da230f534d2dd770"}]}}}}}}, 0x0) 11:31:08 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$mouse(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000280), 0x0) creat(0x0, 0xe1) r5 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES64=r2], 0x14}}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x47) write(r2, &(0x7f0000000000)="0553ad72e4a6bd03194e1b125e9cd0a9416df02e0e025410a7248d6813e4fe7b19c1bd5338e3ee9966b568b82c48", 0x97d08) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 11:31:08 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) fcntl$setpipe(r0, 0x407, 0x7fffffffffffffff) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/12, 0x8}], 0x1) (async) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) (async) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x41) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000000c0)={{0x3, 0x2, 0xfc3e, 0x0, 0xffffffff}}) (async) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 11:31:08 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) fcntl$setpipe(r0, 0x407, 0x7fffffffffffffff) (async) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/12, 0x8}], 0x1) (async, rerun: 32) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) (async, rerun: 32) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) (async) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x41) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000000c0)={{0x3, 0x2, 0xfc3e, 0x0, 0xffffffff}}) (async) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 11:31:08 executing program 5: syz_emit_ethernet(0xc3, &(0x7f0000000000)={@link_local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4d857", 0x8d, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x9, 0x6, 0x100, 0x9, [{0x1f, 0xf, "120ebebf47ce3fe3278a78eba56689a2f2da6a343a0aeeb50cbbd8edf665e4671f863af4f73d212febe66b176a865b49e1dae4f6494168e712df5e4d7827d6df52a7f8488e53645a69cef648151af144b37d14b61a22a8670777d279876f3f73796cda31e2c31396b257bdda3fac04f1716f07da230f534d2dd770"}]}}}}}}, 0x0) 11:31:08 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) r1 = dup2(0xffffffffffffffff, r0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000001c0)={{{@in6=@mcast1, @in6=@dev}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f00000000c0)=0xe8) 11:31:09 executing program 5: syz_emit_ethernet(0xc3, &(0x7f0000000000)={@link_local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4d857", 0x8d, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x9, 0x6, 0x100, 0x9, [{0x1f, 0xf, "120ebebf47ce3fe3278a78eba56689a2f2da6a343a0aeeb50cbbd8edf665e4671f863af4f73d212febe66b176a865b49e1dae4f6494168e712df5e4d7827d6df52a7f8488e53645a69cef648151af144b37d14b61a22a8670777d279876f3f73796cda31e2c31396b257bdda3fac04f1716f07da230f534d2dd770"}]}}}}}}, 0x0) syz_emit_ethernet(0xc3, &(0x7f0000000000)={@link_local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4d857", 0x8d, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x9, 0x6, 0x100, 0x9, [{0x1f, 0xf, "120ebebf47ce3fe3278a78eba56689a2f2da6a343a0aeeb50cbbd8edf665e4671f863af4f73d212febe66b176a865b49e1dae4f6494168e712df5e4d7827d6df52a7f8488e53645a69cef648151af144b37d14b61a22a8670777d279876f3f73796cda31e2c31396b257bdda3fac04f1716f07da230f534d2dd770"}]}}}}}}, 0x0) (async) 11:31:09 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$mouse(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000280), 0x0) creat(&(0x7f0000000080)='./file0\x00', 0xe1) r5 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES64=r2], 0x14}}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x47) write(r2, &(0x7f0000000000)="0553ad72e4a6bd03194e1b125e9cd0a9416df02e0e025410a7248d6813e4fe7b19c1bd5338e3ee9966b568b82c48", 0x97d08) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 11:31:09 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = creat(&(0x7f0000000200)='./file0\x00', 0x11) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000240)={0x0, 0x1, 0x20, 0x3, 0x25}) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/12, 0x8}], 0x1) r2 = syz_io_uring_setup(0x3ede, &(0x7f00000000c0)={0x0, 0x3, 0x1}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000180)=[r3, r0, r0]}, 0x3) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) getsockopt$MISDN_TIME_STAMP(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 11:31:09 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, 0x0) poll(&(0x7f0000000080)=[{r0, 0x3440}, {r0, 0x9222}, {r0, 0x4020}, {r0, 0x1}], 0x4, 0x99) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 11:31:09 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @empty}, {0x2, 0x4e23, @multicast1}, {0x2, 0x0, @broadcast}}) 11:31:09 executing program 5: syz_emit_ethernet(0x72, &(0x7f0000000000)=ANY=[], 0x0) 11:31:09 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @empty}, {0x2, 0x4e23, @multicast1}, {0x2, 0x0, @broadcast}}) 11:31:09 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/12, 0x8}], 0x1) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3, 0x0, 0x0, 0x0, 0xfffffffd}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0x8}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x2, 0x1}}) 11:31:09 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) r1 = creat(&(0x7f0000000200)='./file0\x00', 0x11) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000240)={0x0, 0x1, 0x20, 0x3, 0x25}) (async) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/12, 0x8}], 0x1) (async) r2 = syz_io_uring_setup(0x3ede, &(0x7f00000000c0)={0x0, 0x3, 0x1}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000180)=[r3, r0, r0]}, 0x3) (async) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) (async) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) (async) getsockopt$MISDN_TIME_STAMP(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 11:31:09 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @empty}, {0x2, 0x4e23, @multicast1}, {0x2, 0x0, @broadcast}}) 11:31:09 executing program 5: syz_emit_ethernet(0x72, &(0x7f0000000000)=ANY=[], 0x0) 11:31:09 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, 0x0) poll(&(0x7f0000000080)=[{r0, 0x3440}, {r0, 0x9222}, {r0, 0x4020}, {r0, 0x1}], 0x4, 0x99) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 11:31:10 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000000c0)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r1, 0x5422, 0x0) write$dsp(r0, &(0x7f0000000180)="f2", 0x1) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r3, 0x8010500d, 0xffffffffffffffff) ioctl$SOUND_PCM_READ_CHANNELS(r3, 0x80045006, &(0x7f0000000080)) ioctl$sock_inet_SIOCDELRT(r2, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) 11:31:10 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$mouse(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000280), 0x0) creat(&(0x7f0000000080)='./file0\x00', 0xe1) r5 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES64=r2], 0x14}}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x47) write(r2, &(0x7f0000000000)="0553ad72e4a6bd03194e1b125e9cd0a9416df02e0e025410a7248d6813e4fe7b19c1bd5338e3ee9966b568b82c48", 0x97d08) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 11:31:10 executing program 5: syz_emit_ethernet(0x72, &(0x7f0000000000)=ANY=[], 0x0) syz_emit_ethernet(0x72, &(0x7f0000000000)=ANY=[], 0x0) (async) 11:31:10 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) r1 = creat(&(0x7f0000000200)='./file0\x00', 0x11) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000240)={0x0, 0x1, 0x20, 0x3, 0x25}) (async) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/12, 0x8}], 0x1) (async) r2 = syz_io_uring_setup(0x3ede, &(0x7f00000000c0)={0x0, 0x3, 0x1}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) (async) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000180)=[r3, r0, r0]}, 0x3) (async) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) (async, rerun: 64) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) (async, rerun: 64) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) (async) getsockopt$MISDN_TIME_STAMP(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 11:31:10 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, 0x0) poll(&(0x7f0000000080)=[{r0, 0x3440}, {r0, 0x9222}, {r0, 0x4020}, {r0, 0x1}], 0x4, 0x99) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 11:31:10 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) (async) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000000c0)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r1, 0x5422, 0x0) (async) write$dsp(r0, &(0x7f0000000180)="f2", 0x1) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)) (async, rerun: 32) r2 = socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 32) r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r3, 0x8010500d, 0xffffffffffffffff) (async) ioctl$SOUND_PCM_READ_CHANNELS(r3, 0x80045006, &(0x7f0000000080)) ioctl$sock_inet_SIOCDELRT(r2, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) 11:31:10 executing program 5: syz_emit_ethernet(0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c20000000180c200100086dd60f4d857003c3a0000000000000200000000ffff7f000001ff02000000000000000000000000000101e58f78000000006047e39300008800fe74cdff7a00000000000000000000bbff0100000000000000000000001000013da468344a1af97a4754334fa68d0daf55c064de0aaf27945e21b33d13d51c145f18ffeabdbd7f7372eb6f641fe9633a4479156653c5"], 0x0) 11:31:10 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$mouse(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000280), 0x0) creat(&(0x7f0000000080)='./file0\x00', 0xe1) r5 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES64=r2], 0x14}}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x47) write(r2, &(0x7f0000000000)="0553ad72e4a6bd03194e1b125e9cd0a9416df02e0e025410a7248d6813e4fe7b19c1bd5338e3ee9966b568b82c48", 0x97d08) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 11:31:10 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/12, 0x8}], 0x1) r1 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$SNDRV_TIMER_IOCTL_TREAD(r2, 0x40045402, &(0x7f0000000140)=0x10000001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) r3 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, &(0x7f0000000440)={0x5, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f0000000180)={0x0, 0x1, 0x3}) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f0000000200)={{0x3, 0x1, 0x9, 0x3, 0x27}, 0x80000001, 0x1, 'id0\x00', 'timer0\x00', 0x0, 0x7ff, 0x6, 0x9, 0x9}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 11:31:10 executing program 5: syz_emit_ethernet(0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c20000000180c200100086dd60f4d857003c3a0000000000000200000000ffff7f000001ff02000000000000000000000000000101e58f78000000006047e39300008800fe74cdff7a00000000000000000000bbff0100000000000000000000001000013da468344a1af97a4754334fa68d0daf55c064de0aaf27945e21b33d13d51c145f18ffeabdbd7f7372eb6f641fe9633a4479156653c5"], 0x0) 11:31:10 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)) poll(&(0x7f0000000080)=[{r0, 0x3440}, {r0, 0x9222}, {r0, 0x4020}, {r0, 0x1}], 0x4, 0x99) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 11:31:10 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000000c0)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r1, 0x5422, 0x0) (async) write$dsp(r0, &(0x7f0000000180)="f2", 0x1) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r3, 0x8010500d, 0xffffffffffffffff) (async) ioctl$SOUND_PCM_READ_CHANNELS(r3, 0x80045006, &(0x7f0000000080)) (async) ioctl$sock_inet_SIOCDELRT(r2, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) 11:31:10 executing program 5: syz_emit_ethernet(0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c20000000180c200100086dd60f4d857003c3a0000000000000200000000ffff7f000001ff02000000000000000000000000000101e58f78000000006047e39300008800fe74cdff7a00000000000000000000bbff0100000000000000000000001000013da468344a1af97a4754334fa68d0daf55c064de0aaf27945e21b33d13d51c145f18ffeabdbd7f7372eb6f641fe9633a4479156653c5"], 0x0) 11:31:11 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$mouse(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000280), 0x0) creat(&(0x7f0000000080)='./file0\x00', 0xe1) r5 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES64=r2], 0x14}}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x47) write(r2, &(0x7f0000000000)="0553ad72e4a6bd03194e1b125e9cd0a9416df02e0e025410a7248d6813e4fe7b19c1bd5338e3ee9966b568b82c48", 0x97d08) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 11:31:11 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)) poll(&(0x7f0000000080)=[{r0, 0x3440}, {r0, 0x9222}, {r0, 0x4020}, {r0, 0x1}], 0x4, 0x99) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 11:31:11 executing program 2: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)=0x0) getpgid(r0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002000), 0x0, &(0x7f0000002240)=ANY=[@ANYBLOB='\x00\x00\x00', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=r3, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r4 = request_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)='*}!\x00', 0xfffffffffffffffe) keyctl$get_persistent(0x16, r3, r4) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r5, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) 11:31:11 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$mouse(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, 0x0, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0xe1) r5 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES64=r2], 0x14}}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x47) write(r2, &(0x7f0000000000)="0553ad72e4a6bd03194e1b125e9cd0a9416df02e0e025410a7248d6813e4fe7b19c1bd5338e3ee9966b568b82c48", 0x97d08) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 11:31:11 executing program 2: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)=0x0) getpgid(r0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002000), 0x0, &(0x7f0000002240)=ANY=[@ANYBLOB='\x00\x00\x00', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=r3, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) (async, rerun: 64) r4 = request_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)='*}!\x00', 0xfffffffffffffffe) (rerun: 64) keyctl$get_persistent(0x16, r3, r4) (async, rerun: 32) r5 = socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 32) ioctl$sock_inet_SIOCDELRT(r5, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) 11:31:11 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)) poll(&(0x7f0000000080)=[{r0, 0x3440}, {r0, 0x9222}, {r0, 0x4020}, {r0, 0x1}], 0x4, 0x99) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 11:31:12 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/12, 0x8}], 0x1) (async) r1 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) (async) ioctl$SNDRV_TIMER_IOCTL_TREAD(r2, 0x40045402, &(0x7f0000000140)=0x10000001) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) (async, rerun: 64) r3 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) (rerun: 64) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, &(0x7f0000000440)={0x5, 0x20000006, 0x0, 0x0, 0xd}) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f0000000180)={0x0, 0x1, 0x3}) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f0000000200)={{0x3, 0x1, 0x9, 0x3, 0x27}, 0x80000001, 0x1, 'id0\x00', 'timer0\x00', 0x0, 0x7ff, 0x6, 0x9, 0x9}) (async) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 11:31:12 executing program 2: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)=0x0) getpgid(r0) (async) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002000), 0x0, &(0x7f0000002240)=ANY=[@ANYBLOB='\x00\x00\x00', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=r3, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r4 = request_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)='*}!\x00', 0xfffffffffffffffe) keyctl$get_persistent(0x16, r3, r4) (async, rerun: 32) r5 = socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 32) ioctl$sock_inet_SIOCDELRT(r5, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) 11:31:12 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) poll(0x0, 0x0, 0x99) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 11:31:12 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$mouse(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000280), 0x0) creat(&(0x7f0000000080)='./file0\x00', 0xe1) r5 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES64=r2], 0x14}}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x47) write(r2, &(0x7f0000000000)="0553ad72e4a6bd03194e1b125e9cd0a9416df02e0e025410a7248d6813e4fe7b19c1bd5338e3ee9966b568b82c48", 0x97d08) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 11:31:12 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/12, 0x8}], 0x1) (async) r1 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$SNDRV_TIMER_IOCTL_TREAD(r2, 0x40045402, &(0x7f0000000140)=0x10000001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) (async) r3 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, &(0x7f0000000440)={0x5, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f0000000180)={0x0, 0x1, 0x3}) (async) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f0000000200)={{0x3, 0x1, 0x9, 0x3, 0x27}, 0x80000001, 0x1, 'id0\x00', 'timer0\x00', 0x0, 0x7ff, 0x6, 0x9, 0x9}) (async) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 11:31:12 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000000)={@in={{0x2, 0x4e23, @broadcast}}, 0x0, 0x0, 0x45, 0x0, "a5eda28a2ca7251eadbab3b65394bee2f6704f19fa78c15822d0e7459ba3f7c2c292c8f07d85cfdb2896a4b4dd66fce6cfddf53cd79426438f47114a9eac04326fc33491f46c9f807e512e585a6f7015"}, 0xd8) ioctl$sock_inet_SIOCDELRT(r0, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @loopback}, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @broadcast}, 0x241, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) 11:31:12 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}}, 0x1c) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$mouse(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000280), 0x0) creat(&(0x7f0000000080)='./file0\x00', 0xe1) r5 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES64=r2], 0x14}}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x47) write(r2, &(0x7f0000000000)="0553ad72e4a6bd03194e1b125e9cd0a9416df02e0e025410a7248d6813e4fe7b19c1bd5338e3ee9966b568b82c48", 0x97d08) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 11:31:12 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) poll(0x0, 0x0, 0x99) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 11:31:12 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$mouse(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, 0x0, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0xe1) r5 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES64=r2], 0x14}}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x47) write(r2, &(0x7f0000000000)="0553ad72e4a6bd03194e1b125e9cd0a9416df02e0e025410a7248d6813e4fe7b19c1bd5338e3ee9966b568b82c48", 0x97d08) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 11:31:12 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/12, 0x8}], 0x1) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x12602, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 11:31:12 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000000)={@in={{0x2, 0x4e23, @broadcast}}, 0x0, 0x0, 0x45, 0x0, "a5eda28a2ca7251eadbab3b65394bee2f6704f19fa78c15822d0e7459ba3f7c2c292c8f07d85cfdb2896a4b4dd66fce6cfddf53cd79426438f47114a9eac04326fc33491f46c9f807e512e585a6f7015"}, 0xd8) ioctl$sock_inet_SIOCDELRT(r0, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @loopback}, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @broadcast}, 0x241, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000000)={@in={{0x2, 0x4e23, @broadcast}}, 0x0, 0x0, 0x45, 0x0, "a5eda28a2ca7251eadbab3b65394bee2f6704f19fa78c15822d0e7459ba3f7c2c292c8f07d85cfdb2896a4b4dd66fce6cfddf53cd79426438f47114a9eac04326fc33491f46c9f807e512e585a6f7015"}, 0xd8) (async) ioctl$sock_inet_SIOCDELRT(r0, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @loopback}, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @broadcast}, 0x241, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}) (async) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) (async) 11:31:13 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/12, 0x8}], 0x1) (async) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x12602, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) (async) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 11:31:13 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000000)={@in={{0x2, 0x4e23, @broadcast}}, 0x0, 0x0, 0x45, 0x0, "a5eda28a2ca7251eadbab3b65394bee2f6704f19fa78c15822d0e7459ba3f7c2c292c8f07d85cfdb2896a4b4dd66fce6cfddf53cd79426438f47114a9eac04326fc33491f46c9f807e512e585a6f7015"}, 0xd8) ioctl$sock_inet_SIOCDELRT(r0, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @loopback}, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @broadcast}, 0x241, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000000)={@in={{0x2, 0x4e23, @broadcast}}, 0x0, 0x0, 0x45, 0x0, "a5eda28a2ca7251eadbab3b65394bee2f6704f19fa78c15822d0e7459ba3f7c2c292c8f07d85cfdb2896a4b4dd66fce6cfddf53cd79426438f47114a9eac04326fc33491f46c9f807e512e585a6f7015"}, 0xd8) (async) ioctl$sock_inet_SIOCDELRT(r0, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @loopback}, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @broadcast}, 0x241, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}) (async) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) (async) 11:31:13 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) poll(0x0, 0x0, 0x99) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 11:31:13 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/12, 0x8}], 0x1) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) (async) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x12602, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) (async) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 11:31:13 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8917, &(0x7f0000000000)={0x0, {0x2, 0x4e22, @broadcast}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @private=0xa010102}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}) 11:31:13 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000180), 0x10000, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/12, 0x8}], 0x1) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x200, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0xc9d, 0x8001, 0x0, 0x1}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 11:31:13 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) poll(&(0x7f0000000080)=[{r0, 0x3440}, {r0, 0x9222}, {r0, 0x4020}], 0x3, 0x99) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 11:31:14 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000000c0)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000280), 0x0) creat(&(0x7f0000000080)='./file0\x00', 0xe1) r4 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES64=r2], 0x14}}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x47) write(r2, &(0x7f0000000000)="0553ad72e4a6bd03194e1b125e9cd0a9416df02e0e025410a7248d6813e4fe7b19c1bd5338e3ee9966b568b82c48", 0x97d08) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 11:31:14 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000000c0)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000280), 0x0) creat(&(0x7f0000000080)='./file0\x00', 0xe1) r4 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES64=r2], 0x14}}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x47) write(r2, &(0x7f0000000000)="0553ad72e4a6bd03194e1b125e9cd0a9416df02e0e025410a7248d6813e4fe7b19c1bd5338e3ee9966b568b82c48", 0x97d08) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 11:31:14 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$mouse(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, 0x0, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0xe1) r5 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES64=r2], 0x14}}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x47) write(r2, &(0x7f0000000000)="0553ad72e4a6bd03194e1b125e9cd0a9416df02e0e025410a7248d6813e4fe7b19c1bd5338e3ee9966b568b82c48", 0x97d08) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 11:31:14 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8917, &(0x7f0000000000)={0x0, {0x2, 0x4e22, @broadcast}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @private=0xa010102}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}) 11:31:14 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) poll(&(0x7f0000000080)=[{r0, 0x3440}, {r0, 0x9222}], 0x2, 0x99) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 11:31:14 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000180), 0x10000, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) (async) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/12, 0x8}], 0x1) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) (async) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x200, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0xc9d, 0x8001, 0x0, 0x1}) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) (async) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 11:31:14 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8917, &(0x7f0000000000)={0x0, {0x2, 0x4e22, @broadcast}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @private=0xa010102}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}) socket$inet_tcp(0x2, 0x1, 0x0) (async) ioctl$sock_inet_SIOCDELRT(r0, 0x8917, &(0x7f0000000000)={0x0, {0x2, 0x4e22, @broadcast}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @private=0xa010102}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}) (async) 11:31:14 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000180), 0x10000, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) (async) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/12, 0x8}], 0x1) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x200, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0xc9d, 0x8001, 0x0, 0x1}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) (async) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 11:31:14 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) poll(&(0x7f0000000080)=[{r0, 0x3440}], 0x1, 0x99) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 11:31:14 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x4, 0xdf, 0x3, 0x3}, {0x2, 0xd8, 0x1}, {0xff, 0x40, 0x1, 0x3}, {0x7f, 0xe7, 0x9, 0xab7}, {0x8, 0xff, 0xd0, 0x1}]}, 0x10) ioctl$sock_inet_SIOCDELRT(r0, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) 11:31:14 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x4, 0xdf, 0x3, 0x3}, {0x2, 0xd8, 0x1}, {0xff, 0x40, 0x1, 0x3}, {0x7f, 0xe7, 0x9, 0xab7}, {0x8, 0xff, 0xd0, 0x1}]}, 0x10) ioctl$sock_inet_SIOCDELRT(r0, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x4, 0xdf, 0x3, 0x3}, {0x2, 0xd8, 0x1}, {0xff, 0x40, 0x1, 0x3}, {0x7f, 0xe7, 0x9, 0xab7}, {0x8, 0xff, 0xd0, 0x1}]}, 0x10) (async) ioctl$sock_inet_SIOCDELRT(r0, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) (async) 11:31:14 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) poll(&(0x7f0000000080), 0x0, 0x99) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 11:31:15 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000000c0)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000280), 0x0) creat(&(0x7f0000000080)='./file0\x00', 0xe1) r4 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES64=r2], 0x14}}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x47) write(r2, &(0x7f0000000000)="0553ad72e4a6bd03194e1b125e9cd0a9416df02e0e025410a7248d6813e4fe7b19c1bd5338e3ee9966b568b82c48", 0x97d08) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 11:31:15 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/12, 0xc}], 0x1) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x3, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) r1 = syz_clone(0x30000000, &(0x7f0000000180)="cb8d88a9a5ab31a14db7612f9b2de5e4910c1d53b57e06d12df9a8f77f4160834324c81df1fdc027b3a92cea1d528de0c751d813644155816b6a41910a374a6b7b08c06f83a5d03292dcda9296ba5656145e7f81d4dd38241c734cedc1e9f8aa752013379032912bbd4fec6cd664489e21d5085232b424ab5aa43db1f2b275db1d2df09038cdb9be8d8ec9efa8a8900d0d96c3c5b4a03454c7a7ab675214a67fc2ba7d126d81e92a07fa8d717b276e3537ed4b4426193b277547cf17ec5499272e16", 0xc2, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000280)="01ded3a89112e93ccbdcf7b48fe4de8f80e99cb1190e1d570150b4c62167ab57660dc56bf37e0a49fba8a74ade3b9fe14c3690dbedabc1f76f883ab8fe74b56943e338094ecd6c7327e7b0040b5d03836393161b132a8e6decbe520704069113990e462280cbf108c922b7801a3ff9393ea854c45ad170473308737a73ba445a346619cec7ba603790a997b60991b15799aab1b4f00aa61bfbdbf887304544e006") ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000340)={0x3, 0x5, {0x0}, {0xee01}, 0x76, 0x3}) r3 = accept$alg(0xffffffffffffffff, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, r0, &(0x7f0000000380)={0xffffffffffffffff, r3, 0x80000000}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 11:31:15 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x4, 0xdf, 0x3, 0x3}, {0x2, 0xd8, 0x1}, {0xff, 0x40, 0x1, 0x3}, {0x7f, 0xe7, 0x9, 0xab7}, {0x8, 0xff, 0xd0, 0x1}]}, 0x10) (async, rerun: 64) ioctl$sock_inet_SIOCDELRT(r0, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) (rerun: 64) 11:31:15 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) poll(&(0x7f0000000080), 0x0, 0x99) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 11:31:15 executing program 1: syz_emit_ethernet(0x72, &(0x7f00000001c0)={@link_local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4d857", 0x3c, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "47e393", 0x0, 0x88, 0x0, @remote, @mcast1={0xff, 0x1, '\x00', 0x5}, [], "3da468344a1af97a4754334f"}}}}}}}, 0x0) 11:31:15 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}}, 0x1c) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$mouse(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000280), 0x0) creat(&(0x7f0000000080)='./file0\x00', 0xe1) r5 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES64=r2], 0x14}}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x47) write(r2, &(0x7f0000000000)="0553ad72e4a6bd03194e1b125e9cd0a9416df02e0e025410a7248d6813e4fe7b19c1bd5338e3ee9966b568b82c48", 0x97d08) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 11:31:15 executing program 1: syz_emit_ethernet(0x72, &(0x7f00000001c0)={@link_local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4d857", 0x3c, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "47e393", 0x0, 0x88, 0x0, @remote, @mcast1={0xff, 0x1, '\x00', 0x3}, [], "3da468344a1af97a4754334f"}}}}}}}, 0x0) 11:31:15 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}, 0x0, 0x300}) 11:31:15 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) poll(&(0x7f0000000080), 0x0, 0x99) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 11:31:15 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) pwrite64(r0, &(0x7f0000000000)="1e0eac61322edbe1953874b2bbedd3cbece81aa407680d4255fa6f0370e7b123fc8ac92fb4a1701acfff2c9a433b09d7b4f0a24d243b0b638479101dffe45fef52a8c758da928e60c38aec118d83d3cdb4770b6d066a69e7d2bd59c8d9d7fec35252f4e4d5cbc0bf32f3ef4a6dd758c6d4035eb76a3429dda429e950204c6034c26af5eda615d637638338dafb60ff919cf01f4bb35e6aa4629477a038ba661a74fcf1", 0xa3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0xffff, r3}, [@IFLA_CARRIER={0x5}]}, 0x28}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000100)={'syztnl1\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x2f, 0xff, 0xc7, 0x1000000, 0x4, @mcast2, @loopback, 0x7800, 0x20, 0x8, 0x80}}) sendmsg$nl_route(r1, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=@newlinkprop={0x7c, 0x6c, 0x8, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, 0x41, 0x81}, [@IFLA_TXQLEN={0x8, 0xd, 0x3ce5}, @IFLA_WEIGHT={0x8, 0xf, 0x20}, @IFLA_NET_NS_PID={0x8, 0x13, 0xffffffffffffffff}, @IFLA_NET_NS_PID={0x8}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x7fffffff}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x1}, @IFLA_EVENT={0x8, 0x2c, 0x5}, @IFLA_PHYS_PORT_ID={0x22, 0x22, "077f6690d484a01996568a6989bfd0a9c2f598ce1ed1f96cedf9581128f5"}]}, 0x7c}, 0x1, 0x0, 0x0, 0x14}, 0x4000010) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000002100)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000, 0x1b26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x80000000000]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = dup(r0) ioctl$KVM_RUN(r7, 0xae80, 0x0) fcntl$addseals(r8, 0x409, 0x2) 11:31:15 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$mouse(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000280), 0x0) creat(&(0x7f0000000080)='./file0\x00', 0xe1) r5 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES64=r2], 0x14}}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x47) write(r2, &(0x7f0000000000)="0553ad72e4a6bd03194e1b125e9cd0a9416df02e0e025410a7248d6813e4fe7b19c1bd5338e3ee9966b568b82c48", 0x97d08) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 11:31:15 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x3440}], 0x1, 0x99) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 11:31:16 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000000c0)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000280), 0x0) creat(&(0x7f0000000080)='./file0\x00', 0xe1) r4 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES64=r2], 0x14}}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x47) write(r2, &(0x7f0000000000)="0553ad72e4a6bd03194e1b125e9cd0a9416df02e0e025410a7248d6813e4fe7b19c1bd5338e3ee9966b568b82c48", 0x97d08) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 11:31:16 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/12, 0xc}], 0x1) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x3, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) r1 = syz_clone(0x30000000, &(0x7f0000000180)="cb8d88a9a5ab31a14db7612f9b2de5e4910c1d53b57e06d12df9a8f77f4160834324c81df1fdc027b3a92cea1d528de0c751d813644155816b6a41910a374a6b7b08c06f83a5d03292dcda9296ba5656145e7f81d4dd38241c734cedc1e9f8aa752013379032912bbd4fec6cd664489e21d5085232b424ab5aa43db1f2b275db1d2df09038cdb9be8d8ec9efa8a8900d0d96c3c5b4a03454c7a7ab675214a67fc2ba7d126d81e92a07fa8d717b276e3537ed4b4426193b277547cf17ec5499272e16", 0xc2, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000280)="01ded3a89112e93ccbdcf7b48fe4de8f80e99cb1190e1d570150b4c62167ab57660dc56bf37e0a49fba8a74ade3b9fe14c3690dbedabc1f76f883ab8fe74b56943e338094ecd6c7327e7b0040b5d03836393161b132a8e6decbe520704069113990e462280cbf108c922b7801a3ff9393ea854c45ad170473308737a73ba445a346619cec7ba603790a997b60991b15799aab1b4f00aa61bfbdbf887304544e006") ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000340)={0x3, 0x5, {0x0}, {0xee01}, 0x76, 0x3}) r3 = accept$alg(0xffffffffffffffff, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, r0, &(0x7f0000000380)={0xffffffffffffffff, r3, 0x80000000}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/12, 0xc}], 0x1) (async) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x3, 0x0, 0x0, 0x3}}) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) (async) syz_clone(0x30000000, &(0x7f0000000180)="cb8d88a9a5ab31a14db7612f9b2de5e4910c1d53b57e06d12df9a8f77f4160834324c81df1fdc027b3a92cea1d528de0c751d813644155816b6a41910a374a6b7b08c06f83a5d03292dcda9296ba5656145e7f81d4dd38241c734cedc1e9f8aa752013379032912bbd4fec6cd664489e21d5085232b424ab5aa43db1f2b275db1d2df09038cdb9be8d8ec9efa8a8900d0d96c3c5b4a03454c7a7ab675214a67fc2ba7d126d81e92a07fa8d717b276e3537ed4b4426193b277547cf17ec5499272e16", 0xc2, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000280)="01ded3a89112e93ccbdcf7b48fe4de8f80e99cb1190e1d570150b4c62167ab57660dc56bf37e0a49fba8a74ade3b9fe14c3690dbedabc1f76f883ab8fe74b56943e338094ecd6c7327e7b0040b5d03836393161b132a8e6decbe520704069113990e462280cbf108c922b7801a3ff9393ea854c45ad170473308737a73ba445a346619cec7ba603790a997b60991b15799aab1b4f00aa61bfbdbf887304544e006") (async) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000340)={0x3, 0x5, {}, {0xee01}, 0x76, 0x3}) (async) accept$alg(0xffffffffffffffff, 0x0, 0x0) (async) kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, r0, &(0x7f0000000380)={0xffffffffffffffff, r3, 0x80000000}) (async) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) (async) 11:31:16 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) pwrite64(r0, &(0x7f0000000000)="1e0eac61322edbe1953874b2bbedd3cbece81aa407680d4255fa6f0370e7b123fc8ac92fb4a1701acfff2c9a433b09d7b4f0a24d243b0b638479101dffe45fef52a8c758da928e60c38aec118d83d3cdb4770b6d066a69e7d2bd59c8d9d7fec35252f4e4d5cbc0bf32f3ef4a6dd758c6d4035eb76a3429dda429e950204c6034c26af5eda615d637638338dafb60ff919cf01f4bb35e6aa4629477a038ba661a74fcf1", 0xa3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0xffff, r3}, [@IFLA_CARRIER={0x5}]}, 0x28}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000100)={'syztnl1\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x2f, 0xff, 0xc7, 0x1000000, 0x4, @mcast2, @loopback, 0x7800, 0x20, 0x8, 0x80}}) sendmsg$nl_route(r1, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=@newlinkprop={0x7c, 0x6c, 0x8, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, 0x41, 0x81}, [@IFLA_TXQLEN={0x8, 0xd, 0x3ce5}, @IFLA_WEIGHT={0x8, 0xf, 0x20}, @IFLA_NET_NS_PID={0x8, 0x13, 0xffffffffffffffff}, @IFLA_NET_NS_PID={0x8}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x7fffffff}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x1}, @IFLA_EVENT={0x8, 0x2c, 0x5}, @IFLA_PHYS_PORT_ID={0x22, 0x22, "077f6690d484a01996568a6989bfd0a9c2f598ce1ed1f96cedf9581128f5"}]}, 0x7c}, 0x1, 0x0, 0x0, 0x14}, 0x4000010) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000002100)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000, 0x1b26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x80000000000]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = dup(r0) ioctl$KVM_RUN(r7, 0xae80, 0x0) fcntl$addseals(r8, 0x409, 0x2) socket$inet_tcp(0x2, 0x1, 0x0) (async) ioctl$sock_inet_SIOCDELRT(r0, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) (async) pwrite64(r0, &(0x7f0000000000)="1e0eac61322edbe1953874b2bbedd3cbece81aa407680d4255fa6f0370e7b123fc8ac92fb4a1701acfff2c9a433b09d7b4f0a24d243b0b638479101dffe45fef52a8c758da928e60c38aec118d83d3cdb4770b6d066a69e7d2bd59c8d9d7fec35252f4e4d5cbc0bf32f3ef4a6dd758c6d4035eb76a3429dda429e950204c6034c26af5eda615d637638338dafb60ff919cf01f4bb35e6aa4629477a038ba661a74fcf1", 0xa3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6(0xa, 0x1000000000002, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'syz_tun\x00'}) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0xffff, r3}, [@IFLA_CARRIER={0x5}]}, 0x28}}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000100)={'syztnl1\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x2f, 0xff, 0xc7, 0x1000000, 0x4, @mcast2, @loopback, 0x7800, 0x20, 0x8, 0x80}}) (async) sendmsg$nl_route(r1, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=@newlinkprop={0x7c, 0x6c, 0x8, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, 0x41, 0x81}, [@IFLA_TXQLEN={0x8, 0xd, 0x3ce5}, @IFLA_WEIGHT={0x8, 0xf, 0x20}, @IFLA_NET_NS_PID={0x8, 0x13, 0xffffffffffffffff}, @IFLA_NET_NS_PID={0x8}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x7fffffff}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x1}, @IFLA_EVENT={0x8, 0x2c, 0x5}, @IFLA_PHYS_PORT_ID={0x22, 0x22, "077f6690d484a01996568a6989bfd0a9c2f598ce1ed1f96cedf9581128f5"}]}, 0x7c}, 0x1, 0x0, 0x0, 0x14}, 0x4000010) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) (async) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) (async) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) (async) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000002100)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000, 0x1b26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x80000000000]}) (async) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async) dup(r0) (async) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async) fcntl$addseals(r8, 0x409, 0x2) (async) 11:31:16 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x3440}], 0x1, 0x99) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 11:31:16 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x3440}], 0x1, 0x99) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 11:31:16 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/12, 0xc}], 0x1) (async) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x3, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) r1 = syz_clone(0x30000000, &(0x7f0000000180)="cb8d88a9a5ab31a14db7612f9b2de5e4910c1d53b57e06d12df9a8f77f4160834324c81df1fdc027b3a92cea1d528de0c751d813644155816b6a41910a374a6b7b08c06f83a5d03292dcda9296ba5656145e7f81d4dd38241c734cedc1e9f8aa752013379032912bbd4fec6cd664489e21d5085232b424ab5aa43db1f2b275db1d2df09038cdb9be8d8ec9efa8a8900d0d96c3c5b4a03454c7a7ab675214a67fc2ba7d126d81e92a07fa8d717b276e3537ed4b4426193b277547cf17ec5499272e16", 0xc2, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000280)="01ded3a89112e93ccbdcf7b48fe4de8f80e99cb1190e1d570150b4c62167ab57660dc56bf37e0a49fba8a74ade3b9fe14c3690dbedabc1f76f883ab8fe74b56943e338094ecd6c7327e7b0040b5d03836393161b132a8e6decbe520704069113990e462280cbf108c922b7801a3ff9393ea854c45ad170473308737a73ba445a346619cec7ba603790a997b60991b15799aab1b4f00aa61bfbdbf887304544e006") (async) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000340)={0x3, 0x5, {0x0}, {0xee01}, 0x76, 0x3}) (async) r3 = accept$alg(0xffffffffffffffff, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, r0, &(0x7f0000000380)={0xffffffffffffffff, r3, 0x80000000}) (async) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 11:31:16 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) (async) pwrite64(r0, &(0x7f0000000000)="1e0eac61322edbe1953874b2bbedd3cbece81aa407680d4255fa6f0370e7b123fc8ac92fb4a1701acfff2c9a433b09d7b4f0a24d243b0b638479101dffe45fef52a8c758da928e60c38aec118d83d3cdb4770b6d066a69e7d2bd59c8d9d7fec35252f4e4d5cbc0bf32f3ef4a6dd758c6d4035eb76a3429dda429e950204c6034c26af5eda615d637638338dafb60ff919cf01f4bb35e6aa4629477a038ba661a74fcf1", 0xa3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0xffff, r3}, [@IFLA_CARRIER={0x5}]}, 0x28}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000100)={'syztnl1\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x2f, 0xff, 0xc7, 0x1000000, 0x4, @mcast2, @loopback, 0x7800, 0x20, 0x8, 0x80}}) sendmsg$nl_route(r1, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=@newlinkprop={0x7c, 0x6c, 0x8, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, 0x41, 0x81}, [@IFLA_TXQLEN={0x8, 0xd, 0x3ce5}, @IFLA_WEIGHT={0x8, 0xf, 0x20}, @IFLA_NET_NS_PID={0x8, 0x13, 0xffffffffffffffff}, @IFLA_NET_NS_PID={0x8}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x7fffffff}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x1}, @IFLA_EVENT={0x8, 0x2c, 0x5}, @IFLA_PHYS_PORT_ID={0x22, 0x22, "077f6690d484a01996568a6989bfd0a9c2f598ce1ed1f96cedf9581128f5"}]}, 0x7c}, 0x1, 0x0, 0x0, 0x14}, 0x4000010) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) (async) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000002100)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000, 0x1b26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x80000000000]}) (async) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = dup(r0) (async) ioctl$KVM_RUN(r7, 0xae80, 0x0) fcntl$addseals(r8, 0x409, 0x2) 11:31:16 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000340)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x2000) ioctl(r0, 0xc06c4124, &(0x7f0000000040)) 11:31:16 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x99) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 11:31:16 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$mouse(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f00000000c0)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000280), 0x0) creat(&(0x7f0000000080)='./file0\x00', 0xe1) r4 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES64=r2], 0x14}}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x47) write(r2, &(0x7f0000000000)="0553ad72e4a6bd03194e1b125e9cd0a9416df02e0e025410a7248d6813e4fe7b19c1bd5338e3ee9966b568b82c48", 0x97d08) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 11:31:16 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/12, 0x8}], 0x1) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) fsetxattr$trusted_overlay_nlink(r0, &(0x7f00000000c0), &(0x7f0000000180)={'U-', 0x1}, 0x16, 0x2) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x141000, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000200)={0x9, 0x0, 0x3, 0x1}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0xffffffffffffffff, 0x0, 0x2, 0x0, 0x7}}) 11:31:16 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 11:31:17 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000340)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x102800, 0x0) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000000c0)={@mcast2}, &(0x7f0000000100)=0x14) ioctl(r0, 0xc06c4124, &(0x7f0000000040)) 11:31:17 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$mouse(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000280), 0x0) creat(&(0x7f0000000080)='./file0\x00', 0xe1) r5 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES64=r2], 0x14}}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x47) write(r2, &(0x7f0000000000)="0553ad72e4a6bd03194e1b125e9cd0a9416df02e0e025410a7248d6813e4fe7b19c1bd5338e3ee9966b568b82c48", 0x97d08) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 11:31:17 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @remote}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x1}) 11:31:17 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 11:31:17 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @remote}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x1}) socket$inet_tcp(0x2, 0x1, 0x0) (async) ioctl$sock_inet_SIOCDELRT(r0, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @remote}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x1}) (async) 11:31:17 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$mouse(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000280), 0x0) creat(&(0x7f0000000080)='./file0\x00', 0xe1) r5 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES64=r2], 0x14}}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x47) write(r2, &(0x7f0000000000)="0553ad72e4a6bd03194e1b125e9cd0a9416df02e0e025410a7248d6813e4fe7b19c1bd5338e3ee9966b568b82c48", 0x97d08) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 11:31:17 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 11:31:17 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x99) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 11:31:17 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @remote}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x1}) socket$inet_tcp(0x2, 0x1, 0x0) (async) ioctl$sock_inet_SIOCDELRT(r0, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @remote}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x1}) (async) 11:31:17 executing program 2: socket$inet_tcp(0x2, 0x1, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x2ac) ioctl$sock_inet_SIOCDELRT(r0, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) 11:31:17 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x99) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 11:31:17 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/12, 0x8}], 0x1) (async) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) fsetxattr$trusted_overlay_nlink(r0, &(0x7f00000000c0), &(0x7f0000000180)={'U-', 0x1}, 0x16, 0x2) (async, rerun: 64) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) (async, rerun: 64) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) (async, rerun: 64) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x141000, 0x0) (async, rerun: 64) r2 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) (async) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) (async) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) (async) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000200)={0x9, 0x0, 0x3, 0x1}) (async, rerun: 64) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0xffffffffffffffff, 0x0, 0x2, 0x0, 0x7}}) (rerun: 64) 11:31:17 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, 0x0, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$mouse(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000280), 0x0) creat(&(0x7f0000000080)='./file0\x00', 0xe1) r5 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES64=r2], 0x14}}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x47) write(r2, &(0x7f0000000000)="0553ad72e4a6bd03194e1b125e9cd0a9416df02e0e025410a7248d6813e4fe7b19c1bd5338e3ee9966b568b82c48", 0x97d08) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 11:31:18 executing program 2: socket$inet_tcp(0x2, 0x1, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x2ac) ioctl$sock_inet_SIOCDELRT(r0, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) socket$inet_tcp(0x2, 0x1, 0x0) (async) creat(&(0x7f0000000000)='./file0\x00', 0x2ac) (async) ioctl$sock_inet_SIOCDELRT(r0, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) (async) 11:31:18 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/12, 0x8}], 0x1) (async) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) (async) fsetxattr$trusted_overlay_nlink(r0, &(0x7f00000000c0), &(0x7f0000000180)={'U-', 0x1}, 0x16, 0x2) (async, rerun: 32) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) (async, rerun: 32) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) (async) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x141000, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) (async, rerun: 32) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) (async, rerun: 32) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) (async) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000200)={0x9, 0x0, 0x3, 0x1}) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0xffffffffffffffff, 0x0, 0x2, 0x0, 0x7}}) 11:31:18 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x99) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 11:31:18 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$mouse(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000280), 0x0) creat(&(0x7f0000000080)='./file0\x00', 0xe1) r5 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES64=r2], 0x14}}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x47) write(r2, &(0x7f0000000000)="0553ad72e4a6bd03194e1b125e9cd0a9416df02e0e025410a7248d6813e4fe7b19c1bd5338e3ee9966b568b82c48", 0x97d08) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 11:31:18 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$mouse(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000280), 0x0) creat(&(0x7f0000000080)='./file0\x00', 0xe1) r5 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES64=r2], 0x14}}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x47) write(r2, &(0x7f0000000000)="0553ad72e4a6bd03194e1b125e9cd0a9416df02e0e025410a7248d6813e4fe7b19c1bd5338e3ee9966b568b82c48", 0x97d08) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 11:31:18 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/12, 0x8}], 0x1) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 11:31:18 executing program 2: socket$inet_tcp(0x2, 0x1, 0x0) (async) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x2ac) ioctl$sock_inet_SIOCDELRT(r0, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) 11:31:18 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x99) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 11:31:18 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet(0x2, 0xa, 0x3) r2 = socket$l2tp(0x2, 0x2, 0x73) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10) r3 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r4 = dup(r3) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f00000001c0)={0xfffffffa}, 0x4) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, {0x5}}, './file0\x00'}) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f0000000100)=ANY=[@ANYBLOB="ac1e0110a122d80c0100000002102000ac1414aa0b010100"], 0x18) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x4e22, @rand_addr=0x64010100}, {0x2, 0x0, @rand_addr=0x64010101}, {0x2, 0x4, @broadcast}, 0x74}) 11:31:18 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/12, 0x8}], 0x1) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/12, 0x8}], 0x1) (async) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) (async) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) (async) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) (async) 11:31:18 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x99) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 11:31:18 executing program 1: syz_emit_ethernet(0x72, &(0x7f00000001c0)={@link_local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4d857", 0x3c, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "47e393", 0x0, 0x88, 0x0, @remote, @mcast1, [], "3da468344a1af97a4754334f"}}}}}}}, 0x0) 11:31:18 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/12, 0x8}], 0x1) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/12, 0x8}], 0x1) (async) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) (async) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) (async) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) (async) 11:31:19 executing program 4: ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, &(0x7f00000000c0)=0x4) r0 = open_tree(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000200)={0x2, 0x800, 0x8, 0x5, 0x8, 0x2, 0x3e}) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) readv(r1, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/12, 0x8}], 0x1) ioctl$SNDRV_TIMER_IOCTL_TREAD(r1, 0x40045402, &(0x7f00000001c0)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000440)={0x0, 0x1400000, 0x0, 0x0, 0xd}) r2 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r3 = dup(r2) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {0x3}}, './file0\x00'}) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0x1) ioctl$DRM_IOCTL_GET_MAGIC(r3, 0x80046402, &(0x7f0000000180)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000080)={0x0, 0x3, 0x5, 0x1, 0x4}) r4 = socket$key(0xf, 0x3, 0x2) dup(r4) dup(r2) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) 11:31:19 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x99) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 11:31:19 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r1, 0xc0984124, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) write$binfmt_script(r1, &(0x7f0000000340)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl(r0, 0xc06c4124, &(0x7f0000000040)) 11:31:19 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$mouse(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000280), 0x0) creat(&(0x7f0000000080)='./file0\x00', 0xe1) r5 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES64=r2], 0x14}}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x47) write(r2, &(0x7f0000000000)="0553ad72e4a6bd03194e1b125e9cd0a9416df02e0e025410a7248d6813e4fe7b19c1bd5338e3ee9966b568b82c48", 0x97d08) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 11:31:19 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$mouse(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000280), 0x0) creat(&(0x7f0000000080)='./file0\x00', 0xe1) r5 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES64=r2], 0x14}}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x47) write(r2, &(0x7f0000000000)="0553ad72e4a6bd03194e1b125e9cd0a9416df02e0e025410a7248d6813e4fe7b19c1bd5338e3ee9966b568b82c48", 0x97d08) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 11:31:19 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x99) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 11:31:19 executing program 4: ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, &(0x7f00000000c0)=0x4) (async) r0 = open_tree(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000200)={0x2, 0x800, 0x8, 0x5, 0x8, 0x2, 0x3e}) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) readv(r1, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/12, 0x8}], 0x1) (async) ioctl$SNDRV_TIMER_IOCTL_TREAD(r1, 0x40045402, &(0x7f00000001c0)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x3}}) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000440)={0x0, 0x1400000, 0x0, 0x0, 0xd}) (async) r2 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r3 = dup(r2) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {0x3}}, './file0\x00'}) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0x1) ioctl$DRM_IOCTL_GET_MAGIC(r3, 0x80046402, &(0x7f0000000180)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000080)={0x0, 0x3, 0x5, 0x1, 0x4}) r4 = socket$key(0xf, 0x3, 0x2) dup(r4) (async) dup(r2) (async) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) 11:31:19 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet(0x2, 0xa, 0x3) (async) r2 = socket$l2tp(0x2, 0x2, 0x73) (async) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10) (async, rerun: 64) r3 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) (rerun: 64) r4 = dup(r3) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f00000001c0)={0xfffffffa}, 0x4) (async) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, {0x5}}, './file0\x00'}) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f0000000100)=ANY=[@ANYBLOB="ac1e0110a122d80c0100000002102000ac1414aa0b010100"], 0x18) (async) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x4e22, @rand_addr=0x64010100}, {0x2, 0x0, @rand_addr=0x64010101}, {0x2, 0x4, @broadcast}, 0x74}) 11:31:19 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$mouse(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000280), 0x0) creat(&(0x7f0000000080)='./file0\x00', 0xe1) r5 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES64=r2], 0x14}}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x47) write(r2, &(0x7f0000000000)="0553ad72e4a6bd03194e1b125e9cd0a9416df02e0e025410a7248d6813e4fe7b19c1bd5338e3ee9966b568b82c48", 0x97d08) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 11:31:19 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet(0x2, 0xa, 0x3) (async) r2 = socket$l2tp(0x2, 0x2, 0x73) (async) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10) r3 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r4 = dup(r3) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f00000001c0)={0xfffffffa}, 0x4) (async) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, {0x5}}, './file0\x00'}) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f0000000100)=ANY=[@ANYBLOB="ac1e0110a122d80c0100000002102000ac1414aa0b010100"], 0x18) (async) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x4e22, @rand_addr=0x64010100}, {0x2, 0x0, @rand_addr=0x64010101}, {0x2, 0x4, @broadcast}, 0x74}) 11:31:19 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x99) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 11:31:19 executing program 4: ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, &(0x7f00000000c0)=0x4) r0 = open_tree(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000200)={0x2, 0x800, 0x8, 0x5, 0x8, 0x2, 0x3e}) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) readv(r1, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/12, 0x8}], 0x1) ioctl$SNDRV_TIMER_IOCTL_TREAD(r1, 0x40045402, &(0x7f00000001c0)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000440)={0x0, 0x1400000, 0x0, 0x0, 0xd}) r2 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r3 = dup(r2) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {0x3}}, './file0\x00'}) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0x1) ioctl$DRM_IOCTL_GET_MAGIC(r3, 0x80046402, &(0x7f0000000180)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000080)={0x0, 0x3, 0x5, 0x1, 0x4}) r4 = socket$key(0xf, 0x3, 0x2) dup(r4) dup(r2) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, &(0x7f00000000c0)=0x4) (async) open_tree(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x0) (async) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000200)={0x2, 0x800, 0x8, 0x5, 0x8, 0x2, 0x3e}) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) readv(r1, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/12, 0x8}], 0x1) (async) ioctl$SNDRV_TIMER_IOCTL_TREAD(r1, 0x40045402, &(0x7f00000001c0)=0x1) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x3}}) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000440)={0x0, 0x1400000, 0x0, 0x0, 0xd}) (async) syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) (async) dup(r2) (async) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {0x3}}, './file0\x00'}) (async) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0x1) (async) ioctl$DRM_IOCTL_GET_MAGIC(r3, 0x80046402, &(0x7f0000000180)) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000080)={0x0, 0x3, 0x5, 0x1, 0x4}) (async) socket$key(0xf, 0x3, 0x2) (async) dup(r4) (async) dup(r2) (async) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) (async) 11:31:19 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0xb9c}}, './file0\x00'}) sendto$inet6(r1, &(0x7f0000000100)="b087633b46ab925ad6", 0x9, 0x20000801, &(0x7f00000001c0)={0xa, 0x4e23, 0x4f72, @empty, 0xdf}, 0x1c) sendto$inet(r0, &(0x7f0000000000)="4dc6b4fd7f6d9b63db4096b9e56ab4a460ccd46ca81eb98ed12f7082eaece327811aab977912409f198e01df077f79f526e634ebbc4137f002c0855593bc0ec766a6b5c79b3bf540c42f87f8d4aaf82b91197389c6219e522dfa080e8f48b44e9f59041bfc586cdb476a6573095a1d7c0e8153621eb8b0546968fd2f8a91b1", 0x7f, 0x4095, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) 11:31:19 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0xb9c}}, './file0\x00'}) sendto$inet6(r1, &(0x7f0000000100)="b087633b46ab925ad6", 0x9, 0x20000801, &(0x7f00000001c0)={0xa, 0x4e23, 0x4f72, @empty, 0xdf}, 0x1c) sendto$inet(r0, &(0x7f0000000000)="4dc6b4fd7f6d9b63db4096b9e56ab4a460ccd46ca81eb98ed12f7082eaece327811aab977912409f198e01df077f79f526e634ebbc4137f002c0855593bc0ec766a6b5c79b3bf540c42f87f8d4aaf82b91197389c6219e522dfa080e8f48b44e9f59041bfc586cdb476a6573095a1d7c0e8153621eb8b0546968fd2f8a91b1", 0x7f, 0x4095, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) (async) ioctl$sock_inet_SIOCDELRT(r0, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0xb9c}}, './file0\x00'}) (async) sendto$inet6(r1, &(0x7f0000000100)="b087633b46ab925ad6", 0x9, 0x20000801, &(0x7f00000001c0)={0xa, 0x4e23, 0x4f72, @empty, 0xdf}, 0x1c) (async) sendto$inet(r0, &(0x7f0000000000)="4dc6b4fd7f6d9b63db4096b9e56ab4a460ccd46ca81eb98ed12f7082eaece327811aab977912409f198e01df077f79f526e634ebbc4137f002c0855593bc0ec766a6b5c79b3bf540c42f87f8d4aaf82b91197389c6219e522dfa080e8f48b44e9f59041bfc586cdb476a6573095a1d7c0e8153621eb8b0546968fd2f8a91b1", 0x7f, 0x4095, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) (async) 11:31:20 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/12, 0x8}], 0x1) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1000, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000180)={0x2, 0xffffffc3, 0x8, 0x0, 0x3}) 11:31:20 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000340)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl(r0, 0xc06c4124, &(0x7f0000000380)="050aeb9d3676d7ee5ecb") r2 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) preadv(r1, &(0x7f0000000340)=[{&(0x7f0000000300)=""/6, 0x6}], 0x1, 0x3, 0x81) r3 = dup(r2) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x480, 0x0) ioctl$SNDRV_PCM_IOCTL_INFO(r4, 0x81204101, &(0x7f00000001c0)) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r3, 0xc0984124, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) 11:31:20 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, 0x0, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$mouse(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000280), 0x0) creat(&(0x7f0000000080)='./file0\x00', 0xe1) r5 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES64=r2], 0x14}}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x47) write(r2, &(0x7f0000000000)="0553ad72e4a6bd03194e1b125e9cd0a9416df02e0e025410a7248d6813e4fe7b19c1bd5338e3ee9966b568b82c48", 0x97d08) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 11:31:20 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x99) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 11:31:20 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0xb9c}}, './file0\x00'}) sendto$inet6(r1, &(0x7f0000000100)="b087633b46ab925ad6", 0x9, 0x20000801, &(0x7f00000001c0)={0xa, 0x4e23, 0x4f72, @empty, 0xdf}, 0x1c) (async) sendto$inet(r0, &(0x7f0000000000)="4dc6b4fd7f6d9b63db4096b9e56ab4a460ccd46ca81eb98ed12f7082eaece327811aab977912409f198e01df077f79f526e634ebbc4137f002c0855593bc0ec766a6b5c79b3bf540c42f87f8d4aaf82b91197389c6219e522dfa080e8f48b44e9f59041bfc586cdb476a6573095a1d7c0e8153621eb8b0546968fd2f8a91b1", 0x7f, 0x4095, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) 11:31:20 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/12, 0x8}], 0x1) (async) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) (async, rerun: 32) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) (async, rerun: 32) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) (async, rerun: 32) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1000, 0x0) (rerun: 32) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000180)={0x2, 0xffffffc3, 0x8, 0x0, 0x3}) 11:31:20 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000340)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl(r0, 0x80086601, &(0x7f0000000040)) 11:31:20 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000340)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl(r0, 0xc0884113, &(0x7f0000000040)) 11:31:20 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl(r0, 0x112f8b, &(0x7f00000011c0)="0dfa7beed8372cfc8c35bebdb507df1f406ce94a7ef049ae5137ff745d35f58e1e7cad195466f81083cb92015fac1d5fee7bf1c92bf1517267c4095168492b02f14a248b6ac5231bbf9c05f87b934bf431c26847de530c60e9d51a0d679d58cc7e8a69b376b36cf229c243b282b0abf6627dd3d33217367290f4026587fcb640eaefc729251609008d2ef7b7b10154583c26530a3b1c7e889d5d4da03cad3bc5d69dc3716e87d5bc37439871f1a4d723b5513b8f35e16de80c4d5884a73c3fed333797a8f66d2dd2e67a45d7904bb984f21adfebb694c1") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) syz_open_dev$vcsn(&(0x7f0000000000), 0x8, 0x94002) dup2(r0, r2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f00000025c0)) ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f0000000000)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000003}]}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000002100)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b26]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP(r5, 0xd0009412, &(0x7f00000001c0)={0x0, 0x1}) ioctl$sock_inet_SIOCDELRT(r0, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) 11:31:20 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/12, 0x8}], 0x1) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) (async) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) (async) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1000, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000180)={0x2, 0xffffffc3, 0x8, 0x0, 0x3}) 11:31:20 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r0 = dup(0xffffffffffffffff) write$6lowpan_enable(r0, &(0x7f0000000000)='0', 0xfffffd2c) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$mouse(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000000c0)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280), 0x0) creat(&(0x7f0000000080)='./file0\x00', 0xe1) r4 = ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES64=r1], 0x14}}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x47) write(r1, &(0x7f0000000000)="0553ad72e4a6bd03194e1b125e9cd0a9416df02e0e025410a7248d6813e4fe7b19c1bd5338e3ee9966b568b82c48", 0x97d08) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 11:31:20 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$mouse(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000000c0)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000280), 0x0) creat(&(0x7f0000000080)='./file0\x00', 0xe1) r3 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r3) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES64=r0], 0x14}}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x47) write(r0, &(0x7f0000000000)="0553ad72e4a6bd03194e1b125e9cd0a9416df02e0e025410a7248d6813e4fe7b19c1bd5338e3ee9966b568b82c48", 0x97d08) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) 11:31:21 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x99) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 11:31:21 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/12, 0x8}], 0x1) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) io_setup(0x5, &(0x7f0000000000)=0x0) io_submit(r1, 0x6c2, &(0x7f0000000540)=[&(0x7f00000000c0)={0x982f00000000b819, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000780), 0x4000}]) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0xb0000, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000580)=ANY=[]) r4 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000240)=r4) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x0, 0x1, 0x0, &(0x7f0000000080)=""/162, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x1, 0x0, 0x0, &(0x7f00000001c0)=""/121, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f00000002c0)=0x1) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000180)={0x0, r4}) write$eventfd(r4, &(0x7f0000000040)=0xfffffffffffffffe, 0x8) io_submit(r1, 0x3, &(0x7f0000000340)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x7, 0x7, r2, &(0x7f00000000c0)="b5bbf58c0bbe17a7df47efbe9e14cb86d411f03105fcbc4b32d7958e676ed7bd5a6a9d082efa517fa7d0cffcd906e5661585dfe67f241e8d57d613e6e90ae4", 0x3f, 0x7fff, 0x0, 0x4}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x6, 0xf2, r0, &(0x7f00000001c0)="93f8e00258d123ed707808d2ba9a894e0ea00d839d22535d8178ff933c766815398cab0f905a61c2f03a2055203bdad040c645", 0x33, 0x80, 0x0, 0x2, r4}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x8, 0x8, r0, &(0x7f0000000240)="72a3cdb17a97f6ea34b398b16d6d3a02af3b4777c8b0e5378a74d02e9225faaa135a6cccf449e005cd3448d0c80a650e5742fcbc230fd6e45bf39692cafe72bc09a216130aab01ed1e0dd08759f34da725a330254c59d104e50ce128529392054447d933d30f75cb75d739dfc07cec9247e797a42bb1c3f2ba8a65eae725c715e7dcb55d809657bcc4", 0x89, 0x4, 0x0, 0x1, r0}]) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 11:31:21 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$mouse(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000000c0)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000280), 0x0) creat(&(0x7f0000000080)='./file0\x00', 0xe1) r3 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r3) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES64=r0], 0x14}}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x47) write(r0, &(0x7f0000000000)="0553ad72e4a6bd03194e1b125e9cd0a9416df02e0e025410a7248d6813e4fe7b19c1bd5338e3ee9966b568b82c48", 0x97d08) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) 11:31:21 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r0 = dup(0xffffffffffffffff) write$6lowpan_enable(r0, &(0x7f0000000000)='0', 0xfffffd2c) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$mouse(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000000c0)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280), 0x0) creat(&(0x7f0000000080)='./file0\x00', 0xe1) r4 = ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES64=r1], 0x14}}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x47) write(r1, &(0x7f0000000000)="0553ad72e4a6bd03194e1b125e9cd0a9416df02e0e025410a7248d6813e4fe7b19c1bd5338e3ee9966b568b82c48", 0x97d08) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 11:31:21 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x99) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 11:31:21 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl(r0, 0x112f8b, &(0x7f00000011c0)="0dfa7beed8372cfc8c35bebdb507df1f406ce94a7ef049ae5137ff745d35f58e1e7cad195466f81083cb92015fac1d5fee7bf1c92bf1517267c4095168492b02f14a248b6ac5231bbf9c05f87b934bf431c26847de530c60e9d51a0d679d58cc7e8a69b376b36cf229c243b282b0abf6627dd3d33217367290f4026587fcb640eaefc729251609008d2ef7b7b10154583c26530a3b1c7e889d5d4da03cad3bc5d69dc3716e87d5bc37439871f1a4d723b5513b8f35e16de80c4d5884a73c3fed333797a8f66d2dd2e67a45d7904bb984f21adfebb694c1") (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) (async) syz_open_dev$vcsn(&(0x7f0000000000), 0x8, 0x94002) dup2(r0, r2) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) (async) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f00000025c0)) (async) ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f0000000000)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000003}]}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000002100)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b26]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP(r5, 0xd0009412, &(0x7f00000001c0)={0x0, 0x1}) ioctl$sock_inet_SIOCDELRT(r0, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) 11:31:21 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x99) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 11:31:21 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r0 = dup(0xffffffffffffffff) write$6lowpan_enable(r0, &(0x7f0000000000)='0', 0xfffffd2c) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$mouse(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000000c0)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280), 0x0) creat(&(0x7f0000000080)='./file0\x00', 0xe1) r4 = ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES64=r1], 0x14}}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x47) write(r1, &(0x7f0000000000)="0553ad72e4a6bd03194e1b125e9cd0a9416df02e0e025410a7248d6813e4fe7b19c1bd5338e3ee9966b568b82c48", 0x97d08) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 11:31:21 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl(r0, 0x112f8b, &(0x7f00000011c0)="0dfa7beed8372cfc8c35bebdb507df1f406ce94a7ef049ae5137ff745d35f58e1e7cad195466f81083cb92015fac1d5fee7bf1c92bf1517267c4095168492b02f14a248b6ac5231bbf9c05f87b934bf431c26847de530c60e9d51a0d679d58cc7e8a69b376b36cf229c243b282b0abf6627dd3d33217367290f4026587fcb640eaefc729251609008d2ef7b7b10154583c26530a3b1c7e889d5d4da03cad3bc5d69dc3716e87d5bc37439871f1a4d723b5513b8f35e16de80c4d5884a73c3fed333797a8f66d2dd2e67a45d7904bb984f21adfebb694c1") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) syz_open_dev$vcsn(&(0x7f0000000000), 0x8, 0x94002) dup2(r0, r2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f00000025c0)) ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f0000000000)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000003}]}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000002100)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b26]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP(r5, 0xd0009412, &(0x7f00000001c0)={0x0, 0x1}) ioctl$sock_inet_SIOCDELRT(r0, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) 11:31:21 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl(r0, 0x112f8b, &(0x7f00000011c0)="0dfa7beed8372cfc8c35bebdb507df1f406ce94a7ef049ae5137ff745d35f58e1e7cad195466f81083cb92015fac1d5fee7bf1c92bf1517267c4095168492b02f14a248b6ac5231bbf9c05f87b934bf431c26847de530c60e9d51a0d679d58cc7e8a69b376b36cf229c243b282b0abf6627dd3d33217367290f4026587fcb640eaefc729251609008d2ef7b7b10154583c26530a3b1c7e889d5d4da03cad3bc5d69dc3716e87d5bc37439871f1a4d723b5513b8f35e16de80c4d5884a73c3fed333797a8f66d2dd2e67a45d7904bb984f21adfebb694c1") (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) syz_open_dev$vcsn(&(0x7f0000000000), 0x8, 0x94002) dup2(r0, r2) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) (async) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f00000025c0)) (async) ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f0000000000)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000003}]}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000002100)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b26]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP(r5, 0xd0009412, &(0x7f00000001c0)={0x0, 0x1}) (async) ioctl$sock_inet_SIOCDELRT(r0, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) 11:31:21 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8914, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) 11:31:21 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x99) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) 11:31:21 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x890b, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) 11:31:22 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/12, 0x8}], 0x1) (async) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) io_setup(0x5, &(0x7f0000000000)=0x0) io_submit(r1, 0x6c2, &(0x7f0000000540)=[&(0x7f00000000c0)={0x982f00000000b819, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000780), 0x4000}]) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0xb0000, 0x0) (async) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000580)=ANY=[]) (async) r4 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000240)=r4) (async, rerun: 64) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x0, 0x1, 0x0, &(0x7f0000000080)=""/162, 0x0}) (async, rerun: 64) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x1, 0x0, 0x0, &(0x7f00000001c0)=""/121, 0x0}) (async, rerun: 64) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f00000002c0)=0x1) (async, rerun: 64) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000180)={0x0, r4}) (async, rerun: 32) write$eventfd(r4, &(0x7f0000000040)=0xfffffffffffffffe, 0x8) (async, rerun: 32) io_submit(r1, 0x3, &(0x7f0000000340)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x7, 0x7, r2, &(0x7f00000000c0)="b5bbf58c0bbe17a7df47efbe9e14cb86d411f03105fcbc4b32d7958e676ed7bd5a6a9d082efa517fa7d0cffcd906e5661585dfe67f241e8d57d613e6e90ae4", 0x3f, 0x7fff, 0x0, 0x4}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x6, 0xf2, r0, &(0x7f00000001c0)="93f8e00258d123ed707808d2ba9a894e0ea00d839d22535d8178ff933c766815398cab0f905a61c2f03a2055203bdad040c645", 0x33, 0x80, 0x0, 0x2, r4}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x8, 0x8, r0, &(0x7f0000000240)="72a3cdb17a97f6ea34b398b16d6d3a02af3b4777c8b0e5378a74d02e9225faaa135a6cccf449e005cd3448d0c80a650e5742fcbc230fd6e45bf39692cafe72bc09a216130aab01ed1e0dd08759f34da725a330254c59d104e50ce128529392054447d933d30f75cb75d739dfc07cec9247e797a42bb1c3f2ba8a65eae725c715e7dcb55d809657bcc4", 0x89, 0x4, 0x0, 0x1, r0}]) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) (async, rerun: 32) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) (async, rerun: 32) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 11:31:22 executing program 5: syz_emit_ethernet(0x72, &(0x7f00000001c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x64}, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4d857", 0x3c, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "47e393", 0x0, 0x88, 0x0, @remote, @mcast1, [], "3da468344a1af97a4754334f"}}}}}}}, 0x0) 11:31:22 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8914, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) 11:31:22 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x99) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) 11:31:22 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/12, 0x8}], 0x1) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) io_setup(0x5, &(0x7f0000000000)=0x0) io_submit(r1, 0x6c2, &(0x7f0000000540)=[&(0x7f00000000c0)={0x982f00000000b819, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000780), 0x4000}]) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0xb0000, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000580)=ANY=[]) r4 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000240)=r4) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x0, 0x1, 0x0, &(0x7f0000000080)=""/162, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x1, 0x0, 0x0, &(0x7f00000001c0)=""/121, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f00000002c0)=0x1) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000180)={0x0, r4}) write$eventfd(r4, &(0x7f0000000040)=0xfffffffffffffffe, 0x8) io_submit(r1, 0x3, &(0x7f0000000340)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x7, 0x7, r2, &(0x7f00000000c0)="b5bbf58c0bbe17a7df47efbe9e14cb86d411f03105fcbc4b32d7958e676ed7bd5a6a9d082efa517fa7d0cffcd906e5661585dfe67f241e8d57d613e6e90ae4", 0x3f, 0x7fff, 0x0, 0x4}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x6, 0xf2, r0, &(0x7f00000001c0)="93f8e00258d123ed707808d2ba9a894e0ea00d839d22535d8178ff933c766815398cab0f905a61c2f03a2055203bdad040c645", 0x33, 0x80, 0x0, 0x2, r4}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x8, 0x8, r0, &(0x7f0000000240)="72a3cdb17a97f6ea34b398b16d6d3a02af3b4777c8b0e5378a74d02e9225faaa135a6cccf449e005cd3448d0c80a650e5742fcbc230fd6e45bf39692cafe72bc09a216130aab01ed1e0dd08759f34da725a330254c59d104e50ce128529392054447d933d30f75cb75d739dfc07cec9247e797a42bb1c3f2ba8a65eae725c715e7dcb55d809657bcc4", 0x89, 0x4, 0x0, 0x1, r0}]) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 11:31:22 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8914, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) 11:31:22 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$mouse(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000280), 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r5 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES64=r2], 0x14}}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x47) write(r2, &(0x7f0000000000)="0553ad72e4a6bd03194e1b125e9cd0a9416df02e0e025410a7248d6813e4fe7b19c1bd5338e3ee9966b568b82c48", 0x97d08) (fail_nth: 1) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 11:31:22 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/12, 0x8}], 0x1) (async) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) io_setup(0x5, &(0x7f0000000000)=0x0) io_submit(r1, 0x6c2, &(0x7f0000000540)=[&(0x7f00000000c0)={0x982f00000000b819, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000780), 0x4000}]) (async) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0xb0000, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000580)=ANY=[]) (async) r4 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000240)=r4) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x0, 0x1, 0x0, &(0x7f0000000080)=""/162, 0x0}) (async, rerun: 64) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x1, 0x0, 0x0, &(0x7f00000001c0)=""/121, 0x0}) (rerun: 64) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f00000002c0)=0x1) (async, rerun: 32) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000180)={0x0, r4}) (async, rerun: 32) write$eventfd(r4, &(0x7f0000000040)=0xfffffffffffffffe, 0x8) (async) io_submit(r1, 0x3, &(0x7f0000000340)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x7, 0x7, r2, &(0x7f00000000c0)="b5bbf58c0bbe17a7df47efbe9e14cb86d411f03105fcbc4b32d7958e676ed7bd5a6a9d082efa517fa7d0cffcd906e5661585dfe67f241e8d57d613e6e90ae4", 0x3f, 0x7fff, 0x0, 0x4}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x6, 0xf2, r0, &(0x7f00000001c0)="93f8e00258d123ed707808d2ba9a894e0ea00d839d22535d8178ff933c766815398cab0f905a61c2f03a2055203bdad040c645", 0x33, 0x80, 0x0, 0x2, r4}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x8, 0x8, r0, &(0x7f0000000240)="72a3cdb17a97f6ea34b398b16d6d3a02af3b4777c8b0e5378a74d02e9225faaa135a6cccf449e005cd3448d0c80a650e5742fcbc230fd6e45bf39692cafe72bc09a216130aab01ed1e0dd08759f34da725a330254c59d104e50ce128529392054447d933d30f75cb75d739dfc07cec9247e797a42bb1c3f2ba8a65eae725c715e7dcb55d809657bcc4", 0x89, 0x4, 0x0, 0x1, r0}]) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 11:31:22 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) r1 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x2800, 0x0) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f00000000c0)) r3 = dup(r1) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) setsockopt$inet_tcp_int(r3, 0x6, 0x11, &(0x7f0000000000)=0x182, 0x4) 11:31:22 executing program 3: ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) 11:31:22 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x99) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) 11:31:22 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/12, 0x8}], 0x1) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) r1 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000080)={{0xffffffffffffffff, 0x1, 0x625, 0x0, 0x6}}) 11:31:22 executing program 3: ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) [ 2864.003547][ T7075] FAULT_INJECTION: forcing a failure. [ 2864.003547][ T7075] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2864.004094][ T7075] CPU: 0 PID: 7075 Comm: syz-executor.1 Not tainted 5.18.0-syzkaller-04943-g7e062cda7d90 #0 11:31:22 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x99) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) (fail_nth: 1) 11:31:22 executing program 3: ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) [ 2864.004126][ T7075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2864.004142][ T7075] Call Trace: [ 2864.004148][ T7075] [ 2864.004157][ T7075] dump_stack_lvl+0xcd/0x134 [ 2864.004195][ T7075] should_fail.cold+0x5/0xa [ 2864.004226][ T7075] prepare_alloc_pages+0x17b/0x570 11:31:22 executing program 3: socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) [ 2864.004256][ T7075] ? vtime_account_system+0x2c6/0x530 [ 2864.004289][ T7075] __alloc_pages+0x12f/0x500 [ 2864.004316][ T7075] ? __alloc_pages_slowpath.constprop.0+0x20e0/0x20e0 [ 2864.004341][ T7075] ? mptcp_sendmsg+0xdd/0x12e0 [ 2864.004362][ T7075] alloc_pages+0x1aa/0x310 [ 2864.004381][ T7075] skb_page_frag_refill+0x191/0x360 [ 2864.004402][ T7075] mptcp_sendmsg+0x4f7/0x12e0 [ 2864.004427][ T7075] ? mptcp_close_ssk+0xa0/0xa0 [ 2864.004444][ T7075] ? find_held_lock+0x2d/0x110 [ 2864.004465][ T7075] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 2864.004488][ T7075] inet6_sendmsg+0x99/0xe0 [ 2864.004505][ T7075] ? inet6_compat_ioctl+0x310/0x310 [ 2864.004527][ T7075] sock_sendmsg+0xcf/0x120 [ 2864.004543][ T7075] sock_write_iter+0x284/0x3c0 [ 2864.004558][ T7075] ? sock_sendmsg+0x120/0x120 [ 2864.004579][ T7075] ? aa_path_link+0x2f0/0x2f0 [ 2864.004598][ T7075] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2864.004618][ T7075] new_sync_write+0x38a/0x560 11:31:23 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$mouse(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000280), 0x0) creat(&(0x7f0000000080)='./file0\x00', 0xe1) r5 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES64=r2], 0x14}}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x47) write(r2, &(0x7f0000000000)="0553ad72e4a6bd03194e1b125e9cd0a9416df02e0e025410a7248d6813e4fe7b19c1bd5338e3ee9966b568b82c48", 0x97d08) (fail_nth: 1) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 11:31:23 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x99) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) (fail_nth: 2) 11:31:23 executing program 3: socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) 11:31:23 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$mouse(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000280), 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r5 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES64=r2], 0x14}}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x47) write(r2, &(0x7f0000000000)="0553ad72e4a6bd03194e1b125e9cd0a9416df02e0e025410a7248d6813e4fe7b19c1bd5338e3ee9966b568b82c48", 0x97d08) (fail_nth: 2) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 11:31:23 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) (async) r1 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) (async) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x2800, 0x0) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f00000000c0)) r3 = dup(r1) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) setsockopt$inet_tcp_int(r3, 0x6, 0x11, &(0x7f0000000000)=0x182, 0x4) 11:31:23 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/12, 0x8}], 0x1) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) (async) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) (async) r1 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000080)={{0xffffffffffffffff, 0x1, 0x625, 0x0, 0x6}}) [ 2864.004636][ T7075] ? new_sync_read+0x5f0/0x5f0 [ 2864.004660][ T7075] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 11:31:23 executing program 3: socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) [ 2864.004675][ T7075] ? security_file_permission+0xab/0xd0 [ 2864.004695][ T7075] vfs_write+0x7c0/0xac0 [ 2864.004713][ T7075] ksys_write+0x1e8/0x250 11:31:23 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8914, 0x0) [ 2864.004728][ T7075] ? __ia32_sys_read+0xb0/0xb0 [ 2864.004756][ T7075] ? syscall_enter_from_user_mode+0x21/0x70 11:31:23 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/12, 0x8}], 0x1) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) r1 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000080)={{0xffffffffffffffff, 0x1, 0x625, 0x0, 0x6}}) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/12, 0x8}], 0x1) (async) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) (async) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) (async) syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) (async) dup(r1) (async) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000080)={{0xffffffffffffffff, 0x1, 0x625, 0x0, 0x6}}) (async) 11:31:23 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x99) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) (fail_nth: 3) [ 2864.004802][ T7075] do_syscall_64+0x35/0xb0 [ 2864.004830][ T7075] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 2864.004859][ T7075] RIP: 0033:0x7fa8b8c89109 [ 2864.004879][ T7075] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 11:31:23 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8914, 0x0) [ 2864.004907][ T7075] RSP: 002b:00007fa8b9e62168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2864.004934][ T7075] RAX: ffffffffffffffda RBX: 00007fa8b8d9c030 RCX: 00007fa8b8c89109 [ 2864.004951][ T7075] RDX: 0000000000097d08 RSI: 0000000020000000 RDI: 0000000000000005 [ 2864.004962][ T7075] RBP: 00007fa8b9e621d0 R08: 0000000000000000 R09: 0000000000000000 11:31:23 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8914, 0x0) [ 2864.004971][ T7075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2864.004979][ T7075] R13: 00007fa8b92cfb1f R14: 00007fa8b9e62300 R15: 0000000000022000 [ 2864.004999][ T7075] [ 2864.312333][ T7095] FAULT_INJECTION: forcing a failure. [ 2864.312333][ T7095] name failslab, interval 1, probability 0, space 0, times 0 [ 2864.312369][ T7095] CPU: 0 PID: 7095 Comm: syz-executor.0 Not tainted 5.18.0-syzkaller-04943-g7e062cda7d90 #0 [ 2864.312397][ T7095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2864.312412][ T7095] Call Trace: [ 2864.312420][ T7095] [ 2864.312429][ T7095] dump_stack_lvl+0xcd/0x134 [ 2864.312463][ T7095] should_fail.cold+0x5/0xa [ 2864.312492][ T7095] should_failslab+0x5/0x10 [ 2864.312521][ T7095] __kmalloc+0x7e/0x350 [ 2864.312546][ T7095] ? tomoyo_realpath_from_path+0xc3/0x620 [ 2864.312580][ T7095] tomoyo_realpath_from_path+0xc3/0x620 [ 2864.312611][ T7095] ? tomoyo_profile+0x42/0x50 [ 2864.312646][ T7095] tomoyo_path_number_perm+0x1d5/0x590 [ 2864.312671][ T7095] ? tomoyo_path_number_perm+0x18d/0x590 [ 2864.312703][ T7095] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 2864.312731][ T7095] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2864.312799][ T7095] ? __context_tracking_exit+0xb8/0xe0 [ 2864.312835][ T7095] ? __fget_files+0x286/0x470 [ 2864.312870][ T7095] security_file_ioctl+0x50/0xb0 [ 2864.312914][ T7095] __x64_sys_ioctl+0xb3/0x200 [ 2864.312945][ T7095] do_syscall_64+0x35/0xb0 [ 2864.312972][ T7095] entry_SYSCALL_64_after_hwframe+0x46/0xb0 11:31:24 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$mouse(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000280), 0x0) creat(&(0x7f0000000080)='./file0\x00', 0xe1) r5 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES64=r2], 0x14}}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x47) write(r2, &(0x7f0000000000)="0553ad72e4a6bd03194e1b125e9cd0a9416df02e0e025410a7248d6813e4fe7b19c1bd5338e3ee9966b568b82c48", 0x97d08) (fail_nth: 2) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 11:31:24 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/12, 0x8}], 0x1) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3) 11:31:24 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x99) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 11:31:24 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8914, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) (fail_nth: 1) 11:31:24 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) (async) r1 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x2800, 0x0) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f00000000c0)) r3 = dup(r1) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) (async) setsockopt$inet_tcp_int(r3, 0x6, 0x11, &(0x7f0000000000)=0x182, 0x4) 11:31:24 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$mouse(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000280), 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r5 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES64=r2], 0x14}}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x47) write(r2, &(0x7f0000000000)="0553ad72e4a6bd03194e1b125e9cd0a9416df02e0e025410a7248d6813e4fe7b19c1bd5338e3ee9966b568b82c48", 0x97d08) (fail_nth: 3) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) [ 2864.313003][ T7095] RIP: 0033:0x7f33dba89109 [ 2864.313025][ T7095] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2864.313050][ T7095] RSP: 002b:00007f33dcbda168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 11:31:24 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8914, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) (fail_nth: 2) [ 2864.313076][ T7095] RAX: ffffffffffffffda RBX: 00007f33dbb9c030 RCX: 00007f33dba89109 [ 2864.313094][ T7095] RDX: 0000000000000000 RSI: 00000000000054a0 RDI: 0000000000000003 [ 2864.313110][ T7095] RBP: 00007f33dcbda1d0 R08: 0000000000000000 R09: 0000000000000000 11:31:24 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8914, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) (fail_nth: 3) 11:31:24 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/12, 0x8}], 0x1) (async, rerun: 64) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) (rerun: 64) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) (async, rerun: 64) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) (rerun: 64) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3) 11:31:24 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x99) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x2) [ 2864.313126][ T7095] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2864.313141][ T7095] R13: 00007f33dc0cfb1f R14: 00007f33dcbda300 R15: 0000000000022000 [ 2864.313176][ T7095] [ 2864.313374][ T7095] ERROR: Out of memory at tomoyo_realpath_from_path. 11:31:24 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8914, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) (fail_nth: 4) [ 2864.908946][ T7111] FAULT_INJECTION: forcing a failure. [ 2864.908946][ T7111] name failslab, interval 1, probability 0, space 0, times 0 [ 2864.908969][ T7111] CPU: 0 PID: 7111 Comm: syz-executor.0 Not tainted 5.18.0-syzkaller-04943-g7e062cda7d90 #0 [ 2864.908985][ T7111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2864.908994][ T7111] Call Trace: [ 2864.908998][ T7111] [ 2864.909003][ T7111] dump_stack_lvl+0xcd/0x134 11:31:24 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/12, 0x8}], 0x1) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) (async) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3) [ 2864.909024][ T7111] should_fail.cold+0x5/0xa [ 2864.909042][ T7111] should_failslab+0x5/0x10 [ 2864.909059][ T7111] __kmalloc+0x7e/0x350 [ 2864.909074][ T7111] ? tomoyo_encode2.part.0+0xe9/0x3a0 [ 2864.909093][ T7111] tomoyo_encode2.part.0+0xe9/0x3a0 [ 2864.909107][ T7111] ? trace_kmalloc+0x32/0xf0 [ 2864.909125][ T7111] tomoyo_encode+0x28/0x50 [ 2864.909139][ T7111] tomoyo_realpath_from_path+0x186/0x620 [ 2864.909162][ T7111] tomoyo_path_number_perm+0x1d5/0x590 [ 2864.909176][ T7111] ? tomoyo_path_number_perm+0x18d/0x590 [ 2864.909193][ T7111] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 2864.909210][ T7111] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2864.909271][ T7111] ? __context_tracking_exit+0xb8/0xe0 [ 2864.909306][ T7111] ? __fget_files+0x286/0x470 [ 2864.909341][ T7111] security_file_ioctl+0x50/0xb0 [ 2864.909383][ T7111] __x64_sys_ioctl+0xb3/0x200 [ 2864.909413][ T7111] do_syscall_64+0x35/0xb0 [ 2864.909442][ T7111] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 2864.909468][ T7111] RIP: 0033:0x7f33dba89109 [ 2864.909488][ T7111] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2864.909514][ T7111] RSP: 002b:00007f33dcbda168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2864.909539][ T7111] RAX: ffffffffffffffda RBX: 00007f33dbb9c030 RCX: 00007f33dba89109 [ 2864.909557][ T7111] RDX: 0000000000000000 RSI: 00000000000054a0 RDI: 0000000000000003 [ 2864.909573][ T7111] RBP: 00007f33dcbda1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2864.909589][ T7111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2864.909604][ T7111] R13: 00007f33dc0cfb1f R14: 00007f33dcbda300 R15: 0000000000022000 [ 2864.909628][ T7111] [ 2864.912643][ T7111] ERROR: Out of memory at tomoyo_realpath_from_path. 11:31:25 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$mouse(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000280), 0x0) creat(&(0x7f0000000080)='./file0\x00', 0xe1) r5 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES64=r2], 0x14}}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x47) write(r2, &(0x7f0000000000)="0553ad72e4a6bd03194e1b125e9cd0a9416df02e0e025410a7248d6813e4fe7b19c1bd5338e3ee9966b568b82c48", 0x97d08) (fail_nth: 3) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 11:31:25 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x99) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x10) 11:31:25 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8914, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) 11:31:25 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) readv(r1, &(0x7f0000000040), 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f00000025c0)) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000000)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}]}) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r3, 0xf507, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000080)=0x800005) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 11:31:25 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8917, &(0x7f0000000000)={0x0, {0x2, 0x4e22, @remote}, {0x2, 0x200, @multicast1}, {0x2, 0xfffc, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) 11:31:25 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$mouse(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000280), 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r5 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES64=r2], 0x14}}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x47) write(r2, &(0x7f0000000000)="0553ad72e4a6bd03194e1b125e9cd0a9416df02e0e025410a7248d6813e4fe7b19c1bd5338e3ee9966b568b82c48", 0x97d08) (fail_nth: 4) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) [ 2865.104516][ T7120] FAULT_INJECTION: forcing a failure. [ 2865.104516][ T7120] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2865.104812][ T7120] CPU: 0 PID: 7120 Comm: syz-executor.5 Not tainted 5.18.0-syzkaller-04943-g7e062cda7d90 #0 [ 2865.104844][ T7120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2865.104860][ T7120] Call Trace: [ 2865.104867][ T7120] [ 2865.104876][ T7120] dump_stack_lvl+0xcd/0x134 [ 2865.104912][ T7120] should_fail.cold+0x5/0xa 11:31:25 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x2, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) 11:31:25 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8917, &(0x7f0000000000)={0x0, {0x2, 0x4e22, @remote}, {0x2, 0x200, @multicast1}, {0x2, 0xfffc, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) [ 2865.104942][ T7120] prepare_alloc_pages+0x17b/0x570 [ 2865.104977][ T7120] __alloc_pages+0x12f/0x500 11:31:25 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x99) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x541b) 11:31:25 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x10, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) [ 2865.105005][ T7120] ? __alloc_pages_slowpath.constprop.0+0x20e0/0x20e0 [ 2865.105052][ T7120] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 2865.105084][ T7120] ? lockdep_hardirqs_on+0x79/0x100 [ 2865.105124][ T7120] alloc_pages+0x1aa/0x310 [ 2865.105159][ T7120] skb_page_frag_refill+0x191/0x360 11:31:25 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8917, &(0x7f0000000000)={0x0, {0x2, 0x4e22, @remote}, {0x2, 0x200, @multicast1}, {0x2, 0xfffc, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) (async) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) [ 2865.105195][ T7120] mptcp_sendmsg+0x4f7/0x12e0 [ 2865.105245][ T7120] ? mptcp_close_ssk+0xa0/0xa0 [ 2865.105276][ T7120] ? find_held_lock+0x2d/0x110 [ 2865.105306][ T7120] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 11:31:25 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x541b, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) [ 2865.105341][ T7120] inet6_sendmsg+0x99/0xe0 [ 2865.105369][ T7120] ? inet6_compat_ioctl+0x310/0x310 [ 2865.105397][ T7120] sock_sendmsg+0xcf/0x120 [ 2865.105423][ T7120] sock_write_iter+0x284/0x3c0 [ 2865.105449][ T7120] ? sock_sendmsg+0x120/0x120 [ 2865.105486][ T7120] ? aa_path_link+0x2f0/0x2f0 [ 2865.105519][ T7120] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2865.105552][ T7120] new_sync_write+0x38a/0x560 [ 2865.105582][ T7120] ? new_sync_read+0x5f0/0x5f0 [ 2865.105626][ T7120] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2865.105654][ T7120] ? security_file_permission+0xab/0xd0 [ 2865.105690][ T7120] vfs_write+0x7c0/0xac0 [ 2865.105723][ T7120] ksys_write+0x1e8/0x250 [ 2865.105751][ T7120] ? __ia32_sys_read+0xb0/0xb0 [ 2865.105781][ T7120] ? syscall_enter_from_user_mode+0x21/0x70 [ 2865.105820][ T7120] do_syscall_64+0x35/0xb0 [ 2865.105849][ T7120] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 2865.105877][ T7120] RIP: 0033:0x7fb693889109 [ 2865.105898][ T7120] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2865.105924][ T7120] RSP: 002b:00007fb694937168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2865.105948][ T7120] RAX: ffffffffffffffda RBX: 00007fb69399c030 RCX: 00007fb693889109 [ 2865.105967][ T7120] RDX: 0000000000097d08 RSI: 0000000020000000 RDI: 0000000000000005 [ 2865.105984][ T7120] RBP: 00007fb6949371d0 R08: 0000000000000000 R09: 0000000000000000 [ 2865.106001][ T7120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2865.106017][ T7120] R13: 00007fb693ecfb1f R14: 00007fb694937300 R15: 0000000000022000 [ 2865.106061][ T7120] [ 2865.196214][ T7127] FAULT_INJECTION: forcing a failure. [ 2865.196214][ T7127] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2865.196251][ T7127] CPU: 1 PID: 7127 Comm: syz-executor.1 Not tainted 5.18.0-syzkaller-04943-g7e062cda7d90 #0 [ 2865.196280][ T7127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2865.196295][ T7127] Call Trace: [ 2865.196302][ T7127] [ 2865.196311][ T7127] dump_stack_lvl+0xcd/0x134 [ 2865.196346][ T7127] should_fail.cold+0x5/0xa [ 2865.196376][ T7127] copy_page_from_iter+0x447/0x9c0 [ 2865.196420][ T7127] mptcp_sendmsg+0x7b0/0x12e0 [ 2865.196468][ T7127] ? mptcp_close_ssk+0xa0/0xa0 [ 2865.196499][ T7127] ? find_held_lock+0x2d/0x110 [ 2865.196530][ T7127] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 2865.196565][ T7127] inet6_sendmsg+0x99/0xe0 [ 2865.196594][ T7127] ? inet6_compat_ioctl+0x310/0x310 [ 2865.196621][ T7127] sock_sendmsg+0xcf/0x120 [ 2865.196647][ T7127] sock_write_iter+0x284/0x3c0 [ 2865.196673][ T7127] ? sock_sendmsg+0x120/0x120 [ 2865.196697][ T7127] ? aa_path_link+0x2f0/0x2f0 [ 2865.196713][ T7127] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2865.196732][ T7127] new_sync_write+0x38a/0x560 [ 2865.196749][ T7127] ? new_sync_read+0x5f0/0x5f0 [ 2865.196773][ T7127] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2865.196789][ T7127] ? security_file_permission+0xab/0xd0 [ 2865.196808][ T7127] vfs_write+0x7c0/0xac0 [ 2865.196826][ T7127] ksys_write+0x1e8/0x250 [ 2865.196841][ T7127] ? __ia32_sys_read+0xb0/0xb0 [ 2865.196858][ T7127] ? syscall_enter_from_user_mode+0x21/0x70 [ 2865.196890][ T7127] do_syscall_64+0x35/0xb0 [ 2865.196906][ T7127] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 2865.196924][ T7127] RIP: 0033:0x7fa8b8c89109 [ 2865.196937][ T7127] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2865.196952][ T7127] RSP: 002b:00007fa8b9e41168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2865.196966][ T7127] RAX: ffffffffffffffda RBX: 00007fa8b8d9c100 RCX: 00007fa8b8c89109 [ 2865.196976][ T7127] RDX: 0000000000097d08 RSI: 0000000020000000 RDI: 0000000000000005 [ 2865.196985][ T7127] RBP: 00007fa8b9e411d0 R08: 0000000000000000 R09: 0000000000000000 [ 2865.196995][ T7127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2865.197004][ T7127] R13: 00007fa8b92cfb1f R14: 00007fa8b9e41300 R15: 0000000000022000 [ 2865.197023][ T7127] [ 2865.205368][ T7138] FAULT_INJECTION: forcing a failure. [ 2865.205368][ T7138] name fail_usercopy, interval 1, probability 0, space 0, times 0 11:31:26 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$mouse(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000280), 0x0) creat(&(0x7f0000000080)='./file0\x00', 0xe1) r5 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES64=r2], 0x14}}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x47) write(r2, &(0x7f0000000000)="0553ad72e4a6bd03194e1b125e9cd0a9416df02e0e025410a7248d6813e4fe7b19c1bd5338e3ee9966b568b82c48", 0x97d08) (fail_nth: 4) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 11:31:26 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) readv(r1, &(0x7f0000000040), 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f00000025c0)) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000000)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}]}) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r3, 0xf507, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000080)=0x800005) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) readv(r1, &(0x7f0000000040), 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) (async) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f00000025c0)) (async) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000000)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}]}) (async) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r3, 0xf507, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000080)=0x800005) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) (async) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) (async) 11:31:26 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x99) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x5420) 11:31:26 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8917, &(0x7f0000000000)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @multicast1}, 0x241}) 11:31:26 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x5421, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) 11:31:26 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$mouse(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000280), 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r5 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES64=r2], 0x14}}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x47) write(r2, &(0x7f0000000000)="0553ad72e4a6bd03194e1b125e9cd0a9416df02e0e025410a7248d6813e4fe7b19c1bd5338e3ee9966b568b82c48", 0x97d08) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) [ 2865.205405][ T7138] CPU: 1 PID: 7138 Comm: syz-executor.0 Not tainted 5.18.0-syzkaller-04943-g7e062cda7d90 #0 [ 2865.205434][ T7138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 11:31:26 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8917, &(0x7f0000000000)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @multicast1}, 0x241}) [ 2865.205450][ T7138] Call Trace: [ 2865.205457][ T7138] [ 2865.205466][ T7138] dump_stack_lvl+0xcd/0x134 [ 2865.205502][ T7138] should_fail.cold+0x5/0xa [ 2865.205532][ T7138] _copy_to_user+0x2a/0x140 [ 2865.205563][ T7138] simple_read_from_buffer+0xcc/0x160 [ 2865.205599][ T7138] proc_fail_nth_read+0x187/0x220 [ 2865.205634][ T7138] ? proc_exe_link+0x1d0/0x1d0 [ 2865.205663][ T7138] ? security_file_permission+0xab/0xd0 11:31:26 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x5450, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) [ 2865.205698][ T7138] ? proc_exe_link+0x1d0/0x1d0 [ 2865.205726][ T7138] vfs_read+0x1ef/0x5d0 [ 2865.205759][ T7138] ksys_read+0x127/0x250 [ 2865.205777][ T7138] ? vfs_write+0xac0/0xac0 [ 2865.205793][ T7138] ? syscall_enter_from_user_mode+0x21/0x70 [ 2865.205816][ T7138] do_syscall_64+0x35/0xb0 [ 2865.205832][ T7138] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 2865.205851][ T7138] RIP: 0033:0x7f33dba3bcbc 11:31:26 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x99) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x5421) [ 2865.205864][ T7138] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 2865.205878][ T7138] RSP: 002b:00007f33dcbda160 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2865.205893][ T7138] RAX: ffffffffffffffda RBX: 00007f33dbb9c030 RCX: 00007f33dba3bcbc [ 2865.205902][ T7138] RDX: 000000000000000f RSI: 00007f33dcbda1e0 RDI: 0000000000000004 [ 2865.205911][ T7138] RBP: 00007f33dcbda1d0 R08: 0000000000000000 R09: 0000000000000000 11:31:26 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8917, &(0x7f0000000000)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @multicast1}, 0x241}) 11:31:26 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x5451, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) [ 2865.205920][ T7138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 11:31:26 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x5452, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) [ 2865.205929][ T7138] R13: 00007f33dc0cfb1f R14: 00007f33dcbda300 R15: 0000000000022000 [ 2865.205950][ T7138] [ 2865.874412][ T7145] FAULT_INJECTION: forcing a failure. [ 2865.874412][ T7145] name failslab, interval 1, probability 0, space 0, times 0 [ 2865.874444][ T7145] CPU: 1 PID: 7145 Comm: syz-executor.3 Not tainted 5.18.0-syzkaller-04943-g7e062cda7d90 #0 [ 2865.874471][ T7145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2865.874501][ T7145] Call Trace: [ 2865.874508][ T7145] [ 2865.874516][ T7145] dump_stack_lvl+0xcd/0x134 [ 2865.874549][ T7145] should_fail.cold+0x5/0xa [ 2865.874576][ T7145] should_failslab+0x5/0x10 [ 2865.874604][ T7145] __kmalloc+0x7e/0x350 [ 2865.874629][ T7145] ? tomoyo_realpath_from_path+0xc3/0x620 [ 2865.874661][ T7145] tomoyo_realpath_from_path+0xc3/0x620 [ 2865.874690][ T7145] ? tomoyo_profile+0x42/0x50 [ 2865.874723][ T7145] tomoyo_path_number_perm+0x1d5/0x590 [ 2865.874746][ T7145] ? tomoyo_path_number_perm+0x18d/0x590 [ 2865.874775][ T7145] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 2865.874802][ T7145] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2865.874864][ T7145] ? __context_tracking_exit+0xb8/0xe0 [ 2865.874897][ T7145] ? __fget_files+0x286/0x470 [ 2865.874934][ T7145] security_file_ioctl+0x50/0xb0 [ 2865.874967][ T7145] __x64_sys_ioctl+0xb3/0x200 [ 2865.874999][ T7145] do_syscall_64+0x35/0xb0 [ 2865.875026][ T7145] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 2865.875053][ T7145] RIP: 0033:0x7febb4689109 [ 2865.875072][ T7145] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2865.875096][ T7145] RSP: 002b:00007febb57f9168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2865.875120][ T7145] RAX: ffffffffffffffda RBX: 00007febb479bf60 RCX: 00007febb4689109 [ 2865.875137][ T7145] RDX: 0000000020000140 RSI: 0000000000008914 RDI: 0000000000000003 11:31:27 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$mouse(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000280), 0x0) creat(&(0x7f0000000080)='./file0\x00', 0xe1) r5 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES64=r2], 0x14}}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x47) write(r2, &(0x7f0000000000)="0553ad72e4a6bd03194e1b125e9cd0a9416df02e0e025410a7248d6813e4fe7b19c1bd5338e3ee9966b568b82c48", 0x97d08) (fail_nth: 5) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 11:31:27 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x99) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x5422) 11:31:27 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f00000001c0)={{0x0, 0x7, 0x345, 0x9, 0xffffffff, 0x7, 0x0, 0x20, 0x371, 0x1, 0x1, 0xfffffffffffffff7, 0xffffffffffffffc5, 0xae4, 0x40}}) ioctl$sock_inet_SIOCDELRT(r0, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) r1 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) io_setup(0x5, &(0x7f0000000000)=0x0) io_submit(r2, 0x6c2, &(0x7f0000000540)=[&(0x7f00000000c0)={0x982f00000000b819, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000780), 0x4000}]) r3 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) sendto$inet(r4, &(0x7f0000000080)="0b973d7504c78518827c5e4e0ffe8f3531dfd95990c6b2e829ee497fb191583a2074f4725374", 0x26, 0x24040004, &(0x7f0000000100)={0x2, 0x4e24, @remote}, 0x10) getsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) 11:31:27 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) readv(r1, &(0x7f0000000040), 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) (async) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f00000025c0)) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000000)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}]}) (async) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r3, 0xf507, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000080)=0x800005) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) (async) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 11:31:27 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x5460, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) 11:31:27 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$mouse(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000280), 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r5 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES64=r2], 0x14}}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x47) write(r2, &(0x7f0000000000)="0753ad72e4a6bd03194e1b125e9cd0a9416df02e0e025410a7248d6813e4fe7b19c1bd5338e3ee9966b568b82c48", 0x97d08) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) [ 2865.875153][ T7145] RBP: 00007febb57f91d0 R08: 0000000000000000 R09: 0000000000000000 [ 2865.875168][ T7145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2865.875183][ T7145] R13: 00007febb4ccfb1f R14: 00007febb57f9300 R15: 0000000000022000 11:31:27 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8901, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) [ 2865.875216][ T7145] [ 2865.875226][ T7145] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2865.954527][ T7156] FAULT_INJECTION: forcing a failure. [ 2865.954527][ T7156] name failslab, interval 1, probability 0, space 0, times 0 [ 2865.954637][ T7156] CPU: 0 PID: 7156 Comm: syz-executor.3 Not tainted 5.18.0-syzkaller-04943-g7e062cda7d90 #0 [ 2865.954666][ T7156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2865.954681][ T7156] Call Trace: [ 2865.954687][ T7156] [ 2865.954695][ T7156] dump_stack_lvl+0xcd/0x134 [ 2865.954728][ T7156] should_fail.cold+0x5/0xa [ 2865.954758][ T7156] should_failslab+0x5/0x10 [ 2865.954788][ T7156] __kmalloc+0x7e/0x350 [ 2865.954815][ T7156] ? tomoyo_encode2.part.0+0xe9/0x3a0 11:31:27 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8902, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) [ 2865.954851][ T7156] tomoyo_encode2.part.0+0xe9/0x3a0 [ 2865.954878][ T7156] ? trace_kmalloc+0x32/0xf0 [ 2865.954907][ T7156] tomoyo_encode+0x28/0x50 [ 2865.954932][ T7156] tomoyo_realpath_from_path+0x186/0x620 [ 2865.954963][ T7156] ? tomoyo_profile+0x42/0x50 11:31:27 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x99) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x5423) [ 2865.954997][ T7156] tomoyo_path_number_perm+0x1d5/0x590 11:31:27 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/12, 0x8}], 0x1) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x408c00) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000000c0)={{0x1, 0x1, 0x621, 0x2, 0x2}}) [ 2865.955023][ T7156] ? tomoyo_path_number_perm+0x18d/0x590 11:31:27 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8903, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) [ 2865.955053][ T7156] ? tomoyo_execute_permission+0x4a0/0x4a0 11:31:27 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8904, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) [ 2865.955082][ T7156] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2865.955149][ T7156] ? __context_tracking_exit+0xb8/0xe0 [ 2865.955185][ T7156] ? __fget_files+0x286/0x470 [ 2865.955221][ T7156] security_file_ioctl+0x50/0xb0 [ 2865.955255][ T7156] __x64_sys_ioctl+0xb3/0x200 [ 2865.955285][ T7156] do_syscall_64+0x35/0xb0 [ 2865.955315][ T7156] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 2865.955343][ T7156] RIP: 0033:0x7febb4689109 [ 2865.955362][ T7156] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2865.955377][ T7156] RSP: 002b:00007febb57f9168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2865.955392][ T7156] RAX: ffffffffffffffda RBX: 00007febb479bf60 RCX: 00007febb4689109 [ 2865.955403][ T7156] RDX: 0000000020000140 RSI: 0000000000008914 RDI: 0000000000000003 [ 2865.955419][ T7156] RBP: 00007febb57f91d0 R08: 0000000000000000 R09: 0000000000000000 [ 2865.955428][ T7156] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2865.955438][ T7156] R13: 00007febb4ccfb1f R14: 00007febb57f9300 R15: 0000000000022000 [ 2865.955458][ T7156] [ 2865.955671][ T7156] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2866.039001][ T7158] FAULT_INJECTION: forcing a failure. [ 2866.039001][ T7158] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2866.039024][ T7158] CPU: 1 PID: 7158 Comm: syz-executor.3 Not tainted 5.18.0-syzkaller-04943-g7e062cda7d90 #0 [ 2866.039040][ T7158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2866.039049][ T7158] Call Trace: [ 2866.039053][ T7158] [ 2866.039058][ T7158] dump_stack_lvl+0xcd/0x134 [ 2866.039079][ T7158] should_fail.cold+0x5/0xa [ 2866.039096][ T7158] _copy_from_user+0x2a/0x170 [ 2866.039116][ T7158] get_user_ifreq+0xef/0x250 11:31:28 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$mouse(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000280), 0x0) creat(&(0x7f0000000080)='./file0\x00', 0xe1) r5 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES64=r2], 0x14}}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x47) write(r2, &(0x7f0000000000)="0553ad72e4a6bd03194e1b125e9cd0a9416df02e0e025410a7248d6813e4fe7b19c1bd5338e3ee9966b568b82c48", 0x97d08) (fail_nth: 6) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 11:31:28 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x99) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x5450) 11:31:28 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/12, 0x8}], 0x1) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x408c00) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000000c0)={{0x1, 0x1, 0x621, 0x2, 0x2}}) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/12, 0x8}], 0x1) (async) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) (async) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) (async) syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x408c00) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000000c0)={{0x1, 0x1, 0x621, 0x2, 0x2}}) (async) 11:31:28 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8906, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) 11:31:28 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f00000001c0)={{0x0, 0x7, 0x345, 0x9, 0xffffffff, 0x7, 0x0, 0x20, 0x371, 0x1, 0x1, 0xfffffffffffffff7, 0xffffffffffffffc5, 0xae4, 0x40}}) (async, rerun: 64) ioctl$sock_inet_SIOCDELRT(r0, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) (async, rerun: 64) r1 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) (async) io_setup(0x5, &(0x7f0000000000)=0x0) io_submit(r2, 0x6c2, &(0x7f0000000540)=[&(0x7f00000000c0)={0x982f00000000b819, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000780), 0x4000}]) r3 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) (async) sendto$inet(r4, &(0x7f0000000080)="0b973d7504c78518827c5e4e0ffe8f3531dfd95990c6b2e829ee497fb191583a2074f4725374", 0x26, 0x24040004, &(0x7f0000000100)={0x2, 0x4e24, @remote}, 0x10) getsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) 11:31:28 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$mouse(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000280), 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r5 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES64=r2], 0x14}}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x47) write(r2, &(0x7f0000000000)="0853ad72e4a6bd03194e1b125e9cd0a9416df02e0e025410a7248d6813e4fe7b19c1bd5338e3ee9966b568b82c48", 0x97d08) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) [ 2866.039132][ T7158] inet_ioctl+0x1bf/0x320 [ 2866.039148][ T7158] ? ipip_gro_complete+0x100/0x100 [ 2866.039163][ T7158] ? lock_downgrade+0x6e0/0x6e0 [ 2866.039180][ T7158] ? kfree+0xd6/0x4d0 [ 2866.039194][ T7158] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 11:31:28 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f00000001c0)={{0x0, 0x7, 0x345, 0x9, 0xffffffff, 0x7, 0x0, 0x20, 0x371, 0x1, 0x1, 0xfffffffffffffff7, 0xffffffffffffffc5, 0xae4, 0x40}}) ioctl$sock_inet_SIOCDELRT(r0, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) r1 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) io_setup(0x5, &(0x7f0000000000)=0x0) io_submit(r2, 0x6c2, &(0x7f0000000540)=[&(0x7f00000000c0)={0x982f00000000b819, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000780), 0x4000}]) r3 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) sendto$inet(r4, &(0x7f0000000080)="0b973d7504c78518827c5e4e0ffe8f3531dfd95990c6b2e829ee497fb191583a2074f4725374", 0x26, 0x24040004, &(0x7f0000000100)={0x2, 0x4e24, @remote}, 0x10) getsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) socket$inet_tcp(0x2, 0x1, 0x0) (async) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f00000001c0)={{0x0, 0x7, 0x345, 0x9, 0xffffffff, 0x7, 0x0, 0x20, 0x371, 0x1, 0x1, 0xfffffffffffffff7, 0xffffffffffffffc5, 0xae4, 0x40}}) (async) ioctl$sock_inet_SIOCDELRT(r0, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) (async) socket$inet6(0xa, 0x3, 0x3c) (async) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) (async) io_setup(0x5, &(0x7f0000000000)) (async) io_submit(r2, 0x6c2, &(0x7f0000000540)=[&(0x7f00000000c0)={0x982f00000000b819, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000780), 0x4000}]) (async) syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) (async) dup(r3) (async) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) (async) sendto$inet(r4, &(0x7f0000000080)="0b973d7504c78518827c5e4e0ffe8f3531dfd95990c6b2e829ee497fb191583a2074f4725374", 0x26, 0x24040004, &(0x7f0000000100)={0x2, 0x4e24, @remote}, 0x10) (async) getsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) [ 2866.039216][ T7158] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2866.039244][ T7158] ? tomoyo_path_number_perm+0x24e/0x590 [ 2866.039274][ T7158] ? tomoyo_execute_permission+0x4a0/0x4a0 11:31:28 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8907, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) 11:31:28 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/12, 0x8}], 0x1) (async, rerun: 64) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) (rerun: 64) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) (async, rerun: 64) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x408c00) (rerun: 64) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000000c0)={{0x1, 0x1, 0x621, 0x2, 0x2}}) [ 2866.039301][ T7158] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2866.039339][ T7158] sock_do_ioctl+0xcc/0x230 11:31:28 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x99) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x5451) [ 2866.039354][ T7158] ? get_user_ifreq+0x250/0x250 [ 2866.039368][ T7158] ? vfs_fileattr_set+0xbe0/0xbe0 11:31:28 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x890b, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) [ 2866.039393][ T7158] sock_ioctl+0x2f1/0x640 [ 2866.039406][ T7158] ? br_ioctl_call+0xa0/0xa0 11:31:29 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/12, 0x8}], 0x1) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x7, 0x5, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x9, 0x1f9000) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = dup(0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) [ 2866.039421][ T7158] ? __fget_files+0x286/0x470 [ 2866.039439][ T7158] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2866.039455][ T7158] ? br_ioctl_call+0xa0/0xa0 [ 2866.039469][ T7158] __x64_sys_ioctl+0x193/0x200 [ 2866.039485][ T7158] do_syscall_64+0x35/0xb0 [ 2866.039502][ T7158] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 2866.039518][ T7158] RIP: 0033:0x7febb4689109 [ 2866.039530][ T7158] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2866.039544][ T7158] RSP: 002b:00007febb57f9168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2866.039558][ T7158] RAX: ffffffffffffffda RBX: 00007febb479bf60 RCX: 00007febb4689109 [ 2866.039568][ T7158] RDX: 0000000020000140 RSI: 0000000000008914 RDI: 0000000000000003 [ 2866.039577][ T7158] RBP: 00007febb57f91d0 R08: 0000000000000000 R09: 0000000000000000 [ 2866.039586][ T7158] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2866.039594][ T7158] R13: 00007febb4ccfb1f R14: 00007febb57f9300 R15: 0000000000022000 [ 2866.039612][ T7158] [ 2866.105859][ T7159] FAULT_INJECTION: forcing a failure. [ 2866.105859][ T7159] name failslab, interval 1, probability 0, space 0, times 0 [ 2866.105892][ T7159] CPU: 1 PID: 7159 Comm: syz-executor.1 Not tainted 5.18.0-syzkaller-04943-g7e062cda7d90 #0 [ 2866.105926][ T7159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2866.105941][ T7159] Call Trace: [ 2866.105947][ T7159] [ 2866.105956][ T7159] dump_stack_lvl+0xcd/0x134 [ 2866.105988][ T7159] should_fail.cold+0x5/0xa [ 2866.106017][ T7159] should_failslab+0x5/0x10 [ 2866.106043][ T7159] kmem_cache_alloc_node+0x65/0x3f0 [ 2866.106071][ T7159] ? __alloc_skb+0x215/0x340 [ 2866.106099][ T7159] __alloc_skb+0x215/0x340 [ 2866.106120][ T7159] ? tcp_send_mss+0x15e/0x2b0 [ 2866.106148][ T7159] mptcp_sendmsg_frag+0x40d/0x2a80 [ 2866.106185][ T7159] ? __local_bh_enable_ip+0xa0/0x120 [ 2866.106217][ T7159] __mptcp_push_pending+0x232/0x720 [ 2866.106257][ T7159] ? mptcp_shutdown+0x110/0x110 [ 2866.106287][ T7159] ? copyin.part.0+0xdf/0x100 [ 2866.106311][ T7159] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 2866.106336][ T7159] ? copy_page_from_iter+0x5b6/0x9c0 [ 2866.106370][ T7159] mptcp_sendmsg+0x8ae/0x12e0 [ 2866.106412][ T7159] ? mptcp_close_ssk+0xa0/0xa0 [ 2866.106444][ T7159] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 2866.106477][ T7159] inet6_sendmsg+0x99/0xe0 [ 2866.106504][ T7159] ? inet6_compat_ioctl+0x310/0x310 [ 2866.106530][ T7159] sock_sendmsg+0xcf/0x120 [ 2866.106554][ T7159] sock_write_iter+0x284/0x3c0 [ 2866.106578][ T7159] ? sock_sendmsg+0x120/0x120 [ 2866.106614][ T7159] ? aa_path_link+0x2f0/0x2f0 [ 2866.106641][ T7159] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2866.106673][ T7159] new_sync_write+0x38a/0x560 [ 2866.106701][ T7159] ? new_sync_read+0x5f0/0x5f0 [ 2866.106743][ T7159] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2866.106770][ T7159] ? security_file_permission+0xab/0xd0 [ 2866.106804][ T7159] vfs_write+0x7c0/0xac0 [ 2866.106836][ T7159] ksys_write+0x1e8/0x250 [ 2866.106861][ T7159] ? __ia32_sys_read+0xb0/0xb0 [ 2866.106891][ T7159] ? syscall_enter_from_user_mode+0x21/0x70 [ 2866.106940][ T7159] do_syscall_64+0x35/0xb0 [ 2866.106967][ T7159] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 2866.106996][ T7159] RIP: 0033:0x7fa8b8c89109 [ 2866.107016][ T7159] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2866.107040][ T7159] RSP: 002b:00007fa8b9e62168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2866.107065][ T7159] RAX: ffffffffffffffda RBX: 00007fa8b8d9c030 RCX: 00007fa8b8c89109 [ 2866.107082][ T7159] RDX: 0000000000097d08 RSI: 0000000020000000 RDI: 0000000000000005 [ 2866.107097][ T7159] RBP: 00007fa8b9e621d0 R08: 0000000000000000 R09: 0000000000000000 [ 2866.107114][ T7159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2866.107128][ T7159] R13: 00007fa8b92cfb1f R14: 00007fa8b9e62300 R15: 0000000000022000 [ 2866.107162][ T7159] [ 2866.192695][ T7162] FAULT_INJECTION: forcing a failure. [ 2866.192695][ T7162] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2866.193205][ T7162] CPU: 0 PID: 7162 Comm: syz-executor.5 Not tainted 5.18.0-syzkaller-04943-g7e062cda7d90 #0 [ 2866.193236][ T7162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2866.193252][ T7162] Call Trace: [ 2866.193258][ T7162] [ 2866.193266][ T7162] dump_stack_lvl+0xcd/0x134 [ 2866.193300][ T7162] should_fail.cold+0x5/0xa [ 2866.193330][ T7162] copy_page_from_iter+0x447/0x9c0 [ 2866.193366][ T7162] mptcp_sendmsg+0x7b0/0x12e0 [ 2866.193416][ T7162] ? mptcp_close_ssk+0xa0/0xa0 [ 2866.193446][ T7162] ? find_held_lock+0x2d/0x110 11:31:29 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$mouse(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000280), 0x0) creat(&(0x7f0000000080)='./file0\x00', 0xe1) r5 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES64=r2], 0x14}}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x47) write(r2, &(0x7f0000000000)="0553ad72e4a6bd03194e1b125e9cd0a9416df02e0e025410a7248d6813e4fe7b19c1bd5338e3ee9966b568b82c48", 0x97d08) (fail_nth: 7) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 11:31:29 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) 11:31:29 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000)={0x5, 0x4, 0x3, 0x5, 0x4}, 0x14) 11:31:29 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x99) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x5452) 11:31:29 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$mouse(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000280), 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r5 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES64=r2], 0x14}}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x47) write(r2, &(0x7f0000000000)="0953ad72e4a6bd03194e1b125e9cd0a9416df02e0e025410a7248d6813e4fe7b19c1bd5338e3ee9966b568b82c48", 0x97d08) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 11:31:29 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/12, 0x8}], 0x1) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x7, 0x5, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x9, 0x1f9000) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = dup(0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/12, 0x8}], 0x1) (async) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x7, 0x5, 0x0, 0xd}) (async) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) (async) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x9, 0x1f9000) (async) dup(r1) (async) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) (async) dup(0xffffffffffffffff) (async) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) (async) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) (async) [ 2866.193476][ T7162] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 2866.193511][ T7162] inet6_sendmsg+0x99/0xe0 [ 2866.193544][ T7162] ? inet6_compat_ioctl+0x310/0x310 [ 2866.193571][ T7162] sock_sendmsg+0xcf/0x120 [ 2866.193597][ T7162] sock_write_iter+0x284/0x3c0 11:31:30 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x890d, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) [ 2866.193623][ T7162] ? sock_sendmsg+0x120/0x120 11:31:30 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) (async) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000)={0x5, 0x4, 0x3, 0x5, 0x4}, 0x14) [ 2866.193645][ T7162] ? aa_path_link+0x2f0/0x2f0 [ 2866.193661][ T7162] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 11:31:30 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8912, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) 11:31:30 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/12, 0x8}], 0x1) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x7, 0x5, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x9, 0x1f9000) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = dup(0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/12, 0x8}], 0x1) (async) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x7, 0x5, 0x0, 0xd}) (async) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) (async) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x9, 0x1f9000) (async) dup(r1) (async) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) (async) dup(0xffffffffffffffff) (async) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) (async) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) (async) 11:31:30 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x99) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x5460) [ 2866.193680][ T7162] new_sync_write+0x38a/0x560 11:31:30 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) (async) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000)={0x5, 0x4, 0x3, 0x5, 0x4}, 0x14) [ 2866.193697][ T7162] ? new_sync_read+0x5f0/0x5f0 [ 2866.193721][ T7162] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2866.193736][ T7162] ? security_file_permission+0xab/0xd0 [ 2866.193756][ T7162] vfs_write+0x7c0/0xac0 [ 2866.193774][ T7162] ksys_write+0x1e8/0x250 [ 2866.193789][ T7162] ? __ia32_sys_read+0xb0/0xb0 [ 2866.193806][ T7162] ? syscall_enter_from_user_mode+0x21/0x70 [ 2866.193840][ T7162] do_syscall_64+0x35/0xb0 [ 2866.193867][ T7162] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 2866.193894][ T7162] RIP: 0033:0x7fb693889109 [ 2866.193913][ T7162] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2866.193928][ T7162] RSP: 002b:00007fb694937168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2866.193944][ T7162] RAX: ffffffffffffffda RBX: 00007fb69399c030 RCX: 00007fb693889109 [ 2866.193954][ T7162] RDX: 0000000000097d08 RSI: 0000000020000000 RDI: 0000000000000005 [ 2866.193964][ T7162] RBP: 00007fb6949371d0 R08: 0000000000000000 R09: 0000000000000000 [ 2866.193973][ T7162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2866.193982][ T7162] R13: 00007fb693ecfb1f R14: 00007fb694937300 R15: 0000000000022000 [ 2866.194002][ T7162] [ 2866.322598][ T7173] FAULT_INJECTION: forcing a failure. [ 2866.322598][ T7173] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2866.322633][ T7173] CPU: 0 PID: 7173 Comm: syz-executor.3 Not tainted 5.18.0-syzkaller-04943-g7e062cda7d90 #0 [ 2866.322658][ T7173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2866.322673][ T7173] Call Trace: [ 2866.322680][ T7173] [ 2866.322688][ T7173] dump_stack_lvl+0xcd/0x134 [ 2866.322720][ T7173] should_fail.cold+0x5/0xa [ 2866.322748][ T7173] _copy_to_user+0x2a/0x140 [ 2866.322783][ T7173] simple_read_from_buffer+0xcc/0x160 [ 2866.322824][ T7173] proc_fail_nth_read+0x187/0x220 [ 2866.322856][ T7173] ? proc_exe_link+0x1d0/0x1d0 [ 2866.322883][ T7173] ? security_file_permission+0xab/0xd0 [ 2866.322914][ T7173] ? proc_exe_link+0x1d0/0x1d0 [ 2866.322940][ T7173] vfs_read+0x1ef/0x5d0 [ 2866.322970][ T7173] ksys_read+0x127/0x250 [ 2866.322996][ T7173] ? vfs_write+0xac0/0xac0 [ 2866.323023][ T7173] ? syscall_enter_from_user_mode+0x21/0x70 [ 2866.323062][ T7173] do_syscall_64+0x35/0xb0 [ 2866.323088][ T7173] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 2866.323115][ T7173] RIP: 0033:0x7febb463bcbc [ 2866.323134][ T7173] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 2866.323158][ T7173] RSP: 002b:00007febb57f9160 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2866.323180][ T7173] RAX: ffffffffffffffda RBX: 00007febb479bf60 RCX: 00007febb463bcbc [ 2866.323197][ T7173] RDX: 000000000000000f RSI: 00007febb57f91e0 RDI: 0000000000000004 11:31:30 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$mouse(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000280), 0x0) creat(&(0x7f0000000080)='./file0\x00', 0xe1) r5 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES64=r2], 0x14}}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x47) write(r2, &(0x7f0000000000)="0553ad72e4a6bd03194e1b125e9cd0a9416df02e0e025410a7248d6813e4fe7b19c1bd5338e3ee9966b568b82c48", 0x97d08) (fail_nth: 8) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 11:31:30 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) readv(r0, &(0x7f0000000280)=[{&(0x7f0000000040)=""/12, 0xffffffffffffffe6}, {&(0x7f0000000080)=""/91, 0x5b}, {&(0x7f0000000180)=""/200, 0xc8}], 0x3) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f00000025c0)) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000000)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}]}) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) sendfile(r2, r3, &(0x7f0000000340)=0x78, 0x1000) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000002c0)={{0x3, 0x2, 0x4469e497, 0x1, 0x9}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 11:31:30 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8915, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) 11:31:30 executing program 2: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x121001, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x7ff}) socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r2 = dup(r1) personality(0x1bb2baf3005ac137) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r3, 0x0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0x1) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)={@rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x1, 0x6, [@initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @local, @remote, @remote, @empty]}, 0x28) 11:31:30 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x99) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a1) 11:31:30 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$mouse(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000280), 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r5 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES64=r2], 0x14}}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x47) write(r2, &(0x7f0000000000)="0a53ad72e4a6bd03194e1b125e9cd0a9416df02e0e025410a7248d6813e4fe7b19c1bd5338e3ee9966b568b82c48", 0x97d08) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) [ 2866.323213][ T7173] RBP: 00007febb57f91d0 R08: 0000000000000000 R09: 0000000000000000 [ 2866.323228][ T7173] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2866.323243][ T7173] R13: 00007febb4ccfb1f R14: 00007febb57f9300 R15: 0000000000022000 [ 2866.323276][ T7173] [ 2867.253625][ T7193] FAULT_INJECTION: forcing a failure. [ 2867.253625][ T7193] name failslab, interval 1, probability 0, space 0, times 0 11:31:31 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8916, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) 11:31:31 executing program 2: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x121001, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x7ff}) socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r2 = dup(r1) personality(0x1bb2baf3005ac137) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r3, 0x0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0x1) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)={@rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x1, 0x6, [@initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @local, @remote, @remote, @empty]}, 0x28) socket$inet_tcp(0x2, 0x1, 0x0) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x121001, 0x0) (async) ioctl$sock_inet_SIOCDELRT(r0, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x7ff}) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) (async) dup(r1) (async) personality(0x1bb2baf3005ac137) (async) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r3, 0x0) (async) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0x1) (async) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)={@rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x1, 0x6, [@initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @local, @remote, @remote, @empty]}, 0x28) (async) [ 2867.253649][ T7193] CPU: 0 PID: 7193 Comm: syz-executor.1 Not tainted 5.18.0-syzkaller-04943-g7e062cda7d90 #0 11:31:31 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x99) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a2) 11:31:31 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) [ 2867.253665][ T7193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 11:31:31 executing program 2: socket$inet_tcp(0x2, 0x1, 0x0) (async) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x121001, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x7ff}) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) r1 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r2 = dup(r1) (async) personality(0x1bb2baf3005ac137) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r3, 0x0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0x1) (async) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)={@rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x1, 0x6, [@initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @local, @remote, @remote, @empty]}, 0x28) [ 2867.253674][ T7193] Call Trace: [ 2867.253678][ T7193] [ 2867.253683][ T7193] dump_stack_lvl+0xcd/0x134 11:31:31 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8918, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) [ 2867.253704][ T7193] should_fail.cold+0x5/0xa [ 2867.253721][ T7193] should_failslab+0x5/0x10 [ 2867.253738][ T7193] __kmalloc_node_track_caller+0x7d/0x360 [ 2867.253756][ T7193] ? mptcp_sendmsg_frag+0x40d/0x2a80 [ 2867.253779][ T7193] __alloc_skb+0xde/0x340 [ 2867.253792][ T7193] ? tcp_send_mss+0x15e/0x2b0 [ 2867.253808][ T7193] mptcp_sendmsg_frag+0x40d/0x2a80 [ 2867.253828][ T7193] ? __local_bh_enable_ip+0xa0/0x120 [ 2867.253852][ T7193] __mptcp_push_pending+0x232/0x720 [ 2867.253877][ T7193] ? mptcp_shutdown+0x110/0x110 [ 2867.253895][ T7193] ? copyin.part.0+0xdf/0x100 [ 2867.253911][ T7193] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 2867.253928][ T7193] ? copy_page_from_iter+0x5b6/0x9c0 [ 2867.253948][ T7193] mptcp_sendmsg+0x8ae/0x12e0 [ 2867.253974][ T7193] ? mptcp_close_ssk+0xa0/0xa0 [ 2867.253991][ T7193] ? find_held_lock+0x2d/0x110 [ 2867.254008][ T7193] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 2867.254027][ T7193] inet6_sendmsg+0x99/0xe0 [ 2867.254043][ T7193] ? inet6_compat_ioctl+0x310/0x310 [ 2867.254058][ T7193] sock_sendmsg+0xcf/0x120 [ 2867.254072][ T7193] sock_write_iter+0x284/0x3c0 [ 2867.254087][ T7193] ? sock_sendmsg+0x120/0x120 [ 2867.254107][ T7193] ? aa_path_link+0x2f0/0x2f0 [ 2867.254124][ T7193] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2867.254142][ T7193] new_sync_write+0x38a/0x560 [ 2867.254159][ T7193] ? new_sync_read+0x5f0/0x5f0 [ 2867.254197][ T7193] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2867.254214][ T7193] ? security_file_permission+0xab/0xd0 [ 2867.254238][ T7193] vfs_write+0x7c0/0xac0 [ 2867.254268][ T7193] ksys_write+0x1e8/0x250 [ 2867.254295][ T7193] ? __ia32_sys_read+0xb0/0xb0 [ 2867.254326][ T7193] ? syscall_enter_from_user_mode+0x21/0x70 [ 2867.254381][ T7193] do_syscall_64+0x35/0xb0 [ 2867.254410][ T7193] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 2867.254437][ T7193] RIP: 0033:0x7fa8b8c89109 [ 2867.254457][ T7193] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2867.254482][ T7193] RSP: 002b:00007fa8b9e62168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2867.254507][ T7193] RAX: ffffffffffffffda RBX: 00007fa8b8d9c030 RCX: 00007fa8b8c89109 [ 2867.254525][ T7193] RDX: 0000000000097d08 RSI: 0000000020000000 RDI: 0000000000000005 11:31:31 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x99) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a3) 11:31:31 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) readv(r0, &(0x7f0000000280)=[{&(0x7f0000000040)=""/12, 0xffffffffffffffe6}, {&(0x7f0000000080)=""/91, 0x5b}, {&(0x7f0000000180)=""/200, 0xc8}], 0x3) (async) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) (async) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f00000025c0)) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000000)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}]}) (async) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) sendfile(r2, r3, &(0x7f0000000340)=0x78, 0x1000) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000002c0)={{0x3, 0x2, 0x4469e497, 0x1, 0x9}}) (async) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 11:31:31 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$mouse(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000280), 0x0) creat(&(0x7f0000000080)='./file0\x00', 0xe1) r5 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES64=r2], 0x14}}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x47) write(r2, &(0x7f0000000000)="0553ad72e4a6bd03194e1b125e9cd0a9416df02e0e025410a7248d6813e4fe7b19c1bd5338e3ee9966b568b82c48", 0x97d08) (fail_nth: 9) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 11:31:31 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @local}, {0x2, 0x0, @private=0xa010102}, {0x2, 0x4e22, @multicast1}, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd}) 11:31:31 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8919, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) [ 2867.254542][ T7193] RBP: 00007fa8b9e621d0 R08: 0000000000000000 R09: 0000000000000000 [ 2867.254558][ T7193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2867.254573][ T7193] R13: 00007fa8b92cfb1f R14: 00007fa8b9e62300 R15: 0000000000022000 [ 2867.254607][ T7193] [ 2867.345698][ T7208] FAULT_INJECTION: forcing a failure. [ 2867.345698][ T7208] name failslab, interval 1, probability 0, space 0, times 0 11:31:32 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$mouse(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000280), 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r5 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES64=r2], 0x14}}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x47) write(r2, &(0x7f0000000000)="0e53ad72e4a6bd03194e1b125e9cd0a9416df02e0e025410a7248d6813e4fe7b19c1bd5338e3ee9966b568b82c48", 0x97d08) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 11:31:32 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x891a, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) 11:31:32 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @local}, {0x2, 0x0, @private=0xa010102}, {0x2, 0x4e22, @multicast1}, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd}) [ 2867.345732][ T7208] CPU: 0 PID: 7208 Comm: syz-executor.5 Not tainted 5.18.0-syzkaller-04943-g7e062cda7d90 #0 [ 2867.345759][ T7208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 11:31:32 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @local}, {0x2, 0x0, @private=0xa010102}, {0x2, 0x4e22, @multicast1}, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd}) [ 2867.345775][ T7208] Call Trace: 11:31:32 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x99) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x8933) 11:31:32 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) readv(r0, &(0x7f0000000280)=[{&(0x7f0000000040)=""/12, 0xffffffffffffffe6}, {&(0x7f0000000080)=""/91, 0x5b}, {&(0x7f0000000180)=""/200, 0xc8}], 0x3) (async) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) (async, rerun: 64) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) (async, rerun: 64) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f00000025c0)) (async) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000000)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}]}) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) sendfile(r2, r3, &(0x7f0000000340)=0x78, 0x1000) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000002c0)={{0x3, 0x2, 0x4469e497, 0x1, 0x9}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) [ 2867.345781][ T7208] [ 2867.345790][ T7208] dump_stack_lvl+0xcd/0x134 11:31:32 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x891b, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) [ 2867.345821][ T7208] should_fail.cold+0x5/0xa [ 2867.345850][ T7208] should_failslab+0x5/0x10 [ 2867.345876][ T7208] kmem_cache_alloc_node+0x65/0x3f0 [ 2867.345904][ T7208] ? __alloc_skb+0x215/0x340 [ 2867.345932][ T7208] __alloc_skb+0x215/0x340 [ 2867.345953][ T7208] ? tcp_send_mss+0x15e/0x2b0 11:31:32 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000)={0x0, 0xc5a, 0xfffffffd, 0xdfc, 0x1f}, 0x14) r1 = accept$alg(0xffffffffffffffff, 0x0, 0x0) recvmsg(r1, &(0x7f0000000480)={&(0x7f0000000040)=@pppol2tpin6, 0x80, &(0x7f0000000340)=[{&(0x7f00000000c0)=""/10, 0xa}, {&(0x7f00000001c0)=""/88, 0x58}, {&(0x7f0000000100)=""/26, 0x1a}, {&(0x7f0000000240)=""/81, 0x51}, {&(0x7f00000002c0)=""/95, 0x5f}], 0x5, &(0x7f00000003c0)=""/135, 0x87}, 0x40000162) ioctl$sock_inet_SIOCDELRT(r0, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast2}, {0x2, 0x0, @remote}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 11:31:32 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040), 0x8880, 0x0) readv(r1, &(0x7f00000005c0)=[{&(0x7f0000019600)=""/102390, 0x18ff6}], 0x1) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f0000000180)={0x4, 0xfff, 0xfffffffa, 0x0, 0xf}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 11:31:32 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x891c, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) [ 2867.345981][ T7208] mptcp_sendmsg_frag+0x40d/0x2a80 [ 2867.346017][ T7208] ? __local_bh_enable_ip+0xa0/0x120 [ 2867.346049][ T7208] __mptcp_push_pending+0x232/0x720 [ 2867.346086][ T7208] ? mptcp_shutdown+0x110/0x110 [ 2867.346116][ T7208] ? copyin.part.0+0xdf/0x100 [ 2867.346141][ T7208] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 2867.346174][ T7208] ? copy_page_from_iter+0x5b6/0x9c0 [ 2867.346210][ T7208] mptcp_sendmsg+0x8ae/0x12e0 [ 2867.346256][ T7208] ? mptcp_close_ssk+0xa0/0xa0 [ 2867.346287][ T7208] ? find_held_lock+0x2d/0x110 [ 2867.346317][ T7208] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 2867.346351][ T7208] inet6_sendmsg+0x99/0xe0 [ 2867.346378][ T7208] ? inet6_compat_ioctl+0x310/0x310 [ 2867.346405][ T7208] sock_sendmsg+0xcf/0x120 [ 2867.346430][ T7208] sock_write_iter+0x284/0x3c0 [ 2867.346457][ T7208] ? sock_sendmsg+0x120/0x120 [ 2867.346492][ T7208] ? aa_path_link+0x2f0/0x2f0 [ 2867.346520][ T7208] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2867.346553][ T7208] new_sync_write+0x38a/0x560 [ 2867.346580][ T7208] ? new_sync_read+0x5f0/0x5f0 [ 2867.346623][ T7208] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2867.346650][ T7208] ? security_file_permission+0xab/0xd0 [ 2867.346684][ T7208] vfs_write+0x7c0/0xac0 [ 2867.346714][ T7208] ksys_write+0x1e8/0x250 [ 2867.346740][ T7208] ? __ia32_sys_read+0xb0/0xb0 [ 2867.346769][ T7208] ? syscall_enter_from_user_mode+0x21/0x70 [ 2867.346808][ T7208] do_syscall_64+0x35/0xb0 [ 2867.346835][ T7208] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 2867.346862][ T7208] RIP: 0033:0x7fb693889109 [ 2867.346880][ T7208] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2867.346905][ T7208] RSP: 002b:00007fb694916168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2867.346928][ T7208] RAX: ffffffffffffffda RBX: 00007fb69399c100 RCX: 00007fb693889109 [ 2867.346946][ T7208] RDX: 0000000000097d08 RSI: 0000000020000000 RDI: 0000000000000005 [ 2867.346961][ T7208] RBP: 00007fb6949161d0 R08: 0000000000000000 R09: 0000000000000000 [ 2867.346976][ T7208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2867.346992][ T7208] R13: 00007fb693ecfb1f R14: 00007fb694916300 R15: 0000000000022000 [ 2867.347025][ T7208] [ 2868.445851][ T7238] FAULT_INJECTION: forcing a failure. [ 2868.445851][ T7238] name failslab, interval 1, probability 0, space 0, times 0 [ 2868.446037][ T7238] CPU: 1 PID: 7238 Comm: syz-executor.5 Not tainted 5.18.0-syzkaller-04943-g7e062cda7d90 #0 [ 2868.446066][ T7238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2868.446081][ T7238] Call Trace: [ 2868.446088][ T7238] [ 2868.446097][ T7238] dump_stack_lvl+0xcd/0x134 [ 2868.446139][ T7238] should_fail.cold+0x5/0xa [ 2868.446173][ T7238] should_failslab+0x5/0x10 [ 2868.446202][ T7238] __kmalloc_node_track_caller+0x7d/0x360 [ 2868.446232][ T7238] ? mptcp_sendmsg_frag+0x40d/0x2a80 [ 2868.446270][ T7238] __alloc_skb+0xde/0x340 [ 2868.446294][ T7238] ? tcp_send_mss+0x15e/0x2b0 [ 2868.446323][ T7238] mptcp_sendmsg_frag+0x40d/0x2a80 [ 2868.446361][ T7238] ? __local_bh_enable_ip+0xa0/0x120 [ 2868.446395][ T7238] __mptcp_push_pending+0x232/0x720 [ 2868.446435][ T7238] ? mptcp_shutdown+0x110/0x110 [ 2868.446467][ T7238] ? copyin.part.0+0xdf/0x100 [ 2868.446493][ T7238] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 2868.446520][ T7238] ? copy_page_from_iter+0x5b6/0x9c0 [ 2868.446556][ T7238] mptcp_sendmsg+0x8ae/0x12e0 [ 2868.446604][ T7238] ? mptcp_close_ssk+0xa0/0xa0 [ 2868.446633][ T7238] ? tomoyo_socket_sendmsg_permission+0x11d/0x3a0 [ 2868.446666][ T7238] ? security_socket_sendmsg+0x66/0xb0 [ 2868.446695][ T7238] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 2868.446729][ T7238] inet6_sendmsg+0x99/0xe0 [ 2868.446758][ T7238] ? inet6_compat_ioctl+0x310/0x310 [ 2868.446785][ T7238] sock_sendmsg+0xcf/0x120 11:31:33 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$mouse(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000280), 0x0) creat(&(0x7f0000000080)='./file0\x00', 0xe1) r5 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES64=r2], 0x14}}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x47) write(r2, &(0x7f0000000000)="0553ad72e4a6bd03194e1b125e9cd0a9416df02e0e025410a7248d6813e4fe7b19c1bd5338e3ee9966b568b82c48", 0x97d08) (fail_nth: 10) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 11:31:33 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8933, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) 11:31:33 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000)={0x0, 0xc5a, 0xfffffffd, 0xdfc, 0x1f}, 0x14) r1 = accept$alg(0xffffffffffffffff, 0x0, 0x0) recvmsg(r1, &(0x7f0000000480)={&(0x7f0000000040)=@pppol2tpin6, 0x80, &(0x7f0000000340)=[{&(0x7f00000000c0)=""/10, 0xa}, {&(0x7f00000001c0)=""/88, 0x58}, {&(0x7f0000000100)=""/26, 0x1a}, {&(0x7f0000000240)=""/81, 0x51}, {&(0x7f00000002c0)=""/95, 0x5f}], 0x5, &(0x7f00000003c0)=""/135, 0x87}, 0x40000162) ioctl$sock_inet_SIOCDELRT(r0, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast2}, {0x2, 0x0, @remote}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000)={0x0, 0xc5a, 0xfffffffd, 0xdfc, 0x1f}, 0x14) (async) accept$alg(0xffffffffffffffff, 0x0, 0x0) (async) recvmsg(r1, &(0x7f0000000480)={&(0x7f0000000040)=@pppol2tpin6, 0x80, &(0x7f0000000340)=[{&(0x7f00000000c0)=""/10, 0xa}, {&(0x7f00000001c0)=""/88, 0x58}, {&(0x7f0000000100)=""/26, 0x1a}, {&(0x7f0000000240)=""/81, 0x51}, {&(0x7f00000002c0)=""/95, 0x5f}], 0x5, &(0x7f00000003c0)=""/135, 0x87}, 0x40000162) (async) ioctl$sock_inet_SIOCDELRT(r0, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast2}, {0x2, 0x0, @remote}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) (async) 11:31:33 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040), 0x8880, 0x0) readv(r1, &(0x7f00000005c0)=[{&(0x7f0000019600)=""/102390, 0x18ff6}], 0x1) (async) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) (async) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f0000000180)={0x4, 0xfff, 0xfffffffa, 0x0, 0xf}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) (async, rerun: 32) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) (rerun: 32) 11:31:33 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x99) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x400448c9) 11:31:33 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$mouse(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000280), 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r5 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES64=r2], 0x14}}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x47) write(r2, &(0x7f0000000000)="0f53ad72e4a6bd03194e1b125e9cd0a9416df02e0e025410a7248d6813e4fe7b19c1bd5338e3ee9966b568b82c48", 0x97d08) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) [ 2868.446811][ T7238] sock_write_iter+0x284/0x3c0 [ 2868.446837][ T7238] ? sock_sendmsg+0x120/0x120 [ 2868.446873][ T7238] ? aa_path_link+0x2f0/0x2f0 11:31:33 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000)={0x0, 0xc5a, 0xfffffffd, 0xdfc, 0x1f}, 0x14) r1 = accept$alg(0xffffffffffffffff, 0x0, 0x0) recvmsg(r1, &(0x7f0000000480)={&(0x7f0000000040)=@pppol2tpin6, 0x80, &(0x7f0000000340)=[{&(0x7f00000000c0)=""/10, 0xa}, {&(0x7f00000001c0)=""/88, 0x58}, {&(0x7f0000000100)=""/26, 0x1a}, {&(0x7f0000000240)=""/81, 0x51}, {&(0x7f00000002c0)=""/95, 0x5f}], 0x5, &(0x7f00000003c0)=""/135, 0x87}, 0x40000162) (async) ioctl$sock_inet_SIOCDELRT(r0, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast2}, {0x2, 0x0, @remote}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 11:31:33 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8934, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) 11:31:33 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040), 0x8880, 0x0) readv(r1, &(0x7f00000005c0)=[{&(0x7f0000019600)=""/102390, 0x18ff6}], 0x1) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) (async) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f0000000180)={0x4, 0xfff, 0xfffffffa, 0x0, 0xf}) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) (async) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) [ 2868.446902][ T7238] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2868.446936][ T7238] new_sync_write+0x38a/0x560 [ 2868.446966][ T7238] ? new_sync_read+0x5f0/0x5f0 [ 2868.447011][ T7238] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 11:31:33 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x99) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x400448dd) [ 2868.447039][ T7238] ? security_file_permission+0xab/0xd0 11:31:33 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/12, 0x8}], 0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f00000025c0)) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000000)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}]}) r3 = dup(r2) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000080)={r3, 0x9c, 0x3, r0}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 11:31:33 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8935, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) [ 2868.447076][ T7238] vfs_write+0x7c0/0xac0 [ 2868.447109][ T7238] ksys_write+0x1e8/0x250 [ 2868.447146][ T7238] ? __ia32_sys_read+0xb0/0xb0 [ 2868.447178][ T7238] ? syscall_enter_from_user_mode+0x21/0x70 [ 2868.447222][ T7238] do_syscall_64+0x35/0xb0 [ 2868.447251][ T7238] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 2868.447279][ T7238] RIP: 0033:0x7fb693889109 [ 2868.447301][ T7238] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2868.447327][ T7238] RSP: 002b:00007fb694937168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2868.447352][ T7238] RAX: ffffffffffffffda RBX: 00007fb69399c030 RCX: 00007fb693889109 [ 2868.447371][ T7238] RDX: 0000000000097d08 RSI: 0000000020000000 RDI: 0000000000000005 [ 2868.447388][ T7238] RBP: 00007fb6949371d0 R08: 0000000000000000 R09: 0000000000000000 [ 2868.447405][ T7238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2868.447422][ T7238] R13: 00007fb693ecfb1f R14: 00007fb694937300 R15: 0000000000022000 [ 2868.447460][ T7238] [ 2869.637036][ T7286] FAULT_INJECTION: forcing a failure. [ 2869.637036][ T7286] name failslab, interval 1, probability 0, space 0, times 0 [ 2869.637072][ T7286] CPU: 0 PID: 7286 Comm: syz-executor.5 Not tainted 5.18.0-syzkaller-04943-g7e062cda7d90 #0 [ 2869.637100][ T7286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2869.637116][ T7286] Call Trace: [ 2869.637123][ T7286] [ 2869.637132][ T7286] dump_stack_lvl+0xcd/0x134 [ 2869.637165][ T7286] should_fail.cold+0x5/0xa [ 2869.637193][ T7286] ? __skb_ext_alloc+0x19/0x80 [ 2869.637223][ T7286] should_failslab+0x5/0x10 [ 2869.637250][ T7286] kmem_cache_alloc+0x5e/0x3b0 [ 2869.637286][ T7286] __skb_ext_alloc+0x19/0x80 [ 2869.637313][ T7286] mptcp_sendmsg_frag+0x426/0x2a80 [ 2869.637361][ T7286] __mptcp_push_pending+0x232/0x720 [ 2869.637405][ T7286] ? mptcp_shutdown+0x110/0x110 [ 2869.637438][ T7286] ? copyin.part.0+0xdf/0x100 [ 2869.637474][ T7286] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 2869.637503][ T7286] ? copy_page_from_iter+0x5b6/0x9c0 [ 2869.637541][ T7286] mptcp_sendmsg+0x8ae/0x12e0 [ 2869.637590][ T7286] ? mptcp_close_ssk+0xa0/0xa0 [ 2869.637623][ T7286] ? find_held_lock+0x2d/0x110 [ 2869.637654][ T7286] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 2869.637689][ T7286] inet6_sendmsg+0x99/0xe0 [ 2869.637717][ T7286] ? inet6_compat_ioctl+0x310/0x310 [ 2869.637745][ T7286] sock_sendmsg+0xcf/0x120 [ 2869.637771][ T7286] sock_write_iter+0x284/0x3c0 [ 2869.637797][ T7286] ? sock_sendmsg+0x120/0x120 [ 2869.637835][ T7286] ? aa_path_link+0x2f0/0x2f0 [ 2869.637864][ T7286] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2869.637899][ T7286] new_sync_write+0x38a/0x560 [ 2869.637930][ T7286] ? new_sync_read+0x5f0/0x5f0 [ 2869.637975][ T7286] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2869.638003][ T7286] ? security_file_permission+0xab/0xd0 [ 2869.638039][ T7286] vfs_write+0x7c0/0xac0 [ 2869.638073][ T7286] ksys_write+0x1e8/0x250 [ 2869.638101][ T7286] ? __ia32_sys_read+0xb0/0xb0 [ 2869.638132][ T7286] ? syscall_enter_from_user_mode+0x21/0x70 [ 2869.638174][ T7286] do_syscall_64+0x35/0xb0 [ 2869.638203][ T7286] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 2869.638230][ T7286] RIP: 0033:0x7fb693889109 [ 2869.638251][ T7286] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2869.638278][ T7286] RSP: 002b:00007fb694937168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2869.638305][ T7286] RAX: ffffffffffffffda RBX: 00007fb69399c030 RCX: 00007fb693889109 [ 2869.638324][ T7286] RDX: 0000000000097d08 RSI: 0000000020000000 RDI: 0000000000000005 [ 2869.638340][ T7286] RBP: 00007fb6949371d0 R08: 0000000000000000 R09: 0000000000000000 [ 2869.638356][ T7286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2869.638372][ T7286] R13: 00007fb693ecfb1f R14: 00007fb694937300 R15: 0000000000022000 [ 2869.638408][ T7286] [ 2870.495046][ T7319] FAULT_INJECTION: forcing a failure. [ 2870.495046][ T7319] name failslab, interval 1, probability 0, space 0, times 0 11:31:34 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$mouse(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000280), 0x0) creat(&(0x7f0000000080)='./file0\x00', 0xe1) r5 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES64=r2], 0x14}}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x47) write(r2, &(0x7f0000000000)="0553ad72e4a6bd03194e1b125e9cd0a9416df02e0e025410a7248d6813e4fe7b19c1bd5338e3ee9966b568b82c48", 0x97d08) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 11:31:34 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8940, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) 11:31:34 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 11:31:34 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x99) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x40045402) 11:31:34 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$mouse(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000280), 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r5 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES64=r2], 0x14}}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x47) write(r2, &(0x7f0000000000)="1053ad72e4a6bd03194e1b125e9cd0a9416df02e0e025410a7248d6813e4fe7b19c1bd5338e3ee9966b568b82c48", 0x97d08) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) [ 2870.495084][ T7319] CPU: 0 PID: 7319 Comm: syz-executor.5 Not tainted 5.18.0-syzkaller-04943-g7e062cda7d90 #0 [ 2870.495114][ T7319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2870.495129][ T7319] Call Trace: [ 2870.495136][ T7319] [ 2870.495144][ T7319] dump_stack_lvl+0xcd/0x134 [ 2870.495179][ T7319] should_fail.cold+0x5/0xa 11:31:34 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/12, 0x8}], 0x1) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f00000025c0)) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000000)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}]}) (async) r3 = dup(r2) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000080)={r3, 0x9c, 0x3, r0}) (async) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 11:31:34 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8941, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) 11:31:34 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) socket$inet_tcp(0x2, 0x1, 0x0) (async) ioctl$sock_inet_SIOCDELRT(r0, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) (async) [ 2870.495210][ T7319] should_failslab+0x5/0x10 11:31:34 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x894c, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) [ 2870.495237][ T7319] kmem_cache_alloc_node+0x65/0x3f0 11:31:34 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x99) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x400454a4) 11:31:34 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) [ 2870.495266][ T7319] ? __alloc_skb+0x215/0x340 11:31:34 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/12, 0x8}], 0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f00000025c0)) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000000)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}]}) r3 = dup(r2) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000080)={r3, 0x9c, 0x3, r0}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/12, 0x8}], 0x1) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f00000025c0)) (async) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000000)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}]}) (async) dup(r2) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) (async) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000080)={r3, 0x9c, 0x3, r0}) (async) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) (async) [ 2870.495296][ T7319] __alloc_skb+0x215/0x340 [ 2870.495318][ T7319] ? tcp_send_mss+0x15e/0x2b0 [ 2870.495347][ T7319] mptcp_sendmsg_frag+0x40d/0x2a80 [ 2870.495394][ T7319] __mptcp_push_pending+0x232/0x720 [ 2870.495432][ T7319] ? mptcp_shutdown+0x110/0x110 [ 2870.495465][ T7319] ? copyin.part.0+0xdf/0x100 [ 2870.495490][ T7319] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 2870.495516][ T7319] ? copy_page_from_iter+0x5b6/0x9c0 [ 2870.495552][ T7319] mptcp_sendmsg+0x8ae/0x12e0 [ 2870.495599][ T7319] ? mptcp_close_ssk+0xa0/0xa0 [ 2870.495630][ T7319] ? find_held_lock+0x2d/0x110 [ 2870.495676][ T7319] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 2870.495713][ T7319] inet6_sendmsg+0x99/0xe0 [ 2870.495743][ T7319] ? inet6_compat_ioctl+0x310/0x310 [ 2870.495771][ T7319] sock_sendmsg+0xcf/0x120 [ 2870.495798][ T7319] sock_write_iter+0x284/0x3c0 [ 2870.495824][ T7319] ? sock_sendmsg+0x120/0x120 [ 2870.495862][ T7319] ? aa_path_link+0x2f0/0x2f0 [ 2870.495900][ T7319] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2870.495940][ T7319] new_sync_write+0x38a/0x560 [ 2870.495971][ T7319] ? new_sync_read+0x5f0/0x5f0 [ 2870.496017][ T7319] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2870.496046][ T7319] ? security_file_permission+0xab/0xd0 [ 2870.496081][ T7319] vfs_write+0x7c0/0xac0 [ 2870.496116][ T7319] ksys_write+0x1e8/0x250 [ 2870.496144][ T7319] ? __ia32_sys_read+0xb0/0xb0 [ 2870.496175][ T7319] ? syscall_enter_from_user_mode+0x21/0x70 [ 2870.496217][ T7319] do_syscall_64+0x35/0xb0 [ 2870.496245][ T7319] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 2870.496273][ T7319] RIP: 0033:0x7fb693889109 [ 2870.496294][ T7319] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 11:31:35 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$mouse(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000280), 0x0) creat(&(0x7f0000000080)='./file0\x00', 0xe1) r5 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES64=r2], 0x14}}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x47) write(r2, &(0x7f0000000000)="0753ad72e4a6bd03194e1b125e9cd0a9416df02e0e025410a7248d6813e4fe7b19c1bd5338e3ee9966b568b82c48", 0x97d08) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 11:31:35 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8953, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) 11:31:35 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x99) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x400454ca) 11:31:35 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/12, 0x8}], 0x1) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3, 0x0, 0x1f}}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x109400, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000180)={0x2, 0x2, 0x7, 0x0, 0x2}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0xa0001) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'veth0_to_team\x00'}) 11:31:35 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$mouse(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000280), 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r5 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES64=r2], 0x14}}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x47) write(r2, &(0x7f0000000000)="1453ad72e4a6bd03194e1b125e9cd0a9416df02e0e025410a7248d6813e4fe7b19c1bd5338e3ee9966b568b82c48", 0x97d08) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 11:31:35 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8955, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) [ 2870.496319][ T7319] RSP: 002b:00007fb694937168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2870.496344][ T7319] RAX: ffffffffffffffda RBX: 00007fb69399c030 RCX: 00007fb693889109 [ 2870.496362][ T7319] RDX: 0000000000097d08 RSI: 0000000020000000 RDI: 0000000000000005 11:31:35 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8982, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) 11:31:35 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x99) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x40049409) [ 2870.496378][ T7319] RBP: 00007fb6949371d0 R08: 0000000000000000 R09: 0000000000000000 [ 2870.496395][ T7319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2870.496410][ T7319] R13: 00007fb693ecfb1f R14: 00007fb694937300 R15: 0000000000022000 [ 2870.496447][ T7319] [ 2871.853514][ T7384] FAULT_INJECTION: forcing a failure. [ 2871.853514][ T7384] name failslab, interval 1, probability 0, space 0, times 0 [ 2871.854468][ T7384] CPU: 0 PID: 7384 Comm: syz-executor.5 Not tainted 5.18.0-syzkaller-04943-g7e062cda7d90 #0 [ 2871.854502][ T7384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2871.854519][ T7384] Call Trace: [ 2871.854526][ T7384] [ 2871.854535][ T7384] dump_stack_lvl+0xcd/0x134 11:31:35 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8983, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) [ 2871.854572][ T7384] should_fail.cold+0x5/0xa [ 2871.854602][ T7384] should_failslab+0x5/0x10 [ 2871.854631][ T7384] __kmalloc_node_track_caller+0x7d/0x360 [ 2871.854659][ T7384] ? mptcp_sendmsg_frag+0x40d/0x2a80 [ 2871.854697][ T7384] __alloc_skb+0xde/0x340 [ 2871.854718][ T7384] ? tcp_send_mss+0x15e/0x2b0 11:31:35 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x99) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x40086602) [ 2871.854748][ T7384] mptcp_sendmsg_frag+0x40d/0x2a80 [ 2871.854792][ T7384] __mptcp_push_pending+0x232/0x720 11:31:35 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x89a0, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) [ 2871.854831][ T7384] ? mptcp_shutdown+0x110/0x110 [ 2871.854862][ T7384] ? copyin.part.0+0xdf/0x100 [ 2871.854888][ T7384] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 2871.854917][ T7384] ? copy_page_from_iter+0x5b6/0x9c0 11:31:36 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x99) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x40186366) [ 2871.854952][ T7384] mptcp_sendmsg+0x8ae/0x12e0 [ 2871.854999][ T7384] ? mptcp_close_ssk+0xa0/0xa0 [ 2871.855030][ T7384] ? find_held_lock+0x2d/0x110 [ 2871.855060][ T7384] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 2871.855094][ T7384] inet6_sendmsg+0x99/0xe0 [ 2871.855122][ T7384] ? inet6_compat_ioctl+0x310/0x310 [ 2871.855149][ T7384] sock_sendmsg+0xcf/0x120 [ 2871.855184][ T7384] sock_write_iter+0x284/0x3c0 [ 2871.855211][ T7384] ? sock_sendmsg+0x120/0x120 [ 2871.855249][ T7384] ? aa_path_link+0x2f0/0x2f0 [ 2871.855278][ T7384] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2871.855308][ T7384] new_sync_write+0x38a/0x560 [ 2871.855335][ T7384] ? new_sync_read+0x5f0/0x5f0 [ 2871.855379][ T7384] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2871.855405][ T7384] ? security_file_permission+0xab/0xd0 [ 2871.855440][ T7384] vfs_write+0x7c0/0xac0 [ 2871.855471][ T7384] ksys_write+0x1e8/0x250 [ 2871.855498][ T7384] ? __ia32_sys_read+0xb0/0xb0 [ 2871.855527][ T7384] ? syscall_enter_from_user_mode+0x21/0x70 [ 2871.855569][ T7384] do_syscall_64+0x35/0xb0 11:31:36 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$mouse(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000280), 0x0) creat(&(0x7f0000000080)='./file0\x00', 0xe1) r5 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES64=r2], 0x14}}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x47) write(r2, &(0x7f0000000000)="0853ad72e4a6bd03194e1b125e9cd0a9416df02e0e025410a7248d6813e4fe7b19c1bd5338e3ee9966b568b82c48", 0x97d08) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 11:31:36 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x89a1, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) 11:31:36 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x99) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x401c5820) 11:31:36 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/12, 0x8}], 0x1) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3, 0x0, 0x1f}}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x109400, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000180)={0x2, 0x2, 0x7, 0x0, 0x2}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0xa0001) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'veth0_to_team\x00'}) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) (async) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) (async) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/12, 0x8}], 0x1) (async) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3, 0x0, 0x1f}}) (async) openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x109400, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000180)={0x2, 0x2, 0x7, 0x0, 0x2}) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) (async) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0xa0001) (async) openat$null(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'veth0_to_team\x00'}) (async) 11:31:36 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$mouse(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000280), 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r5 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES64=r2], 0x14}}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x47) write(r2, &(0x7f0000000000)="1753ad72e4a6bd03194e1b125e9cd0a9416df02e0e025410a7248d6813e4fe7b19c1bd5338e3ee9966b568b82c48", 0x97d08) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) [ 2871.855596][ T7384] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 2871.855623][ T7384] RIP: 0033:0x7fb693889109 [ 2871.855643][ T7384] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 11:31:36 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x400448c9, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) [ 2871.855669][ T7384] RSP: 002b:00007fb694916168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2871.855693][ T7384] RAX: ffffffffffffffda RBX: 00007fb69399c100 RCX: 00007fb693889109 11:31:36 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x99) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x4020940d) 11:31:36 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x400448dd, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) [ 2871.855710][ T7384] RDX: 0000000000097d08 RSI: 0000000020000000 RDI: 0000000000000005 [ 2871.855725][ T7384] RBP: 00007fb6949161d0 R08: 0000000000000000 R09: 0000000000000000 11:31:36 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/12, 0x8}], 0x1) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3, 0x0, 0x1f}}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x109400, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000180)={0x2, 0x2, 0x7, 0x0, 0x2}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0xa0001) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'veth0_to_team\x00'}) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) (async) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) (async) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/12, 0x8}], 0x1) (async) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3, 0x0, 0x1f}}) (async) openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x109400, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000180)={0x2, 0x2, 0x7, 0x0, 0x2}) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) (async) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0xa0001) (async) openat$null(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'veth0_to_team\x00'}) (async) [ 2871.855740][ T7384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 11:31:37 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x400454ca, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) [ 2871.855755][ T7384] R13: 00007fb693ecfb1f R14: 00007fb694916300 R15: 0000000000022000 [ 2871.855790][ T7384] [ 2872.779601][ T7410] FAULT_INJECTION: forcing a failure. [ 2872.779601][ T7410] name failslab, interval 1, probability 0, space 0, times 0 [ 2872.779778][ T7410] CPU: 1 PID: 7410 Comm: syz-executor.5 Not tainted 5.18.0-syzkaller-04943-g7e062cda7d90 #0 [ 2872.779809][ T7410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2872.779828][ T7410] Call Trace: [ 2872.779836][ T7410] [ 2872.779846][ T7410] dump_stack_lvl+0xcd/0x134 [ 2872.779881][ T7410] should_fail.cold+0x5/0xa 11:31:37 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x99) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x40345410) [ 2872.779910][ T7410] ? __skb_ext_alloc+0x19/0x80 [ 2872.779939][ T7410] should_failslab+0x5/0x10 [ 2872.779966][ T7410] kmem_cache_alloc+0x5e/0x3b0 11:31:37 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x40049409, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) [ 2872.780002][ T7410] __skb_ext_alloc+0x19/0x80 [ 2872.780029][ T7410] mptcp_sendmsg_frag+0x426/0x2a80 [ 2872.780084][ T7410] __mptcp_push_pending+0x232/0x720 [ 2872.780127][ T7410] ? mptcp_shutdown+0x110/0x110 [ 2872.780161][ T7410] ? copyin.part.0+0xdf/0x100 [ 2872.780188][ T7410] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 2872.780216][ T7410] ? copy_page_from_iter+0x5b6/0x9c0 [ 2872.780252][ T7410] mptcp_sendmsg+0x8ae/0x12e0 [ 2872.780300][ T7410] ? mptcp_close_ssk+0xa0/0xa0 [ 2872.780331][ T7410] ? find_held_lock+0x2d/0x110 [ 2872.780362][ T7410] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 2872.780398][ T7410] inet6_sendmsg+0x99/0xe0 [ 2872.780426][ T7410] ? inet6_compat_ioctl+0x310/0x310 [ 2872.780453][ T7410] sock_sendmsg+0xcf/0x120 [ 2872.780479][ T7410] sock_write_iter+0x284/0x3c0 [ 2872.780505][ T7410] ? sock_sendmsg+0x120/0x120 [ 2872.780544][ T7410] ? aa_path_link+0x2f0/0x2f0 [ 2872.780572][ T7410] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 11:31:37 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x40086602, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) [ 2872.780606][ T7410] new_sync_write+0x38a/0x560 11:31:37 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$mouse(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000280), 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r5 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES64=r2], 0x14}}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x47) write(r2, &(0x7f0000000000)="0553ad72e4a6bd02194e1b125e9cd0a9416df02e0e025410a7248d6813e4fe7b19c1bd5338e3ee9966b568b82c48", 0x97d08) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) [ 2872.780637][ T7410] ? new_sync_read+0x5f0/0x5f0 11:31:37 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$mouse(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000280), 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r5 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES64=r2], 0x14}}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x47) write(r2, &(0x7f0000000000)="1453ad72e4a6bd03194e1b125e9cd0a9416df02e0e025410a7248d6813e4fe7b19c1bd5338e3ee9966b568b82c48", 0x97d08) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 11:31:37 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x99) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x40485404) 11:31:38 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x40186366, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) 11:31:38 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$mouse(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000280), 0x0) creat(&(0x7f0000000080)='./file0\x00', 0xe1) r5 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES64=r2], 0x14}}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x47) write(r2, &(0x7f0000000000)="0953ad72e4a6bd03194e1b125e9cd0a9416df02e0e025410a7248d6813e4fe7b19c1bd5338e3ee9966b568b82c48", 0x97d08) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) [ 2872.780683][ T7410] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2872.780710][ T7410] ? security_file_permission+0xab/0xd0 [ 2872.780747][ T7410] vfs_write+0x7c0/0xac0 [ 2872.780781][ T7410] ksys_write+0x1e8/0x250 [ 2872.780809][ T7410] ? __ia32_sys_read+0xb0/0xb0 [ 2872.780840][ T7410] ? syscall_enter_from_user_mode+0x21/0x70 [ 2872.780882][ T7410] do_syscall_64+0x35/0xb0 [ 2872.780909][ T7410] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 2872.780938][ T7410] RIP: 0033:0x7fb693889109 [ 2872.780959][ T7410] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 11:31:38 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x401c5820, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) 11:31:38 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x99) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x40505412) 11:31:38 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x4020940d, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) [ 2872.780984][ T7410] RSP: 002b:00007fb694937168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 11:31:38 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x99) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x80045400) [ 2872.781010][ T7410] RAX: ffffffffffffffda RBX: 00007fb69399c030 RCX: 00007fb693889109 11:31:38 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x80086301, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) [ 2872.781029][ T7410] RDX: 0000000000097d08 RSI: 0000000020000000 RDI: 0000000000000005 11:31:38 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x99) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x80086301) [ 2872.781046][ T7410] RBP: 00007fb6949371d0 R08: 0000000000000000 R09: 0000000000000000 11:31:38 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x80086601, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) [ 2872.781063][ T7410] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2872.781086][ T7410] R13: 00007fb693ecfb1f R14: 00007fb694937300 R15: 0000000000022000 [ 2872.781125][ T7410] [ 2873.873162][ T7461] FAULT_INJECTION: forcing a failure. [ 2873.873162][ T7461] name failslab, interval 1, probability 0, space 0, times 0 [ 2873.873624][ T7461] CPU: 1 PID: 7461 Comm: syz-executor.5 Not tainted 5.18.0-syzkaller-04943-g7e062cda7d90 #0 11:31:39 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$mouse(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000280), 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r5 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES64=r2], 0x14}}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x47) write(r2, &(0x7f0000000000)="0553ad72e4a6bd04194e1b125e9cd0a9416df02e0e025410a7248d6813e4fe7b19c1bd5338e3ee9966b568b82c48", 0x97d08) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) [ 2873.873655][ T7461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2873.873670][ T7461] Call Trace: [ 2873.873689][ T7461] [ 2873.873698][ T7461] dump_stack_lvl+0xcd/0x134 [ 2873.873733][ T7461] should_fail.cold+0x5/0xa [ 2873.873761][ T7461] should_failslab+0x5/0x10 [ 2873.873780][ T7461] kmem_cache_alloc_node+0x65/0x3f0 [ 2873.873798][ T7461] ? __alloc_skb+0x215/0x340 [ 2873.873816][ T7461] __alloc_skb+0x215/0x340 11:31:39 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$mouse(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000280), 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r5 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES64=r2], 0x14}}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x47) write(r2, &(0x7f0000000000)="0553ad72e4a6bd02194e1b125e9cd0a9416df02e0e025410a7248d6813e4fe7b19c1bd5338e3ee9966b568b82c48", 0x97d08) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 11:31:39 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x80108906, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) 11:31:39 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x99) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x80086601) 11:31:39 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$mouse(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000280), 0x0) creat(&(0x7f0000000080)='./file0\x00', 0xe1) r5 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES64=r2], 0x14}}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x47) write(r2, &(0x7f0000000000)="0a53ad72e4a6bd03194e1b125e9cd0a9416df02e0e025410a7248d6813e4fe7b19c1bd5338e3ee9966b568b82c48", 0x97d08) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) [ 2873.873832][ T7461] tcp_stream_alloc_skb+0x66/0x900 11:31:39 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x80108907, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) [ 2873.873850][ T7461] tcp_write_xmit+0x1cc1/0x60e0 [ 2873.873880][ T7461] __tcp_push_pending_frames+0xaa/0x390 [ 2873.873898][ T7461] tcp_push+0x499/0x720 [ 2873.873915][ T7461] __mptcp_push_pending+0x50e/0x720 [ 2873.873940][ T7461] ? mptcp_shutdown+0x110/0x110 11:31:39 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x801c581f, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) 11:31:39 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x99) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x801c581f) [ 2873.873963][ T7461] ? copyin.part.0+0xdf/0x100 [ 2873.873979][ T7461] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 2873.873996][ T7461] ? copy_page_from_iter+0x5b6/0x9c0 [ 2873.874017][ T7461] mptcp_sendmsg+0x8ae/0x12e0 11:31:39 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0xc0045878, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) [ 2873.874044][ T7461] ? mptcp_close_ssk+0xa0/0xa0 [ 2873.874061][ T7461] ? find_held_lock+0x2d/0x110 [ 2873.874078][ T7461] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 11:31:39 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0xc0045878, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) 11:31:39 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x99) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x80585414) [ 2873.874097][ T7461] inet6_sendmsg+0x99/0xe0 [ 2873.874113][ T7461] ? inet6_compat_ioctl+0x310/0x310 [ 2873.874128][ T7461] sock_sendmsg+0xcf/0x120 [ 2873.874142][ T7461] sock_write_iter+0x284/0x3c0 [ 2873.874157][ T7461] ? sock_sendmsg+0x120/0x120 11:31:39 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0xc0189436, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) [ 2873.874176][ T7461] ? aa_path_link+0x2f0/0x2f0 [ 2873.874193][ T7461] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2873.874212][ T7461] new_sync_write+0x38a/0x560 [ 2873.874229][ T7461] ? new_sync_read+0x5f0/0x5f0 [ 2873.874253][ T7461] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2873.874269][ T7461] ? security_file_permission+0xab/0xd0 [ 2873.874289][ T7461] vfs_write+0x7c0/0xac0 [ 2873.874307][ T7461] ksys_write+0x1e8/0x250 [ 2873.874326][ T7461] ? __ia32_sys_read+0xb0/0xb0 [ 2873.874354][ T7461] ? syscall_enter_from_user_mode+0x21/0x70 [ 2873.874395][ T7461] do_syscall_64+0x35/0xb0 [ 2873.874412][ T7461] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 2873.874430][ T7461] RIP: 0033:0x7fb693889109 [ 2873.874443][ T7461] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2873.874458][ T7461] RSP: 002b:00007fb694937168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2873.874473][ T7461] RAX: ffffffffffffffda RBX: 00007fb69399c030 RCX: 00007fb693889109 [ 2873.874483][ T7461] RDX: 0000000000097d08 RSI: 0000000020000000 RDI: 0000000000000005 [ 2873.874493][ T7461] RBP: 00007fb6949371d0 R08: 0000000000000000 R09: 0000000000000000 [ 2873.874502][ T7461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2873.874511][ T7461] R13: 00007fb693ecfb1f R14: 00007fb694937300 R15: 0000000000022000 [ 2873.874531][ T7461] [ 2877.264691][ T7604] 8021q: VLANs not supported on lo [ 2877.442399][ T7610] 8021q: VLANs not supported on lo 11:31:40 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$mouse(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000280), 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r5 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES64=r2], 0x14}}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x47) write(r2, &(0x7f0000000000)="0553ad72e4a6bd07194e1b125e9cd0a9416df02e0e025410a7248d6813e4fe7b19c1bd5338e3ee9966b568b82c48", 0x97d08) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 11:31:40 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x99) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x80585414) 11:31:40 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x99) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x80605414) 11:31:40 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0xc020660b, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) 11:31:40 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$mouse(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000280), 0x0) creat(&(0x7f0000000080)='./file0\x00', 0xe1) r5 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES64=r2], 0x14}}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x47) write(r2, &(0x7f0000000000)="0e53ad72e4a6bd03194e1b125e9cd0a9416df02e0e025410a7248d6813e4fe7b19c1bd5338e3ee9966b568b82c48", 0x97d08) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 11:31:40 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8914, &(0x7f0000000140)={0x2, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) 11:31:40 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8914, &(0x7f0000000140)={0x3, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) 11:31:40 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x99) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x80e85411) 11:31:40 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8914, &(0x7f0000000140)={0x4, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) 11:31:40 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$mouse(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000280), 0x0) creat(&(0x7f0000000080)='./file0\x00', 0xe1) r5 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES64=r2], 0x14}}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x47) write(r2, &(0x7f0000000000)="0853ad72e4a6bd03194e1b125e9cd0a9416df02e0e025410a7248d6813e4fe7b19c1bd5338e3ee9966b568b82c48", 0x97d08) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 11:31:41 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x99) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0xc0045878) 11:31:41 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8914, &(0x7f0000000140)={0x5, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) 11:31:41 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$mouse(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000280), 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r5 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES64=r2], 0x14}}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x47) write(r2, &(0x7f0000000000)="0553ad72e4a6bd08194e1b125e9cd0a9416df02e0e025410a7248d6813e4fe7b19c1bd5338e3ee9966b568b82c48", 0x97d08) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 11:31:41 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8914, &(0x7f0000000140)={0x6, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) 11:31:41 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x99) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0xc0045878) 11:31:41 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8914, &(0x7f0000000140)={0x7, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) 11:31:41 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8914, &(0x7f0000000140)={0x300, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) 11:31:41 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x99) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0xc0145401) 11:31:41 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$mouse(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000280), 0x0) creat(&(0x7f0000000080)='./file0\x00', 0xe1) r5 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES64=r2], 0x14}}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x47) write(r2, &(0x7f0000000000)="1053ad72e4a6bd03194e1b125e9cd0a9416df02e0e025410a7248d6813e4fe7b19c1bd5338e3ee9966b568b82c48", 0x97d08) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 11:31:41 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8914, &(0x7f0000000140)={0x500, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) 11:31:42 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x99) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0xc0189436) 11:31:42 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8914, &(0x7f0000000140)={0x600, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) 11:31:42 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x99) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0xc020660b) 11:31:42 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$mouse(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000280), 0x0) creat(&(0x7f0000000080)='./file0\x00', 0xe1) r5 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES64=r2], 0x14}}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x47) write(r2, &(0x7f0000000000)="0e53ad72e4a6bd03194e1b125e9cd0a9416df02e0e025410a7248d6813e4fe7b19c1bd5338e3ee9966b568b82c48", 0x97d08) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 11:31:42 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$mouse(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000280), 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r5 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES64=r2], 0x14}}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x47) write(r2, &(0x7f0000000000)="0553ad72e4a6bd09194e1b125e9cd0a9416df02e0e025410a7248d6813e4fe7b19c1bd5338e3ee9966b568b82c48", 0x97d08) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 11:31:42 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8914, &(0x7f0000000140)={0x700, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) 11:31:42 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x99) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0xc0505405) 11:31:42 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8914, &(0x7f0000000140)={0xff00, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) 11:31:43 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$mouse(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000280), 0x0) creat(&(0x7f0000000080)='./file0\x00', 0xe1) r5 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES64=r2], 0x14}}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x47) write(r2, &(0x7f0000000000)="1453ad72e4a6bd03194e1b125e9cd0a9416df02e0e025410a7248d6813e4fe7b19c1bd5338e3ee9966b568b82c48", 0x97d08) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 11:31:43 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x99) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0xc0f85403) 11:31:43 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8914, &(0x7f0000000140)={0x1000000, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) 11:31:43 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8914, &(0x7f0000000140)={0x2000000, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) 11:31:43 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x99) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) r1 = syz_open_dev$vcsa(&(0x7f0000000040), 0x8, 0x60c001) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f00000000c0)=0x7) 11:31:43 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8914, &(0x7f0000000140)={0x3000000, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) 11:31:43 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8914, &(0x7f0000000140)={0x4000000, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) 11:31:43 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$mouse(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000280), 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r5 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES64=r2], 0x14}}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x47) write(r2, &(0x7f0000000000)="0553ad72e4a6bd09194e1b125e9cd0a9416df02e0e025410a7248d6813e4fe7b19c1bd5338e3ee9966b568b82c48", 0x97d08) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 11:31:43 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) (async) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x99) (async) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) (async, rerun: 32) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) (async, rerun: 32) r1 = syz_open_dev$vcsa(&(0x7f0000000040), 0x8, 0x60c001) (rerun: 32) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f00000000c0)=0x7) 11:31:43 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8914, &(0x7f0000000140)={0x5000000, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) 11:31:43 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$mouse(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000280), 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r5 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES64=r2], 0x14}}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x47) write(r2, &(0x7f0000000000)="0553ad72e4a6bd0a194e1b125e9cd0a9416df02e0e025410a7248d6813e4fe7b19c1bd5338e3ee9966b568b82c48", 0x97d08) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 11:31:43 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8914, &(0x7f0000000140)={0x6000000, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) 11:31:44 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$mouse(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000280), 0x0) creat(&(0x7f0000000080)='./file0\x00', 0xe1) r5 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES64=r2], 0x14}}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x47) write(r2, &(0x7f0000000000)="1753ad72e4a6bd03194e1b125e9cd0a9416df02e0e025410a7248d6813e4fe7b19c1bd5338e3ee9966b568b82c48", 0x97d08) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 11:31:44 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8914, &(0x7f0000000140)={0x7000000, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) 11:31:44 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) (async) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) (async) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x99) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) (async) r1 = syz_open_dev$vcsa(&(0x7f0000000040), 0x8, 0x60c001) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f00000000c0)=0x7) 11:31:44 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8914, &(0x7f0000000140)={0xfdfdffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) 11:31:44 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0xffffffffffffffff}}) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x99) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 11:31:44 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8914, &(0x7f0000000140)={0xff000000, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) 11:31:44 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8914, &(0x7f0000000140)={0xfffffdfd, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) 11:31:45 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$mouse(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000280), 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r5 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES64=r2], 0x14}}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x47) write(r2, &(0x7f0000000000)="0553ad72e4a6bd0b194e1b125e9cd0a9416df02e0e025410a7248d6813e4fe7b19c1bd5338e3ee9966b568b82c48", 0x97d08) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 11:31:45 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0xffffffffffffffff}}) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x99) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0xffffffffffffffff}}) (async) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x99) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) (async) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) (async) 11:31:45 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8914, &(0x7f0000000140)={0x100000000000000, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) 11:31:45 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$mouse(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000280), 0x0) creat(&(0x7f0000000080)='./file0\x00', 0xe1) r5 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES64=r2], 0x14}}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x47) write(r2, &(0x7f0000000000)="1453ad72e4a6bd03194e1b125e9cd0a9416df02e0e025410a7248d6813e4fe7b19c1bd5338e3ee9966b568b82c48", 0x97d08) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 11:31:45 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8914, &(0x7f0000000140)={0x200000000000000, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) 11:31:45 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$mouse(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000280), 0x0) creat(&(0x7f0000000080)='./file0\x00', 0xe1) r5 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES64=r2], 0x14}}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x47) write(r2, &(0x7f0000000000)="0553ad72e4a6bd02194e1b125e9cd0a9416df02e0e025410a7248d6813e4fe7b19c1bd5338e3ee9966b568b82c48", 0x97d08) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 11:31:45 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8914, &(0x7f0000000140)={0x300000000000000, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) 11:31:45 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0xffffffffffffffff}}) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x99) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0xffffffffffffffff}}) (async) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x99) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) (async) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) (async) 11:31:45 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8914, &(0x7f0000000140)={0x400000000000000, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) 11:31:45 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x99) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x501102, 0x0) 11:31:45 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8914, &(0x7f0000000140)={0x500000000000000, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) 11:31:45 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8914, &(0x7f0000000140)={0x600000000000000, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) 11:31:46 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$mouse(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000280), 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r5 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES64=r2], 0x14}}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x47) write(r2, &(0x7f0000000000)="0553ad72e4a6bd10194e1b125e9cd0a9416df02e0e025410a7248d6813e4fe7b19c1bd5338e3ee9966b568b82c48", 0x97d08) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 11:31:46 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) (async) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x99) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) (async) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x501102, 0x0) 11:31:46 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8914, &(0x7f0000000140)={0x700000000000000, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) 11:31:46 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$mouse(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000280), 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r5 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES64=r2], 0x14}}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x47) write(r2, &(0x7f0000000000)="0553ad72e4a6bd0b194e1b125e9cd0a9416df02e0e025410a7248d6813e4fe7b19c1bd5338e3ee9966b568b82c48", 0x97d08) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 11:31:46 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8914, &(0x7f0000000140)={0xfdfdffff00000000, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) 11:31:46 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x99) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) (async) openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x501102, 0x0) 11:31:46 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$mouse(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000280), 0x0) creat(&(0x7f0000000080)='./file0\x00', 0xe1) r5 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES64=r2], 0x14}}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x47) write(r2, &(0x7f0000000000)="0553ad72e4a6bd04194e1b125e9cd0a9416df02e0e025410a7248d6813e4fe7b19c1bd5338e3ee9966b568b82c48", 0x97d08) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 11:31:46 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8914, &(0x7f0000000140)={0xff00000000000000, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) 11:31:46 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8914, &(0x7f0000000140)={0xffffffff00000000, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) 11:31:46 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x99) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x480100, 0x0) write$6lowpan_enable(r1, &(0x7f00000000c0)='0', 0x1) ioctl$KVM_RUN(r1, 0xae80, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000002100)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b26]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_NMI(r4, 0xae9a) 11:31:46 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8914, &(0x7f0000000140)={0x0, {0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) 11:31:47 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8914, &(0x7f0000000140)={0x0, {0x7, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) 11:31:47 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$mouse(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000280), 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r5 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES64=r2], 0x14}}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x47) write(r2, &(0x7f0000000000)="0553ad72e4a6bd17194e1b125e9cd0a9416df02e0e025410a7248d6813e4fe7b19c1bd5338e3ee9966b568b82c48", 0x97d08) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 11:31:47 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8914, &(0x7f0000000140)={0x0, {0xf, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) 11:31:47 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x99) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x480100, 0x0) write$6lowpan_enable(r1, &(0x7f00000000c0)='0', 0x1) ioctl$KVM_RUN(r1, 0xae80, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000002100)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b26]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_NMI(r4, 0xae9a) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) (async) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x99) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) (async) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) (async) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x480100, 0x0) (async) write$6lowpan_enable(r1, &(0x7f00000000c0)='0', 0x1) (async) ioctl$KVM_RUN(r1, 0xae80, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) (async) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000002100)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b26]}) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) ioctl$KVM_NMI(r4, 0xae9a) (async) 11:31:47 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x99) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x480100, 0x0) write$6lowpan_enable(r1, &(0x7f00000000c0)='0', 0x1) ioctl$KVM_RUN(r1, 0xae80, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000002100)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b26]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_NMI(r4, 0xae9a) 11:31:47 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8914, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) 11:31:47 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$mouse(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000280), 0x0) creat(&(0x7f0000000080)='./file0\x00', 0xe1) r5 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES64=r2], 0x14}}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x47) write(r2, &(0x7f0000000000)="0553ad72e4a6bd07194e1b125e9cd0a9416df02e0e025410a7248d6813e4fe7b19c1bd5338e3ee9966b568b82c48", 0x97d08) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 11:31:47 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) (async) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x99) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) (async) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) (async) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x480100, 0x0) write$6lowpan_enable(r1, &(0x7f00000000c0)='0', 0x1) (async) ioctl$KVM_RUN(r1, 0xae80, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) (async) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000002100)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b26]}) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_NMI(r4, 0xae9a) 11:31:47 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x99) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE(r1, 0x50009401, &(0x7f00000004c0)={{r0}, "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"}) 11:31:48 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8914, &(0x7f0000000140)={0x0, {0x2, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) 11:31:48 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8914, &(0x7f0000000140)={0x0, {0x2, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) 11:31:48 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8914, &(0x7f0000000140)={0x0, {0x2, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) 11:31:48 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$mouse(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000280), 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r5 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES64=r2], 0x14}}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x47) write(r2, &(0x7f0000000000)="0553ad72e4a6bd3e194e1b125e9cd0a9416df02e0e025410a7248d6813e4fe7b19c1bd5338e3ee9966b568b82c48", 0x97d08) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 11:31:48 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8914, &(0x7f0000000140)={0x0, {0x2, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) 11:31:48 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x99) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE(r1, 0x50009401, &(0x7f00000004c0)={{r0}, "c5d4ba1f0680770db9b29ef9187c68cbfdf705199e23c0f13c6201a9b9c4cb866089a1f79fbfb9f2df82028fb4fd83e7559559f261fe8835f9d3f122cf8f8aeaa70f369dd60dfae1ece871c2d7b88a77938dc3f1e3b151fe8aece4d171fd8ec84d9b252a759d718a4d102a1b1644f435e800cc2461cad30ca272e7fe2512888b29442a7feb821b7ef08e62744aa79ececbd71937644856eefd9162161b2084dd82119178c8c6b24fec90756545db0cf65f668013c59df0486ddc65ae17a50c8715b49bc7644ebf9d64115de38ec9da6a6fd11f962f05857cb11f99b05567fc32798e64ec9cf5003054a72501e2a8acb015f6a9f0d5d910ace616d88462c5e3172cad67a171d581ce650f1acd6eaadd56d4d32c0a73583075e46abe3bc92d452d6a3e4b1781a24d5241101c6d655da25c0f88a954f58944631e5153b54831085b1845f173f1b7f2adb9bb4719aa2e7c6d2981c326f423f7e4b4cf7350b974a64f0848d0ff1adb3fa6565f863625c05c7577cfee30f6f5089f421c35e8456f14e5796d288558fc107fecfb65d55006ba54258dd1db011590269dadbc6b37ed771fbb8e91839adfcc29b1671fd589c9055bb1b8976d5740be596e69429f193c7de5de937ba533c37d8f1946caf62c25db5677b21f262d60585c222a447fc8b51cffa158ac8c3b8da924ae36fa7a05e03446cdf742727c200bdded177ba7b194d3e74a23deb5397812c5b030ea3c6d7ec8a35d30b379e72c578bbaa79609490b48df16989cd5fe38bd8e5d1e46aa001a05570d1e711094dd1be95106e7f626be92d3a6ed67185a3366514a3f1a0507ff475a87d1708b3b1158aa34edf87cbac9e64241e3a1c9a76b30b09653c88bcc223fa4470e626e23dacd7c0857093ffaf147bcff18c68eefb0e8e82144abe9e5c8576a7ad35f8a83e0320953dd1e3464dbf061645b2ba8e8fcf67d0e0f6f9423c2640bac7e7f7435ecde5716963990d3179252f6d7e30d0ac9cb0c6a998559e40e7266e5aab7dc7006cf1f020145f009b4b0049aa2310aa848df49eb849e8e266684e8d7bb9010d5917ba7b6104c159a8abdb6575f700b392f70f76d627dc082bd8b324ecb37a35229c07fa216de01e27906dd58f8f717c8a7cabc9c188b25d22375b8b1362eccdb83b46faef6cf9c12fd4d7ee6710b0e06940d70907608c99ed26fa7ca50dd3cf16be04c6822c47ccaea167307ee73e161bcdfbeba4fbb6727981fba166eed1522d7e1151b558f92b9124fa9e39225e311712d0f8d24c46e9d9d4e5644a96dbb173313063a75faf41bed236faf6c465041758eebc59af7c862e14819e327821fcbe0e0ab4d81602908ca116d547c7e994f759234b79ccd5e502f8d0a21e507d90213680e289f81cac9f8f3ecd30e300fd98085bb1b67d796f6c309d6916c7d331f396e7cf6a8f0d57b9e863f76683f2bf0a1ba2d0ed5e6d5dfa0e66f6fefccc74bf789de61b00296fd00a369c6ca716a67d0b9dac66c0c0b27bdd07e8f771f25782003ede6e19753daee2317105ec2695984a863a5a971d57c46431a7628e4882e1172fb870b1eb95e71babacba90517b40430907d525f31fb928e74a3bb685a0eb9479a655058057270783652b343eb4ddf663e3461008facbe6a5cc854a3bac02d5a7e15751aeb2d2f71f444abc1c8ef7e855d46547b01f36247ab4020f881619920c2d9be17b191492389fd84f1298bfc9077fe150c2d4b476e597bb6eba1731cf19b8cc0dbc84f97ec8c23e773f689eafb8a53d489669320636ebf3298b3f00b8ad999399c3b71e7246d31bd14662f16b77c8c663c1397e0aa33bdf5dc7517cef9d1c34765baed72f2dd4652fcd7901703f378e609e6a46f6789147ea7e27036f0bcdb0c5d15bfd7c26b20c181c76d576aef72846fbeba5ed6fad2a16f98fad42b5e74f1be0c5f3afd9b79e6341db79f09e05e04cca177eaa40986024c58407583d3a65c5441ab0270e66d9bd33002d975e4b2f0752b29e828296d807f1f6f024f153403fd138df93d50ced462a94ece9debf51d3fb8bd9cd73b4521e8b233cfcaee800ad046eb0ad64f9ab402593d4157da1294253f4ab10439f8eb9a13016c12accc8da7c63f9bf151eca09afc12a02b7ebf502e79659eee303691a38a2a9df135004dc8a453b78f13da0683d9297ef74f739002ff1cba010895b4dce04610c104feed8f44dda94dfeb03c8f2ceaaa03b06d91a6b6ea7b7c14c24e2cffeaf9252c93f9b1d3df975c3a97448e8162f6f20b23b2a354d8c9ad54d79ef4a101dbd46097625aeb5c409d4d6311cc5f39b5013a335ac79eac46aa6c8b46ae7f15407d6a91609bc9a11a536ad3f76cb429fa4f4a40b2677bff7c80005d8cc04b5106c65cc54a44501a4dff398730ead9a31765f5bea6d87a5ad114b479b35c91bbc1c925f613d79d2a7757a2e44b389db6645f4740df3cccd8797e790a020f101285dcbd2b6b9998afc2e856ec3bd7e7f368aa460ecd1d5484a9f8b9a68f5a5a2a6d1f41f3da3b5ca8d69232dcf7599308b0fb37897b4ebc079b62d033d288e5724941d00e8b4193484044ff8d86dd67dcd787bf1a0b1adb8c4c02c8b49bdd0249db458f704959f64ed608a0fc3545b6e9e68478001c5f44f343051c6d2ff87e8deccf8b44bfee143cfd37df11ec0424b7b85861c7d475f2cc06735b424086e32e3287c5819915b4109e23f0bf881e3e971834f6509b473f3908a368e87bd9ddeb19b62b569dc82753c1e7a1c2df542ea3bbf538e13508feaef148d1daf6c8e4aecf76d9e67db238b4576d8e9aadd11430c4a1272ac3b44e87ce80dda431a379123a3705a49521e8ce4960eb15dd3311ea886a8eada196c380d8ec55d76b5b46ea427ddf490ce0ab4ec1fac68d0839a929c758145f3293f9f87f12d854c5a98d62d39e7b425ac13ac6ddeafd84352bc627ca24546533ca8c454c793cea2799ded4ee84544dc2d15a767d9eef694e98f0a3755a04e09fc2be943c073e319fbf6f53db1c84c6c9c1b3fb8256e022f10821fd843c431b46be0bcf3e06cc93eecc4b3478bd574e5619539b19052397d26c718d31e2f456284fff308db3e53eeb870838bd45c7ef026e27d795433bad76fc3cd3dd24dadefaf2a0f00116bf3fb6805509781c8c9a3b21653e4b3eabe3a756029aaf09aa34ae1c5e7e5ec4f8d5492de655ae2e3288c58c5669db3954d511e5cc74628577b80b1121644f49bd77d6298417b0e42fd9f1f1b0107f127486c145fe5e4f373c8622863a7c6376747aea99f46af2ec4e2836d0bd715021f7238d6260f1c21bdf5b7e269ab44457f4ff93463e4b03874fbfffcc7a4e2ea36578c10f8d467f3592216b1656046e37447ec3a9c25dc2b64edf1cfb6b95276fe4358a32c8204e13a6001485c84e5e5389b3abd67b6a3f544ace5dda074b133d93537155a922bc38d7626932a5a09ee2babf75d4b64dd2c1533eaf1e9dd6382daf1a84a171efbc3546e44f46616addb2b16aa5f58929a369699acc0f2e9e28e127ab44db370e62d9e361102ded6cb2a681eb6a8a853521758b4349632cfda14f8481f388c4ff8aa47fcecf05c65f0d4421cfaeefd1e62b8ddc15803265e34bf10b9ccc04cc400ce9c565e1f09fa15851ed6a4ea6f3ced5291eb9385a3b92e9f110214bfecab80c1a1712dd84588cf22dc629c607759b29c8bf757c66f5e314306cd233a530c6b69135f156c24c523b837ad1d308f9cfc45f7f9e02166518ff35c44db76dd28ab5d715807216f4eaa8ffc3a9df18959cbfca5500c14f4ba5395bd7bfde71fd468f94ba7e98ea2053c44f28baed4f2a97a610869933c4a8233e8d4b095765782ba7d7a2f2016eb3dadd765e4edaf3f54d0b41fb0fa60342e4c0bdd5a273c6f30e66e685b059d8de6ca4f47515788f0fb0ccb9283a7a64c90771d63e5357db18b61816cbb3924993bab0868e6f08fcc081445194813cf7dd5ca348f198ccebc2ae0a066bd607212366f90b31c21d220e455c99840186472eebe0033494c15141a3d77f5eccd597d99957e2c75a4f325478e63fa2dc9e34ee33c54602d80f937cd720a180ca869dcb452dd2a843fcb8bce1aae56b27e307d2cb64af0a3c16d167490700e5a1243c92c88e73afaee7acd7c57704ff4b513087440ca022510b400a57b79f25d4275c0490fd2e5b6b061dbd00cedf53b94a12384ef62ac7e9ca7a96a9cc3932f1b08ac9165a830c0fb21ac23be1f5b6bfed6c04db49c1ace981a3144360b14110946f52a1374a718078ee313363b0b4e38a6123f1a93747e66b21b2cbe8a31b926c1f0468ea2c95b3280d28eb786b557bd22f1fcce85fa112107aeb7db78a36e3c79e61ba0e54b2968e5615661874a038e536bf4b4820b7759e5430701e3ffa952f74b3e19261ee9e1f4686631863c2a73002947be9db63bae21431de1c650d72e26493fb78e716b1c7e07aa765fdb701fdec811736396f7447c8f8c9cb704b4c1782a92a1d521959e209a03c7326ba1efc5fcf7cba9f95fbadb164e4df8e16ddd0a9bc7971d3c9e95880dc331f7614a23b1d4019c169008f1037e3739203d0aa7b966573d171fb9af2c4495a084bd7340716a2c84b1fd0c47c85a47813f77629d5e157adda0d6a8b01173fd40eb6b20360e0158bfd0f0a50f17634c0c71d2f4ccdaab4e840d1f2353595b959dc6f3d4f56144343f63535ed18a039d0c31b5d56e98609fc4246ae7b0605c7f7beb39adde60a822278e3f6255d82647b4c9d24fa11c3a26440bd362f05ad05fc2a477a75f9f87c25b7d0b4467a37fd9e79e31754f1c3bd4502774a6cb6a3967630b0e64969bfc137436980e29c898f84add1d3be2220537a2268fc8c96550e55634f71d294466e892d51e6dbaa23ac78bcd1f390b5d6f9265f81f9e42d02294b24826bb511bedd81c073abd97dd458fcd59f409b4007636eeb69acfc47cd188e59fd2bb3b14d62ca22dcad126c5a0e515bededfc719ade303bfbceb870544a1c7c1343c8595c25644dfd5e76cc0b6ef674338bda5f647112b9597b106daf77029f1bd67a5f06f8ab1308bbbdafcc3f86920f60eed9202b9dc60245e808dbdc1ac57ada4bc3ee6153beef30301f1b4928a800c42f4c38acba6de9636f148fb5c82b0080ae5b35b44c9c88a3a151b779eea046d9e695fe6166514c83dc54a3237609ce5fea84108fa5a4a38a5be7a2204e016794aee7cb79cf8bf6000e39b1f0a7f94e0ab8f5e26b9b9ad9dd9ae1c7c62c945ee4a046482800ea1bf005223086c5db7e7923934a51e201c33cdbf85ee046b031f54d1aa5ba5568d72572b9f77cbdf98ca03d87c11e99a75bdef4c53f97e3fea44a43365a777f1c3c35901c0c978277150bea5b411699cfd0f67c69d4392aaa93f0147115d6973717e7b7f7a83f8d6c88d6c7f7a07e327bb9e88c475023090670c55111c579ca1d0ea2ae82f82747d2694467047be877bc97c7c16dad53ef123ca3af2d1a9b3c60297a31475eef57df5b03241061c4a9ca773955e548507ce55b4d4e59101ef51d8fbdd9370a10565dde9530fbd841579b873a9c7d8d73e691672549708e0dd2ec531f9061af99df019b447bb96aeef2b2821b5d909d2c3c451d491b7b9746ab58d109e248e6c4f1740ed3de99c26ddfd09e626b3d1fce00a9f3d36ae6508f535a4c2ff27e8fd511f6977b5f0cdbdcfdbee8bac2fc497c298ecd4bc35eda3b4002a4e7744ad394fa337076de8aa4e3a4d10318dfb4c98553536aa6c1c05567761bc9b4237e93205dad1548"}) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) (async) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x99) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) (async) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$BTRFS_IOC_SNAP_CREATE(r1, 0x50009401, &(0x7f00000004c0)={{r0}, "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"}) (async) 11:31:48 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$mouse(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000280), 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r5 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES64=r2], 0x14}}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x47) write(r2, &(0x7f0000000000)="0553ad72e4a6bd17194e1b125e9cd0a9416df02e0e025410a7248d6813e4fe7b19c1bd5338e3ee9966b568b82c48", 0x97d08) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 11:31:48 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8914, &(0x7f0000000140)={0x0, {0x2, 0x6, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) 11:31:48 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8914, &(0x7f0000000140)={0x0, {0x2, 0x7, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) 11:31:48 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$mouse(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000280), 0x0) creat(&(0x7f0000000080)='./file0\x00', 0xe1) r5 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES64=r2], 0x14}}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x47) write(r2, &(0x7f0000000000)="0553ad72e4a6bd08194e1b125e9cd0a9416df02e0e025410a7248d6813e4fe7b19c1bd5338e3ee9966b568b82c48", 0x97d08) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 11:31:48 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x99) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE(r1, 0x50009401, &(0x7f00000004c0)={{r0}, "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"}) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) (async) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x99) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) (async) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$BTRFS_IOC_SNAP_CREATE(r1, 0x50009401, &(0x7f00000004c0)={{r0}, "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"}) (async) 11:31:49 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8914, &(0x7f0000000140)={0x0, {0x2, 0x300, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) 11:31:49 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8914, &(0x7f0000000140)={0x0, {0x2, 0x500, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) 11:31:49 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8914, &(0x7f0000000140)={0x0, {0x2, 0x600, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) 11:31:49 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8914, &(0x7f0000000140)={0x0, {0x2, 0x700, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) 11:31:49 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$mouse(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000280), 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r5 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES64=r2], 0x14}}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x47) write(r2, &(0x7f0000000000)="0553ad72e4a6bd76194e1b125e9cd0a9416df02e0e025410a7248d6813e4fe7b19c1bd5338e3ee9966b568b82c48", 0x97d08) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 11:31:49 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) write$binfmt_script(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x5c) r1 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380), 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, r1) add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000440)={0x0, "6471b3021f2f6ceb4fb56d6b8f523a3f795f7a421fe19d1d64c9bdf938b4631351610eb3de8074d4afe9d369fe1920bb090958df39d44cdda7cdc1d7c837ef02"}, 0x48, 0x0) add_key$keyring(0x0, &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, r2) r3 = add_key$user(&(0x7f0000000180), &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000680)="b3", 0x1, r2) r4 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r4, r4}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x9) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x99) r5 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$SNDRV_TIMER_IOCTL_START(r6, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0x9, 0x3f}, 0x8) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 11:31:49 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8914, &(0x7f0000000140)={0x0, {0x2, 0xff00, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) 11:31:49 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$mouse(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000280), 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r5 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES64=r2], 0x14}}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x47) write(r2, &(0x7f0000000000)="0553ad72e4a6bd3e194e1b125e9cd0a9416df02e0e025410a7248d6813e4fe7b19c1bd5338e3ee9966b568b82c48", 0x97d08) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 11:31:49 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8914, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) 11:31:49 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8914, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x2, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) 11:31:50 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$mouse(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000280), 0x0) creat(&(0x7f0000000080)='./file0\x00', 0xe1) r5 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES64=r2], 0x14}}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x47) write(r2, &(0x7f0000000000)="0553ad72e4a6bd09194e1b125e9cd0a9416df02e0e025410a7248d6813e4fe7b19c1bd5338e3ee9966b568b82c48", 0x97d08) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 11:31:50 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8914, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x3, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) 11:31:50 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8914, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x4, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) 11:31:50 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8914, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x5, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) 11:31:50 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) (async) write$binfmt_script(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x5c) r1 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380), 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, r1) add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000440)={0x0, "6471b3021f2f6ceb4fb56d6b8f523a3f795f7a421fe19d1d64c9bdf938b4631351610eb3de8074d4afe9d369fe1920bb090958df39d44cdda7cdc1d7c837ef02"}, 0x48, 0x0) (async) add_key$keyring(0x0, &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, r2) r3 = add_key$user(&(0x7f0000000180), &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000680)="b3", 0x1, r2) r4 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r4, r4}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) (async) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x9) (async) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x99) r5 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$SNDRV_TIMER_IOCTL_START(r6, 0x54a0) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0x9, 0x3f}, 0x8) (async) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 11:31:50 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8914, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x6, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) 11:31:50 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$mouse(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000280), 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r5 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES64=r2], 0x14}}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x47) write(r2, &(0x7f0000000000)="0553ad72e4a6bd032a4e1b125e9cd0a9416df02e0e025410a7248d6813e4fe7b19c1bd5338e3ee9966b568b82c48", 0x97d08) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 11:31:50 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8914, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x7, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) 11:31:50 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) write$binfmt_script(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x5c) r1 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380), 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, r1) add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000440)={0x0, "6471b3021f2f6ceb4fb56d6b8f523a3f795f7a421fe19d1d64c9bdf938b4631351610eb3de8074d4afe9d369fe1920bb090958df39d44cdda7cdc1d7c837ef02"}, 0x48, 0x0) add_key$keyring(0x0, &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, r2) r3 = add_key$user(&(0x7f0000000180), &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000680)="b3", 0x1, r2) r4 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r4, r4}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x9) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x99) r5 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$SNDRV_TIMER_IOCTL_START(r6, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0x9, 0x3f}, 0x8) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) (async) write$binfmt_script(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x5c) (async) add_key$keyring(&(0x7f0000000340), &(0x7f0000000380), 0x0, 0x0, 0xffffffffffffffff) (async) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, r1) (async) add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000440)={0x0, "6471b3021f2f6ceb4fb56d6b8f523a3f795f7a421fe19d1d64c9bdf938b4631351610eb3de8074d4afe9d369fe1920bb090958df39d44cdda7cdc1d7c837ef02"}, 0x48, 0x0) (async) add_key$keyring(0x0, &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, r2) (async) add_key$user(&(0x7f0000000180), &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000680)="b3", 0x1, r2) (async) add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) (async) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r4, r4}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) (async) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x9) (async) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x99) (async) syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) (async) dup(r5) (async) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) (async) ioctl$SNDRV_TIMER_IOCTL_START(r6, 0x54a0) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0x9, 0x3f}, 0x8) (async) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) (async) 11:31:51 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$mouse(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000280), 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r5 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES64=r2], 0x14}}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x47) write(r2, &(0x7f0000000000)="0553ad72e4a6bd76194e1b125e9cd0a9416df02e0e025410a7248d6813e4fe7b19c1bd5338e3ee9966b568b82c48", 0x97d08) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 11:31:51 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8914, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x4, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) 11:31:51 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3, 0x0, 0x0, 0x0, 0x3}}) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x99) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 11:31:51 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$mouse(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000280), 0x0) creat(&(0x7f0000000080)='./file0\x00', 0xe1) r5 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES64=r2], 0x14}}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x47) write(r2, &(0x7f0000000000)="0553ad72e4a6bd0a194e1b125e9cd0a9416df02e0e025410a7248d6813e4fe7b19c1bd5338e3ee9966b568b82c48", 0x97d08) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 11:31:51 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8914, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x7, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) 11:31:51 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3, 0x0, 0x0, 0x0, 0x3}}) (async) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x99) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) (async) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 11:31:51 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8914, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0xf, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) 11:31:51 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8914, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) 11:31:51 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8914, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x2, @multicast1}, {0x2, 0x0, @broadcast}}) 11:31:51 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$mouse(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000280), 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r5 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES64=r2], 0x14}}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x47) write(r2, &(0x7f0000000000)="0553ad72e4a6bd032b4e1b125e9cd0a9416df02e0e025410a7248d6813e4fe7b19c1bd5338e3ee9966b568b82c48", 0x97d08) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 11:31:51 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3, 0x0, 0x0, 0x0, 0x3}}) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x99) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3, 0x0, 0x0, 0x0, 0x3}}) (async) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x99) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) (async) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) (async) 11:31:51 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8914, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x3, @multicast1}, {0x2, 0x0, @broadcast}}) 11:31:52 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$mouse(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000280), 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r5 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES64=r2], 0x14}}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x47) write(r2, &(0x7f0000000000)="0553ad72e4a6bd032a4e1b125e9cd0a9416df02e0e025410a7248d6813e4fe7b19c1bd5338e3ee9966b568b82c48", 0x97d08) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 11:31:52 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8914, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4, @multicast1}, {0x2, 0x0, @broadcast}}) 11:31:52 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x99) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000002100)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b26]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$FIONCLEX(r3, 0x5450) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 11:31:52 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$mouse(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000280), 0x0) creat(&(0x7f0000000080)='./file0\x00', 0xe1) r5 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES64=r2], 0x14}}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x47) write(r2, &(0x7f0000000000)="0553ad72e4a6bd0b194e1b125e9cd0a9416df02e0e025410a7248d6813e4fe7b19c1bd5338e3ee9966b568b82c48", 0x97d08) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 11:31:52 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8914, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x5, @multicast1}, {0x2, 0x0, @broadcast}}) 11:31:52 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8914, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x6, @multicast1}, {0x2, 0x0, @broadcast}}) 11:31:52 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x99) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000002100)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b26]}) (async, rerun: 32) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async, rerun: 32) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) ioctl$FIONCLEX(r3, 0x5450) (async) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 11:31:52 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8914, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x7, @multicast1}, {0x2, 0x0, @broadcast}}) 11:31:53 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$mouse(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000280), 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r5 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES64=r2], 0x14}}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x47) write(r2, &(0x7f0000000000)="0553ad72e4a6bd0319141b125e9cd0a9416df02e0e025410a7248d6813e4fe7b19c1bd5338e3ee9966b568b82c48", 0x97d08) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 11:31:53 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8914, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x300, @multicast1}, {0x2, 0x0, @broadcast}}) 11:31:53 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8914, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x500, @multicast1}, {0x2, 0x0, @broadcast}}) 11:31:53 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x99) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000002100)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b26]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$FIONCLEX(r3, 0x5450) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) (async) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x99) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000002100)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b26]}) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) ioctl$FIONCLEX(r3, 0x5450) (async) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) (async) 11:31:54 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$mouse(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000280), 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r5 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES64=r2], 0x14}}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x47) write(r2, &(0x7f0000000000)="0553ad72e4a6bd032a4e1b125e9cd0a9416df02e0e025410a7248d6813e4fe7b19c1bd5338e3ee9966b568b82c48", 0x97d08) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 11:31:54 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x8000000000000001) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x99) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000200), 0x100, 0x0) ioctl$KVM_SET_FPU(r1, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x3, 0x290, 0x23, 0x0, 0x1, 0x3000, 0x1000, '\x00', 0x1000}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040), 0x28100, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f0000000180)={0x2, 0x79, 0x8, 0x0, 0xc}) 11:31:54 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8914, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x600, @multicast1}, {0x2, 0x0, @broadcast}}) 11:31:54 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$mouse(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000280), 0x0) creat(&(0x7f0000000080)='./file0\x00', 0xe1) r5 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES64=r2], 0x14}}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x47) write(r2, &(0x7f0000000000)="0553ad72e4a6bd10194e1b125e9cd0a9416df02e0e025410a7248d6813e4fe7b19c1bd5338e3ee9966b568b82c48", 0x97d08) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 11:31:54 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$mouse(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000280), 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r5 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES64=r2], 0x14}}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x47) write(r2, &(0x7f0000000000)="0553ad72e4a6bd0319281b125e9cd0a9416df02e0e025410a7248d6813e4fe7b19c1bd5338e3ee9966b568b82c48", 0x97d08) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 11:31:54 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8914, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x700, @multicast1}, {0x2, 0x0, @broadcast}}) [ 2895.826509][ T8206] [ 2895.826517][ T8206] ===================================================== [ 2895.826522][ T8206] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected 11:31:54 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x8000000000000001) (async, rerun: 64) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x99) (async, rerun: 64) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000200), 0x100, 0x0) ioctl$KVM_SET_FPU(r1, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x3, 0x290, 0x23, 0x0, 0x1, 0x3000, 0x1000, '\x00', 0x1000}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) (async) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) (async) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040), 0x28100, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f0000000180)={0x2, 0x79, 0x8, 0x0, 0xc}) 11:31:54 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8914, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0xff00, @multicast1}, {0x2, 0x0, @broadcast}}) [ 2895.826529][ T8206] 5.18.0-syzkaller-04943-g7e062cda7d90 #0 Not tainted 11:31:54 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8914, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1=0xe0000002}, {0x2, 0x0, @broadcast}}) [ 2895.826537][ T8206] ----------------------------------------------------- [ 2895.826542][ T8206] syz-executor.0/8206 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 2895.826558][ T8206] ffff888024558558 (&new->fa_lock){....}-{2:2}, at: kill_fasync+0x136/0x470 [ 2895.826595][ T8206] [ 2895.826595][ T8206] and this task is already holding: 11:31:54 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x8000000000000001) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x99) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000200), 0x100, 0x0) ioctl$KVM_SET_FPU(r1, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x3, 0x290, 0x23, 0x0, 0x1, 0x3000, 0x1000, '\x00', 0x1000}) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) (async) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040), 0x28100, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f0000000180)={0x2, 0x79, 0x8, 0x0, 0xc}) [ 2895.826599][ T8206] ffff888023bed148 (&timer->lock){..-.}-{2:2}, at: snd_timer_start1+0x5a/0x800 11:31:54 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8914, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1=0xe0000003}, {0x2, 0x0, @broadcast}}) 11:31:54 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8914, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1=0xe0000005}, {0x2, 0x0, @broadcast}}) [ 2895.826696][ T8206] which would create a new lock dependency: [ 2895.826700][ T8206] (&timer->lock){..-.}-{2:2} -> (&new->fa_lock){....}-{2:2} [ 2895.826729][ T8206] [ 2895.826729][ T8206] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 2895.826734][ T8206] (&timer->lock){..-.}-{2:2} [ 2895.826753][ T8206] [ 2895.826753][ T8206] ... which became SOFTIRQ-irq-safe at: [ 2895.826758][ T8206] lock_acquire+0x1ab/0x570 [ 2895.826777][ T8206] _raw_spin_lock_irqsave+0x39/0x50 [ 2895.826793][ T8206] snd_timer_notify+0x10c/0x3d0 [ 2895.826812][ T8206] snd_pcm_post_stop+0x195/0x1f0 [ 2895.826825][ T8206] snd_pcm_drain_done+0xdc/0x120 [ 2895.826839][ T8206] snd_pcm_update_state+0x43b/0x540 [ 2895.826871][ T8206] snd_pcm_update_hw_ptr0+0xa75/0x1a50 [ 2895.826887][ T8206] snd_pcm_period_elapsed_under_stream_lock+0x15a/0x230 [ 2895.826906][ T8206] snd_pcm_period_elapsed+0x28/0x50 [ 2895.826922][ T8206] loopback_jiffies_timer_function+0x1c4/0x240 [ 2895.826950][ T8206] call_timer_fn+0x1a5/0x6b0 [ 2895.826965][ T8206] __run_timers.part.0+0x679/0xa80 [ 2895.826981][ T8206] run_timer_softirq+0xb3/0x1d0 [ 2895.826995][ T8206] __do_softirq+0x29b/0x9c2 [ 2895.827010][ T8206] __irq_exit_rcu+0x123/0x180 [ 2895.827023][ T8206] irq_exit_rcu+0x5/0x20 [ 2895.827036][ T8206] sysvec_apic_timer_interrupt+0x93/0xc0 [ 2895.827055][ T8206] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 2895.827070][ T8206] lock_acquire+0x1ef/0x570 [ 2895.827084][ T8206] inet_twsk_purge+0x117/0x850 11:31:55 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$mouse(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000280), 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r5 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES64=r2], 0x14}}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x47) write(r2, &(0x7f0000000000)="0553ad72e4a6bd0319281b125e9cd0a9416df02e0e025410a7248d6813e4fe7b19c1bd5338e3ee9966b568b82c48", 0x97d08) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 11:31:55 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8914, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1=0xe0000007}, {0x2, 0x0, @broadcast}}) 11:31:55 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x99) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req={0x7ff, 0x9, 0x64b, 0x20}, 0x10) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 11:31:55 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$mouse(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000280), 0x0) creat(&(0x7f0000000080)='./file0\x00', 0xe1) r5 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES64=r2], 0x14}}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x47) write(r2, &(0x7f0000000000)="0553ad72e4a6bd17194e1b125e9cd0a9416df02e0e025410a7248d6813e4fe7b19c1bd5338e3ee9966b568b82c48", 0x97d08) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 11:31:55 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$mouse(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000280), 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r5 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES64=r2], 0x14}}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x47) write(r2, &(0x7f0000000000)="0553ad72e4a6bd03193c1b125e9cd0a9416df02e0e025410a7248d6813e4fe7b19c1bd5338e3ee9966b568b82c48", 0x97d08) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) [ 2895.827124][ T8206] ops_exit_list+0x125/0x170 [ 2895.827140][ T8206] cleanup_net+0x4ea/0xb00 [ 2895.827155][ T8206] process_one_work+0x996/0x1610 11:31:55 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8914, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1=0xe000000f}, {0x2, 0x0, @broadcast}}) [ 2895.827193][ T8206] worker_thread+0x665/0x1080 [ 2895.827207][ T8206] kthread+0x2e9/0x3a0 [ 2895.827219][ T8206] ret_from_fork+0x1f/0x30 [ 2895.827234][ T8206] [ 2895.827234][ T8206] to a SOFTIRQ-irq-unsafe lock: 11:31:55 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8914, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1=0xe0000032}, {0x2, 0x0, @broadcast}}) 11:31:55 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) (async, rerun: 64) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) (async, rerun: 64) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x99) (async) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req={0x7ff, 0x9, 0x64b, 0x20}, 0x10) (async, rerun: 64) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) (async, rerun: 64) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) [ 2895.827239][ T8206] (tasklist_lock){.+.?}-{2:2} 11:31:55 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001840)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000440)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}], 0x0, "a59f7995f969f9"}) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r8, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @remote={0xac, 0x10, 0x3}}, @sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, @nl=@unspec, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='syz_tun\x00', 0x4000}) setsockopt$inet_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f00000001c0), 0x4) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f0000001840)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000440)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r12}, {}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r14}, {}, {}, {}, {}, {0x0, r15}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}], 0x0, "a59f7995f969f9"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000058080)={0x10000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {0x0, r11}], 0x9, "112629aa9d7569"}) ioctl$sock_inet_SIOCDELRT(r0, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, {0x2, 0x4e21, @local}, {0x2, 0x4e22, @rand_addr=0x64010100}, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x201, 0x0, 0x0, 0x0, 0xffff, &(0x7f0000000000)='veth1_to_team\x00', 0x8, 0x7f, 0x101}) 11:31:55 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8914, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1=0xe0000300}, {0x2, 0x0, @broadcast}}) 11:31:55 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x8108551b, &(0x7f0000000380)) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, 0x0}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001840)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000440)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}], 0x0, "a59f7995f969f9"}) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r8, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @remote={0xac, 0x10, 0x3}}, @sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, @nl=@unspec, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='syz_tun\x00', 0x4000}) (async) setsockopt$inet_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f00000001c0), 0x4) (async) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) (async) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x8108551b, &(0x7f0000000380)) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, 0x0}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f0000001840)={0x0, ""/256, 0x0, 0x0}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000440)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r12}, {}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r14}, {}, {}, {}, {}, {0x0, r15}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}], 0x0, "a59f7995f969f9"}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000058080)={0x10000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {0x0, r11}], 0x9, "112629aa9d7569"}) (async) ioctl$sock_inet_SIOCDELRT(r0, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) (async) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, {0x2, 0x4e21, @local}, {0x2, 0x4e22, @rand_addr=0x64010100}, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x201, 0x0, 0x0, 0x0, 0xffff, &(0x7f0000000000)='veth1_to_team\x00', 0x8, 0x7f, 0x101}) [ 2895.827252][ T8206] [ 2895.827252][ T8206] ... which became SOFTIRQ-irq-unsafe at: 11:31:55 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) (async) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x99) (async) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req={0x7ff, 0x9, 0x64b, 0x20}, 0x10) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) (async) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) [ 2895.827257][ T8206] ... [ 2895.827259][ T8206] lock_acquire+0x1ab/0x570 [ 2895.827279][ T8206] _raw_read_lock+0x5b/0x70 [ 2895.827291][ T8206] do_wait+0x284/0xce0 [ 2895.827320][ T8206] kernel_wait+0x9c/0x150 [ 2895.827335][ T8206] call_usermodehelper_exec_work+0xf5/0x180 [ 2895.827366][ T8206] process_one_work+0x996/0x1610 [ 2895.827379][ T8206] worker_thread+0x665/0x1080 [ 2895.827392][ T8206] kthread+0x2e9/0x3a0 [ 2895.827404][ T8206] ret_from_fork+0x1f/0x30 [ 2895.827418][ T8206] [ 2895.827418][ T8206] other info that might help us debug this: [ 2895.827418][ T8206] [ 2895.827423][ T8206] Chain exists of: [ 2895.827423][ T8206] &timer->lock --> &new->fa_lock --> tasklist_lock [ 2895.827423][ T8206] [ 2895.827442][ T8206] Possible interrupt unsafe locking scenario: [ 2895.827442][ T8206] [ 2895.827446][ T8206] CPU0 CPU1 [ 2895.827449][ T8206] ---- ---- [ 2895.827452][ T8206] lock(tasklist_lock); [ 2895.827459][ T8206] local_irq_disable(); [ 2895.827463][ T8206] lock(&timer->lock); [ 2895.827471][ T8206] lock(&new->fa_lock); [ 2895.827480][ T8206] [ 2895.827482][ T8206] lock(&timer->lock); [ 2895.827489][ T8206] [ 2895.827489][ T8206] *** DEADLOCK *** [ 2895.827489][ T8206] [ 2895.827492][ T8206] 3 locks held by syz-executor.0/8206: [ 2895.827500][ T8206] #0: ffff8880771e2568 (&tu->ioctl_lock){+.+.}-{3:3}, at: snd_timer_user_ioctl+0x4c/0xb0 [ 2895.827536][ T8206] #1: ffff888023bed148 (&timer->lock){..-.}-{2:2}, at: snd_timer_start1+0x5a/0x800 [ 2895.827568][ T8206] #2: ffffffff8bd855e0 (rcu_read_lock){....}-{1:2}, at: kill_fasync+0x41/0x470 [ 2895.827599][ T8206] [ 2895.827599][ T8206] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 2895.827604][ T8206] -> (&timer->lock){..-.}-{2:2} { [ 2895.827621][ T8206] IN-SOFTIRQ-W at: [ 2895.827627][ T8206] lock_acquire+0x1ab/0x570 [ 2895.827643][ T8206] _raw_spin_lock_irqsave+0x39/0x50 [ 2895.827657][ T8206] snd_timer_notify+0x10c/0x3d0 [ 2895.827672][ T8206] snd_pcm_post_stop+0x195/0x1f0 [ 2895.827685][ T8206] snd_pcm_drain_done+0xdc/0x120 [ 2895.827700][ T8206] snd_pcm_update_state+0x43b/0x540 [ 2895.827716][ T8206] snd_pcm_update_hw_ptr0+0xa75/0x1a50 [ 2895.827732][ T8206] snd_pcm_period_elapsed_under_stream_lock+0x15a/0x230 [ 2895.827757][ T8206] snd_pcm_period_elapsed+0x28/0x50 [ 2895.827775][ T8206] loopback_jiffies_timer_function+0x1c4/0x240 [ 2895.827791][ T8206] call_timer_fn+0x1a5/0x6b0 [ 2895.827807][ T8206] __run_timers.part.0+0x679/0xa80 [ 2895.827822][ T8206] run_timer_softirq+0xb3/0x1d0 [ 2895.827839][ T8206] __do_softirq+0x29b/0x9c2 [ 2895.827854][ T8206] __irq_exit_rcu+0x123/0x180 [ 2895.827866][ T8206] irq_exit_rcu+0x5/0x20 [ 2895.827878][ T8206] sysvec_apic_timer_interrupt+0x93/0xc0 [ 2895.827896][ T8206] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 2895.827911][ T8206] lock_acquire+0x1ef/0x570 [ 2895.827927][ T8206] inet_twsk_purge+0x117/0x850 11:31:56 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$mouse(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000280), 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r5 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES64=r2], 0x14}}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x47) write(r2, &(0x7f0000000000)="0553ad72e4a6bd0319281b125e9cd0a9416df02e0e025410a7248d6813e4fe7b19c1bd5338e3ee9966b568b82c48", 0x97d08) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 11:31:56 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x99) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xc}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 11:31:56 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8914, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1=0xe000ff00}, {0x2, 0x0, @broadcast}}) 11:31:56 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) (async) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x8108551b, &(0x7f0000000380)) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, 0x0}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001840)={0x0, ""/256, 0x0, 0x0}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000440)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}], 0x0, "a59f7995f969f9"}) (async) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r8, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @remote={0xac, 0x10, 0x3}}, @sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, @nl=@unspec, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='syz_tun\x00', 0x4000}) setsockopt$inet_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f00000001c0), 0x4) (async) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) (async) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x8108551b, &(0x7f0000000380)) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, 0x0}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f0000001840)={0x0, ""/256, 0x0, 0x0}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000440)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r12}, {}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r14}, {}, {}, {}, {}, {0x0, r15}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}], 0x0, "a59f7995f969f9"}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000058080)={0x10000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {0x0, r11}], 0x9, "112629aa9d7569"}) (async) ioctl$sock_inet_SIOCDELRT(r0, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) (async) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, {0x2, 0x4e21, @local}, {0x2, 0x4e22, @rand_addr=0x64010100}, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x201, 0x0, 0x0, 0x0, 0xffff, &(0x7f0000000000)='veth1_to_team\x00', 0x8, 0x7f, 0x101}) 11:31:56 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$mouse(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000280), 0x0) creat(&(0x7f0000000080)='./file0\x00', 0xe1) r5 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES64=r2], 0x14}}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x47) write(r2, &(0x7f0000000000)="0553ad72e4a6bd3e194e1b125e9cd0a9416df02e0e025410a7248d6813e4fe7b19c1bd5338e3ee9966b568b82c48", 0x97d08) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 11:31:56 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$mouse(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000280), 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r5 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES64=r2], 0x14}}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x47) write(r2, &(0x7f0000000000)="0553ad72e4a6bd03194e0a125e9cd0a9416df02e0e025410a7248d6813e4fe7b19c1bd5338e3ee9966b568b82c48", 0x97d08) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) [ 2895.827942][ T8206] ops_exit_list+0x125/0x170 [ 2895.827957][ T8206] cleanup_net+0x4ea/0xb00 [ 2895.827973][ T8206] process_one_work+0x996/0x1610 [ 2895.827986][ T8206] worker_thread+0x665/0x1080 [ 2895.828000][ T8206] kthread+0x2e9/0x3a0 [ 2895.828011][ T8206] ret_from_fork+0x1f/0x30 11:31:56 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @rand_addr=0x64010102}, {0x2, 0x0, @broadcast}}) [ 2895.828026][ T8206] INITIAL USE at: [ 2895.828033][ T8206] lock_acquire+0x1ab/0x570 [ 2895.828048][ T8206] _raw_spin_lock_irqsave+0x39/0x50 [ 2895.828062][ T8206] snd_timer_notify+0x10c/0x3d0 11:31:56 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8914, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x4, 0x0, @broadcast}}) 11:31:56 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8914, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x7, 0x0, @broadcast}}) 11:31:56 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @rand_addr=0x64010102}, {0x2, 0x0, @broadcast}}) socket$inet_tcp(0x2, 0x1, 0x0) (async) ioctl$sock_inet_SIOCDELRT(r0, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @rand_addr=0x64010102}, {0x2, 0x0, @broadcast}}) (async) [ 2895.828077][ T8206] snd_pcm_post_stop+0x195/0x1f0 11:31:56 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @rand_addr=0x64010102}, {0x2, 0x0, @broadcast}}) 11:31:56 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) (async) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x99) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xc}) (async) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) [ 2895.828090][ T8206] snd_pcm_action_single+0xf4/0x130 [ 2895.828107][ T8206] snd_pcm_action+0x6e/0x90 [ 2895.828119][ T8206] snd_pcm_drop+0x1ab/0x320 [ 2895.828132][ T8206] snd_pcm_kernel_ioctl+0x2af/0x310 [ 2895.828147][ T8206] snd_pcm_oss_sync+0x230/0x800 [ 2895.828162][ T8206] snd_pcm_oss_release+0x276/0x300 [ 2895.828177][ T8206] __fput+0x277/0x9d0 [ 2895.828192][ T8206] task_work_run+0xdd/0x1a0 [ 2895.828206][ T8206] exit_to_user_mode_prepare+0x23c/0x250 [ 2895.828249][ T8206] syscall_exit_to_user_mode+0x19/0x50 [ 2895.828267][ T8206] do_syscall_64+0x42/0xb0 [ 2895.828283][ T8206] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 2895.828299][ T8206] } [ 2895.828302][ T8206] ... key at: [] __key.10+0x0/0x40 [ 2895.828353][ T8206] [ 2895.828353][ T8206] the dependencies between the lock to be acquired [ 2895.828358][ T8206] and SOFTIRQ-irq-unsafe lock: [ 2895.828373][ T8206] -> (tasklist_lock){.+.?}-{2:2} { [ 2895.828392][ T8206] HARDIRQ-ON-R at: [ 2895.828399][ T8206] lock_acquire+0x1ab/0x570 [ 2895.828417][ T8206] _raw_read_lock+0x5b/0x70 [ 2895.828430][ T8206] do_wait+0x284/0xce0 [ 2895.828446][ T8206] kernel_wait+0x9c/0x150 [ 2895.828463][ T8206] call_usermodehelper_exec_work+0xf5/0x180 [ 2895.828481][ T8206] process_one_work+0x996/0x1610 [ 2895.828495][ T8206] worker_thread+0x665/0x1080 [ 2895.828509][ T8206] kthread+0x2e9/0x3a0 [ 2895.828520][ T8206] ret_from_fork+0x1f/0x30 [ 2895.828535][ T8206] IN-SOFTIRQ-R at: [ 2895.828542][ T8206] lock_acquire+0x1ab/0x570 [ 2895.828557][ T8206] _raw_read_lock+0x36/0x70 [ 2895.828570][ T8206] send_sigurg+0xad/0xaf0 [ 2895.828583][ T8206] sk_send_sigurg+0x76/0x310 [ 2895.828598][ T8206] tcp_urg+0x38e/0xb40 [ 2895.828611][ T8206] tcp_rcv_established+0x81d/0x20e0 [ 2895.828626][ T8206] tcp_v6_do_rcv+0x810/0x13a0 [ 2895.828670][ T8206] tcp_v6_rcv+0x2d5f/0x3790 [ 2895.828683][ T8206] ip6_protocol_deliver_rcu+0x2e1/0x1930 [ 2895.828702][ T8206] ip6_input_finish+0x14c/0x2c0 [ 2895.828718][ T8206] ip6_input+0x9c/0xd0 [ 2895.828733][ T8206] ipv6_rcv+0x27f/0x3b0 [ 2895.828754][ T8206] __netif_receive_skb_one_core+0x114/0x180 [ 2895.828774][ T8206] __netif_receive_skb+0x24/0x1b0 [ 2895.828792][ T8206] process_backlog+0x3a0/0x7c0 [ 2895.828809][ T8206] __napi_poll+0xb3/0x6e0 [ 2895.828826][ T8206] net_rx_action+0x9c1/0xd90 [ 2895.828843][ T8206] __do_softirq+0x29b/0x9c2 [ 2895.828857][ T8206] do_softirq.part.0+0xde/0x130 [ 2895.828871][ T8206] __local_bh_enable_ip+0x102/0x120 [ 2895.828884][ T8206] sk_stream_wait_memory+0x608/0xed0 [ 2895.828899][ T8206] tcp_sendmsg_locked+0x7d5/0x2fc0 [ 2895.828913][ T8206] tcp_sendmsg+0x2b/0x40 [ 2895.828924][ T8206] inet6_sendmsg+0x99/0xe0 [ 2895.828938][ T8206] sock_sendmsg+0xcf/0x120 [ 2895.828950][ T8206] __sys_sendto+0x21a/0x320 [ 2895.828962][ T8206] __x64_sys_sendto+0xdd/0x1b0 [ 2895.828976][ T8206] do_syscall_64+0x35/0xb0 [ 2895.828990][ T8206] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 2895.829005][ T8206] SOFTIRQ-ON-R at: [ 2895.829012][ T8206] lock_acquire+0x1ab/0x570 [ 2895.829028][ T8206] _raw_read_lock+0x5b/0x70 [ 2895.829040][ T8206] do_wait+0x284/0xce0 [ 2895.829055][ T8206] kernel_wait+0x9c/0x150 [ 2895.829070][ T8206] call_usermodehelper_exec_work+0xf5/0x180 [ 2895.829089][ T8206] process_one_work+0x996/0x1610 [ 2895.829102][ T8206] worker_thread+0x665/0x1080 [ 2895.829116][ T8206] kthread+0x2e9/0x3a0 [ 2895.829127][ T8206] ret_from_fork+0x1f/0x30 [ 2895.829142][ T8206] INITIAL USE at: [ 2895.829148][ T8206] lock_acquire+0x1ab/0x570 [ 2895.829165][ T8206] _raw_write_lock_irq+0x32/0x50 [ 2895.829178][ T8206] copy_process+0x436c/0x6ff0 [ 2895.829191][ T8206] kernel_clone+0xe7/0xab0 [ 2895.829204][ T8206] kernel_thread+0xb5/0xf0 [ 2895.829223][ T8206] rest_init+0x23/0x270 [ 2895.829240][ T8206] arch_call_rest_init+0xf/0x14 [ 2895.829289][ T8206] start_kernel+0x46e/0x48f [ 2895.829309][ T8206] secondary_startup_64_no_verify+0xce/0xdb 11:31:57 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$mouse(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000280), 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r5 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES64=r2], 0x14}}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x47) write(r2, &(0x7f0000000000)="0553ad72e4a6bd0319281b125e9cd0a9416df02e0e025410a7248d6813e4fe7b19c1bd5338e3ee9966b568b82c48", 0x97d08) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 11:31:57 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8914, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0xf, 0x0, @broadcast}}) 11:31:57 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x99) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xc}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 11:31:57 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x143302, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x22}}}) 11:31:57 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$mouse(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000280), 0x0) creat(&(0x7f0000000080)='./file0\x00', 0xe1) r5 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES64=r2], 0x14}}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x47) write(r2, &(0x7f0000000000)="0553ad72e4a6bd03214e1b125e9cd0a9416df02e0e025410a7248d6813e4fe7b19c1bd5338e3ee9966b568b82c48", 0x97d08) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 11:31:57 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$mouse(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000280), 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r5 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES64=r2], 0x14}}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x47) write(r2, &(0x7f0000000000)="0553ad72e4a6bd03194e10125e9cd0a9416df02e0e025410a7248d6813e4fe7b19c1bd5338e3ee9966b568b82c48", 0x97d08) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 11:31:57 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8914, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) [ 2895.829325][ T8206] INITIAL READ USE at: [ 2895.829333][ T8206] lock_acquire+0x1ab/0x570 [ 2895.829348][ T8206] _raw_read_lock+0x5b/0x70 [ 2895.829360][ T8206] do_wait+0x284/0xce0 [ 2895.829374][ T8206] kernel_wait+0x9c/0x150 11:31:57 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x143302, 0x0) (async) ioctl$sock_inet_SIOCDELRT(r0, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x22}}}) [ 2895.829389][ T8206] call_usermodehelper_exec_work+0xf5/0x180 11:31:57 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8914, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x2, @broadcast}}) [ 2895.829407][ T8206] process_one_work+0x996/0x1610 [ 2895.829420][ T8206] worker_thread+0x665/0x1080 [ 2895.829433][ T8206] kthread+0x2e9/0x3a0 [ 2895.829444][ T8206] ret_from_fork+0x1f/0x30 [ 2895.829459][ T8206] } 11:31:57 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x143302, 0x0) (async) ioctl$sock_inet_SIOCDELRT(r0, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x22}}}) 11:31:57 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x99) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000180)={0x4, 0x6, 0x0, 0x0, 0xc}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) [ 2895.829462][ T8206] ... key at: [] tasklist_lock+0x18/0x40 11:31:57 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8914, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x3, @broadcast}}) [ 2895.829516][ T8206] ... acquired at: [ 2895.829520][ T8206] _raw_read_lock+0x5b/0x70 [ 2895.829532][ T8206] send_sigurg+0xad/0xaf0 [ 2895.829544][ T8206] sk_send_sigurg+0x76/0x310 [ 2895.829558][ T8206] tcp_urg+0x38e/0xb40 [ 2895.829569][ T8206] tcp_rcv_established+0x81d/0x20e0 [ 2895.829583][ T8206] tcp_v6_do_rcv+0x810/0x13a0 [ 2895.829595][ T8206] __release_sock+0x134/0x3b0 [ 2895.829609][ T8206] release_sock+0x54/0x1b0 [ 2895.829622][ T8206] sk_stream_wait_memory+0x608/0xed0 [ 2895.829637][ T8206] tcp_sendmsg_locked+0x7d5/0x2fc0 [ 2895.829649][ T8206] tcp_sendmsg+0x2b/0x40 [ 2895.829659][ T8206] inet6_sendmsg+0x99/0xe0 [ 2895.829672][ T8206] sock_sendmsg+0xcf/0x120 [ 2895.829682][ T8206] __sys_sendto+0x21a/0x320 [ 2895.829694][ T8206] __x64_sys_sendto+0xdd/0x1b0 [ 2895.829706][ T8206] do_syscall_64+0x35/0xb0 [ 2895.829719][ T8206] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 2895.829732][ T8206] [ 2895.829735][ T8206] -> (&f->f_owner.lock){...-}-{2:2} { [ 2895.829759][ T8206] IN-SOFTIRQ-R at: [ 2895.829766][ T8206] lock_acquire+0x1ab/0x570 [ 2895.829781][ T8206] _raw_read_lock_irqsave+0x45/0x90 [ 2895.829794][ T8206] send_sigurg+0x1e/0xaf0 [ 2895.829806][ T8206] sk_send_sigurg+0x76/0x310 [ 2895.829820][ T8206] tcp_urg+0x38e/0xb40 [ 2895.829832][ T8206] tcp_rcv_established+0x81d/0x20e0 [ 2895.829846][ T8206] tcp_v6_do_rcv+0x810/0x13a0 [ 2895.829858][ T8206] tcp_v6_rcv+0x2d5f/0x3790 [ 2895.829869][ T8206] ip6_protocol_deliver_rcu+0x2e1/0x1930 [ 2895.829885][ T8206] ip6_input_finish+0x14c/0x2c0 [ 2895.829900][ T8206] ip6_input+0x9c/0xd0 [ 2895.829914][ T8206] ipv6_rcv+0x27f/0x3b0 [ 2895.829928][ T8206] __netif_receive_skb_one_core+0x114/0x180 [ 2895.829945][ T8206] __netif_receive_skb+0x24/0x1b0 11:31:58 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$mouse(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000280), 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r5 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES64=r2], 0x14}}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x47) write(r2, &(0x7f0000000000)="0553ad72e4a6bd0319281b125e9cd0a9416df02e0e025410a7248d6813e4fe7b19c1bd5338e3ee9966b568b82c48", 0x97d08) 11:31:58 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e24, @multicast1}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001}) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000040)={{{@in=@remote, @in=@remote}}, {{@in=@loopback}, 0x0, @in6=@remote}}, &(0x7f00000001c0)=0xe8) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000000)) 11:31:58 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8914, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x4, @broadcast}}) 11:31:58 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x99) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000180)={0x4, 0x6, 0x0, 0x0, 0xc}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) (async) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x99) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) (async) creat(&(0x7f0000000040)='./file0\x00', 0x80) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000180)={0x4, 0x6, 0x0, 0x0, 0xc}) (async) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) (async) 11:31:58 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$mouse(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000280), 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r5 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES64=r2], 0x14}}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x47) write(r2, &(0x7f0000000000)="0553ad72e4a6bd03194e14125e9cd0a9416df02e0e025410a7248d6813e4fe7b19c1bd5338e3ee9966b568b82c48", 0x97d08) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 11:31:58 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$mouse(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000280), 0x0) creat(&(0x7f0000000080)='./file0\x00', 0xe1) r5 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES64=r2], 0x14}}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x47) write(r2, &(0x7f0000000000)="0553ad72e4a6bd0319951b125e9cd0a9416df02e0e025410a7248d6813e4fe7b19c1bd5338e3ee9966b568b82c48", 0x97d08) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 11:31:58 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8914, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x5, @broadcast}}) [ 2895.829961][ T8206] process_backlog+0x3a0/0x7c0 [ 2895.829976][ T8206] __napi_poll+0xb3/0x6e0 [ 2895.829991][ T8206] net_rx_action+0x9c1/0xd90 [ 2895.830006][ T8206] __do_softirq+0x29b/0x9c2 [ 2895.830020][ T8206] run_ksoftirqd+0x2d/0x60 11:31:58 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e24, @multicast1}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001}) (async) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000040)={{{@in=@remote, @in=@remote}}, {{@in=@loopback}, 0x0, @in6=@remote}}, &(0x7f00000001c0)=0xe8) (async) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000000)) 11:31:58 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) (async) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x99) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) (async) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000180)={0x4, 0x6, 0x0, 0x0, 0xc}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) [ 2895.830031][ T8206] smpboot_thread_fn+0x645/0x9c0 11:31:58 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8914, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x6, @broadcast}}) 11:31:58 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e24, @multicast1}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001}) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000040)={{{@in=@remote, @in=@remote}}, {{@in=@loopback}, 0x0, @in6=@remote}}, &(0x7f00000001c0)=0xe8) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000000)) [ 2895.830047][ T8206] kthread+0x2e9/0x3a0 11:31:58 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8914, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x7, @broadcast}}) [ 2895.830058][ T8206] ret_from_fork+0x1f/0x30 [ 2895.830072][ T8206] INITIAL USE at: [ 2895.830078][ T8206] lock_acquire+0x1ab/0x570 [ 2895.830093][ T8206] _raw_write_lock_irq+0x32/0x50 [ 2895.830105][ T8206] f_modown+0x2a/0x390 [ 2895.830117][ T8206] f_setown+0xd7/0x230 [ 2895.830128][ T8206] do_fcntl+0x748/0x10b0 [ 2895.830140][ T8206] __x64_sys_fcntl+0x15f/0x1d0 [ 2895.830153][ T8206] do_syscall_64+0x35/0xb0 [ 2895.830166][ T8206] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 2895.830180][ T8206] INITIAL READ USE at: [ 2895.830187][ T8206] lock_acquire+0x1ab/0x570 [ 2895.830202][ T8206] _raw_read_lock_irq+0x63/0x80 [ 2895.830214][ T8206] do_fcntl+0x8ae/0x10b0 [ 2895.830226][ T8206] __x64_sys_fcntl+0x15f/0x1d0 [ 2895.830239][ T8206] do_syscall_64+0x35/0xb0 [ 2895.830252][ T8206] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 2895.830267][ T8206] } [ 2895.830270][ T8206] ... key at: [] __key.5+0x0/0x40 [ 2895.830294][ T8206] ... acquired at: [ 2895.830298][ T8206] _raw_read_lock_irqsave+0x70/0x90 [ 2895.830310][ T8206] send_sigio+0x24/0x380 [ 2895.830322][ T8206] kill_fasync+0x1f8/0x470 [ 2895.830333][ T8206] lease_break_callback+0x1f/0x30 [ 2895.830389][ T8206] __break_lease+0x3d7/0x1420 [ 2895.830404][ T8206] vfs_truncate+0x31a/0x4b0 [ 2895.830415][ T8206] do_sys_truncate.part.0+0x11e/0x140 [ 2895.830428][ T8206] __x64_sys_truncate+0x69/0x90 [ 2895.830439][ T8206] do_syscall_64+0x35/0xb0 [ 2895.830452][ T8206] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 2895.830466][ T8206] [ 2895.830468][ T8206] -> (&new->fa_lock){....}-{2:2} { [ 2895.830484][ T8206] INITIAL USE at: [ 2895.830490][ T8206] lock_acquire+0x1ab/0x570 [ 2895.830505][ T8206] _raw_write_lock_irq+0x32/0x50 [ 2895.830518][ T8206] fasync_remove_entry+0xb6/0x1e0 [ 2895.830531][ T8206] fasync_helper+0x9e/0xb0 [ 2895.830543][ T8206] lease_modify+0x28a/0x370 [ 2895.830557][ T8206] locks_remove_file+0x29c/0x570 [ 2895.830572][ T8206] __fput+0x1b0/0x9d0 [ 2895.830587][ T8206] task_work_run+0xdd/0x1a0 [ 2895.830601][ T8206] exit_to_user_mode_prepare+0x23c/0x250 [ 2895.830618][ T8206] syscall_exit_to_user_mode+0x19/0x50 [ 2895.830635][ T8206] do_syscall_64+0x42/0xb0 [ 2895.830648][ T8206] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 2895.830663][ T8206] INITIAL READ USE at: [ 2895.830669][ T8206] lock_acquire+0x1ab/0x570 [ 2895.830684][ T8206] _raw_read_lock_irqsave+0x70/0x90 [ 2895.830697][ T8206] kill_fasync+0x136/0x470 [ 2895.830709][ T8206] lease_break_callback+0x1f/0x30 [ 2895.830724][ T8206] __break_lease+0x3d7/0x1420 [ 2895.830743][ T8206] vfs_truncate+0x31a/0x4b0 [ 2895.830755][ T8206] do_sys_truncate.part.0+0x11e/0x140 [ 2895.830768][ T8206] __x64_sys_truncate+0x69/0x90 [ 2895.830781][ T8206] do_syscall_64+0x35/0xb0 [ 2895.830794][ T8206] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 2895.830809][ T8206] } [ 2895.830812][ T8206] ... key at: [] __key.0+0x0/0x40 [ 2895.830826][ T8206] ... acquired at: [ 2895.830830][ T8206] lock_acquire+0x1ab/0x570 [ 2895.830844][ T8206] _raw_read_lock_irqsave+0x70/0x90 [ 2895.830856][ T8206] kill_fasync+0x136/0x470 [ 2895.830868][ T8206] snd_timer_user_ccallback+0x298/0x330 [ 2895.830884][ T8206] snd_timer_notify1+0x11c/0x3b0 [ 2895.830898][ T8206] snd_timer_start1+0x4d4/0x800 [ 2895.830913][ T8206] snd_timer_user_start.isra.0+0x1e3/0x260 [ 2895.830928][ T8206] __snd_timer_user_ioctl.isra.0+0xda4/0x2490 [ 2895.830945][ T8206] snd_timer_user_ioctl+0x77/0xb0 [ 2895.830959][ T8206] __x64_sys_ioctl+0x193/0x200 [ 2895.830972][ T8206] do_syscall_64+0x35/0xb0 [ 2895.830984][ T8206] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 2895.830998][ T8206] [ 2895.831000][ T8206] [ 2895.831000][ T8206] stack backtrace: [ 2895.831004][ T8206] CPU: 0 PID: 8206 Comm: syz-executor.0 Not tainted 5.18.0-syzkaller-04943-g7e062cda7d90 #0 [ 2895.831020][ T8206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2895.831029][ T8206] Call Trace: [ 2895.831033][ T8206] [ 2895.831039][ T8206] dump_stack_lvl+0xcd/0x134 [ 2895.831056][ T8206] check_irq_usage.cold+0x4c1/0x6b0 [ 2895.831082][ T8206] ? print_shortest_lock_dependencies_backwards+0x80/0x80 [ 2895.831102][ T8206] ? mark_lock.part.0+0xee/0x1910 [ 2895.831119][ T8206] ? check_path.constprop.0+0x24/0x50 [ 2895.831135][ T8206] ? register_lock_class+0xbe/0x11b0 [ 2895.831154][ T8206] ? lock_chain_count+0x20/0x20 [ 2895.831169][ T8206] ? is_bpf_text_address+0x99/0x170 [ 2895.831205][ T8206] __lock_acquire+0x2ade/0x56c0 [ 2895.831224][ T8206] ? lockdep_hardirqs_on_prepare+0x400/0x400 11:31:59 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) r1 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000000200)={0xffffffffffffffff, 0x2, 0x3f, 0x2, 0x8}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000040)=[0x1, 0x69a, 0x2], 0x3, 0x80000, 0x0, 0xffffffffffffffff}) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000001c0)={0x2, 0x0, &(0x7f0000000180)=[r3, r0]}, 0x2) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x99) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 11:31:59 executing program 2: ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) 11:31:59 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8914, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x300, @broadcast}}) 11:31:59 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$mouse(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000280), 0x0) creat(&(0x7f0000000080)='./file0\x00', 0xe1) r5 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES64=r2], 0x14}}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x47) write(r2, &(0x7f0000000000)="0553ad72e4a6bd03194e09125e9cd0a9416df02e0e025410a7248d6813e4fe7b19c1bd5338e3ee9966b568b82c48", 0x97d08) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 11:31:59 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$mouse(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000280), 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r5 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES64=r2], 0x14}}, 0x0) write(r2, &(0x7f0000000000)="0553ad72e4a6bd0319281b125e9cd0a9416df02e0e025410a7248d6813e4fe7b19c1bd5338e3ee9966b568b82c48", 0x97d08) 11:31:59 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$mouse(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000280), 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r5 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES64=r2], 0x14}}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x47) write(r2, &(0x7f0000000000)="0553ad72e4a6bd03194e1a125e9cd0a9416df02e0e025410a7248d6813e4fe7b19c1bd5338e3ee9966b568b82c48", 0x97d08) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 11:31:59 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8914, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x500, @broadcast}}) 11:31:59 executing program 2: ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) [ 2895.831241][ T8206] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2895.831259][ T8206] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2895.831277][ T8206] lock_acquire+0x1ab/0x570 11:31:59 executing program 2: ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) ioctl$sock_inet_SIOCDELRT(r0, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) (async) [ 2895.831293][ T8206] ? kill_fasync+0x136/0x470 [ 2895.831306][ T8206] ? lock_release+0x780/0x780 [ 2895.831321][ T8206] ? lock_release+0x780/0x780 [ 2895.831337][ T8206] ? snd_timer_user_ccallback+0x281/0x330 [ 2895.831354][ T8206] ? lock_downgrade+0x6e0/0x6e0 11:31:59 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8914, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x600, @broadcast}}) [ 2895.831373][ T8206] _raw_read_lock_irqsave+0x70/0x90 [ 2895.831386][ T8206] ? kill_fasync+0x136/0x470 [ 2895.831399][ T8206] kill_fasync+0x136/0x470 [ 2895.831415][ T8206] ? do_raw_spin_unlock+0x171/0x230 [ 2895.831438][ T8206] snd_timer_user_ccallback+0x298/0x330 [ 2895.831463][ T8206] ? snd_timer_user_append_to_tqueue+0x220/0x220 [ 2895.831505][ T8206] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2895.831532][ T8206] ? ktime_get_ts64+0x3bb/0x560 11:32:00 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @local}, {0x2, 0x1, @remote}, {0x2, 0xfffc, @empty}, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1}) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, {0x2, 0x4e20, @broadcast}, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x25}}, 0x81, 0x0, 0x0, 0x0, 0x800, &(0x7f0000000000)='veth0_to_bridge\x00', 0x2, 0x1, 0x1}) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) r2 = socket$inet(0x2, 0x1, 0x7) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000240)={@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x11}, 0x1, 0x6, [@rand_addr=0x64010102, @empty, @rand_addr=0x64010100, @private=0xa010100, @local, @multicast1]}, 0x28) ioctl$sock_inet_SIOCDELRT(r1, 0x890c, &(0x7f00000001c0)={0x0, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e22, @empty}, {0x2, 0x4e22, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)='veth1_to_bond\x00', 0xd8c0, 0x80000000, 0x4}) 11:32:00 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8914, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x700, @broadcast}}) [ 2895.831560][ T8206] snd_timer_notify1+0x11c/0x3b0 [ 2895.831583][ T8206] ? snd_timer_user_append_to_tqueue+0x220/0x220 [ 2895.831613][ T8206] ? rwlock_bug.part.0+0x90/0x90 [ 2895.831641][ T8206] ? timer_set_gparams+0x160/0x160 [ 2895.831667][ T8206] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 2895.831695][ T8206] snd_timer_start1+0x4d4/0x800 [ 2895.831726][ T8206] snd_timer_user_start.isra.0+0x1e3/0x260 [ 2895.831763][ T8206] __snd_timer_user_ioctl.isra.0+0xda4/0x2490 [ 2895.831796][ T8206] ? snd_timer_user_params.isra.0+0x8c0/0x8c0 [ 2895.831833][ T8206] ? rcu_read_lock_sched_held+0x3a/0x70 [ 2895.831891][ T8206] ? trace_contention_end+0xea/0x150 [ 2895.831915][ T8206] ? __mutex_lock+0x231/0x1350 [ 2895.831941][ T8206] ? snd_timer_user_ioctl+0x4c/0xb0 [ 2895.831970][ T8206] ? mutex_lock_io_nested+0x1190/0x1190 [ 2895.831997][ T8206] ? __context_tracking_exit+0xb8/0xe0 [ 2895.832023][ T8206] ? __fget_files+0x286/0x470 [ 2895.832051][ T8206] snd_timer_user_ioctl+0x77/0xb0 [ 2895.832081][ T8206] ? __snd_timer_user_ioctl.isra.0+0x2490/0x2490 [ 2895.832113][ T8206] __x64_sys_ioctl+0x193/0x200 [ 2895.832139][ T8206] do_syscall_64+0x35/0xb0 [ 2895.832167][ T8206] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 2895.832194][ T8206] RIP: 0033:0x7f33dba89109 [ 2895.832214][ T8206] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 11:32:00 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) r1 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000000200)={0xffffffffffffffff, 0x2, 0x3f, 0x2, 0x8}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000040)=[0x1, 0x69a, 0x2], 0x3, 0x80000, 0x0, 0xffffffffffffffff}) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000001c0)={0x2, 0x0, &(0x7f0000000180)=[r3, r0]}, 0x2) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x99) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) (async) syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) (async) dup(r1) (async) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000000200)={0xffffffffffffffff, 0x2, 0x3f, 0x2, 0x8}) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000040)=[0x1, 0x69a, 0x2], 0x3, 0x80000}) (async) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000001c0)={0x2, 0x0, &(0x7f0000000180)=[r3, r0]}, 0x2) (async) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x99) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) (async) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) (async) 11:32:00 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8914, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0xff00, @broadcast}}) 11:32:00 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @local}, {0x2, 0x1, @remote}, {0x2, 0xfffc, @empty}, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1}) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, {0x2, 0x4e20, @broadcast}, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x25}}, 0x81, 0x0, 0x0, 0x0, 0x800, &(0x7f0000000000)='veth0_to_bridge\x00', 0x2, 0x1, 0x1}) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) r2 = socket$inet(0x2, 0x1, 0x7) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000240)={@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x11}, 0x1, 0x6, [@rand_addr=0x64010102, @empty, @rand_addr=0x64010100, @private=0xa010100, @local, @multicast1]}, 0x28) ioctl$sock_inet_SIOCDELRT(r1, 0x890c, &(0x7f00000001c0)={0x0, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e22, @empty}, {0x2, 0x4e22, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)='veth1_to_bond\x00', 0xd8c0, 0x80000000, 0x4}) socket$inet_tcp(0x2, 0x1, 0x0) (async) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @local}, {0x2, 0x1, @remote}, {0x2, 0xfffc, @empty}, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1}) (async) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, {0x2, 0x4e20, @broadcast}, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x25}}, 0x81, 0x0, 0x0, 0x0, 0x800, &(0x7f0000000000)='veth0_to_bridge\x00', 0x2, 0x1, 0x1}) (async) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) (async) socket$inet(0x2, 0x1, 0x7) (async) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000240)={@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x11}, 0x1, 0x6, [@rand_addr=0x64010102, @empty, @rand_addr=0x64010100, @private=0xa010100, @local, @multicast1]}, 0x28) (async) ioctl$sock_inet_SIOCDELRT(r1, 0x890c, &(0x7f00000001c0)={0x0, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e22, @empty}, {0x2, 0x4e22, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)='veth1_to_bond\x00', 0xd8c0, 0x80000000, 0x4}) (async) [ 2895.832238][ T8206] RSP: 002b:00007f33dcbda168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2895.832261][ T8206] RAX: ffffffffffffffda RBX: 00007f33dbb9c030 RCX: 00007f33dba89109 11:32:00 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$mouse(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000280), 0x0) creat(&(0x7f0000000080)='./file0\x00', 0xe1) r5 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES64=r2], 0x14}}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x47) write(r2, &(0x7f0000000000)="0553ad72e4a6bd03194e1b145e9cd0a9416df02e0e025410a7248d6813e4fe7b19c1bd5338e3ee9966b568b82c48", 0x97d08) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 11:32:00 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8914, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast=0x5}}) 11:32:00 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$mouse(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000280), 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r5 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) write(r2, &(0x7f0000000000)="0553ad72e4a6bd0319281b125e9cd0a9416df02e0e025410a7248d6813e4fe7b19c1bd5338e3ee9966b568b82c48", 0x97d08) 11:32:00 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) (async) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @local}, {0x2, 0x1, @remote}, {0x2, 0xfffc, @empty}, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1}) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, {0x2, 0x4e20, @broadcast}, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x25}}, 0x81, 0x0, 0x0, 0x0, 0x800, &(0x7f0000000000)='veth0_to_bridge\x00', 0x2, 0x1, 0x1}) (async) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) r2 = socket$inet(0x2, 0x1, 0x7) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000240)={@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x11}, 0x1, 0x6, [@rand_addr=0x64010102, @empty, @rand_addr=0x64010100, @private=0xa010100, @local, @multicast1]}, 0x28) (async) ioctl$sock_inet_SIOCDELRT(r1, 0x890c, &(0x7f00000001c0)={0x0, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e22, @empty}, {0x2, 0x4e22, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)='veth1_to_bond\x00', 0xd8c0, 0x80000000, 0x4}) 11:32:00 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8914, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast=0x6}}) 11:32:00 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$mouse(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000280), 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r5 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES64=r2], 0x14}}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x47) write(r2, &(0x7f0000000000)="0553ad72e4a6bd03194e1b145e9cd0a9416df02e0e025410a7248d6813e4fe7b19c1bd5338e3ee9966b568b82c48", 0x97d08) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) [ 2895.832278][ T8206] RDX: 0000000000000000 RSI: 00000000000054a0 RDI: 0000000000000003 11:32:00 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) (async, rerun: 32) r1 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) (rerun: 32) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000000200)={0xffffffffffffffff, 0x2, 0x3f, 0x2, 0x8}) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000040)=[0x1, 0x69a, 0x2], 0x3, 0x80000, 0x0, 0xffffffffffffffff}) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000001c0)={0x2, 0x0, &(0x7f0000000180)=[r3, r0]}, 0x2) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x99) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) (async) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) [ 2895.832294][ T8206] RBP: 00007f33dbae308d R08: 0000000000000000 R09: 0000000000000000 11:32:00 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8914, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast=0xf}}) [ 2895.832309][ T8206] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 11:32:01 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8914, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast=0x5000000}}) 11:32:01 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x99) r1 = openat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)={0x1, 0x60, 0x13}, 0x18) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000180)={{0x0, 0x0, 0x77d0, 0x3, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) write$binfmt_script(r1, &(0x7f00000001c0)={'#! ', './file0', [{}, {0x20, '/dev/snd/timer\x00'}], 0xa, "91d1619a64c96f03f1aaceef57884ec641148bda5c556479f64dc78463480147590d35d969d3bb9c68c1e1faf5719cef274a0850c6ea332f7c10f20af863fbe01839604257abbb9ab3004b207bbb95e2a97a01ded00c830d90b8a05c3105351df89a1a15a42174e90c685c7c8b6c9f952ed9e3956a8019cc478adaf49ba3be"}, 0x9b) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) [ 2895.832324][ T8206] R13: 00007f33dc0cfb1f R14: 00007f33dcbda300 R15: 0000000000022000 11:32:01 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8914, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast=0x6000000}}) 11:32:01 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0xfe, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}) [ 2895.832348][ T8206] [ 2897.310305][ T1230] ieee802154 phy0 wpan0: encryption failed: -22 [ 2897.310354][ T1230] ieee802154 phy1 wpan1: encryption failed: -22 11:32:01 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0xfe, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}) socket$inet_tcp(0x2, 0x1, 0x0) (async) ioctl$sock_inet_SIOCDELRT(r0, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0xfe, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}) (async) 11:32:01 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$mouse(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000280), 0x0) creat(&(0x7f0000000080)='./file0\x00', 0xe1) r5 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES64=r2], 0x14}}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x47) write(r2, &(0x7f0000000000)="0553ad72e4a6bd03194e1b175e9cd0a9416df02e0e025410a7248d6813e4fe7b19c1bd5338e3ee9966b568b82c48", 0x97d08) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 11:32:01 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$mouse(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000280), 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) write(r2, &(0x7f0000000000)="0553ad72e4a6bd0319281b125e9cd0a9416df02e0e025410a7248d6813e4fe7b19c1bd5338e3ee9966b568b82c48", 0x97d08) 11:32:01 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8914, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast=0xf000000}}) 11:32:01 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) (async) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x99) (async) r1 = openat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)={0x1, 0x60, 0x13}, 0x18) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000180)={{0x0, 0x0, 0x77d0, 0x3, 0x3}}) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) write$binfmt_script(r1, &(0x7f00000001c0)={'#! ', './file0', [{}, {0x20, '/dev/snd/timer\x00'}], 0xa, "91d1619a64c96f03f1aaceef57884ec641148bda5c556479f64dc78463480147590d35d969d3bb9c68c1e1faf5719cef274a0850c6ea332f7c10f20af863fbe01839604257abbb9ab3004b207bbb95e2a97a01ded00c830d90b8a05c3105351df89a1a15a42174e90c685c7c8b6c9f952ed9e3956a8019cc478adaf49ba3be"}, 0x9b) (async) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 11:32:01 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$mouse(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000280), 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r5 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES64=r2], 0x14}}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x47) write(r2, &(0x7f0000000000)="0553ad72e4a6bd03194e1b175e9cd0a9416df02e0e025410a7248d6813e4fe7b19c1bd5338e3ee9966b568b82c48", 0x97d08) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 11:32:01 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0xfe, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}) socket$inet_tcp(0x2, 0x1, 0x0) (async) ioctl$sock_inet_SIOCDELRT(r0, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0xfe, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}) (async) 11:32:01 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8914, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) 11:32:01 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f00000000c0)={0x0, 0x2, 0x401, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x9a090b, 0x5, '\x00', @p_u8=&(0x7f0000000040)=0x1f}}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r1, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) 11:32:01 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f00000000c0)={0x0, 0x2, 0x401, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x9a090b, 0x5, '\x00', @p_u8=&(0x7f0000000040)=0x1f}}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r1, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) 11:32:01 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8914, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}, 0x2}) 11:32:02 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) (async, rerun: 64) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) (rerun: 64) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x99) r1 = openat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)={0x1, 0x60, 0x13}, 0x18) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000180)={{0x0, 0x0, 0x77d0, 0x3, 0x3}}) (async, rerun: 64) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) (async, rerun: 64) write$binfmt_script(r1, &(0x7f00000001c0)={'#! ', './file0', [{}, {0x20, '/dev/snd/timer\x00'}], 0xa, "91d1619a64c96f03f1aaceef57884ec641148bda5c556479f64dc78463480147590d35d969d3bb9c68c1e1faf5719cef274a0850c6ea332f7c10f20af863fbe01839604257abbb9ab3004b207bbb95e2a97a01ded00c830d90b8a05c3105351df89a1a15a42174e90c685c7c8b6c9f952ed9e3956a8019cc478adaf49ba3be"}, 0x9b) (async) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 11:32:02 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f00000000c0)={0x0, 0x2, 0x401, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x9a090b, 0x5, '\x00', @p_u8=&(0x7f0000000040)=0x1f}}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r1, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}}) 11:32:02 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$mouse(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000280), 0x0) creat(&(0x7f0000000080)='./file0\x00', 0xe1) r5 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES64=r2], 0x14}}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x47) write(r2, &(0x7f0000000000)="0553ad72e4a6bd03194e1b125e49d0a9416df02e0e025410a7248d6813e4fe7b19c1bd5338e3ee9966b568b82c48", 0x97d08) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 11:32:02 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8914, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}, 0x3}) 11:32:02 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @multicast1}}) 11:32:02 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x99) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000240)={0x2, 0x4, 0x1, 0x0, 0x1d}) r1 = openat$incfs(0xffffffffffffffff, &(0x7f00000000c0)='.pending_reads\x00', 0x200880, 0x8) ioctl$EXT4_IOC_CHECKPOINT(r1, 0x4004662b, &(0x7f0000000200)=0x2) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0x90100, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) r3 = socket$caif_seqpacket(0x25, 0x5, 0x2) ioctl$sock_netdev_private(r3, 0x89f7, &(0x7f00000002c0)="6af78d4827f6f203ec9a7543a67e268432f3960ce1660317448f0587e2ae6c98de15aabeb0e5f72b1648f61354115d2b8995e90bb47e3062f9d9b3e0d1dfb2c2b5fe28527c") ioctl$SNDRV_TIMER_IOCTL_STATUS64(r0, 0x80605414, &(0x7f0000000180)) 11:32:02 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$mouse(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000280), 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) write(r2, &(0x7f0000000000)="0553ad72e4a6bd0319281b125e9cd0a9416df02e0e025410a7248d6813e4fe7b19c1bd5338e3ee9966b568b82c48", 0x97d08) 11:32:02 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$mouse(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000280), 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r5 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES64=r2], 0x14}}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x47) write(r2, &(0x7f0000000000)="0553ad72e4a6bd03194e1b3e5e9cd0a9416df02e0e025410a7248d6813e4fe7b19c1bd5338e3ee9966b568b82c48", 0x97d08) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 11:32:02 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8914, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}, 0x4}) 11:32:02 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @multicast1}}) 11:32:02 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @multicast1}}) socket$inet_tcp(0x2, 0x1, 0x0) (async) ioctl$sock_inet_SIOCDELRT(r0, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @multicast1}}) (async) 11:32:02 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8914, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}, 0x5}) 11:32:02 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8914, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}, 0x6}) 11:32:02 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) (async) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x99) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000240)={0x2, 0x4, 0x1, 0x0, 0x1d}) r1 = openat$incfs(0xffffffffffffffff, &(0x7f00000000c0)='.pending_reads\x00', 0x200880, 0x8) ioctl$EXT4_IOC_CHECKPOINT(r1, 0x4004662b, &(0x7f0000000200)=0x2) (async) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0x90100, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) (async, rerun: 64) r3 = socket$caif_seqpacket(0x25, 0x5, 0x2) (rerun: 64) ioctl$sock_netdev_private(r3, 0x89f7, &(0x7f00000002c0)="6af78d4827f6f203ec9a7543a67e268432f3960ce1660317448f0587e2ae6c98de15aabeb0e5f72b1648f61354115d2b8995e90bb47e3062f9d9b3e0d1dfb2c2b5fe28527c") ioctl$SNDRV_TIMER_IOCTL_STATUS64(r0, 0x80605414, &(0x7f0000000180)) 11:32:03 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8914, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}, 0x7}) 11:32:03 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) setsockopt$inet_tcp_int(r2, 0x6, 0x5, &(0x7f0000000000)=0x4, 0x4) ioctl$sock_inet_SIOCDELRT(r0, 0x8917, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) r3 = syz_open_dev$dri(&(0x7f0000001180), 0x8, 0x72b6bb673e6403f1) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f00000025c0)) ioctl$KVM_SET_PIT(r5, 0x8048ae66, &(0x7f0000000000)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}]}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000240)=0x0) getpgid(r6) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000000200)=@kern={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001100)=[{&(0x7f0000000240)={0x194, 0x35, 0x100, 0x70bd26, 0x25dfdbfc, "", [@nested={0x17d, 0x7, 0x0, 0x1, [@generic="89c6612600d4c02e05cb76cb7a5ab6e387609587198aa119e8cc7dbd075a8d46addd7c6da7e852a4ef1e17aa815e4005602506c1c77f0b0ac75686736f99cf27d707f9", @typed={0x8, 0x2c, 0x0, 0x0, @pid=0xffffffffffffffff}, @generic="adc2c82c4e1dfcad1b71f9ab690a5e7e6ba4d400e2271f46e403c5ae7a3490458a3394a9974ed157a49e24b60335d4fc132fae6cfc471cebea400df02eb0b77581202feb96508eb9fb25e8a2b2b139a17fa487b59c0b55e01c690d680ae6825fb35880467993c8902efb46c258691b82edb9bf7793f2cb8bfab129953f8b069882984f0c88cdd73053c9f063a66d1127c638040fae2d6a0c1f3cb682feef4e8ad428eabf3fb00d162089373b6fa0133d3862be46335080a95d82932806561af0aa1c7fc453b7b43f1bdc85697a5c6581e800157badf47e4c9edf487685a1d2c41d9d97ce089b6f43e3f4cc", @generic="96fd95f3f7613e6ee2dd67c66373aceb9d59558e7426ea39df872f5cd92034788d1c74cd20bd14472d888296124ba057c317a6f57c5f8d2fc37082e639eecd3a76d968"]}, @typed={0x4, 0x1b}]}, 0x194}, {&(0x7f0000000400)=ANY=[@ANYBLOB="f40000002b0000032dbd7000fedbdf25e4008680a97bd3572735fddc9a3a1a104df182077bf38148fc492004121bca7c009c8aeb37e447db9e7a55b0fa725169bb250ced7a769b67c93e2528aabe1a916b04feafaca1456104fdc8c241b0cc80c5c2ecfd1cd855008893eb582580bfd68d254774c93d309ffbc1ffe97671d0259208006d00", @ANYRES32=0x0, @ANYBLOB="7cf12dac2f9bc5eaafdd546017b8c6346ee716fec329deb26ba3c8ec64486d19a225cb59ee81a11d67e8c5e3f3aad59276e9f18a2817a28edb66ff04b934f3fbb235bd9ffebecd35239589a8016ed9453e2fef0ba5d29181662f33da9e410232e76b49d4dbff4c960b45fb"], 0xf4}, {&(0x7f0000000500)={0x2a4, 0x1f, 0x2, 0x70bd27, 0x25dfdbfe, "", [@nested={0x58, 0x5, 0x0, 0x1, [@generic="adf1deb93403f5b7dc7706b0f768456721fd060b8af0ca3ba3ac65680b8910a53fb36e76515ed8bd271cf53fee7edb307d8ada849fd30ee5320b5583e24a765c8ad2dec8c7881b55189ec60e", @typed={0x8, 0x55, 0x0, 0x0, @fd}]}, @typed={0xda, 0x64, 0x0, 0x0, @binary="bf87c8a55472bedb5dc59592061d3fa4dcececdfa9db0b39148fcfb8cb036cd1a65c3113aa8710ee36f1f2ba625dc3bea490ada636e038436d2f5e4f0f567a76fe6d371d96ee2cbbae75895b06b8184fcd8ba8992e10181862afb24504d7da3127504a13b46ee82d92a68689df5c8775df70bf14dfd3c5671f1b0b5adb6e63343c8b71e2e7a983e49badfcb8aa9bf0c6c6de64d98439bb99fdb91e905cd6579e3c249226dbd52b07333efb1b9482b0787322b05fc18fa463189981cef5fcb196b5a7ae65d8571c1e6e2e84a424cdc6cb068829cdfe3e"}, @generic="6105627cb9df261096a5e32bb9498f974999e7c257df053af9ef2c7a0e8a0e9cb7c23d5d4344b84440111080bf21e32e4f9fd0fe14e4b073636f0429df5c754233317f43a1a4ae2e90755cd0fc008cec912104f46591b557946a5e9d147e65bcf792fdbf80a47924170605ca51d821a0bead11f29176579ebc35957052512d1cc682a946fcfc276d84dded6c787a67787973bef02feb7a28c61f11b119f6eef4a3818153cecef1603146bb8b4b12c6e1ec515755bf65a214", @typed={0xc, 0x20, 0x0, 0x0, @u64=0x3225dea3}, @generic="0646a9e1f624a741055ee1d180fd4d7bedfa4d4e21fdf5cdd5a03af9e7d2bd5c187ff35060d06625e17f7acf1608eef51745a2b04af306b0015bceb6383da7670c4e4d852bd402745e182eaf016b0f4f4ade2a9c472737fffab66bd8c6b1491d2a48e753eaf7f8ae8861df98df0b4a45debf7df0142efd3ef3a4fcee42a74d88b5618e180039006e3d23581856a48a572fc3f48c6fd9070edb5e"]}, 0x2a4}, {&(0x7f00000007c0)={0x214, 0x35, 0x200, 0x70bd25, 0x25dfdbfc, "", [@typed={0x4, 0x2e}, @generic="7ce645644c61ff25b0d60e48a30cb15152674026e47c7427406a8929baa962d63866c856c2f68338039d7dbef871b0e8a7cdad", @typed={0xc, 0x23, 0x0, 0x0, @u64=0xb81}, @nested={0x116, 0x19, 0x0, 0x1, [@typed={0x8, 0x48, 0x0, 0x0, @u32=0x2}, @generic="2191540b6532487aea097c2d7788c1a3dfbcde240789ce2dc14aff14ec479514ff054872e0ab06aa2e7c91572aca95eec0c8bd00dbfb09b6dc631250eca7bbaefa", @generic, @generic="4e14cdf790633c04d81111e448a7be136c8dbb53f53da7a3adaf056e41b52996dee39af76ce8af9f3e711a87a3fac668c93489eae8ce160aa25c149e317f0fb24cdb5d603da43301c4dbf198b52bcd7f1b15a4f04fab2a1666b949c82ae1176d46a56014028834c45480daaaf501b8938f0e7322c709c8a8e44f26c1ca5da08c2e4634db02db4a208349595acc1995406e980ecf0f268e776a5113a99b617be3a8309239ac5a6dbfa08da0fc1a121dbbcaa442888ef45cffe1db29bf9b5b6c95478d", @generic="81284015987650"]}, @typed={0xc, 0x49, 0x0, 0x0, @u64=0x8}, @typed={0x8, 0x2b, 0x0, 0x0, @ipv4=@remote}, @typed={0x8, 0x1c, 0x0, 0x0, @uid}, @generic="9d0c38bf6418c67aa83050661fe82f9347c6a76b2bfaf056b395929ac5c46ee9890a2e7b4f0ab9fd53f46c892b0b3cfbc9a66d54bfef89504424ea21fe68c3ebf5c3af7f5f27cca4fcf21c770761d43d3cf81cb07e46a29a6e88ca59cbbe0eb9a1df9153779f1b1ad8e02b1a17dc83c8b92c592dbf1b8444cf3764db", @typed={0x8, 0x21, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @typed={0x8, 0x79, 0x0, 0x0, @ipv4=@multicast2}]}, 0x214}, {&(0x7f0000000c00)=ANY=[@ANYBLOB="400100003600010025bd7000fddbdf252f013c803b0f83adffd0b6002a6a5760a708007300ac1414aa08004500", @ANYRES32=0x0, @ANYBLOB="05001b003000000008007e00", @ANYRES32, @ANYBLOB="0800450001010000160059002f6465762f736e642f6d69646943234423000000c61c2fcccd9f3521898f5887e31547ddc6597a58afdf86350027a58a5b8d09c2f9fb767b35a2dcf96c2c3138a7a6cbf0fae862e9d83c317b02c7978a9b17ad2c555501b1238b4374de6d6d9befe447c52f9f9a14b5c42f049ed0fe8168e1bb606fdbf0e109c081c6590227a9e5786a816b3517b7a3e36b7f8fe8ef17adc6dd0000b4ee5de82afe8ce3cd64373165aead66333e79d87d6bdc9bb1f434acb8db748adaaa0037bb53dc7c55155057588bf2fa61601d75ad29ade435ac5171db54ef0309426ff964f0c0dbde3c2640d68623be185e17c144808e056a36f38b88b90ca1119afcfad4348806a36a2d34b59e84ccdee89b00cd629fd73d9b6938b796796663195b4eb950cf9b7b382514c82d9f28d53c307fed14efe9ac4fc35ebd6e37291738bb"], 0x140}, {&(0x7f0000000dc0)={0x31c, 0x27, 0x800, 0x70bd28, 0x25dfdbfe, "", [@generic="5669e374a1cf82f4d484dce5f9cbc7f6b07793740b611b79e60b1d75af0ca23442036ddd5ad53fb924f87fc81635ce36f74021a3f69be8f5817a30d2ebfc3568e121180581104b58e870d18ae5a351b9840228bc4a93fc67ca72279a584c27f074024f6d", @typed={0x8, 0x35, 0x0, 0x0, @pid}, @nested={0x247, 0x8b, 0x0, 0x1, [@generic="72b2defa33fef6d1b11d2d8fd9efb63039e7a5cf2a7deb17492644881e8e701b98830b683bfc2895b4c8448cb758fe1bc681ced90bb4ad51ade95a642328cb0cfdb30100cfaf79fc8fd80cdf7cc800dab1626d485ae5813c5226e48e1b4621444b9e21415c6e659f07abba9e", @generic="3b1f4c0f7bd5309495ba0ee76e6312f82d773b36744f1dbb58556d8f44946291272e692192a451f2a33face261fc4830a170f718c7aec0f84d0a600c23387b1b53e8a5c0013babe2fea546e6c1427abe71b478990c267971a62970a56a04c250d8ae9d9fa5bb593dbd712c1a33ceae4ba114ccdab20e341e08c215a7302cba34eab29a93ebc94afe82d9dc8769cc73ccd011bacca33c211f2ef478456a16467d21b6ab49add27846600c2c8d379321", @generic="637312acf21bcddd1e12e9a1a1c644bd2d93564ef5731cce17d16ae82ab0f5faa6758abce45d9b860a40d98db2958236098917cca1d3b35cb4d560e3b8ce3bc7a5185f58c72d70c58768f5a9218f4df727e623089104b83669b62d682a69bf2fa568c11ee56f848b2e71345a33e96b58f0e727d5ed95d220b35b52db3820680bbcb7650247a7", @generic="3f22dfd51ce944e22dfba5c92dca956c2748f9af0eccf5281f81a225d031b93a7205fd8d0a1476fead2cb3609511e2fb0bf631c7995017cba021146ac365c2ed2f979c7a6ecb27676f388fe25873f8709e16a94a60d63dd67c698e0ecb4dead108cb59083105487aeaaa2bedc814a38b910b858613f9a856e5919f370102a9b51598317bb1bee87c2715344deabe4d73f180f79ce05f883bb384", @typed={0x8, 0x15, 0x0, 0x0, @fd}]}, @generic="b8817bf56e8667462f41fe7f7375cb371c6ee692955c2640e61f5af0b7d64ee924aa2c93d81bdb", @typed={0x2d, 0x44, 0x0, 0x0, @binary="5b68011a6887662389690a683476500be23ca8eb2e1805a4f5b136bb8a40a1a8d617f5bb8150ad73fd"}]}, 0x31c}], 0x6, &(0x7f00000011c0)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, r3, r5]}}, @rights={{0x18, 0x1, 0x1, [r2, r2]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xee00}}}, @rights={{0x14, 0x1, 0x1, [r1]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {r6, 0x0, 0xee01}}}], 0xc8}, 0x20048080) r7 = accept$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, &(0x7f0000000100)=0x10) copy_file_range(r7, &(0x7f00000001c0)=0x8, r1, 0x0, 0x3, 0x0) pwrite64(r2, &(0x7f0000000040)="8a66c60e8f608d7e29fef105ea6056f75941421ce105a372a57938685c1c89d30889", 0x22, 0x4d63) 11:32:03 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x99) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) (async, rerun: 32) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000240)={0x2, 0x4, 0x1, 0x0, 0x1d}) (rerun: 32) r1 = openat$incfs(0xffffffffffffffff, &(0x7f00000000c0)='.pending_reads\x00', 0x200880, 0x8) ioctl$EXT4_IOC_CHECKPOINT(r1, 0x4004662b, &(0x7f0000000200)=0x2) (async) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0x90100, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) (async) r3 = socket$caif_seqpacket(0x25, 0x5, 0x2) ioctl$sock_netdev_private(r3, 0x89f7, &(0x7f00000002c0)="6af78d4827f6f203ec9a7543a67e268432f3960ce1660317448f0587e2ae6c98de15aabeb0e5f72b1648f61354115d2b8995e90bb47e3062f9d9b3e0d1dfb2c2b5fe28527c") (async) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r0, 0x80605414, &(0x7f0000000180)) 11:32:03 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$mouse(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000280), 0x0) write(r2, &(0x7f0000000000)="0553ad72e4a6bd0319281b125e9cd0a9416df02e0e025410a7248d6813e4fe7b19c1bd5338e3ee9966b568b82c48", 0x97d08) 11:32:03 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$mouse(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000280), 0x0) creat(&(0x7f0000000080)='./file0\x00', 0xe1) r5 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES64=r2], 0x14}}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x47) write(r2, &(0x7f0000000000)="0553ad72e4a6bd03194e1b125e5ad0a9416df02e0e025410a7248d6813e4fe7b19c1bd5338e3ee9966b568b82c48", 0x97d08) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 11:32:03 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$mouse(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000280), 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r5 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES64=r2], 0x14}}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x47) write(r2, &(0x7f0000000000)="0553ad72e4a6bd03194e1b125e9cd0a9416df02e05025410a7248d6813e4fe7b19c1bd5338e3ee9966b568b82c48", 0x97d08) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 11:32:03 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8914, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}, 0x300}) 11:32:03 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8914, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}, 0x500}) 11:32:03 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) poll(&(0x7f00000000c0)=[{r0}], 0x1, 0x99) r1 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000180), 0x10000, 0x1b2) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, 0x0, 0x8, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x40004}, 0x10) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x101200) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) r2 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000080)={{0x2, 0x1, 0x400, 0x1, 0x23}}) 11:32:03 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8914, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}, 0x600}) 11:32:03 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8914, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}, 0x700}) 11:32:04 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8914, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}, 0xff00}) 11:32:04 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8914, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}})