y, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)
fchmod(r3, 0xe5)

16:23:42 executing program 2:
r0 = socket(0x10, 0x2, 0x0)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dc", 0x1c)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0))
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x40000})
ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x0, 0x0, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:23:42 executing program 0:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, 0x0)
pipe(&(0x7f00000004c0))
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x3d4, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:23:42 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x7f4d5b6eb000)

16:23:42 executing program 1:
r0 = socket(0x10, 0x0, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getuid()
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r5, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x20000000, 0x0, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)
fchmod(r3, 0xe5)

16:23:42 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x7fffffffefff)

16:23:42 executing program 4:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dc", 0x1c)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000240)={<r3=>0xffffffffffffffff})
geteuid()
ioctl$VT_RELDISP(r3, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getpeername$inet6(r3, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0))
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4000000]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:23:42 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x940000000000)

[ 1747.986224] __nla_parse: 5 callbacks suppressed
[ 1747.986275] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'.
16:23:43 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x1000000000000)

[ 1748.076662] protocol 88fb is buggy, dev hsr_slave_0
[ 1748.082314] protocol 88fb is buggy, dev hsr_slave_1
16:23:43 executing program 3:
r0 = socket(0x10, 0x0, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getuid()
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r5, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0xfeffffff, 0x0, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)
fchmod(r3, 0xe5)

16:23:43 executing program 2:
r0 = socket(0x10, 0x2, 0x0)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dc", 0x1c)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0))
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x1000000})
ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x0, 0x0, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:23:43 executing program 0:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, 0x0)
pipe(&(0x7f00000004c0))
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x3f0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:23:43 executing program 1:
r0 = socket(0x10, 0x0, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getuid()
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r5, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x20000000, 0x0, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)
fchmod(r3, 0xe5)

16:23:43 executing program 4:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dc", 0x1c)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000240)={<r3=>0xffffffffffffffff})
geteuid()
ioctl$VT_RELDISP(r3, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getpeername$inet6(r3, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0))
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6, 0x5000000]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:23:43 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x20000000000000)

[ 1748.436856] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'.
16:23:43 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x30710000000000)

[ 1748.551746] protocol 88fb is buggy, dev hsr_slave_0
[ 1748.553087] protocol 88fb is buggy, dev hsr_slave_0
[ 1748.556900] protocol 88fb is buggy, dev hsr_slave_1
[ 1748.562346] protocol 88fb is buggy, dev hsr_slave_1
[ 1748.566983] protocol 88fb is buggy, dev hsr_slave_0
[ 1748.576997] protocol 88fb is buggy, dev hsr_slave_1
[ 1748.646001] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'.
16:23:43 executing program 4:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dc", 0x1c)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000240)={<r3=>0xffffffffffffffff})
geteuid()
ioctl$VT_RELDISP(r3, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getpeername$inet6(r3, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0))
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6, 0x6000000]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:23:43 executing program 2:
r0 = socket(0x10, 0x2, 0x0)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dc", 0x1c)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0))
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000002})
ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x0, 0x0, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:23:43 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x600c0200000000)

16:23:43 executing program 3:
r0 = socket(0x10, 0x0, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getuid()
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r5, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0xffffff7f, 0x0, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)
fchmod(r3, 0xe5)

16:23:43 executing program 0:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, 0x0)
pipe(&(0x7f00000004c0))
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x3f5, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

[ 1748.979624] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'.
16:23:43 executing program 1:
r0 = socket(0x10, 0x0, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getuid()
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r5, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x20000000, 0x0, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)
fchmod(r3, 0xe5)

16:23:44 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x800e0200000000)

16:23:44 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x80ffff00000000)

[ 1749.268150] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'.
16:23:44 executing program 4:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dc", 0x1c)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000240)={<r3=>0xffffffffffffffff})
geteuid()
ioctl$VT_RELDISP(r3, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getpeername$inet6(r3, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0))
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6, 0x7000000]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:23:44 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xa0500000000000)

16:23:44 executing program 2:
r0 = socket(0x10, 0x2, 0x0)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dc", 0x1c)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0))
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000003})
ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x0, 0x0, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:23:44 executing program 3:
r0 = socket(0x10, 0x0, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getuid()
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r5, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0xfffffffe, 0x0, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)
fchmod(r3, 0xe5)

16:23:44 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, 0x0)
pipe(&(0x7f00000004c0))
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x3d4, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:23:44 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xa0700000000000)

[ 1749.652937] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'.
16:23:44 executing program 0:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, 0x0)
pipe(&(0x7f00000004c0))
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x3f8, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:23:44 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xb06e5b4d7f0000)

[ 1749.836187] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'.
16:23:44 executing program 3:
r0 = socket(0x10, 0x0, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getuid()
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r5, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x1000000000000, 0x0, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)
fchmod(r3, 0xe5)

16:23:44 executing program 2:
r0 = socket(0x10, 0x2, 0x0)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dc", 0x1c)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0))
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000004})
ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x0, 0x0, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:23:44 executing program 4:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dc", 0x1c)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000240)={<r3=>0xffffffffffffffff})
geteuid()
ioctl$VT_RELDISP(r3, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getpeername$inet6(r3, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0))
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6, 0x8000000]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

[ 1750.088905] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'.
16:23:45 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x100000000000000)

16:23:45 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, 0x0)
pipe(&(0x7f00000004c0))
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x3d4, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

[ 1750.232952] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'.
16:23:45 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x100004000000000)

16:23:45 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x100008000000000)

16:23:45 executing program 0:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, 0x0)
pipe(&(0x7f00000004c0))
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x3fc, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:23:45 executing program 2:
r0 = socket(0x10, 0x2, 0x0)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dc", 0x1c)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0))
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000005})
ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x0, 0x0, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:23:45 executing program 3:
r0 = socket(0x10, 0x0, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getuid()
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r5, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x4000000000000, 0x0, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)
fchmod(r3, 0xe5)

16:23:45 executing program 4:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dc", 0x1c)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000240)={<r3=>0xffffffffffffffff})
geteuid()
ioctl$VT_RELDISP(r3, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getpeername$inet6(r3, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0))
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6, 0x13000000]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:23:45 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, 0x0)
pipe(&(0x7f00000004c0))
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x3d4, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

[ 1750.527892] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'.
16:23:45 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x10000c000000000)

16:23:45 executing program 0:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, 0x0)
pipe(&(0x7f00000004c0))
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x403, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:23:45 executing program 3:
r0 = socket(0x10, 0x0, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getuid()
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r5, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x100000000000000, 0x0, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)
fchmod(r3, 0xe5)

16:23:45 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x100004000000000)

16:23:45 executing program 4:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dc", 0x1c)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000240)={<r3=>0xffffffffffffffff})
geteuid()
ioctl$VT_RELDISP(r3, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getpeername$inet6(r3, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0))
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3f000000]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:23:45 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x101000000000000)

16:23:45 executing program 2:
r0 = socket(0x10, 0x2, 0x0)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dc", 0x1c)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0))
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000006})
ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x0, 0x0, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:23:46 executing program 1:
r0 = socket(0x10, 0x2, 0x0)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dc", 0x1c)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0))
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1000000]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x0, 0x0, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:23:46 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x200000000000000)

16:23:46 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x300000000000000)

16:23:46 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x400000000000000)

16:23:46 executing program 0:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, 0x0)
pipe(&(0x7f00000004c0))
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x500, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:23:46 executing program 4:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dc", 0x1c)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000240)={<r3=>0xffffffffffffffff})
geteuid()
ioctl$VT_RELDISP(r3, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getpeername$inet6(r3, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0))
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6, 0x40000000]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:23:46 executing program 2:
r0 = socket(0x10, 0x2, 0x0)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dc", 0x1c)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0))
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000007})
ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x0, 0x0, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:23:46 executing program 3:
r0 = socket(0x10, 0x0, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getuid()
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r5, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x200000000000000, 0x0, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)
fchmod(r3, 0xe5)

16:23:46 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x500000000000000)

16:23:46 executing program 1:
r0 = socket(0x10, 0x2, 0x0)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dc", 0x1c)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0))
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1000000]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x0, 0x0, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:23:46 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x600000000000000)

16:23:46 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x700000000000000)

16:23:46 executing program 4:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dc", 0x1c)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000240)={<r3=>0xffffffffffffffff})
geteuid()
ioctl$VT_RELDISP(r3, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getpeername$inet6(r3, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0))
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6, 0x65030000]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:23:46 executing program 0:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, 0x0)
pipe(&(0x7f00000004c0))
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x600, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:23:47 executing program 2:
r0 = socket(0x10, 0x2, 0x0)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dc", 0x1c)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0))
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000008})
ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x0, 0x0, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:23:47 executing program 3:
r0 = socket(0x10, 0x0, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getuid()
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r5, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x300000000000000, 0x0, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)
fchmod(r3, 0xe5)

[ 1752.244067] net_ratelimit: 16 callbacks suppressed
[ 1752.244095] protocol 88fb is buggy, dev hsr_slave_0
[ 1752.254715] protocol 88fb is buggy, dev hsr_slave_1
16:23:47 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x700008000000000)

16:23:47 executing program 1:
r0 = socket(0x10, 0x2, 0x0)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dc", 0x1c)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0))
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1000000]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x0, 0x0, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:23:47 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x800008000000000)

16:23:47 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x900000000000000)

16:23:47 executing program 2:
r0 = socket(0x10, 0x2, 0x0)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dc", 0x1c)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0))
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000013})
ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x0, 0x0, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:23:47 executing program 4:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dc", 0x1c)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000240)={<r3=>0xffffffffffffffff})
geteuid()
ioctl$VT_RELDISP(r3, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getpeername$inet6(r3, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0))
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6, 0xfeffffff]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:23:47 executing program 0:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, 0x0)
pipe(&(0x7f00000004c0))
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x60a, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:23:47 executing program 3:
r0 = socket(0x10, 0x0, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getuid()
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r5, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x400000000000000, 0x0, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)
fchmod(r3, 0xe5)

[ 1752.711781] protocol 88fb is buggy, dev hsr_slave_0
[ 1752.711812] protocol 88fb is buggy, dev hsr_slave_1
[ 1752.716871] protocol 88fb is buggy, dev hsr_slave_1
[ 1752.727089] protocol 88fb is buggy, dev hsr_slave_0
[ 1752.732217] protocol 88fb is buggy, dev hsr_slave_1
[ 1752.737338] protocol 88fb is buggy, dev hsr_slave_0
[ 1752.742447] protocol 88fb is buggy, dev hsr_slave_1
16:23:47 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xa00000000000000)

16:23:47 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dc", 0x1c)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000240)={<r3=>0xffffffffffffffff})
geteuid()
ioctl$VT_RELDISP(r3, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getpeername$inet6(r3, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0))
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0xc]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:23:47 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xb00000000000000)

16:23:48 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd00000000000000)

[ 1753.132248] __nla_parse: 9 callbacks suppressed
[ 1753.132274] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'.
16:23:48 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x1400000000000000)

[ 1753.271856] protocol 88fb is buggy, dev hsr_slave_0
16:23:48 executing program 4:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dc", 0x1c)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000240)={<r3=>0xffffffffffffffff})
geteuid()
ioctl$VT_RELDISP(r3, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getpeername$inet6(r3, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0))
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6, 0xfffffffe]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:23:48 executing program 3:
r0 = socket(0x10, 0x0, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getuid()
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r5, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x500000000000000, 0x0, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)
fchmod(r3, 0xe5)

16:23:48 executing program 2:
r0 = socket(0x10, 0x2, 0x0)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dc", 0x1c)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0))
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000300})
ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x0, 0x0, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:23:48 executing program 0:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, 0x0)
pipe(&(0x7f00000004c0))
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x700, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:23:48 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x1900008000000000)

[ 1753.608967] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'.
16:23:48 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dc", 0x1c)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000240)={<r3=>0xffffffffffffffff})
geteuid()
ioctl$VT_RELDISP(r3, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getpeername$inet6(r3, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0))
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0xc]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:23:48 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x1a00008000000000)

16:23:48 executing program 2:
r0 = socket(0x10, 0x2, 0x0)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dc", 0x1c)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0))
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000500})
ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x0, 0x0, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:23:48 executing program 3:
r0 = socket(0x10, 0x0, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getuid()
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r5, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x600000000000000, 0x0, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)
fchmod(r3, 0xe5)

16:23:48 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x1d00008000000000)

[ 1753.891586] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'.
16:23:48 executing program 4:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dc", 0x1c)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000240)={<r3=>0xffffffffffffffff})
geteuid()
ioctl$VT_RELDISP(r3, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getpeername$inet6(r3, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0))
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1000000000000]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:23:49 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000)

16:23:49 executing program 0:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, 0x0)
pipe(&(0x7f00000004c0))
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0xa06, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:23:49 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dc", 0x1c)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000240)={<r3=>0xffffffffffffffff})
geteuid()
ioctl$VT_RELDISP(r3, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getpeername$inet6(r3, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0))
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0xc]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

[ 1754.150672] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'.
16:23:49 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x5000000000000000)

16:23:49 executing program 3:
r0 = socket(0x10, 0x0, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getuid()
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r5, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x700000000000000, 0x0, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)
fchmod(r3, 0xe5)

16:23:49 executing program 2:
r0 = socket(0x10, 0x2, 0x0)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dc", 0x1c)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0))
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000600})
ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x0, 0x0, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

[ 1754.370788] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'.
16:23:49 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000)

16:23:49 executing program 4:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dc", 0x1c)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000240)={<r3=>0xffffffffffffffff})
geteuid()
ioctl$VT_RELDISP(r3, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getpeername$inet6(r3, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0))
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4000000000000]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:23:49 executing program 0:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, 0x0)
pipe(&(0x7f00000004c0))
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x1300, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:23:49 executing program 2:
r0 = socket(0x10, 0x2, 0x0)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dc", 0x1c)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0))
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000617})
ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x0, 0x0, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:23:49 executing program 1 (fault-call:3 fault-nth:0):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x6, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
write$FUSE_POLL(r0, &(0x7f0000000000)={0x18}, 0x18)
read(r0, 0x0, 0xffffff00)

16:23:49 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xf6ffffff00000000)

[ 1754.689941] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'.
16:23:49 executing program 3:
r0 = socket(0x10, 0x0, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getuid()
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r5, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x800000000000000, 0x0, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)
fchmod(r3, 0xe5)

16:23:49 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x6, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
write$FUSE_POLL(r0, &(0x7f0000000000)={0x18}, 0x18)
read(r0, 0x0, 0xffffff00)

16:23:49 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfcfdffff00000000)

16:23:49 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x6, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
write$FUSE_POLL(r0, &(0x7f0000000000)={0x18}, 0x18)
read(r0, 0x0, 0xffffff02)

[ 1754.926388] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'.
16:23:49 executing program 4:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dc", 0x1c)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000240)={<r3=>0xffffffffffffffff})
geteuid()
ioctl$VT_RELDISP(r3, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getpeername$inet6(r3, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0))
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6, 0x100000000000000]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:23:49 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000)

16:23:50 executing program 2:
r0 = socket(0x10, 0x2, 0x0)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dc", 0x1c)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0))
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000700})
ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x0, 0x0, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:23:50 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x6, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
write$FUSE_POLL(r0, &(0x7f0000000000)={0x18}, 0x18)
read(r0, 0x0, 0x7ffffffff000)

16:23:50 executing program 0:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, 0x0)
pipe(&(0x7f00000004c0))
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x2803, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:23:50 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xffefffffff7f0000)

16:23:50 executing program 1:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x84200, 0x0)
ioctl$TCGETS(r0, 0x5401, &(0x7f00000000c0))
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x2000000a, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0xd)
write$FUSE_POLL(r1, &(0x7f0000000000)={0x18}, 0x18)
socket$inet6_udplite(0xa, 0x2, 0x88)
read(r1, 0x0, 0xffffff00)

16:23:50 executing program 3:
r0 = socket(0x10, 0x0, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getuid()
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r5, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x1300000000000000, 0x0, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)
fchmod(r3, 0xe5)

16:23:50 executing program 2:
r0 = socket(0x10, 0x2, 0x0)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dc", 0x1c)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0))
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000f1c})
ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x0, 0x0, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:23:50 executing program 4:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dc", 0x1c)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000240)={<r3=>0xffffffffffffffff})
geteuid()
ioctl$VT_RELDISP(r3, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getpeername$inet6(r3, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0))
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6, 0x200000000000000]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

[ 1755.360827] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'.
16:23:50 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x6, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
write$FUSE_POLL(r0, &(0x7f0000000000)={0x18}, 0x18)
r1 = syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0x0, 0x1)
r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x141200, 0x0)
ioctl$NBD_SET_SOCK(r1, 0xab00, r2)
read(r0, 0x0, 0xffffff00)

16:23:50 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000)

16:23:50 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x6, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
write$FUSE_POLL(r0, &(0x7f0000000000)={0x18}, 0x18)
read(r0, 0x0, 0xffffff00)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x2000, 0x0)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00')
sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r2, 0x400, 0x70bd26, 0x25dfdbfd, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x20040800)
r3 = syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0x1, 0x101000)
accept4$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x0, @host}, 0x10, 0x800)

16:23:50 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xffffffffff600000)

16:23:50 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x7, 0x0)
r1 = accept(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f00000000c0)=0x80)
getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000140)={<r2=>0x0, 0xff}, &(0x7f0000000180)=0x8)
setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f00000001c0)={0x401, 0x9b, 0x2, 0x1, 0x7, 0xe802, 0x5, 0x3, r2}, 0x20)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
write$FUSE_POLL(r0, &(0x7f0000000000)={0x18}, 0x18)
read(r0, 0x0, 0xffffff00)

16:23:50 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x684000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)

[ 1755.841587] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'.
16:23:50 executing program 0:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, 0x0)
pipe(&(0x7f00000004c0))
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x3400, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:23:50 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$VIDIOC_RESERVED(r3, 0x5601, 0x0)

16:23:50 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x6, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
r1 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x6, 0x200)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f0000000080)={0xe, 0xfff, 0x1ff})
write$FUSE_POLL(r0, &(0x7f0000000000)={0x18}, 0x18)
read(r0, 0x0, 0xffffff00)

16:23:50 executing program 3:
r0 = socket(0x10, 0x0, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getuid()
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r5, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x1c0f000000000000, 0x0, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)
fchmod(r3, 0xe5)

16:23:50 executing program 4:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dc", 0x1c)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000240)={<r3=>0xffffffffffffffff})
geteuid()
ioctl$VT_RELDISP(r3, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getpeername$inet6(r3, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0))
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6, 0x300000000000000]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:23:50 executing program 2:
r0 = socket(0x10, 0x2, 0x0)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dc", 0x1c)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0))
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2001300})
ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x0, 0x0, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

[ 1756.061942] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'.
16:23:51 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x6, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
write$FUSE_POLL(r0, &(0x7f0000000000)={0x18, 0x0, 0x5}, 0x18)
read(r0, 0x0, 0xffffff00)

16:23:51 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000080)={0x20, <r4=>0x0, 0x10000, 0x80000000})
ioctl$DRM_IOCTL_AGP_BIND(r3, 0x40106436, &(0x7f00000000c0)={r4, 0x7963a43c})
r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r5, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)

16:23:51 executing program 3:
r0 = socket(0x10, 0x0, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getuid()
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r5, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x1f00000000000000, 0x0, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)
fchmod(r3, 0xe5)

16:23:51 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0)

16:23:51 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x6, 0x0)
r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x24100, 0x0)
ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000000140)=""/142)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xd)
write$FUSE_POLL(r0, &(0x7f0000000000)={0x18}, 0x18)
read(r0, 0x0, 0xffffff00)

16:23:51 executing program 2:
r0 = socket(0x10, 0x2, 0x0)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dc", 0x1c)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0))
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2001706})
ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x0, 0x0, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:23:51 executing program 0:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, 0x0)
pipe(&(0x7f00000004c0))
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x3801, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:23:51 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3)
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0)
openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mISDNtimer\x00', 0x101800, 0x0)
syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
futex(&(0x7f0000000040), 0x81, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0x2, 0x2)
ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f0000000180)=0x7)

16:23:51 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x6, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
ioctl$KDENABIO(r0, 0x4b36)
write$FUSE_POLL(r0, &(0x7f0000000000)={0x18}, 0x18)
read(r0, 0x0, 0xffffff00)

16:23:51 executing program 4:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dc", 0x1c)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000240)={<r3=>0xffffffffffffffff})
geteuid()
ioctl$VT_RELDISP(r3, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getpeername$inet6(r3, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0))
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6, 0x400000000000000]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:23:51 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x6, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
write$FUSE_POLL(r0, &(0x7f0000000000)={0x18}, 0x18)
read(r0, 0x0, 0x9a)
syncfs(r0)

16:23:51 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)

16:23:51 executing program 2:
r0 = socket(0x10, 0x2, 0x0)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dc", 0x1c)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0))
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2001c0f})
ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x0, 0x0, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:23:51 executing program 3:
r0 = socket(0x10, 0x0, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getuid()
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r5, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x2000000000000000, 0x0, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)
fchmod(r3, 0xe5)

16:23:51 executing program 0:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, 0x0)
pipe(&(0x7f00000004c0))
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x3f00, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:23:51 executing program 4:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dc", 0x1c)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000240)={<r3=>0xffffffffffffffff})
geteuid()
ioctl$VT_RELDISP(r3, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getpeername$inet6(r3, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0))
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6, 0x500000000000000]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:23:51 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x6, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
write$FUSE_POLL(r0, &(0x7f0000000000)={0x18}, 0x18)
read(r0, 0x0, 0xffffff00)

16:23:51 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0)
bind$alg(0xffffffffffffffff, 0x0, 0x74)
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000740)="943e2fc51a450f4532baeaa06367b3b4ffa9ded08bf9b8b80cc0751f387fb2ee3d4d1a78a3b5170d14c104cc1c0574eb9c0bfb275561d3ebbd149669b2f35099c0795dcb66ff40280b6d312d8c0e020907647045f3f0e15a3e947e7964f1add08b7103cd39a7b3516ab94e4dd133bc5876564acd51b255735e89589b1dea6d0085ba601a405d6d54e9ad164d10f3f57b2ff58993791b716811538abeda8ebe094e2636a4d1e18ed93a76bbdd1e1450c468f3320c4d1794347f6a0f0ddf6a4fd6c140422ab559711ecb0298cde5d6ac607f14b4dc8245d47ecae4cb03ad7a627944ef4a279c55fcbd26da5547d0dd1dcd", 0xfffffffffffffd60)
r4 = syz_open_dev$mouse(&(0x7f0000000480)='/dev/input/mouse#\x00', 0x9007, 0x400)
sched_setaffinity(0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000540), 0x0)
ioctl$BLKPBSZGET(r4, 0x127b, 0x0)
r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
clock_gettime(0x0, &(0x7f0000000080)={<r6=>0x0, <r7=>0x0})
clock_settime(0x7, &(0x7f0000000140)={r6, r7+10000000})
request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00?\b', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cpsgrVid:De', 0x0)
ioctl$KVM_REINJECT_CONTROL(0xffffffffffffffff, 0xae71, 0x0)
fsetxattr(r5, &(0x7f00000001c0)=@known='trusted.overlay.origin\x00', &(0x7f0000000240)='/dev/input/mouse#\x00', 0x12, 0x2)
ioctl$VIDIOC_STREAMOFF(r4, 0x40045613, &(0x7f0000000180)=0x1)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0xffffffff00000000)
write$binfmt_script(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x271)
ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, &(0x7f0000000600)={0x0, 0x8001, 0x5, 0x3, [], [], [], 0x0, 0x6, 0x0, 0x200, "3fe60ce3a80bdefd9c22ae19d8275684"})
accept(r3, &(0x7f0000000300)=@generic, &(0x7f0000000380)=0x80)
recvmsg(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, 0x0, 0x0)
ioctl$KVM_ASSIGN_SET_MSIX_NR(0xffffffffffffffff, 0x4008ae73, &(0x7f00000000c0)={0x7, 0x3ff})
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001240)="2e0000002a00815fe45ac187185095cf0400b0eba0b4d65cdbaa98cbb30007fff00000000000000051894d5d1dac", 0x2e}], 0x1}, 0x0)
r8 = add_key(&(0x7f00000000c0)='.dead\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000240)="d65e405ce3f4e1a5bb95c664975b60e992865884f4df5650634197dcbef9", 0x1e, 0xffffffffffffffff)
add_key(&(0x7f0000000040)='cifs.spnego\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000180)="94c1aad30f3ac8d29b24cd96388de916cec9820e8b40012793a23414c455377bd9fd73f13d31eac62d09ee3eae23c9df473507c46941b4af6bbdcdedeffd89055f5799dfd010d45cd49cb2fc6a4cdc6a0f427325822f9dfd3ba057f8edd7a39be5dce2149a6bdf0e63027735171d58a729f3d5b2af2466d359456490dcea5903051ef1aa874b2eebb3", 0x89, r8)
fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000280)='trusted.overlay.redirect\x00', &(0x7f00000002c0)='./file0\x00', 0x8, 0x2)

16:23:52 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x6, 0x0)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x109000, 0x0)
ioctl$TCSETS(r1, 0x5402, &(0x7f00000000c0)={0x2, 0x8000, 0x5, 0x8f36, 0xa, 0x0, 0x9, 0x5, 0x7fff, 0x7000000000000, 0x200, 0xa6})
setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000080)=0x1000, 0x4)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
write$FUSE_POLL(r0, &(0x7f0000000000)={0x18}, 0x18)
read(r0, 0x0, 0xffffff00)

16:23:52 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000040)=0xa4, 0x4)

16:23:52 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x6, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
r1 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x1, 0x0)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r1, 0x800442d2, &(0x7f0000000280)={0x6, &(0x7f00000001c0)=[{0x0, 0x0, 0x0, @dev}, {0x0, 0x0, 0x0, @local}, {}, {0x0, 0x0, 0x0, @random}, {0x0, 0x0, 0x0, @remote}, {0x0, 0x0, 0x0, @local}]})
write$FUSE_POLL(r0, &(0x7f0000000000)={0x18}, 0x18)
read(r0, 0x0, 0xffffff00)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000b86000)={0x0, 0x0}, 0x8)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00')
mlock2(&(0x7f0000bbd000/0x1000)=nil, 0x1000, 0x0)
ioctl$KDSKBLED(r2, 0x4b65, 0x0)
sendfile(r2, r2, &(0x7f0000b58000)=0x200010, 0xffff)
r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x32f244e4, 0x101)
ioctl$KVM_GET_PIT2(r3, 0x8070ae9f, &(0x7f0000000080))
ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000180)=""/64)

16:23:52 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x7, 0x40000)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)

16:23:52 executing program 2:
r0 = socket(0x10, 0x2, 0x0)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dc", 0x1c)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0))
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2001f00})
ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x0, 0x0, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:23:52 executing program 0:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, 0x0)
pipe(&(0x7f00000004c0))
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x4000, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:23:52 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)

[ 1757.432657] net_ratelimit: 23 callbacks suppressed
[ 1757.432684] protocol 88fb is buggy, dev hsr_slave_0
[ 1757.443760] protocol 88fb is buggy, dev hsr_slave_1
16:23:52 executing program 3:
r0 = socket(0x10, 0x0, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getuid()
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r5, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x3f00000000000000, 0x0, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)
fchmod(r3, 0xe5)

16:23:52 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x400, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
write$FUSE_POLL(r0, &(0x7f0000000000)={0x18}, 0x18)
read(r0, 0x0, 0xffffff00)

16:23:52 executing program 4:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dc", 0x1c)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000240)={<r3=>0xffffffffffffffff})
geteuid()
ioctl$VT_RELDISP(r3, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getpeername$inet6(r3, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0))
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6, 0x600000000000000]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:23:52 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_open_dev$usbmon(&(0x7f0000000180)='/dev/usbmon#\x00', 0x1, 0x400000)
ioctl$sock_SIOCDELDLCI(r2, 0x8981, &(0x7f00000001c0)={'hwsim0\x00', 0x4800000000})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
fstatfs(r3, &(0x7f0000000040)=""/231)

16:23:52 executing program 2:
r0 = socket(0x10, 0x2, 0x0)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dc", 0x1c)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0))
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2002000})
ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x0, 0x0, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:23:52 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f0000000180)=@hopopts={0x549f454ddb6409d4, 0x211, [], [@generic={0x40, 0x82, "f50072384b44f78593f32f258e605a3d598c0aaf328ec0b8c086950639e24061184eb2b6138e2ae493f82b2142284c00042a66293202e36d9b7a661e836d429639f4989e8287994e53c387975f327c320d4a129b0d6176242acf2d2662df6b7464706107561c9808ecfb503c13b4f1a1a66c166a11c82ea979de0639ba7ed481302b"}, @ra={0x5, 0x2, 0x92b1}, @generic={0x5, 0x1000, "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"}, @enc_lim={0x4, 0x1, 0x7}]}, 0x1098)

16:23:52 executing program 3:
r0 = socket(0x10, 0x0, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getuid()
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r5, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x4000000000000000, 0x0, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)
fchmod(r3, 0xe5)

16:23:52 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)

16:23:52 executing program 0:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, 0x0)
pipe(&(0x7f00000004c0))
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x4c01, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:23:52 executing program 5:
r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0xfffffffffffffffd, 0x101040)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000080)=0x5, 0x4)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000180)={{{@in=@loopback, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000000c0)=0xe8)
sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000100)={0x1d, r2}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x5, 0x42, 0x1, {}, {}, {0x3, 0x98cb, 0x2, 0x78a}, 0x1, @canfd={{0x1, 0x3, 0x5, 0x20}, 0x3c, 0x3, 0x0, 0x0, "8a4c057d46cd28506f4aa9e9831c11815989998b6f0f42e266d0beeb890da5038209d537c3385e61eb5779a77080660309fc5fc7902d5aaeb9c04593a6fdf651"}}, 0x80}, 0x1, 0x0, 0x0, 0x4000010}, 0x4000000)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0)
timer_create(0x2, &(0x7f0000000540)={0x0, 0x33, 0x1, @thr={&(0x7f0000000380)="5a5e397bf4a30a3d380e7052a4d58156b4d77b31ad8978df1e1e039096fcbfcf252bf4120463b9011ccfb897e52598d894dd1f0002a6a917f925d8a14d54cf2ce05e5d4a130663cb9e9820b964d29b8871d4dfef970284fad28fe45127da49eec0a3d656d149a748007b42e2043a1e21a59711b5dbdd299672a2b3adcf77d64a125d97311651b67d57f2cfb97e2151b6834ad2", &(0x7f0000000440)="721306c5de73127372e7a21f933c0e7f02076b484d049baae47a74177dbacc53eed95361fcd631876283c1b84747cda2da4026c929a1bba28cb0f28b1e3554923c10f801840c014bea1206b3f52db1f6fa3bd13bcffb743bf96bf3891bfed772c61917c4f84710f7bc947b13f1c6427e91310b31b412d5669037cb3f4ec505b4623a66a40ad35407db056818e98a9b911f5ab633579dabf209ae7902230a76d0d0f87fa3c0b1ab457c303648d253152e8940a5c902b2deae4e6c8cd53e5f003855fb6146"}}, &(0x7f0000000580)=<r4=>0x0)
clock_gettime(0x0, &(0x7f00000005c0)={<r5=>0x0, <r6=>0x0})
timer_settime(r4, 0x0, &(0x7f0000000600)={{0x0, 0x1c9c380}, {r5, r6+10000000}}, &(0x7f0000000640))

16:23:53 executing program 0:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, 0x0)
pipe(&(0x7f00000004c0))
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x5c01, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:23:53 executing program 4:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dc", 0x1c)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000240)={<r3=>0xffffffffffffffff})
geteuid()
ioctl$VT_RELDISP(r3, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getpeername$inet6(r3, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0))
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6, 0x700000000000000]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:23:53 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0)
ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000180)={{0x10000, 0xf004, 0xc, 0x9, 0x9, 0x10001, 0x9, 0x40, 0x7, 0x7, 0x9, 0xea}, {0x5000, 0x0, 0xf, 0xffffffff80000001, 0x101, 0x5, 0x20, 0x0, 0x6, 0x7, 0x3, 0x8836}, {0xd000, 0x10000, 0xf, 0xd55, 0x100000001, 0x7, 0x2, 0x1, 0x4, 0x5950, 0x2ce7, 0x100}, {0xf000, 0x6000, 0xf, 0x7, 0x2, 0x3, 0x10, 0x100000001, 0x8, 0x401, 0x8, 0x8}, {0x10000, 0x14001, 0x0, 0x2, 0x6, 0x6, 0x8, 0x1, 0x0, 0x2, 0x0, 0x20}, {0x6000, 0x0, 0xc, 0x16f4, 0x41388973, 0x20, 0x10000, 0x5eb, 0x6, 0x0, 0x4, 0x1}, {0xf001, 0x1, 0xe, 0x0, 0x8, 0x3e01, 0x8, 0x1, 0x20d, 0x10000, 0x106d, 0x2}, {0xd000, 0xd000, 0x4, 0x3a, 0x8, 0x100, 0x8, 0x8001, 0x4, 0x8000, 0x3, 0x7}, {0x7004, 0xf001}, {0x5005, 0x1000}, 0x40000000, 0x0, 0xf000, 0x40000, 0x3, 0x1, 0x3000, [0xc0000000000000, 0x712, 0x8001, 0x3]})
syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)

[ 1758.208908] __nla_parse: 9 callbacks suppressed
[ 1758.208917] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'.
16:23:53 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x6, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd)
write$FUSE_POLL(r0, &(0x7f0000000000)={0x18}, 0x18)
read(r0, 0x0, 0xffffff00)

16:23:53 executing program 3:
r0 = socket(0x10, 0x0, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getuid()
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r5, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x8906000000000000, 0x0, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)
fchmod(r3, 0xe5)

16:23:53 executing program 2:
r0 = socket(0x10, 0x2, 0x0)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dc", 0x1c)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0))
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2003f00})
ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x0, 0x0, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:23:53 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x1ffffffffc, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xffffffffffffffde, 0x0)
write$P9_RREAD(r2, &(0x7f00000000c0)={0x43, 0x75, 0x1, {0x38, "7fa114d8d90d96fa2db8600192b281ee1388a664c6a6292a24f653e08bbb8e9bb82e9a5f4570845f1b986621dea81a41499c3b278cc48780"}}, 0x43)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_ASSIGN_SET_INTX_MASK(r1, 0x4040aea4, &(0x7f0000000040)={0x6, 0x6, 0xa17b, 0x6, 0x7a75003})
r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0xfffffffffffffffc, 0x0)
syz_kvm_setup_cpu$x86(r4, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)

16:23:53 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x400000, 0x0)
ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000000180)={0x1, 0x0, 0x2080, {0x100001, 0xd000, 0x3}, [], "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", "9a955382d3cc8be8b71d0e4c6eb2be1706b1f9c386804284c09ab8cd39ccca7c7352f12b990dd533b75919383d85e9a8ac94cb10e91a8c9a65682368f6207a712df559ca0021bd6d0f848b53a6581c1174af9cc37bc380df04a72297e2e50651de1ac6893abe2464c60405a160b6cf8e4fa66bd7d4e11a6dc59265aaed156f5cdafab4088735f804821b06edaf067f5ded988f50068e0603e873d2eb540a181d39bf8a71c612362b0eba4dab063294656aad1bff21afe9d4234d4567a114b2ed3b66a81c96522dbff43b5b039f7bfad93a729fcabe2d1166efe46bb6ba8446b13933321af15b65d7a208271dc7c5756fb54b72376c7147cd4ebefa6ea41dc39fd6ce04eb196709149ffa21739268e270acbec9605381a123a978f978f646272a46e1767c03eaad1d588352c78a72dd0eeafc8adb57931adf9a90d39a4f4c7539930f19b6a163b22c5dddc037c46c5b6e603f24ac9b4240bcbf5a522b819133de30a011fd5fcea159db10ea54109368d36bd1bbe27c8f71036a6ecdceae3f2d5082cf1896377cca4a0d7918c19a56e2f5f4a792b46ecbcf08d88fb0b37c251d57bf8b4aa8bfa2c87fcfcceaa35c9ad095135cc0474f871ebb79fdfd98c51b41259ce0f9610a732b878c7a54f0bb6dba857aaa185bdc912b70c29c3242b753bc9c07102caf84590cc17e47e22245cbbb1e8cc631e4e3fc64c2c20b56244b157e7a9371b372fe997d8da30acc0e5d504835d7ace98ae9f05a29f9a3e6c45b4af0689e97f48b61fd005f768c589d347ba69d7bb67131d7d41fb2f54d6e9aaaecd685d96b8ee196683dad333478facddea5344c2b0ac9502722d134ac5300a78bfff504b3c2f779262bf8dacea7c1dd3fa93a902a63987da25262f393de2321da0fdb255dfd54ef52c3295d83a60a5398e7dae54ddf02b0c4172fb330e20ee114c70fea4d7293d52c38df8d64e3570c993792065b4fc66c3f81cc26f263cc8862ecaeb0d9e5fa0574ece4bf7e9e5d4f94a991cb07b7cd4325e1f119f22541052bc995802eb39f90d595ad8bc889e14837b1a9349760323d8a5cf5345033362c5de8f4de1638f7f71a27737c0fb75d57df7be928af71d521e86ea1dae8716d230f3d839b80c97fdc16af4e6455a7864056242ada3e62b2b87364ef43e24212217a2ce0d0aed0628d3cabc2bb1d6a35601f5b8bd04ca3fa52dd368c6b2da31c18917e7b0350172430593cc2cc5520e5688afcacb3cd1415791a49d570d4469d07046aef1b06a767822bc0abe5465a6996fee9fad7b03855e709325db9301ef657c9d27be9fe04806563f0740c7368a77b3d83274f0efa0ed615e8f839df8f65e8407767321758af940e995cdd10477460f03657806bbc628a777756538d4d4d9d7ce52b61e39eef4a0d70ee6a31b4c097e821be3d13e2216b60de6e3d3c7c0607668e70357f3f1fd406092cc11ff38fd0fcf2fc519e5e887f15d5a07079a87c78990417c921117c484d6ffb1c2ed92ddbde94b72eb3dba610088771eb96975fdafdf22c3a06eee60cc434e237250488dddd99b8a60193b45ff2fe6dce1142b64bde9aeffd84bfa294d06ada96373c006d60c65528ecdb00148b833666b31a7c2f58f29b44a85975137979c061c8717b19aea1e6a68c387e3ba2deb5f953e104556d84c3666591cfbe25b76691322bebd4fdfe1ea7f3c754a8873524205f7310337a3287db11067334010dc3c6e1a06ca4927a089296afd651e7708df0bb34684f70cb5cb47dc0abb44da0d4daf998a1e68557ca7940e54fb3613d231f4d4096d45ff70b0cb0a6b84ea33f6bd32093889f3ef994cc8446ac5f55d2301f25ec7bf2bdaba2d5379864fc6bfa951f0ed7f711212bd01e81ef54a1293e89ee4170df59a47415e6e1536b7ba6b5133a7478e0978ba627c39b392c7168ba69326a5c31e6c6d277cfdff98ace87657b7d856e9995c6c8c29f6f59e08b037245c307a5600faae462d6f16bb817c4dae88b0d395bd25483ccdaa65b12e97769bda2a4db93f5458e719476efc5bbe76499d364884123b0f8540f0960e4acf5b12294354f447d5279016fbe17f8aee54a027a4145dc9a2f26e655f0277f8e7dd67e970d7ea8710f82950e39fd3101129255d44a25ca67386aa30cedd2a8b5e7aa5a05f8efef6ab80140c97dc14bb2a4d5499687f4bbd35887471a06be7dce379c794b63857cc817a62bac2533dabbf9b2b04166994c6c29142b0e929923db73c24d236d5b7574f74d8cb3bd703a621118a9baa20208c77a63b228c903becc5915f250b67b7f4725fcdba703bb0d327b957b8825fa2d2dd9c223152d6778a0a427d5f42602e7339add91e3b0eba22efaff8e739c35803ea4621316b2987cc09e35c57f236c1458c580bed3c88d67d71d5aa1e3a72cb9708efe3573272a4fb8ba5533ab161ad420bda0f6d8ceacf5b417cf485ad135bca443a8a1ed4abf2c83321bb0b595bd75348ccb6b8eae663bf9073e38470988985613f6282247b839d4e0c78ca8b54f7a37ecfcd0099dbc90cd6d4d3c8c30e4c4ed68d6a83491d26ad3e8c9f6a90a97273606df6259207af37fdcfa625aecd02a0e421f38c25cfb85c12b86a26c75cfe9bc3785c8a8ce3e4e707c489c47bb0e42facbc1c6cc990c249b9f3537f6fa39d667bf866f62cf8151620bc4e813e33e1abe40bac860edaf1a6305abb4a075a1edead87c985aae9163e49a3a47e4cc1d13085e6afc12d3048dcb6d83edd0e47c8e25b3ba48f5691d132276b2703af704049fffed43590cf5fed091878c0c3fd8137f4306ce146cb1f9d61d35d3b91aafb09be87f3f6532af37f8265c9250ff31456689a67e935803d6f05d1aa7bdeff090c9b859a511e9c04fb362c5e1dd239c7edee4858a9f120d732139799bf031f7732b30400bd9698268857f8fe271db746116666a46664c89804f1dea4338eee631575dec355280a00870565a9170d994413a90d72e72bf8dfd9754815bed9140372126da91b67b76f3351bd64d9437ab78fafb0c8b448de5bfc971e9ccbeeab60c2fee06a175214d4f89fe84104c99600731646b67ed93c86b1316b5ec1b39c10d16fe048a2af4d16dd7a6e85db44041920a56ea1eb9830d669fe4163e90d2ed43098865e211f828ea6d38690227b5774b299bdb9546141a2779650c10b2066c06ec42661cfc7ce5519dfef32af9bb01e34a787963ef51d4de32f7b5d02f858070e9c99cbd302bd5c375262299ca2a03495549762d6e9f51976d0d03a8880adc0d0ddc1af8b2ca61c52d766c25b10a061731cb2719da865f368055c8e9b3a79719a5be07579126780db26bcda0d9f5631bbe22c87be3b9bc9910ae8fa29af871ea5431b8fa752bf961dd5fe02a113d0b78231ef7e42f720c44608358627e78fb98e1d0a4401c16f8b8a8926892d65512ec120f515fc1ef14cc2b8361dffc1cc46e49509d2ec3e91989969ab92162ea227e459cc7ac59694242e920433019c2823c5dcc1db6b7c6a8a906d41b0d39c9a954038ff7c8b2934a8af532217ce666cf358be4643b82f62e7e2d251aac8554f457df68dbc1ca8ddfcaecd846d7f617ce0a41b5758c37f4de9f4bb6e585b4ac13a523a41291264e3ff83a28965d91ce2ea348438ccf39639d2128f49a10e8611d5c5013ab2f6563c338e36349254061baa100b10a8c4b8abe585ddce818e9e4ecfea24c3d9bb094fc686bcd128b8fc9862cd317c8da65a3086ffcd5906cc537774fcfdabb580c829e1a9b57fbd05c08b136a86429d04eb1db92c3f065ca3ef2da12ff4c160b8da69747d692d6a080bc876949ff44a4e062f885238614d1b8905dffff217e10ed51e6b1de17f5a7b3a22244a5202d7d28cf5c785dc06ed767c53b7c386a5861449d85711befa0daf8efd6d84309306de9ffe2d3887a426d16466d0099f74b52cf4b614295e21135e647620b56e3f206b59cfbb771d536fa1738a9d9612bd32e10445b7d8462f57657a1ef1c2d8986238a4e38ac30a32abe120819583e24d8d2e4548b178635044d175568099eb72fa7ab4bb56136d68d42e0424405197a15fade1f68f05012ac189d6954d6c73f096ec78558728f8e67ddb69213dc7549443679b63b757d007e1876a244842ce9d36d226d47cc90077cacdb6220e202d07d0457ade85be78bda1871d50b7fd106a3a73106b34ab2a332af96e4d7458b127a275d9dfc0834b229afca297bb230b81cf43be7b3c310be4206e4be1a45629c045cf03414bdfcb522ec50635e1d4ddcab74773c552d048382772f0adce8e79569f25dfdcb0e56ea593e89dbb5b75137250f3be8d4f8dc4e04742009c5a7a71d904b6ff8dee4d7b4064fbd997407a57ee28bf4b8ee61529f6f2e3f00f6f3ac255139b7d5d92edf51201124e13ea53da35f5bc913d3b83ca1e18aa20bac47717a78fa358b16a2397cad8459af4c85ba8f074ceebcbfb4a7359861c4b10f787adad130bd067d929a26ebf8ace5355c1f02197e9a16d7646a1710667a93fe9598d71939d1e5a52a2fda2dbc0e960320940d5cc88e15054537d0a4c3fd5ed4aecb0fa2543c2e6f1e17c52fc2791c10ab5d54ecdfcb660cf9ddc41eefe641794b8cec102876d9014e1a0c8f9e0f96f5c3a98c6d520eccc6d8ae627f60de2a755d6964e7381b0e842bc0da230334b77326e82b394a555582ee956bbb11cfe7dab4d8d0471360219ab310d2f5b816424e6ac7d59bb81bcc713ca4458b6e15f916ac71fde027287a2a0951f379671e15d93afcdd933a389aa962a821be365791e2d89c89f52ea62a56689b4ed7c8d10417022b64802d96304287786f77c5bd0389aeb18dbd17914a3a43169cabef03b4ce3d0101fd5c7ff6b3ae35c5e4fd01c63e7480f8d5fdd3262e5e996f6527bbe29d9d4cc87ec4848747dc01bd1d0efe529b1d9ba9073be8f7065558e4e8412d52349ceed57d69da94a0fead7ea2e5558cf886f4a28a659506dc89f95bdd94912bc6a535605a3296bea5925597b86a002f78f8932691c4fff627ae64887af136eaaa46640d0b183ecf5837cff389bae70cfdff38625397e7515db7a1be1a863b4b990b6df4c482fa13e4aa7252d9da763188b107cb328ced2f8a6df2c731dcd1731663881c7257647ea82e8cd36aa971fbfec0d066cff03804a8ff4c026047120d49340fc19830177b2232b6a0c2f8d197abbe20bbb0ef2675151a3b7ebf355f320a2e2c9319b2cf7fab8de386caebf0faa77b62523ab531582592ff55d608df3f6b7b18df539e11a6de6aff7bf90733672a0e17c5c3b3509b2a8059af4177bd4bd855aca2f5f6f7a7abad8bf045acf33ccaaf76c0053b7058273b2498764ecb8ae818890e21257b6d6b46a10ac2572890c05f7c4e992c183ce9d56d8353c60004500c05f0ef20da053c5f7e084c774f0a99765506614846adee70fcfeb503d7f8b75a5324421efef44a3b7bbfad01c8b49626f77d1d3b5cfc61ffb601f0e8706cf5323e741e4058b40738cf7228100747d07fc770548e66e8a96909b0d69e60e521e6ec0ab02445bbf33e6b0813302fecc2220456d4f851b22e3205ac58d93b20027394bc74cbbb97b1b960c7ecd42e75de7b2c0dba412dfa88fd805cede901ca34a458f68d734fdabacdb4be8c2d9ac21707050d0ef9c8670e7ab9d743cb0b4a6a557398f359e49222a2f0d174fe7a46f98ae36ab9874032ebc14a37e04861c279ccb0741c843224065c000895781409ff69105e0cf44ba9cb04b606327d3ac52d0d28fb131eb35f19ea928a9152199c21ebb60d2bd7"})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$RNDGETENTCNT(r4, 0x80045200, &(0x7f0000000040))

[ 1758.471979] protocol 88fb is buggy, dev hsr_slave_0
[ 1758.477083] protocol 88fb is buggy, dev hsr_slave_1
16:23:53 executing program 4:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dc", 0x1c)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000240)={<r3=>0xffffffffffffffff})
geteuid()
ioctl$VT_RELDISP(r3, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getpeername$inet6(r3, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0))
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6, 0x800000000000000]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:23:53 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x6, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
r1 = openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
write$smack_current(r1, &(0x7f0000000080)='/dev/ptmx\x00', 0xa)
write$FUSE_POLL(r0, &(0x7f0000000000)={0x18}, 0x18)
read(r0, 0x0, 0xffffff00)

16:23:53 executing program 0:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, 0x0)
pipe(&(0x7f00000004c0))
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x8003, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:23:53 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0})
close(r0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000001300)='/dev/vcs#\x00', 0x3f, 0x8040)
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001380)='IPVS\x00')
sendmsg$IPVS_CMD_DEL_SERVICE(r3, &(0x7f0000001480)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001440)={&(0x7f00000013c0)={0x7c, r4, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x100000000}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0xff}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7}]}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6f}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x801)
dup(r1)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="04630440"], 0x0, 0xfdfdffff, 0x0})
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r6 = syz_open_dev$vcsa(&(0x7f0000001100)='/dev/vcsa#\x00', 0x7, 0x2)
sendmsg$nl_crypto(r6, &(0x7f00000012c0)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001280)={&(0x7f0000001180)=@upd={0x100, 0x12, 0x1, 0x70bd2a, 0x25dfdbff, {{'rfc4106-gcm-aesni\x00'}, [], [], 0x400, 0x2000}, [{0x8, 0x1, 0xffffffff}, {0x8, 0x1, 0x1000000000000}, {0x8, 0x1, 0xdce}, {0x8, 0x1, 0x7}]}, 0x100}, 0x1, 0x0, 0x0, 0x52ec2fa07fe16878}, 0x810)
r7 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r8 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x6, 0x8000)
ioctl$sock_netdev_private(r8, 0x89f8, &(0x7f00000000c0)="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")
r9 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
r10 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r10, r9, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$BLKIOMIN(r8, 0x1278, &(0x7f00000010c0))

[ 1758.696235] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'.
16:23:53 executing program 1:
openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x6, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
write$FUSE_POLL(r0, &(0x7f0000000000)={0x18}, 0x18)
read(r0, 0x0, 0xffffff00)

[ 1758.759999] binder: BINDER_SET_CONTEXT_MGR already set
[ 1758.769345] binder: 18371:18407 ioctl 40046207 0 returned -16
[ 1758.771085] binder: 18371:18458 tried to acquire reference to desc 0, got 1 instead
[ 1758.789844] binder: BINDER_SET_CONTEXT_MGR already set
[ 1758.824129] binder: 18371:18459 ioctl 40046207 0 returned -16
16:23:53 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2)
write$P9_RATTACH(r2, &(0x7f0000000080)={0x14}, 0x14)
ioctl$VIDIOC_QBUF(r2, 0x40045613, &(0x7f0000000140)={0x0, 0x0, 0xffffff5e, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "0178bd41"}, 0x0, 0x0, @fd, 0x4})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x400080, 0x0)
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f0000000080)={0x5, <r5=>0x0, 0x10000, 0x200})
ioctl$DRM_IOCTL_AGP_BIND(r4, 0x40106436, &(0x7f00000000c0)={r5, 0x2})
r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r6, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_BEARER_DISABLE(r6, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xa000000}, 0xc, 0xfffffffffffffffd, 0x1, 0x0, 0x0, 0x40000}, 0x0)

16:23:53 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x6, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
write$FUSE_POLL(r0, &(0x7f0000000000)={0x18}, 0x18)
read(r0, 0x0, 0xffffff00)
r1 = dup3(r0, r0, 0x80000)
syz_open_pts(r0, 0x600)
write$UHID_CREATE(r1, &(0x7f0000001140)={0x0, 'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000140)=""/4096, 0x1000, 0x100000000, 0x6, 0x1, 0x703, 0x100000000}, 0x120)
r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0)
setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f00000000c0)=0x7, 0x2)
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000080)='htcp\x00', 0x5)

16:23:53 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$IOC_PR_RELEASE(r0, 0x401070ca, &(0x7f0000000040)={0x7, 0x0, 0x1})
r2 = socket$caif_stream(0x25, 0x1, 0x1)
getpeername(r2, &(0x7f0000000080)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000100)=0x80)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x8000000000002)
r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)

[ 1758.951746] protocol 88fb is buggy, dev hsr_slave_0
[ 1758.951756] protocol 88fb is buggy, dev hsr_slave_0
[ 1758.956802] protocol 88fb is buggy, dev hsr_slave_1
[ 1758.956888] protocol 88fb is buggy, dev hsr_slave_0
[ 1758.961918] protocol 88fb is buggy, dev hsr_slave_1
[ 1758.966926] protocol 88fb is buggy, dev hsr_slave_1
16:23:54 executing program 3:
r0 = socket(0x10, 0x0, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getuid()
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r5, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0xfeffffff00000000, 0x0, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)
fchmod(r3, 0xe5)

16:23:54 executing program 2:
r0 = socket(0x10, 0x2, 0x0)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dc", 0x1c)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0))
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2004000})
ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x0, 0x0, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

[ 1759.088871] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'.
16:23:54 executing program 4:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dc", 0x1c)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000240)={<r3=>0xffffffffffffffff})
geteuid()
ioctl$VT_RELDISP(r3, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getpeername$inet6(r3, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0))
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1300000000000000]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:23:54 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x6a6302, 0x0)
dup3(r0, r0, 0x80000)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)

16:23:54 executing program 1:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f0000000140)={'filter\x00', 0x0, 0x4, 0x76, [], 0x2, &(0x7f0000000040)=[{}, {}], &(0x7f0000000080)=""/118}, &(0x7f00000001c0)=0x78)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x6, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0xd)
write$FUSE_POLL(r1, &(0x7f0000000000)={0x18}, 0x18)
read(r1, 0x0, 0xffffff00)

16:23:54 executing program 0:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, 0x0)
pipe(&(0x7f00000004c0))
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x8303, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

[ 1759.211656] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'.
16:23:54 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000040)={{{@in=@empty, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{}, 0x0, @in6=@remote}}, &(0x7f0000000180)=0xe8)
ioprio_get$uid(0x3, r3)
r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)

[ 1759.341437] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'.
16:23:54 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x6, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000480)=0xd)
ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000040)={0x1, 0x5, 0x10001})
write$FUSE_POLL(r0, &(0x7f0000000000)={0x18}, 0x18)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x191000, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000180)={{{@in6=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in6=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000002c0)={0x0, <r3=>0x0}, &(0x7f0000000300)=0xc)
setsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000340)={{{@in6=@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x26}}, @in=@local, 0x4e23, 0x45, 0x4e23, 0x0, 0xa, 0x20, 0xa0, 0x2c, r2, r3}, {0x3f, 0x244, 0xff, 0x8e6, 0x9, 0x7fffffff, 0x4, 0x80}, {0x9, 0x3, 0xffffffffffffffed, 0x1000}, 0x0, 0x6e6bb0, 0x0, 0x0, 0x1, 0x2}, {{@in=@dev={0xac, 0x14, 0x14, 0x1a}, 0x4d4, 0x32}, 0xa, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3507, 0x7, 0x3, 0x3, 0x8, 0xfff, 0x750ad40e}}, 0xe8)
getsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f00000000c0), &(0x7f0000000140)=0x4)
read(r0, 0x0, 0xffffff00)

16:23:54 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x4, 0x400101)
getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000002c0)={<r4=>0x0, 0x3, 0x1, [0x100000000]}, &(0x7f0000000300)=0xa)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000340)={r4, @in={{0x2, 0x4e22, @remote}}, 0x491, 0x0, 0x6, 0xff, 0x2}, 0x98)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000100)={<r5=>0x0, 0x98, &(0x7f0000000040)=[@in6={0xa, 0x4e22, 0x91, @dev={0xfe, 0x80, [], 0x15}, 0x22b}, @in={0x2, 0x4e20, @multicast2}, @in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e21, @local}, @in6={0xa, 0x4e22, 0x49412102, @loopback, 0xffffffffffffffe1}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1a}}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e20, @local}]}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000240)={r5, 0x48, &(0x7f00000001c0)=[@in6={0xa, 0x4e21, 0xffff, @mcast1, 0xfffffffffffffff8}, @in6={0xa, 0x4e24, 0x4, @empty, 0x10001}, @in={0x2, 0x4e23, @broadcast}]}, &(0x7f0000000280)=0x10)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)

16:23:54 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000040))
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)

16:23:54 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x6, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
write$FUSE_POLL(r0, &(0x7f0000000000)={0x18}, 0x18)
read(r0, 0x0, 0xffffff00)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x54003, 0x0)
r2 = dup3(r0, r0, 0x80000)
ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, &(0x7f0000000080)=r2)

16:23:54 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x6, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
write$FUSE_POLL(r0, &(0x7f0000000000)={0x18}, 0x18)
read(r0, 0x0, 0xffffff00)
r1 = socket(0x3, 0x7, 0x1)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000f40)={&(0x7f0000ffe000/0x1000)=nil, 0x1000}, &(0x7f0000000f80)=0x10)

16:23:54 executing program 3:
r0 = socket(0x10, 0x0, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getuid()
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r5, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0xffffff7f00000000, 0x0, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)
fchmod(r3, 0xe5)

16:23:54 executing program 2:
r0 = socket(0x10, 0x2, 0x0)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dc", 0x1c)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0))
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x3000000})
ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x0, 0x0, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:23:54 executing program 4:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dc", 0x1c)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000240)={<r3=>0xffffffffffffffff})
geteuid()
ioctl$VT_RELDISP(r3, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getpeername$inet6(r3, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0))
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3f00000000000000]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:23:54 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0)
r4 = fcntl$getown(0xffffffffffffffff, 0x9)
ioctl$TIOCSPGRP(r3, 0x5410, &(0x7f0000000040)=r4)
syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)

16:23:54 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x40000b, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
write$FUSE_POLL(r0, &(0x7f0000000000)={0x18}, 0x18)
read(r0, 0x0, 0xffffff00)

16:23:54 executing program 0:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, 0x0)
pipe(&(0x7f00000004c0))
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x8a01, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

[ 1759.846369] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'.
16:23:54 executing program 5:
r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x1, 0x2000)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000080)={&(0x7f0000009000/0xd000)=nil, 0xd000})
ioctl$KVM_ENABLE_CAP(r0, 0x4068aea3, &(0x7f0000000180)={0x81, 0x0, [0x800, 0x4, 0x7fff, 0x80000000]})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0xfffffffffffffffc)
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
fsetxattr$security_capability(r3, &(0x7f00000000c0)='security.capability\x00', &(0x7f0000000100)=@v1={0x1000000, [{0x4, 0x7}]}, 0xc, 0x2)

16:23:54 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x6, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x13)
write$FUSE_POLL(r0, &(0x7f0000000000)={0x18}, 0x18)
read(r0, 0x0, 0xffffff00)
bpf$OBJ_GET_MAP(0x7, &(0x7f00000002c0)={&(0x7f0000000100)='./file0\x00', 0x0, 0x18}, 0x10)
r1 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x100, 0x12000)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000140)={<r2=>0x0, @in={{0x2, 0x4e20}}, 0xffff, 0x5}, &(0x7f0000000080)=0x90)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f00000000c0)={r2, 0x1, 0x3f, 0x7, 0x9, 0x6}, &(0x7f0000000200)=0x14)
ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000240))

[ 1760.001283] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'.
16:23:55 executing program 4:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dc", 0x1c)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000240)={<r3=>0xffffffffffffffff})
geteuid()
ioctl$VT_RELDISP(r3, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getpeername$inet6(r3, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0))
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4000000000000000]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:23:55 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$TIOCEXCL(r3, 0x540c)

16:23:55 executing program 3:
r0 = socket(0x10, 0x0, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getuid()
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r5, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)
fchmod(r3, 0xe5)

16:23:55 executing program 2:
r0 = socket(0x10, 0x2, 0x0)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dc", 0x1c)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0))
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x4000000})
ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x0, 0x0, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:23:55 executing program 0:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, 0x0)
pipe(&(0x7f00000004c0))
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x9603, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:23:55 executing program 1:
ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f00000000c0)=<r0=>0x0)
r1 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x1)
perf_event_open(&(0x7f0000000140)={0x4, 0x70, 0x2, 0x7, 0x7ff, 0xdcc7, 0x0, 0x40, 0x80090, 0xc, 0x7f, 0x80000000, 0x1, 0xfffffffffffffff9, 0x10000, 0x81, 0x8, 0x0, 0x6, 0x9, 0x40, 0x223, 0xfffffffffffffffd, 0x400, 0x5d, 0x9a0, 0x7, 0x1000, 0x380, 0x0, 0x7, 0x4, 0x2, 0xc7, 0x8, 0x1, 0x3, 0x5, 0x0, 0x8, 0x0, @perf_bp={&(0x7f0000000080), 0x3}, 0x0, 0x3, 0xf41, 0x7, 0x1ff, 0x0, 0x6}, r0, 0x7, r1, 0xa)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x6, 0x0)
ioctl$PIO_SCRNMAP(r2, 0x4b41, &(0x7f00000002c0)="742793c812295e13e816617c1e033d9bcb7ceefe043a4aa98a1a99df335ee8be115cc48d8a739259230b060b0de94eebc7287e8098f5ea86c143bd4bd1391481e7ade77ec0f1e860584fa0b23d2ad23fd52d19c45f7b97c59bb67a67a837536e3eb7")
prctl$PR_GET_FPEMU(0x9, &(0x7f0000000040))
ioctl$VIDIOC_SUBDEV_G_SELECTION(r1, 0xc040563d, &(0x7f0000000200)={0x0, 0x0, 0x102, 0x7, {0x5, 0x400, 0x0, 0x9}})
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0xd)
ioctl$TCSBRKP(r2, 0x5425, 0x6)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0)
r3 = getuid()
r4 = getgid()
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
fchownat(r1, &(0x7f0000000280)='./file0\x00', r3, r4, 0x800)
write$FUSE_POLL(r2, &(0x7f0000000000)={0x18}, 0x18)
read(r2, 0x0, 0xffffff00)

16:23:55 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000f000/0x18000)=nil, 0x0, 0xffe9, 0x0, 0x0, 0x272)
ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000040)={0x0, 0x0, @ioapic={0x100002, 0x2ed, 0x7, 0x6, 0x0, [{0x80000000, 0x0, 0x5, [], 0xffffffffffff2afb}, {0x2749, 0x7, 0x7f, [], 0x7fffffff}, {0xb72f, 0x1, 0x7c65, [], 0x7}, {0x4, 0x5, 0x67d2, [], 0x4}, {0x6, 0x7, 0x1, [], 0x8}, {0x80, 0x5cf4}, {0x9bb4, 0x5, 0x56a, [], 0x3}, {0x3ff, 0x1, 0x8001, [], 0x7}, {0x80000001, 0x0, 0xc000000, [], 0x5e4c9cab}, {0x1, 0x100000000, 0x2, [], 0x9}, {0x0, 0x8, 0x0, [], 0x800}, {0x4, 0x6, 0x7, [], 0xfffffffffffffffd}, {0x0, 0x3, 0x8001}, {0x10001, 0xf20f, 0x80000001, [], 0x6}, {0x80000000000000, 0xfffffffffffffff8, 0x2f0800000000000, [], 0x10000}, {0x0, 0x5, 0x4, [], 0x1}, {0x2, 0x3, 0x7, [], 0xffffffff}, {0x1, 0x0, 0x1, [], 0x5}, {0x7c59d3fb, 0x2, 0xe55, [], 0x10001}, {0x8, 0xfff, 0x100000000, [], 0x3}, {0x4, 0x1ff, 0x3, [], 0x101}, {0x7, 0x0, 0x9, [], 0x8}, {0x2, 0x20, 0x1, [], 0x3ff}, {0x1800000000000, 0x9, 0x7, [], 0x800}]}})

[ 1760.305795] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'.
16:23:55 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000640)='/dev/snapshot\x00', 0x12000, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000480)=[@textreal={0x8, &(0x7f00000000c0)="36266526660f01db0f20c06635020000000f22c0baa00066b80000008066ef360f01b6008066b9800000c00f326635000400000f30363e0f015e00f20f595f5f620e00000f005000baf80c66b81285ce8666efbafc0cb80a00ef", 0x5a}], 0x1, 0x22, &(0x7f00000004c0)=[@dstype0={0x6, 0x1}, @vmwrite={0x8, 0x0, 0x5139, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x6}], 0x2)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x5)
r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0)
ioctl$sock_bt_hidp_HIDPGETCONNLIST(r4, 0x800448d2, &(0x7f0000000040)={0x5, &(0x7f0000000180)=[{}, {}, {}, {}, {}]})
syz_kvm_setup_cpu$x86(r4, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r4, 0xc4c85512, &(0x7f0000000680)={{0x8, 0x0, 0xa2ec, 0x7, '\x00', 0x1}, 0x0, [0x3, 0x778, 0xeb5, 0x8, 0x0, 0x529b, 0x5, 0x0, 0xe8, 0x1f, 0x1f, 0x9, 0x7fff, 0x6, 0xfffffffffffffffb, 0x101, 0x8, 0x1, 0x4, 0x2, 0x5, 0x0, 0x20, 0x1ff, 0x7, 0x1f, 0x1, 0x61e, 0x8, 0x7fff, 0x2, 0x7fffffff, 0x1, 0x240000000000, 0x325, 0x1a, 0x5, 0x51e, 0x5, 0x4fa40000, 0xfffffffffffffffb, 0x9, 0x0, 0x8, 0x7, 0xb9, 0x2, 0x8, 0x2, 0x20, 0x2, 0x4, 0x4b, 0x8, 0x9, 0xffffffff, 0x3, 0x10000, 0x9, 0x1, 0x2, 0x4, 0x10000, 0x20, 0x100000000, 0x80000000, 0xa2, 0x8, 0xfff, 0xde, 0x7, 0x2, 0x100000000, 0xd07f, 0x10000, 0x1400, 0x1, 0x9, 0x5, 0x100000001, 0x9, 0x1, 0x400, 0x2, 0x781, 0x3, 0x1, 0x296, 0x6, 0x1ff, 0x9, 0x8db4, 0x401, 0x180000000000000, 0xbac7, 0x80000000, 0x3, 0x4, 0x4, 0x9a0a, 0x4, 0x9, 0x800, 0x90000000000, 0x100000000, 0x7, 0x3, 0x80000001, 0x101, 0x53, 0x8, 0x3ff, 0x3, 0xd, 0x134, 0x3, 0x0, 0x7, 0x2, 0x100000000, 0x7, 0x80000001, 0x8000, 0x4, 0x2, 0x7, 0x5, 0x5ac8], {0x77359400}})
kexec_load(0x3ff, 0x1, &(0x7f00000005c0)=[{&(0x7f0000000580)="ab19ceaa7796611b6ffb3ea76d37", 0xe, 0x2, 0x8}], 0x1e0002)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000080)={<r5=>0x0, 0x80000, r2})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000500)={r5, 0x80000, r4})
ioctl$VIDIOC_S_FREQUENCY(r2, 0x402c5639, &(0x7f0000000540)={0x7fff, 0x5, 0xe2})

16:23:55 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x6, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0x8)
write$FUSE_POLL(r0, &(0x7f0000000000)={0x18}, 0x18)
read(r0, 0x0, 0xffffff00)

[ 1760.582979] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'.
16:23:55 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x10006, 0x0)
r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x7f, 0x4200)
getsockname$tipc(r1, &(0x7f0000000140)=@id, &(0x7f0000000180)=0x10)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x80000, 0x0)
write$FUSE_POLL(r2, &(0x7f0000000040)={0xfffffce4, 0x80002}, 0x18)
read(r0, 0x0, 0xffffff00)
connect$pptp(r1, &(0x7f00000001c0)={0x18, 0x2, {0x1, @loopback}}, 0x1e)
ioctl$void(r2, 0x5451)
ioctl$TIOCLINUX3(r0, 0x541c, &(0x7f0000000200))

16:23:55 executing program 2:
r0 = socket(0x10, 0x2, 0x0)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dc", 0x1c)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0))
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x5000000})
ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x0, 0x0, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:23:55 executing program 3:
r0 = socket(0x10, 0x0, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getuid()
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r5, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x2, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)
fchmod(r3, 0xe5)

16:23:55 executing program 4:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dc", 0x1c)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000240)={<r3=>0xffffffffffffffff})
geteuid()
ioctl$VT_RELDISP(r3, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getpeername$inet6(r3, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0))
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6, 0x6503000000000000]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:23:55 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$vfio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vfio/vfio\x00', 0xa8100, 0x0)
r2 = openat$cgroup_ro(r1, &(0x7f0000000080)='memory.events\x00', 0x0, 0x0)
setsockopt$inet6_group_source_req(r2, 0x29, 0x2f, &(0x7f0000000180)={0x7573, {{0xa, 0x4e24, 0x8, @empty, 0x4}}, {{0xa, 0x4e24, 0x9, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x27}}, 0x81}}}, 0x108)
r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r5, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000100)='nbd\x00')
sendmsg$NBD_CMD_STATUS(r2, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4040000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0xb4, r6, 0x420, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x2c, 0x7, [{0x8, 0x1, r4}, {0x8, 0x1, r5}, {0x8, 0x1, r4}, {0x8, 0x1, r2}, {0x8, 0x1, r1}]}, @NBD_ATTR_SOCKETS={0x1c, 0x7, [{0x8, 0x1, r2}, {0x8, 0x1, r2}, {0x8, 0x1, r5}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}, @NBD_ATTR_SOCKETS={0x1c, 0x7, [{0x8, 0x1, r5}, {0x8, 0x1, r2}, {0x8, 0x1, r5}]}, @NBD_ATTR_SOCKETS={0x24, 0x7, [{0x8, 0x1, r0}, {0x8, 0x1, r5}, {0x8, 0x1, r2}, {0x8, 0x1, r5}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x48000}, 0x1)

16:23:55 executing program 0:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, 0x0)
pipe(&(0x7f00000004c0))
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x9803, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

[ 1760.813378] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'.
16:23:55 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x2, 0x2)
ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000080)=0xffffffffffffff9c)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/btrfs-control\x00', 0x20c000, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000001c0)=0x1b)
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f00000000c0)={'team0\x00', <r6=>0x0})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bridge_slave_0\x00', r6})
syz_open_dev$adsp(&(0x7f0000000200)='/dev/adsp#\x00', 0x9, 0x10400)
syz_kvm_setup_cpu$x86(r5, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)

16:23:55 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x6, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x400, 0x0)
write$FUSE_POLL(r1, &(0x7f0000000000)={0x18}, 0x18)
read(r0, 0x0, 0xffffff00)

16:23:55 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)

16:23:56 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x200, 0x0)
ioctl$SCSI_IOCTL_GET_IDLUN(r2, 0x5382, &(0x7f0000000080))
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)

16:23:56 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x0, 0x0)
ioctl$BLKTRACESTOP(r1, 0x1275, 0x0)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x2f7, 0x0, 0x0, 0x0)

[ 1761.213362] QAT: Invalid ioctl
[ 1761.225901] QAT: Invalid ioctl
16:23:56 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x400000, 0x0)
setsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, &(0x7f0000000080)=0xaa3, 0x4)
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0)
getsockopt$inet_sctp_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f00000000c0)=@assoc_value={<r4=>0x0, 0x720}, &(0x7f0000000100)=0x8)
setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000180)={0x5, 0x6, 0x0, 0x7, 0xffffffffffff7c13, 0x7ff, 0x1, 0x5, r4}, 0x20)
syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x48, 0x0, 0x0, 0x0)

16:23:56 executing program 5:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0xffffffffffffffff)
ioctl$KVM_SET_LAPIC(r0, 0x4400ae8f, &(0x7f0000000680)={"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"})
ioctl$CAPI_GET_MANUFACTURER(r0, 0xc0044306, &(0x7f0000000380)=0x3)
pipe(&(0x7f0000000cc0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000d00)={0x5000, 0x19000})
eventfd(0x0)
r2 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x9, 0x200000)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000c80)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000c00)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0xf4, r3, 0xf2c40d79551a90e0, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0xcc, 0x1, [@TIPC_NLA_BEARER_PROP={0x44, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x497b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffffffffff8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6ea}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x9, @local, 0xff}}, {0x14, 0x2, @in={0x2, 0x4e24, @local}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xec}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x80000000, @rand_addr="eaff894cc4f4e1b5b8c9c4d397d79963", 0xffffffffffffffff}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x1a}, 0x3}}}}]}, @TIPC_NLA_NET={0x14, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xea}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x2404c084}, 0x40)
sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="682100001638965906aaf0fc5ff4ac07d496dcb5e22ceb1a3ad1faafecbf10fc7bfe167ac15d891b0e6f8dc3a7f302222cb1dedccf5482fd5acabeb82e69685cc543175dc8c40400000000000000e6f83da29e0c1fc8ba4a1793941d9cfa4756e697947e3614f4387d1e317e5fccd4b68f6fa6cc8e5488cf6ea3586e25d19238403a1c0ad2ade1efb47204f57a1f2926f0ef649f6b303566ada930db9eab96d69675ede04f9e1601669f3fe4ab987e382a1bf1b01d7173b20b2e99bf40ed18eb363679b8b9ec8cce8eb5a27dd2000000000400000000000000068e06f7901b6af1d0236fd7", @ANYRES16=r3, @ANYBLOB="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"], 0x168}, 0x1, 0x0, 0x0, 0x20000000}, 0x40001)
r4 = gettid()
fcntl$lock(r2, 0x25, &(0x7f0000000c40)={0x2, 0x1, 0x0, 0x0, r4})
sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f00000003c0)={&(0x7f0000000040), 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x138, r3, 0x404, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x60, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1ff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8860}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x25}]}, @TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffffffffffffd}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x10001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3f}]}, @TIPC_NLA_BEARER={0x84, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0xfffffffffffffff9, @empty, 0xdea}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x3f, @mcast1, 0xfffffffffffff801}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e22, @multicast2}}}}]}, @TIPC_NLA_NODE={0x18, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3ff}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x4000}, 0xc0)
r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r5, r0, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)

16:23:56 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0xf48, 0x40)
ioctl$KVM_ENABLE_CAP_CPU(r1, 0x4068aea3, &(0x7f0000000080)={0x7b, 0x0, [0x4, 0x6, 0x80000001, 0x4]})
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x3fffffffffefe, 0x0)
syz_kvm_setup_cpu$x86(r4, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)

16:23:56 executing program 3:
r0 = socket(0x10, 0x0, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getuid()
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r5, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x3, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)
fchmod(r3, 0xe5)

16:23:56 executing program 2:
r0 = socket(0x10, 0x2, 0x0)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dc", 0x1c)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0))
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x6000000})
ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x0, 0x0, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:23:56 executing program 4:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dc", 0x1c)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000240)={<r3=>0xffffffffffffffff})
geteuid()
ioctl$VT_RELDISP(r3, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getpeername$inet6(r3, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0))
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6, 0xfeffffff00000000]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:23:56 executing program 0:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, 0x0)
pipe(&(0x7f00000004c0))
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0xa002, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:23:56 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SIGNAL_MASK(r2, 0x4004ae8b, &(0x7f0000000180)={0x1000, "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"})
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

16:23:56 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x6, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
write$FUSE_POLL(r0, &(0x7f0000000000)={0x18}, 0x18)
read(r0, 0x0, 0xffffff00)

16:23:56 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = shmget$private(0x0, 0x1000, 0x78000600, &(0x7f0000ffc000/0x1000)=nil)
shmctl$IPC_RMID(r3, 0x0)
r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)

16:23:56 executing program 4:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dc", 0x1c)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000240)={<r3=>0xffffffffffffffff})
geteuid()
ioctl$VT_RELDISP(r3, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getpeername$inet6(r3, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0))
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffffffff00000000]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:23:56 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)

16:23:57 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x6, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
write$binfmt_script(r0, &(0x7f0000000140)={'#! ', './file0', [{0x20, '/dev/ptmx\x00'}, {0x20, 'eth1\\'}, {0x20, ']'}, {0x20, '/dev/ptmx\x00'}, {0x20, 'ppp1'}, {0x20, 'proc--\xad#@\'!*+\'vboxnet1vmnet1.::trusted*em1\xb9'}], 0xa, "17ee77b7cb8ce3bdc59790570bef03cfc1d13a33aa9d16c6fae6f6c08597877abba4d431281b2fb4564ced8f371f6af1312981a5a45f2c3681653b7410222d7663cfb425da34cdf680ba5788d79668f354f24f65b0a10d5a5cfa96d3e08fc39bfc9e47f5e5f0931f751e86b5f27442e33b7bfd81936b90dc71e8a7dbc3fd291b2111d6ddb6790ae4d29f4fa445a8fa52503b4f3cd815467f0305d4b138c9871d6bab0d02074125ce1c7eb19e7ece7ad07f4e35725d317572b2d02f"}, 0x115)
r1 = socket(0x10, 0x80800, 0x2)
getpeername$unix(r1, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x6e)
read(r0, 0x0, 0xffffff00)

16:23:57 executing program 3:
r0 = socket(0x10, 0x0, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getuid()
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r5, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x4, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)
fchmod(r3, 0xe5)

16:23:57 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = request_key(&(0x7f0000000100)='cifs.spnego\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000001c0)='GPL\'*proc\x00', 0xfffffffffffffffc)
keyctl$get_keyring_id(0x0, r3, 0x2)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040)={<r4=>0x0}, &(0x7f0000000080)=0xc)
mq_notify(r1, &(0x7f00000000c0)={0x0, 0x10, 0x5, @tid=r4})

16:23:57 executing program 2:
r0 = socket(0x10, 0x2, 0x0)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dc", 0x1c)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0))
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x7000000})
ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x0, 0x0, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:23:57 executing program 0:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, 0x0)
pipe(&(0x7f00000004c0))
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0xb001, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:23:57 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x400000, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000003000/0x2000)=nil, 0x2000}, &(0x7f00000000c0)=0x10)
r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0)
ioctl$KDSIGACCEPT(r4, 0x4b4e, 0x1d)
syz_kvm_setup_cpu$x86(r4, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)

16:23:57 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x6, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
r1 = syz_open_pts(r0, 0x80)
ioctl$TCSETS(r1, 0x5402, &(0x7f00000000c0)={0x2, 0x0, 0x8001, 0xfffffffffffffff8, 0x12, 0x6, 0x20, 0x3, 0x4, 0xfffffffffffffff8, 0x0, 0x8000})
ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000040)="bc7d9e8e2a3ebaec0bdcf13ada5ed704efeb952a878b48840ef04b30797810d99535095624211a4737c3870b586bb93bb048482c3c62c8f55f81b7c2cc11e22173f90f92ef91fe663db3")
write$FUSE_POLL(r0, &(0x7f0000000000)={0x18}, 0x18)
read(r0, 0x0, 0xffffff00)

16:23:57 executing program 4:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dc", 0x1c)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000240)={<r3=>0xffffffffffffffff})
geteuid()
ioctl$VT_RELDISP(r3, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getpeername$inet6(r3, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0))
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x40000})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:23:57 executing program 3:
r0 = socket(0x10, 0x0, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getuid()
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r5, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x5, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)
fchmod(r3, 0xe5)

16:23:57 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0xffffffffffffff2b, 0x21, 0x0, 0x0)

16:23:57 executing program 2:
r0 = socket(0x10, 0x2, 0x0)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dc", 0x1c)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0))
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x8000000})
ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x0, 0x0, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:23:57 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0xfffffffffffffffe, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x40)
ioctl$DRM_IOCTL_AGP_ENABLE(r2, 0x40086432, &(0x7f0000000080)=0x100)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)

16:23:57 executing program 0:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, 0x0)
pipe(&(0x7f00000004c0))
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0xba02, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:23:57 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x6, 0x0)
r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x10040, 0x0)
ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000580)=<r2=>0x0)
capset(&(0x7f00000005c0)={0x0, r2}, &(0x7f0000000600)={0x6, 0xb859, 0x6, 0x3, 0x67e, 0x8})
sendmsg$kcm(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="f09ce74326f95b464de21f2fc62f531c17ee7f513e411a783c1bec460f88123f33840d10ac2233822bcdaed61d2b87281168433ceed356840c3d49ee9714169ff9e166a1eeb2ea577907", 0x4a}, {&(0x7f0000000140)="abc099390dac4f3ba8322f918efc9a02776a4f4e73b5ae23aa337d73825ef0f77befee0b0b368df1a7de3aa03d3daae66d10c059e55f86c2eda51270118337c7cf967f144d2fb7d57836efc26121e9b4", 0x50}], 0x2, &(0x7f0000000200)=[{0x50, 0x1, 0x8, "afe183081c2206b9677c8671f702f26873dc5782866521fd3559005346337fe710a4e70caf21df3d941766b5376f45311c9d551a60c1ea484655"}, {0x108, 0x116, 0xad0, "f9e42dcfb4bfc36df95aff6e42689faef7a2fe9738f97c4f22ea31b6921a89aef14070573fccfd8fc339a2d46e9477d0617773e815251ed0dd1438ba333cf478a55fa9a294c59f9676666748ab57b09718058350ea18b2d07f9f2e4e1fcc4d8e2184cb80b545345ae5a9ca423d1528c006183c1281017471b94cfc3a099c09b98f1e6bf1664da279ae4df3d1936354ac6561bedb659e5e11444f9f191104d24ae0e068472a2c210ad326331de2c40964b240cab28a80e9dcb5a9d64a56337017ff14b8c66d122e51a17c140db887f807b73141f3c40b80e74e23e2ebed3017bc6e77215774488a0aba8b407c5e22bcf76a0c7a"}, {0x88, 0x0, 0x100000001, "8e59d17c38d754464c1cf67c652bc603149b23a0dc22692cedd6209c41ef083801c6c389e097bedd00a849d85a869a2815097e7016ce83bf0e5eea8e54898a9368f91cd060c1cbb4d3d3fc6cc0b9a70b06244f2725d92fe2550864ba262a43fb231c144a0208bc170c269e667e23fd9af0977ebd6c0f"}, {0x18, 0x118, 0x5, "6c6845d7f5988e51"}, {0x60, 0xf864cae1bd433a9, 0x2, "ed142c7b9e898125a47bfbcaeebeeb7dbecda4fbca39f5e21e82988db1261a7244c1470936dc167884db150c6d8d85a39dbfed19ee32b3186d44a5704cce9ec06673c967ea1745abc4"}, {0x80, 0x119, 0x4, "e9ba888b608cd15a41d71554d7a81a61ed9c7bcc0e78432eb93c0cb83b31cc5893037b882ae6e21ad714e7592e5efac8f68d56a55de834e2251b558b1c6393612ee03f947898728f9e22c4f9e3e0eb0510808f5a7d4192494af54713877d83bb2e548f062ca9a4ea54524163"}], 0x2d8}, 0x40000)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000540)={0x4, 0x2})
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
write$FUSE_POLL(r0, &(0x7f0000000000)={0x18}, 0x18)
read(r0, 0x0, 0xffffff00)
ioctl$CAPI_INSTALLED(r1, 0x80024322)

16:23:57 executing program 5:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x80000, 0x0)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000080)={'filter\x00', 0x4}, 0x68)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
prctl$PR_CAPBSET_DROP(0x18, 0x1d)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
r4 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r3, &(0x7f0000000100)={0x4})
msgget(0x1, 0x202)
setsockopt$IP_VS_SO_SET_ZERO(r4, 0x0, 0x48f, &(0x7f0000000180)={0x2b, @remote, 0x4e21, 0x0, 'lblc\x00', 0x20, 0x8000, 0x48}, 0x2c)

[ 1762.632032] net_ratelimit: 16 callbacks suppressed
[ 1762.632039] protocol 88fb is buggy, dev hsr_slave_0
[ 1762.642104] protocol 88fb is buggy, dev hsr_slave_1
16:23:57 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x6, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
write$FUSE_POLL(r0, &(0x7f0000000000)={0x3ed, 0x0, 0x0, {0x3}}, 0x18)
read(r0, 0x0, 0xffffff00)

16:23:57 executing program 5:
r0 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x25a, 0x80202)
ioctl$SG_SET_KEEP_ORPHAN(r0, 0x2287, &(0x7f0000000100)=0x3)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2000, 0x0)
write$input_event(r1, &(0x7f0000000080)={{}, 0x17, 0xfff, 0x985}, 0x18)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000700)={0x1, 0xfd7, &(0x7f0000000580)="91ff38548d94d606453a8a4627e4b836453c4c255bf9d994e83cad10f2bcdb80b2e67cb319a27638ca4a91e9759a5ce940c6ecf55772641f54ac521470fb505261ab3380120e86bffbd1c6b7f537c6f15c4be33e63ad7f579c4d8e5af007142651dbe163ab3552de599bd6c11146336f6783ed784eebf200f8a3e9b36878edf639e921edf9a314d0cf028084c907e624692a4778d639fa77c9fcf233683e97ec38a6ccb3e807abcad2653c69ba4ca9a6b86061eff72bf33a27d4f79c6281773ff83dfff6c4428c358f6d8829045e1ca9f023db899d61022155579e08a6a452fda6f4e061dc34b326a4067b1bf120c5d8", &(0x7f0000000680)="dacb9b14b69711666d45bf64cb38ffc868cb4b0980eae97e48e532f0d244e52a4322638a0ea4756235bf6537c94dcf391cbfa86b3e9a2597b33a3f596380cd8bba3f50794ef5eed4e5cad06361e078b98ef7ee390c87699a7abfb51e80c0e68d3f461d7bf3d18f169763e4e72504f951f3d5eb29c8ebee", 0xf0, 0x77})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000180)={"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"})

16:23:57 executing program 4:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dc", 0x1c)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000240)={<r3=>0xffffffffffffffff})
geteuid()
ioctl$VT_RELDISP(r3, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getpeername$inet6(r3, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0))
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x1000000})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:23:57 executing program 0:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, 0x0)
pipe(&(0x7f00000004c0))
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0xc601, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:23:57 executing program 3:
r0 = socket(0x10, 0x0, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getuid()
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r5, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x6, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)
fchmod(r3, 0xe5)

16:23:57 executing program 2:
r0 = socket(0x10, 0x2, 0x0)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dc", 0x1c)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0))
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x9000000})
ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x0, 0x0, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:23:57 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x6, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
write$FUSE_POLL(r0, &(0x7f0000000000)={0x18}, 0x18)

16:23:58 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x10000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)

16:23:58 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)

[ 1763.111814] protocol 88fb is buggy, dev hsr_slave_0
[ 1763.112855] protocol 88fb is buggy, dev hsr_slave_0
[ 1763.116964] protocol 88fb is buggy, dev hsr_slave_1
[ 1763.122378] protocol 88fb is buggy, dev hsr_slave_1
[ 1763.133575] protocol 88fb is buggy, dev hsr_slave_0
[ 1763.139270] protocol 88fb is buggy, dev hsr_slave_1
[ 1763.146324] protocol 88fb is buggy, dev hsr_slave_0
[ 1763.151784] protocol 88fb is buggy, dev hsr_slave_1
16:23:58 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r2, 0x800442d4, &(0x7f0000000080)=0x4)
ioctl$sock_inet_SIOCSIFPFLAGS(r3, 0x8934, &(0x7f0000000040)={'ipddp0\x00', 0x2})

16:23:58 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x6, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0)
write$FUSE_POLL(r1, &(0x7f0000000040)={0x18, 0xffffffffffffffff, 0x7}, 0x18)
read(r0, 0x0, 0xffffff00)

16:23:58 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000014000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f000000a000/0x4000)=nil, &(0x7f000000a000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000014000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f000000b000/0x1000)=nil, &(0x7f0000011000/0x1000)=nil, &(0x7f0000004000/0x2000)=nil, &(0x7f0000000040)="7ff93b1ad31d23c12e5bd63e7b1b1b2d61501eadecae80120598fef724b3aab490b668d7ab3b5450421a5abc7cae4e896172ae2ee92d06d977f12e4b38e0cdf117a13cbb89cb4692c134d3d282bd2d365ec20271b6a83f3cd7f986e0bb1b9706fd8be83c5e2f10f117e3f07f7c4275565bcc7788d7bb4c991dcc60793cb87d105c455e16d20cd5e7a9e819f46f766ceda7b334959fd69e2eaa7fab342115dbf706d49b861d2596cb4eeab8bb13757358", 0xb0, r1}, 0x68)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0)
fsync(r3)
syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)

[ 1763.373880] __nla_parse: 8 callbacks suppressed
[ 1763.373909] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'.
16:23:58 executing program 3:
r0 = socket(0x10, 0x0, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getuid()
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r5, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x7, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)
fchmod(r3, 0xe5)

16:23:58 executing program 0:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, 0x0)
pipe(&(0x7f00000004c0))
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0xd403, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:23:58 executing program 4:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dc", 0x1c)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000240)={<r3=>0xffffffffffffffff})
geteuid()
ioctl$VT_RELDISP(r3, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getpeername$inet6(r3, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0))
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000002})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:23:58 executing program 2:
r0 = socket(0x10, 0x2, 0x0)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dc", 0x1c)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0))
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0xa000000})
ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x0, 0x0, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:23:58 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x802080, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)

[ 1763.557355] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 1763.681464] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'.
16:23:58 executing program 2:
r0 = socket(0x10, 0x2, 0x0)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dc", 0x1c)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0))
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0xb000000})
ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x0, 0x0, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:23:58 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)

16:23:58 executing program 4:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dc", 0x1c)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000240)={<r3=>0xffffffffffffffff})
geteuid()
ioctl$VT_RELDISP(r3, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getpeername$inet6(r3, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0))
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000003})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:23:58 executing program 3:
r0 = socket(0x10, 0x0, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getuid()
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r5, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x8, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)
fchmod(r3, 0xe5)

16:23:58 executing program 0:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, 0x0)
pipe(&(0x7f00000004c0))
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0xf003, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

[ 1763.942972] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 1764.038931] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'.
16:23:59 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x6, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040))
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
write$FUSE_POLL(r0, &(0x7f0000000000)={0x18}, 0x18)
read(r0, 0x0, 0xffffff00)

16:23:59 executing program 5:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
pipe2(&(0x7f0000b57ff8)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
madvise(&(0x7f0000b9c000/0x3000)=nil, 0x3000, 0xf)
sendmsg$nl_generic(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14, 0x40, 0x200, 0x70bd29, 0x25dfdbfb, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x4000)
vmsplice(r2, &(0x7f0000000040)=[{&(0x7f0000a62000)="bd", 0x1}], 0x1, 0x0)
madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0xfffffffffffffffd, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x40000000000000)
ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000200)={0x7, r2, 0x1})
r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r6, r5, &(0x7f000000b000/0x18000)=nil, 0x0, 0xfffffffffffffda0, 0x0, 0x0, 0x33c)
ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1)

16:23:59 executing program 4:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dc", 0x1c)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000240)={<r3=>0xffffffffffffffff})
geteuid()
ioctl$VT_RELDISP(r3, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getpeername$inet6(r3, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0))
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000004})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:23:59 executing program 3:
r0 = socket(0x10, 0x0, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getuid()
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r5, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x13, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)
fchmod(r3, 0xe5)

16:23:59 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_ARM_SET_DEVICE_ADDR(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000040)={0x401})
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000180)={{{@in=@multicast2, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in6}, 0x0, @in=@remote}}, &(0x7f0000000080)=0xe8)
bind$packet(r1, &(0x7f00000000c0)={0x11, 0xf7, r2, 0x1, 0x25, 0x6, @random="e4b6e8c8b933"}, 0x14)

16:23:59 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x6, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
write$FUSE_POLL(r0, &(0x7f0000000000)={0x18, 0x0, 0x0, {0xfffffffffffffffd}}, 0x18)
read(r0, 0x0, 0xffffff00)
r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x2, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={<r2=>0x0, <r3=>0x0})
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r1, 0xc0385720, &(0x7f00000000c0)={0x0, {r2, r3+30000000}, 0x7, 0x8})

16:23:59 executing program 2:
r0 = socket(0x10, 0x2, 0x0)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dc", 0x1c)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0))
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0xc000000})
ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x0, 0x0, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:23:59 executing program 0:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, 0x0)
pipe(&(0x7f00000004c0))
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0xf503, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

[ 1764.294385] Unknown ioctl -1070049504
16:23:59 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x40000, 0x0)
ioctl$KVM_GET_MSRS(r1, 0xc008ae88, &(0x7f0000000080)={0x7, 0x0, [{}, {}, {}, {}, {}, {}, {}]})
ioctl$CAPI_INSTALLED(r1, 0x80024322)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)

[ 1764.349187] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'.
16:23:59 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x6, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x18)
keyctl$session_to_parent(0x12)
dup2(r0, r0)
r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vsock\x00', 0x1, 0x0)
write$FUSE_POLL(r1, &(0x7f0000000180)={0x3e4, 0x4, 0x6, {0x20}}, 0x18)
read(r0, 0x0, 0xffffff00)
setsockopt$inet_opts(r0, 0x0, 0x40aa56c98672abae, &(0x7f0000000080)="31a194a96da4a0aaa01801e0b1076b57b8395390c752efbd986aea0328f309d327caf6795a991d0ba96187428e66c1a0377886625a7bce6fe6a3964584b2b23607a245bb6a4d8449daa720a3a7db0070cf524a96", 0x54)
openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x40c200, 0x0)

16:23:59 executing program 3:
r0 = socket(0x10, 0x0, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getuid()
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r5, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x300, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)
fchmod(r3, 0xe5)

16:23:59 executing program 4:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dc", 0x1c)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000240)={<r3=>0xffffffffffffffff})
geteuid()
ioctl$VT_RELDISP(r3, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getpeername$inet6(r3, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0))
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000005})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

[ 1764.546139] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'.
16:23:59 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)

16:23:59 executing program 2:
r0 = socket(0x10, 0x2, 0x0)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dc", 0x1c)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0))
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x10000000})
ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x0, 0x0, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:23:59 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x6, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
write$FUSE_POLL(r0, &(0x7f0000000000)={0x18}, 0x18)

16:23:59 executing program 0:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, 0x0)
pipe(&(0x7f00000004c0))
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0xf803, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:23:59 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000000040)='nbd\x00')
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)

[ 1764.807669] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'.
16:23:59 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$int_in(r1, 0x5421, &(0x7f00000000c0)=0x10001)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SET_DEBUGREGS(r2, 0x4080aea2, &(0x7f0000000040)={[0x4, 0xf000, 0x10d000, 0x2002], 0x800, 0x1, 0x80000001})

16:23:59 executing program 3:
r0 = socket(0x10, 0x0, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getuid()
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r5, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x500, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)
fchmod(r3, 0xe5)

16:23:59 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x6, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
write$FUSE_POLL(r0, &(0x7f0000000000)={0x18}, 0x18)
read(r0, 0x0, 0xffffff00)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x400000, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r1, 0x40405515, &(0x7f0000000080)={0x7, 0x4, 0x10001, 0x4, 'syz1\x00', 0x40})
ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000000c0)=<r2=>0x0)
ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r2, 0x10, &(0x7f00000001c0))

16:23:59 executing program 2:
r0 = socket(0x10, 0x2, 0x0)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dc", 0x1c)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0))
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x1f000000})
ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x0, 0x0, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:24:00 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x8000, 0x0)
getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000080)={<r3=>0x0, 0x7}, &(0x7f00000000c0)=0x8)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000100)={r3, 0x4}, &(0x7f0000000180)=0x8)
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0xfffffffffffffffb)
r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r5, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$EVIOCSABS0(r2, 0x401845c0, &(0x7f00000001c0)={0x1ff, 0x80000001, 0x10001, 0x1000, 0x0, 0x8})

[ 1765.119498] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'.
16:24:00 executing program 4:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dc", 0x1c)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000240)={<r3=>0xffffffffffffffff})
geteuid()
ioctl$VT_RELDISP(r3, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getpeername$inet6(r3, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0))
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000006})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:24:00 executing program 5:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, r0, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x4, 0x0, 0x0)

16:24:00 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x6, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
write$FUSE_POLL(r0, &(0x7f0000000000)={0x18}, 0x18)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x40, 0x0)
getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000080)={<r2=>0x0, 0x3}, &(0x7f00000000c0)=0x8)
setsockopt$inet_sctp_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000140)={r2, 0x7, 0x7}, 0x8)
read(r0, 0x0, 0xffffff00)

16:24:00 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)

16:24:00 executing program 0:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, 0x0)
pipe(&(0x7f00000004c0))
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0xfc03, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:24:00 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0)
ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000040)={0x0, 0x2, 0x1, 0x8, 0x2, [{0x9, 0x3ff, 0x4a, 0x0, 0x0, 0x8}, {0x24000000000, 0x101, 0x1, 0x0, 0x0, 0x1}]})
syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)

[ 1765.383334] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'.
16:24:00 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x6, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
write$FUSE_POLL(r0, &(0x7f0000000000)={0x18}, 0x18)
read(r0, 0x0, 0xffffffffffffffb3)

16:24:00 executing program 2:
r0 = socket(0x10, 0x2, 0x0)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dc", 0x1c)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0))
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x20000000})
ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x0, 0x0, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:24:00 executing program 3:
r0 = socket(0x10, 0x0, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getuid()
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r5, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x600, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)
fchmod(r3, 0xe5)

16:24:00 executing program 4:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dc", 0x1c)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000240)={<r3=>0xffffffffffffffff})
geteuid()
ioctl$VT_RELDISP(r3, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getpeername$inet6(r3, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0))
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000007})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:24:00 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0)
pread64(r1, &(0x7f0000000040)=""/98, 0x62, 0x0)
ioctl$ASHMEM_SET_PROT_MASK(r3, 0x40087705, &(0x7f0000000180)={0x3, 0x8000})
bind$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e20, 0x4, @loopback, 0x400}, 0x1c)
openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x200000, 0x0)
syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)

16:24:00 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x6, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
write$FUSE_POLL(r0, &(0x7f0000000000)={0x18}, 0x18)
read(r0, 0x0, 0xffffff00)
syz_open_pts(r0, 0x151700)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x0, 0x0)
getsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
fcntl$setstatus(r0, 0x4, 0x42000)

16:24:00 executing program 0:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, 0x0)
pipe(&(0x7f00000004c0))
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x20000, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:24:00 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x8, 0x101000)
bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e23, 0x1ff, @dev={0xfe, 0x80, [], 0x16}, 0x401}, 0x1c)
r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0)
ioctl$CAPI_INSTALLED(r4, 0x80024322)
syz_kvm_setup_cpu$x86(r4, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)

16:24:00 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x6, 0x0)
ioctl$KDADDIO(r0, 0x4b34, 0x200)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
r1 = socket$rds(0x15, 0x5, 0x0)
ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f00000000c0)=@get={0x1, &(0x7f0000000080)=""/38, 0x9})
write$FUSE_POLL(r0, &(0x7f0000000000)={0x18}, 0x18)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x800, 0x5)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000001540)={{{@in6=@local, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@loopback}, 0x0, @in6=@loopback}}, &(0x7f0000001640)=0xe8)
sendmsg$can_raw(r2, &(0x7f0000001780)={&(0x7f0000001680)={0x1d, r3}, 0x10, &(0x7f0000001740)={&(0x7f00000016c0)=@canfd={{0x0, 0x1, 0x200020000000, 0x20}, 0x23, 0x2, 0x0, 0x0, "0d2e7d65a3d3b3f7fcc3b3ae26fe47e497ab96e3f4ab69358803cffd1401218b9bbd7700ce63ccdacdb8b3cd49be3e57ca22f9132423426757769a0c15d916ad"}, 0x48}, 0x1, 0x0, 0x0, 0xc000}, 0x8800)
read(r0, 0x0, 0xffffff00)

16:24:00 executing program 3:
r0 = socket(0x10, 0x0, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getuid()
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r5, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x689, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)
fchmod(r3, 0xe5)

16:24:00 executing program 2:
r0 = socket(0x10, 0x2, 0x0)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dc", 0x1c)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0))
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x3f000000})
ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x0, 0x0, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:24:00 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0)
setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f0000000040)=0x1, 0x4)
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)

16:24:01 executing program 4:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dc", 0x1c)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000240)={<r3=>0xffffffffffffffff})
geteuid()
ioctl$VT_RELDISP(r3, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getpeername$inet6(r3, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0))
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000008})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:24:01 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x8000, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
read(r0, 0x0, 0x75439969)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x111000, 0x0)
ioctl$CAPI_INSTALLED(r1, 0x80024322)
r2 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x7f, 0x8000)
read(r2, &(0x7f0000000140)=""/188, 0xbc)
ioctl$DRM_IOCTL_AGP_INFO(r2, 0x80386433, &(0x7f0000000280)=""/92)

16:24:01 executing program 0:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, 0x0)
pipe(&(0x7f00000004c0))
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x30000, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:24:01 executing program 3:
r0 = socket(0x10, 0x0, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getuid()
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r5, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x700, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)
fchmod(r3, 0xe5)

16:24:01 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_opaque(r2, &(0x7f0000000040)='trusted.overlay.opaque\x00', &(0x7f0000000080)='y\x00', 0x2, 0x3)
syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)

16:24:01 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x6, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
write$FUSE_POLL(r0, &(0x7f0000000000)={0x18}, 0x18)
read(r0, 0x0, 0x10000016f)

16:24:01 executing program 5:
r0 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x5, 0x100)
ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f00000000c0))
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x10000, 0x0)

16:24:01 executing program 2:
r0 = socket(0x10, 0x2, 0x0)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dc", 0x1c)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0))
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x40000000})
ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x0, 0x0, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:24:01 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = accept$alg(0xffffffffffffff9c, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000001a00)=[{{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000040)="c2adb64c59a313123f4d5ecab60f97c745ec4422d77886dcf19d9db07361e50065a0df324cc7085392dbc41fd68671909f612794450787d694fba20e96aaad724a285325e3b21bc01a556ac7297f9948bd83451762e6c88237e48ea3f6eabbd3455b3f4d0928e324fe49f254cf1a6126e0ce5663bcc2cc04f9e7fd5ba37033ee8288aeee317ecd57142dbe8a13a01197291cc417ff664df075e7482e497d3b9c991cdb35fb5b139c73a66487981d4cd50226ac5f895d6ffdb835f1f07917125d8c863a", 0xc3}, {&(0x7f0000000180)="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", 0x1000}, {&(0x7f0000001180)}, {&(0x7f00000011c0)="9f764060502e5761a37629aa2b68a1182da41939871cbfcefb65a98c8691a5a93ab9e4a9d45ca928b23c1a41a3dd9fa3ae2ca82bb710654aa48bd04cab81fab3154c6e9f9b143a940b168954adac9dc6c164f2cc2e2dc4586f9b9b703e8ffb5708a02b4ae7ef8a8756d8ee03c75f2765776ade08bba332701d6c7a31f4a171c9ea015350ac9b554d1d6843f7a5371ac2da6d2f8337574173b357bbe3c91705978c0f17422a17ef7c9702bd21076e0b33ea626b7239cfa20950737d9c528a4b81f862169e7ff160b7814346a8b766238309a277ff0a8a86ba", 0xd8}, {&(0x7f00000012c0)="6ea74ae17d4881cd6e8fd7ab3111ab8be89f3f773264d502cdd98607574ed1613fff26f47ea79e59746cb701967d9b395614391945658f029c22cd0b4d362d0940fe34b72a6167aeaa135a0e915df8afccfaf262121d986d2d75ee1d4d0eefbc2ed70c44f63c425affc02aec72da1b09e0f5a416459fef59276501a3b4b687a9b52032f236ef7f147c9beeeda2add36f5b58e06fbf7b13e8d9411abc27e897117a038ccb4f197d2a1f9fa09030d19e2c3cb634c607f29936ad936ecf09ab0469c0cdab7046aa752a1775429e5f", 0xcd}, {&(0x7f00000013c0)="0c773d08ca694d0fa680c50cd3319979125caabaa09ab69ee3c1edca135af1fb4cbeee1a23686ae6cf6e4a15eada2da2cff9d40037491494499be692e31d1178f595cab905ac4291162f8624f76f26502df6e4fcbbf394fd4d1ee8b706f04688781b6d7ea71d623ad478c19526075b1bf97a96f2b3c4fde1da79", 0x7a}, {&(0x7f0000001440)="dd6c0ea26e53e6", 0x7}], 0x7, &(0x7f0000005a80)=ANY=[@ANYBLOB="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"], 0xb0}, 0x981}, {{&(0x7f00000015c0)=@pppoe={0x18, 0x0, {0x0, @broadcast, 'yam0\x00'}}, 0x80, &(0x7f0000001740)=[{&(0x7f0000001640)="a1dc59453bd8f4420d9b614515c484bb2d1f02bbf92c47589b0218e71e5e06361cc0f1077a6ee2da0266ee760a3400b9c5d879166a4e04d25f9d1afb553bfcec65008175daabdbb5ec50d02e9451b3f4ed22fa6f11ef76d299bbc4b76f9ef899c5d01755c751b1a7c599dd57062a321e1b19c3eb87f7ce013146f2e245be7d7277600a997434202f09d5ecac878ab3ccf6a7ed1ae1b7225ae84f10a642e68d33aa5338515e2031b0c09c996cbdd6c1690c1c77c54fc582e17cd3f587caad879fd36582b962c9ea79495fa260", 0xcc}], 0x1, &(0x7f0000001780)=[{0x88, 0x29, 0x0, "980b321023536ed911523235fbbd9aa0ce3dd329ae36985ef917232f86ac11d824b337a99e5b694e013acc4338bbdef3f4775a4150d0900d0f403c79f4b5e56c801665cb92246a04813af23455733ea40255a2b29dbc41c724e7d44cf975baa0c81c8957e1f0036e04dbc254440d1efda760d56310e985"}, {0xb8, 0x199, 0x5, "567c712667e27a121a6996611c6cb69677b84b6cec16827dd7089b4fcacc144341fab941feabe0b040cb47a2f0489724f9b6df2798f6399268e70582d68f82f0e870f1eba12a95540d51a8141166ec3be9add1022556f3b14a28c306bfd70e70056a2a6e3ad9967b07353d3dbdb08ef989b1671a57dd5c37abad99949e083b947f7d69695ab33a041be59e4160037621b5ab70e10fa5c354c19738d471f343fdb74feb5718c8"}, {0x40, 0x115, 0x625, "1c0415ec7791d24b5e65a805df932ad547aa4e3734146d81e01526d05f2a1b010fcd9e9e54f2b4af281187"}, {0x30, 0x113, 0x400, "65a8d07f21ae129c826e329c0e1572695625113e3a7bdda8b626752c"}, {0xa8, 0x19e, 0x100000000, "deb9b86ece7d951652a308d7748552767d2acc3303ba4b2ebafac38459c6ab194b7550e6b2204ff2dc13fdf6ba074292e038c3df531e7cc1a4e08e4d90c41e401ee6ab22b1f2584bca9bea270b06117a75ae8471ebc80b945d8c55f35a668f2c0c3feef680dbcf6fe58dcf3d66d020e1b9c3a8dd274106081c36515b271ffd9dc19b495287c8f891fd14baf9fba620b76a84328fdc6a"}], 0x258}, 0x10000}], 0x2, 0x40000)
r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001180)='/dev/sequencer\x00', 0x7e, 0x0)
setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000001ac0)=0x9, 0x4)
setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000001a80)=0x3, 0x4)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0)
recvmmsg(r3, &(0x7f0000004900)=[{{&(0x7f0000001b00)=@pptp={0x18, 0x2, {0x0, @empty}}, 0x80, &(0x7f0000001c80)=[{&(0x7f0000001b80)=""/15, 0xf}, {&(0x7f0000001bc0)=""/177, 0xb1}], 0x2, &(0x7f0000001cc0)=""/245, 0xf5}, 0xfffffffffffffbff}, {{&(0x7f0000001dc0)=@nl=@proc, 0x80, &(0x7f0000002380)=[{&(0x7f0000001e40)=""/93, 0x5d}, {&(0x7f0000001ec0)=""/107, 0x6b}, {&(0x7f0000001f40)=""/75, 0x4b}, {&(0x7f0000001fc0)=""/197, 0xc5}, {&(0x7f00000020c0)=""/165, 0xa5}, {&(0x7f0000002180)=""/93, 0x5d}, {&(0x7f0000002200)=""/196, 0xc4}, {&(0x7f0000002300)=""/126, 0x7e}], 0x8, &(0x7f0000002400)=""/98, 0x62}, 0xfffffffffffff800}, {{&(0x7f0000002480)=@ipx, 0x80, &(0x7f0000002b00)=[{&(0x7f0000002500)=""/171, 0xab}, {&(0x7f00000025c0)=""/200, 0xc8}, {&(0x7f00000026c0)=""/242, 0xf2}, {&(0x7f00000027c0)=""/90, 0x5a}, {&(0x7f0000002840)=""/50, 0x32}, {&(0x7f0000002880)=""/159, 0x9f}, {&(0x7f0000002940)=""/10, 0xa}, {&(0x7f0000002980)=""/72, 0x48}, {&(0x7f0000002a00)=""/187, 0xbb}, {&(0x7f0000002ac0)=""/57, 0x39}], 0xa, &(0x7f0000002bc0)=""/245, 0xf5}, 0x3}, {{&(0x7f0000002cc0)=@nfc, 0x80, &(0x7f0000002e80)=[{&(0x7f0000002d40)=""/162, 0xa2}, {&(0x7f0000002e00)=""/91, 0x5b}], 0x2, &(0x7f0000002ec0)=""/90, 0x5a}, 0x100000001}, {{&(0x7f0000002f40)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000004740)=[{&(0x7f0000002fc0)=""/96, 0x60}, {&(0x7f0000003040)=""/194, 0xc2}, {&(0x7f0000003140)=""/230, 0xe6}, {&(0x7f0000003240)=""/147, 0x93}, {&(0x7f0000003300)=""/4096, 0x1000}, {&(0x7f0000004300)=""/173, 0xad}, {&(0x7f00000043c0)=""/84, 0x54}, {&(0x7f0000004440)=""/240, 0xf0}, {&(0x7f0000004540)=""/246, 0xf6}, {&(0x7f0000004640)=""/198, 0xc6}], 0xa, &(0x7f0000004800)=""/214, 0xd6}, 0x10000}], 0x5, 0x2000, &(0x7f0000004a40))
r4 = semget(0x3, 0x2, 0x208)
semctl$GETNCNT(r4, 0x3, 0xe, &(0x7f0000004a80)=""/4096)
socket$inet_smc(0x2b, 0x1, 0x0)
syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x28, 0x0, 0x0)

16:24:01 executing program 1:
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x40001, 0x0)
ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000080))
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x6, 0x0)
ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000140)={0x200, 0x3})
ioctl$KVM_IRQ_LINE_STATUS(r0, 0xc008ae67, &(0x7f00000000c0)={0xfff, 0xe9b6})
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0xd)
write$FUSE_POLL(r1, &(0x7f0000000000)={0x18}, 0x18)
read(r1, 0x0, 0x104d3)

16:24:01 executing program 5:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000040)={[0x1, 0xcaf1, 0x400, 0xae, 0xfffffffffffffff8, 0x3f, 0x2, 0x5, 0x7, 0x7, 0x4, 0x8001, 0x800, 0xb9, 0x0, 0x54], 0x100000, 0x8000})
syz_kvm_setup_cpu$x86(r2, r1, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)

16:24:01 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x6, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
write$FUSE_POLL(r0, &(0x7f0000000000)={0x18}, 0x18)
pipe(&(0x7f0000000040))
read(r0, 0x0, 0xffffff00)

16:24:01 executing program 4:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dc", 0x1c)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000240)={<r3=>0xffffffffffffffff})
geteuid()
ioctl$VT_RELDISP(r3, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getpeername$inet6(r3, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0))
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000013})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:24:01 executing program 0:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, 0x0)
pipe(&(0x7f00000004c0))
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x40000, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:24:01 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000040)={0x4, 0x1, 0x1, 0x46ea, 0x7fff, 0xdbd})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)

16:24:01 executing program 3:
r0 = socket(0x10, 0x0, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getuid()
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r5, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0xf1c, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)
fchmod(r3, 0xe5)

16:24:01 executing program 2:
r0 = socket(0x10, 0x2, 0x0)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dc", 0x1c)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0))
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x7f030000})
ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x0, 0x0, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:24:01 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x40, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd)
write$FUSE_POLL(r0, &(0x7f0000000000)={0x18}, 0x18)
read(r0, 0x0, 0xffffff00)

16:24:01 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x5d, 0x0, 0x33a)
ioctl$UI_SET_SWBIT(r2, 0x4004556d, 0xa)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$radio(&(0x7f00000001c0)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
read$FUSE(r3, &(0x7f0000000500), 0x1000)
ioctl$sock_inet_SIOCSIFPFLAGS(r2, 0x8934, &(0x7f0000000080)={'veth1_to_bond\x00', 0x6})
ioctl$CAPI_REGISTER(r2, 0x400c4301, &(0x7f0000000040)={0x1, 0x4, 0x2})

16:24:01 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000100)=ANY=[@ANYRES32=<r4=>0x0, @ANYBLOB="01010a000200feff964f47d2cdd00f8d0940363c95745b15267007ff8100000000000000f8"], &(0x7f0000000080)=0x1c)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f0000000180)={r4, @in={{0x2, 0x4e24, @multicast1}}, 0x1, 0x100000000, 0x90, 0x2, 0x8}, &(0x7f00000000c0)=0x98)
syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)

16:24:02 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)

16:24:02 executing program 2:
r0 = socket(0x10, 0x2, 0x0)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dc", 0x1c)
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000)=<r1=>0x0)
getpgid(r1)
r2 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r2, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0))
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r3, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x0, 0x0, &(0x7f0000000080))
ioctl(r2, 0x4161, 0x0)

16:24:02 executing program 4:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dc", 0x1c)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000240)={<r3=>0xffffffffffffffff})
geteuid()
ioctl$VT_RELDISP(r3, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getpeername$inet6(r3, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0))
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000300})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:24:02 executing program 0:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, 0x0)
pipe(&(0x7f00000004c0))
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x1000000, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:24:02 executing program 3:
r0 = socket(0x10, 0x0, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getuid()
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r5, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x1300, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)
fchmod(r3, 0xe5)

16:24:02 executing program 5:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, r0, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)

16:24:02 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0)
ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f00000000c0)={0xa, &(0x7f0000000040)=[{0x8, 0x5, 0x6ed, 0x8}, {0x400, 0x703, 0x1, 0x3}, {0xffffffffffffffff, 0xfff, 0x4}, {0x8, 0x1b77, 0x5, 0x2}, {0x5, 0x3ff, 0x9, 0x4}, {0xee0, 0x80000000, 0x100, 0xfffffffffffffffe}, {0x2, 0x1ff, 0x6, 0x1000}, {0x100000000, 0x0, 0x13, 0x6}, {0x0, 0x0, 0x400, 0xffffffff}, {0x1, 0x8, 0x4, 0x9}]})
syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)

16:24:02 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)

16:24:02 executing program 4:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dc", 0x1c)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000240)={<r3=>0xffffffffffffffff})
geteuid()
ioctl$VT_RELDISP(r3, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getpeername$inet6(r3, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0))
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000365})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:24:02 executing program 2:
r0 = socket(0x7, 0x7fffe, 0x800000000000)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dc", 0x1c)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0))
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x0, 0x0, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:24:02 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x6, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
r1 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x1, 0x2)
ioctl$PPPIOCSMRRU(r1, 0x4004743b, &(0x7f0000000080)=0xfffffffffffff818)
openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x40200, 0x0)
write$FUSE_POLL(r0, &(0x7f0000000000)={0x18}, 0x18)
read(r0, 0x0, 0xffffff00)

16:24:02 executing program 5:
r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x80, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86)
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f00000000c0)={&(0x7f0000000080)=[0x1], 0x1, 0x7fff, 0x91a, 0x6, 0x5, 0x1000, {0x6, 0x3f, 0x0, 0xd, 0x40, 0x5, 0x3, 0x23adcb33, 0x11, 0x7, 0xff, 0x7fff, 0x7fff, 0x1000, "4580327f879fc3a77ec2f8e8c078c1847e35a560d20404258b769f84caf28824"}})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x8000, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffe20, 0x0, 0x0, 0x0)
socket$can_raw(0x1d, 0x3, 0x1)
r5 = dup2(r4, r3)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000140)={<r6=>0x0, 0x3}, &(0x7f00000001c0)=0x8)
getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f0000000200)={r6, @in6={{0xa, 0x4e24, 0x9, @remote, 0x4}}}, &(0x7f00000002c0)=0x84)

16:24:02 executing program 0:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, 0x0)
pipe(&(0x7f00000004c0))
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x2000000, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:24:02 executing program 3:
r0 = socket(0x10, 0x0, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getuid()
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r5, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x1c0f, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)
fchmod(r3, 0xe5)

[ 1767.833097] net_ratelimit: 24 callbacks suppressed
[ 1767.833105] protocol 88fb is buggy, dev hsr_slave_0
[ 1767.838989] protocol 88fb is buggy, dev hsr_slave_1
16:24:02 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x6, 0x0)
ppoll(&(0x7f0000000040)=[{r0, 0x1051}, {r0, 0x400}, {r0}, {r0}, {r0, 0x4000}, {r0}, {r0, 0x8}], 0x7, &(0x7f0000000080), &(0x7f00000000c0)={0xfffffffffffffffb}, 0x8)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
write$FUSE_POLL(r0, &(0x7f0000000000)={0x18}, 0x18)
read(r0, 0x0, 0x0)

16:24:02 executing program 5:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x40003e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x10000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$netlink(0x10, 0x3, 0x4)
r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket(0x10, 0x2, 0xc)
r2 = semget$private(0x0, 0x200000000003, 0x0)
semop(r2, &(0x7f0000000000)=[{0x4, 0xfff, 0x1000}, {0x3, 0x2, 0x800}, {0x3, 0x6, 0x1000}, {0x2, 0x100, 0x1800}, {0x3, 0x78d1, 0x1000}, {0x2, 0x9, 0x1000}], 0x6)
write(r1, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
r3 = dup3(r0, r1, 0x0)
semget(0xffffffffffffffff, 0x0, 0x0)
semctl$IPC_INFO(0x0, 0x800000000003, 0x3, &(0x7f0000000080)=""/205)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c)
connect$l2tp(r1, &(0x7f0000000380)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x0, @multicast2}, 0x4}}, 0xfffffdd1)
ioctl$DRM_IOCTL_SET_UNIQUE(r3, 0x40106410, &(0x7f0000000300)={0x1000, &(0x7f0000000640)="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"})
open(&(0x7f0000000500)='./file0\x00', 0x80000, 0x10)
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={<r7=>0xffffffffffffffff})
r8 = dup2(r7, r7)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r9 = gettid()
rt_sigsuspend(&(0x7f0000000040), 0x8)
ptrace$setopts(0x4206, r9, 0x0, 0x0)
tkill(r9, 0xd)
setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x6, @multicast1, 0x0, 0x0, 'wrr\x00', 0x20, 0x9, 0x67}, 0x2c)
ioctl$PERF_EVENT_IOC_RESET(r5, 0x2403, 0x41)
r10 = syz_open_dev$vcsa(&(0x7f0000000340)='/dev/vcsa#\x00', 0xfffffffffffffffb, 0x2)
ioctl$sock_FIOGETOWN(r10, 0x8903, &(0x7f0000000540))

16:24:02 executing program 4:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dc", 0x1c)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000240)={<r3=>0xffffffffffffffff})
geteuid()
ioctl$VT_RELDISP(r3, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getpeername$inet6(r3, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0))
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000500})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:24:03 executing program 2:
r0 = socket(0x10, 0x2, 0x0)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dc", 0x1c)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0)={<r3=>0xffffffffffffffff})
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PPPIOCSDEBUG(r3, 0x40047440, &(0x7f0000000040)=0x7fff)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x0, 0x0, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)
connect$bt_rfcomm(r0, &(0x7f0000000000)={0x1f, {0x6, 0x8, 0x2, 0x2, 0x100000000, 0x1}, 0x100000001}, 0xa)

16:24:03 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0xffffffffffffffff)
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0xc10005, 0x0)
syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)

16:24:03 executing program 0:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, 0x0)
pipe(&(0x7f00000004c0))
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x3000000, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:24:03 executing program 3:
r0 = socket(0x10, 0x0, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getuid()
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r5, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x1f00, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)
fchmod(r3, 0xe5)

16:24:03 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x6, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
write$FUSE_POLL(r0, &(0x7f0000000040)={0xfffffffffffffdf5}, 0xffd6)
read(r0, 0x0, 0x93d85be5)
r1 = socket(0xc, 0x8000b, 0x3)
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffff9c, 0x84, 0x75, &(0x7f0000000000)={<r2=>0x0, 0x40}, &(0x7f0000000080)=0x8)
setsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f00000000c0)={r2, 0x9}, 0x8)

16:24:03 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0)
ioctl$BLKBSZGET(r3, 0x80081270, &(0x7f00000000c0))
getsockopt$inet_sctp6_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f0000000280)={0x0, 0x9, 0x40, 0x800, 0x1, 0x3, 0x1, 0x5, {<r4=>0x0, @in={{0x2, 0x4e23, @rand_addr=0xfffffffffffffd64}}, 0x4, 0x1, 0x6, 0x1, 0x7d1dc805}}, &(0x7f0000000340)=0xb0)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000380)={0x3, 0x4, 0x8, 0x2, r4}, &(0x7f00000003c0)=0x10)
getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4)
syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000100)={0x0, 0xff}, &(0x7f0000000240)=0x8)

16:24:03 executing program 5:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x80000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0)
ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x7, 0x0, 0x8, 0x78c7, 0xffffffffffff8001, 0x2, 0xe3, 0xaa5c, 0x8001, 0x1, 0x8000, 0x8, 0x7}, {0x81, 0x100000000, 0x0, 0x1, 0x9, 0xf44, 0x9, 0x14, 0x0, 0x0, 0x1f, 0x6, 0x2}, {0x9, 0x2, 0x78, 0x100000000, 0x0, 0x7, 0x805, 0x4, 0xc, 0x1, 0x0, 0x3ff, 0x8000}], 0x80})
syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)

16:24:03 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x6, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
write$FUSE_POLL(r0, &(0x7f0000000000)={0x18}, 0x18)
r1 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2)
ioctl$DRM_IOCTL_AUTH_MAGIC(r1, 0x40046411, &(0x7f0000000080)=0xbe)
read(r0, 0x0, 0xffffff00)

16:24:03 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000040)={0x5, 0x6, 0x20})
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)

[ 1768.572848] __nla_parse: 13 callbacks suppressed
[ 1768.572944] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'.
16:24:03 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x6, 0x0)
pipe2(&(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x0)
ioctl$SIOCGETLINKNAME(r1, 0x89e0, &(0x7f0000000080)={0x4, 0x2})
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
write$FUSE_POLL(r0, &(0x7f0000000000)={0x18}, 0x18)
read(r0, 0x0, 0xffffff00)

16:24:03 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video0\x00', 0x2, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpu.stat\x00', 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r3, 0xc0585609, &(0x7f00000000c0)={0x6, 0x0, 0x4, 0x80000000, {}, {0x4, 0xd, 0x3ff, 0xd, 0x7a, 0x5, 'oP;+'}, 0x3, 0x5, @fd=r4, 0x4})
r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r5, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)

16:24:03 executing program 4:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dc", 0x1c)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000240)={<r3=>0xffffffffffffffff})
geteuid()
ioctl$VT_RELDISP(r3, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getpeername$inet6(r3, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0))
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000600})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

[ 1768.873910] protocol 88fb is buggy, dev hsr_slave_0
[ 1768.879240] protocol 88fb is buggy, dev hsr_slave_1
16:24:03 executing program 2:
r0 = socket(0x10, 0x2, 0x0)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dc", 0x1c)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
r2 = socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0))
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'bond_slave_0\x00', 0x9000})
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r3, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x0, 0x0, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:24:03 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x6, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
write$FUSE_POLL(r0, &(0x7f0000000000)={0x18}, 0x18)
writev(r0, &(0x7f0000000400)=[{&(0x7f0000000040)="66a5e4aa83eaec61d414b9213158bc997ca35abb8675b0", 0x17}, {&(0x7f0000000080)="5bfac13f9319d0527f72", 0xa}, {&(0x7f0000000140)="cb9b9de1a40676dc5020eb7df1d83a94acf0eba8930dda8723d953b1d8483ff972f7b6d37738fb6b159b14c5161aac2d710635d614ea1f523dc87877863a3fc1cfd3f0897ff6f689f0cc5e2d387b40aa91e9c8aa1b8bea991d1f3a2af9f6cf8eb395d4127d44a9508906bbe7d3dfbee79dd19319fac5723c29f2f752b4cfc3927cdccc9aa45e7eccc59bdaeb90b83914abbf823b28a31a2b8e2f2f724910fc064c9270be7bee72cb3fda4dcb7e2e803ca2fba6", 0xb3}, {&(0x7f0000000200)="079708e565de1f1391d9761119114143b317496beab16ebc09a908d8e8a40ff392a2510ddd9290fbe2b5212e6b8e653c208530f4ad6c2ab2dd5c3af73636b1f29f6b19605a1dde8650156a6c40deed9e36fd3e0c76b17ed1dcc341789e54653aff6f07f7834b9c88a9633aec97fe85ca750e1143e5c3b5c7aed93bac1b29a8796f6be2299a8ef9a0b55680622c58a3f1d29f668d8d962692bc56050e8778ecc1b3fbb84eaf540a463f7737d84ed2f5eee14e90a511a2831ad82de72eea43c5f7a425dc93ce79d4eb4c", 0xc9}, {&(0x7f0000000300)="acbab8c16a2a414cbe5ed51ee2c46abd27ad5120e714f79ca67b5b76f58dd57e29c205d6285ad318dc896f93956569644731dc8ae7cb8954293f316060e5f1b9d34f83563a64a18534908be59f30dcc20a40494049b8feb8eef0dd1b61135f8f83028af08d5813cadbc16bb1bfd9c69445acaaa3a27e7a1785eb2f336ee5f587d47cef5559f07222906e1f652017c925d3194c3cbaad8b4bcbf7dd36e4ae178e63f8d50ccb0a8d55e04c0230b986a2ba43ec25bae68c75b72890469fb40fad4f653d5b013609e7858456146f51db49", 0xcf}], 0x5)
read(r0, 0x0, 0xffffff00)

16:24:03 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0xfffffffffffffffc, 0x0)
syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
open_by_handle_at(r3, &(0x7f0000000040)={0xaa, 0x1, "18c4b800f0051904edd44a604d2925877b3f23667ab6d2aff54378a74ff53be8322ccb6912a86544d12f5ff1b87a0268dee1cb9049a45aeabe1012b88c65b4355a3f606d0f5442f11a506c332f835faf084e8d311301722a6d138001e8fb6c9cb03ddc777b4e77514d9b8df2af7f45adb04d1e20c7d51dfc7cbdb7786f2920d1d7508ee3eaf99ba09048459584234e9f0c8187b177561a6c8d6ce40d6e53b0664097"}, 0x80)

16:24:03 executing program 3:
r0 = socket(0x10, 0x0, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getuid()
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r5, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x2000, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)
fchmod(r3, 0xe5)

16:24:03 executing program 0:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, 0x0)
pipe(&(0x7f00000004c0))
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x4000000, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

[ 1769.043342] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'.
16:24:04 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)

16:24:04 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x6, 0x0)
ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000040)={0x8, 0x7ff})
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
write$FUSE_POLL(r0, &(0x7f0000000000)={0x18}, 0x18)
read(r0, 0x0, 0xffffff00)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)

[ 1769.169800] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'.
16:24:04 executing program 2:
r0 = socket(0x10, 0x2, 0x0)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dc", 0x1c)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x100000000, 0x3f)
socket$inet6(0xa, 0xf, 0x31)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0xc0a85352, &(0x7f00000002c0)={{0x58, 0x5}, 'port0\x00', 0x8, 0x4, 0x1, 0x7, 0x8004, 0x7fff, 0x4, 0x0, 0x6, 0xfffffffffffff801})
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xd, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0))
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000200)=""/80, 0x50}, {&(0x7f0000000380)=""/189, 0xbd}, {&(0x7f0000000440)=""/88, 0x58}], 0x3, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x0, 0x0, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:24:04 executing program 4:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dc", 0x1c)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000240)={<r3=>0xffffffffffffffff})
geteuid()
ioctl$VT_RELDISP(r3, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getpeername$inet6(r3, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0))
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000700})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:24:04 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)

16:24:04 executing program 0:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, 0x0)
pipe(&(0x7f00000004c0))
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x4030000, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

[ 1769.351770] protocol 88fb is buggy, dev hsr_slave_0
[ 1769.352054] protocol 88fb is buggy, dev hsr_slave_0
[ 1769.356890] protocol 88fb is buggy, dev hsr_slave_1
[ 1769.361891] protocol 88fb is buggy, dev hsr_slave_1
[ 1769.366928] protocol 88fb is buggy, dev hsr_slave_0
[ 1769.376917] protocol 88fb is buggy, dev hsr_slave_1
16:24:04 executing program 3:
r0 = socket(0x10, 0x0, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getuid()
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r5, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x3f00, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)
fchmod(r3, 0xe5)

16:24:04 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x40040, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x4000000000010)
write$FUSE_POLL(r0, &(0x7f0000000000)={0x18}, 0x18)
read(r0, 0x0, 0xffffff00)

[ 1769.535157] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'.
16:24:04 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x600001, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x10201, 0x3, 0x0, 0x1000, &(0x7f000000a000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x4)
r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80000, 0x0)
write$P9_RLOPEN(r4, &(0x7f0000000080)={0x18, 0xd, 0x2, {{0x1, 0x1, 0x6}, 0x2}}, 0x18)
ioctl$PPPIOCGIDLE(r4, 0x8010743f, &(0x7f0000000040))
syz_kvm_setup_cpu$x86(r4, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)

16:24:04 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x2, 0x0)
ioctl$DRM_IOCTL_GET_UNIQUE(r0, 0xc0106401, &(0x7f0000000200)={0xc, &(0x7f0000000080)=""/12})
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000140), &(0x7f0000000180)=0x8)
write$FUSE_POLL(r0, &(0x7f0000000000)={0x18}, 0x18)
r1 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x9, 0x8080)
setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000240)={0x400}, 0x4)
read(r0, 0x0, 0xd3)
r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/zero\x00', 0x40, 0x0)
ioctl$NBD_DO_IT(r2, 0xab03)

16:24:04 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x100, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0)
openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x82000, 0x0)
setsockopt$IP_VS_SO_SET_ZERO(r2, 0x0, 0x48f, &(0x7f0000000080)={0x33, @loopback, 0x4e24, 0x1, 'fo\x00', 0x10, 0x2, 0x6f}, 0x2c)

16:24:04 executing program 1:
r0 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x81, 0x101000)
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$KDSETMODE(r1, 0x4b3a, 0x7f)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x230001, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x2, 0x0)
ioctl$ASHMEM_SET_NAME(r1, 0x41007701, &(0x7f00000000c0)='\x00')
r3 = add_key(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000380)="1bec46c092e2533e729deeab65a8499f5c7d22ac11f513cb66b294c1d6242125dd9d7f2c3763e834417ebdca1ddd5c87b04c5496075c6007f230d819ff227b7adfa752eea93565e541769b8805a290a67a47fefe1ed36caa5e8452910228792c7324e563a327128e755a8fc2e6f6ad3e20dcfbf6795ebd5b75da4b9b17251ca3b442f2c0f31478fe763a4cebdab0c95ee776deb528f3ba3d71802503ab784ce79d8100930ee4b027bff3c8dc0d3dedc4b6e1c24962b40e2a60850ff08522cd2248b7a862819749042518ffbbd91329", 0xcf, 0xfffffffffffffffb)
keyctl$read(0xb, r3, &(0x7f0000000480)=""/130, 0x82)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0xd)
munlockall()
write$FUSE_POLL(r2, &(0x7f0000000000)={0x18}, 0x18)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00')
sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r4, 0x610, 0x70bd2c, 0x25dfdbff, {{}, 0x0, 0x800b, 0x0, {0x8, 0x2, 0xffff}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x10)
read(r0, 0x0, 0xfffffff1)
syz_genetlink_get_family_id$net_dm(&(0x7f0000000140)='NET_DM\x00')

16:24:04 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0)
ustat(0xa4c, &(0x7f0000000040))
syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)

16:24:05 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0xe2040, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)

[ 1770.020604] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'.
16:24:05 executing program 2:
r0 = socket(0x10, 0x2, 0x0)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dc", 0x1c)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
r3 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0))
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x0, 0x0, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)
getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000200)={<r5=>0x0, 0xe2b}, &(0x7f00000002c0)=0x8)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000300)={r5, 0x100000001, 0x6, 0x4850a77b, 0x2, 0x8}, &(0x7f0000000340)=0x14)

16:24:05 executing program 4:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dc", 0x1c)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000240)={<r3=>0xffffffffffffffff})
geteuid()
ioctl$VT_RELDISP(r3, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getpeername$inet6(r3, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0))
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2001300})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:24:05 executing program 1:
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0xd)
write$FUSE_POLL(0xffffffffffffffff, &(0x7f0000000000)={0x18}, 0x18)
read(0xffffffffffffffff, 0x0, 0xffffff00)

16:24:05 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0)
ioctl$RTC_UIE_ON(r3, 0x7003)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'vlan0\x00', <r4=>0x0})
setsockopt$packet_drop_memb(r3, 0x107, 0x2, &(0x7f0000000080)={r4, 0x1, 0x6}, 0x10)
syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)

16:24:05 executing program 0:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, 0x0)
pipe(&(0x7f00000004c0))
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x5000000, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:24:05 executing program 3:
r0 = socket(0x10, 0x0, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getuid()
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r5, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x4000, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)
fchmod(r3, 0xe5)

[ 1770.279015] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'.
16:24:05 executing program 5:
r0 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000080)=0x1c, 0x800)
fchdir(r0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0xfffffffffffffffa, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_GET_API_VERSION(r1, 0xae00, 0x0)
r4 = syz_open_dev$dspn(&(0x7f00000002c0)='/dev/dsp#\x00', 0x9, 0x101000)
ioctl$SG_GET_SCSI_ID(r4, 0x2276, &(0x7f0000000300))
r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0)
r6 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000180)="1cceb357ab00a244e24f0352ace0fddd783f4bbb43ad695f0adc236a522415e315d41a956a8737e561a1c703aac46558bf4491aa27d4e5243b3ab807", 0x3c, 0xfffffffffffffff8)
r7 = add_key(&(0x7f0000000200)='cifs.idmap\x00', &(0x7f0000000240)={'syz', 0x1}, &(0x7f0000000280)="4916654106e8688c86dddebdb287f9ec1cdc8a1c7685e0", 0x17, 0xfffffffffffffff8)
keyctl$negate(0xd, r6, 0x7, r7)
ioctl$VHOST_SET_VRING_ERR(r5, 0x4008af22, &(0x7f00000001c0)={0x3, r5})
syz_kvm_setup_cpu$x86(r5, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)

16:24:05 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x6, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
write$FUSE_POLL(r0, &(0x7f0000000000)={0x18}, 0x18)
read(r0, 0x0, 0x100000096)
r1 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2)
connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e20, @remote}, 0x2, 0x3, 0x3, 0x1}}, 0x2e)

16:24:05 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x200000, 0x0)

[ 1770.436891] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'.
16:24:05 executing program 4:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dc", 0x1c)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000240)={<r3=>0xffffffffffffffff})
geteuid()
ioctl$VT_RELDISP(r3, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getpeername$inet6(r3, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0))
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2003f00})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:24:05 executing program 3:
r0 = socket(0x10, 0x0, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getuid()
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r5, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x8906, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)
fchmod(r3, 0xe5)

16:24:05 executing program 2:
r0 = socket(0x10, 0x2, 0x0)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dc", 0x1c)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x7, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x1ffffffffffffffe, 0xffffffffffffff9c, 0x8)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0))
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000000})
openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x20800, 0x0)
ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffc000/0x4000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x0, 0x0, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:24:05 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x28000, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
write$FUSE_POLL(r0, &(0x7f0000000000)={0x18}, 0x18)
ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000040)={0x5b, 0x6, 0x4, 0x5})
r1 = open(&(0x7f0000000080)='./file0\x00', 0x10000, 0x2a)
read(r0, 0x0, 0xffffff00)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
accept4(r1, &(0x7f0000000180)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000200)=0x80, 0x800)

16:24:05 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0xf401, 0x0, @remote={0xac, 0x1c}, @local}, @igmp={0x3, 0x0, 0x0, @broadcast}}}}}, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)

16:24:05 executing program 0:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, 0x0)
pipe(&(0x7f00000004c0))
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x6000000, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

[ 1770.796390] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'.
16:24:05 executing program 5:
r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0)
ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000040)={0x12, @sliced={0x9, [0xfffffffffffffffc, 0x8, 0x23dd, 0xe23, 0x81, 0x2, 0x3, 0x7fffffff, 0x3, 0x80000001, 0x7, 0x9, 0x8, 0x8000, 0x2, 0x400, 0x5, 0x3e, 0x4, 0x1, 0x59, 0x4, 0x765a, 0x3f, 0xcf4, 0x80000000, 0x54, 0x5, 0xfffffffffffffff9, 0x7, 0x0, 0x2, 0x0, 0x2, 0x81, 0xfffffffffffffff8, 0x664, 0xc9b, 0x42de981, 0xd7, 0x4, 0x3ff, 0x7, 0xa1, 0x1000, 0x72ad42db, 0x800, 0x3], 0xebf}})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$EVIOCSABS3F(r0, 0x401845ff, &(0x7f0000000180)={0x8, 0x80, 0x80, 0xa8c4, 0x80000001, 0x3})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)

16:24:05 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x6, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
write$FUSE_POLL(r0, &(0x7f0000000000)={0x18}, 0x18)
read(r0, 0x0, 0xffffff00)
ioctl$VIDIOC_G_AUDOUT(r0, 0x80345631, &(0x7f0000000040))

16:24:05 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_HYPERV_EVENTFD(r3, 0x4018aebd, &(0x7f0000000040)={0x2, r3})

[ 1771.084274] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'.
16:24:06 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x6, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video1\x00', 0x2, 0x0)
write$FUSE_POLL(r0, &(0x7f0000000000)={0x18}, 0x18)
read(r0, 0x0, 0xbd)
r1 = dup(r0)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f0000000040))

16:24:06 executing program 4:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dc", 0x1c)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000240)={<r3=>0xffffffffffffffff})
geteuid()
ioctl$VT_RELDISP(r3, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getpeername$inet6(r3, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0))
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2004000})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:24:06 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0)
ioctl$KVM_DEASSIGN_PCI_DEVICE(r1, 0x4040ae72, &(0x7f0000000040)={0x7f, 0x8, 0x4, 0x0, 0x7fff})
syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)

16:24:06 executing program 2:
r0 = socket(0x2, 0x2, 0x0)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dc", 0x1c)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0))
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x0, 0x0, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:24:06 executing program 3:
r0 = socket(0x10, 0x0, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getuid()
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r5, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x40000, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)
fchmod(r3, 0xe5)

16:24:06 executing program 0:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, 0x0)
pipe(&(0x7f00000004c0))
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x7000000, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

[ 1771.337587] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'.
16:24:06 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x6, 0x0)
perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, 0x0)
ioctl$SCSI_IOCTL_START_UNIT(0xffffffffffffffff, 0x5)
r1 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
setxattr$trusted_overlay_opaque(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='trusted.overlay.opaque\x00', &(0x7f0000000340)='y\x00', 0x2, 0x3)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-avx\x00'}, 0x58)
r5 = accept4$alg(r4, 0x0, 0x0, 0x0)
write$binfmt_elf64(r3, &(0x7f0000000040)=ANY=[], 0xfffffdea)
splice(r2, 0x0, r5, 0x0, 0x2000000000a, 0x0)
mprotect(&(0x7f0000104000/0x3000)=nil, 0x3000, 0x0)
r6 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x400000, 0x0)
getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r6, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000140)=0x4)
getsockopt$IP_VS_SO_GET_VERSION(r4, 0x0, 0x480, &(0x7f0000000200), &(0x7f0000000240)=0x40)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000040)=0x9)
ioctl$KDADDIO(r0, 0x4b34, 0x3d0d)
write$FUSE_POLL(r0, &(0x7f0000000000)={0x18}, 0x18)
read(r5, 0x0, 0x0)

16:24:06 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0)
getsockopt$IPT_SO_GET_INFO(r2, 0x0, 0x40, &(0x7f00000000c0)={'raw\x00'}, &(0x7f0000000180)=0x54)
ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f0000000080)={0xfffffffeffffffff, 0x3})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000680)={{0x2, 0x6, 0x401, 0x0, 'syz1\x00', 0x100000000}, 0x0, [0xfffffffffffffe75, 0x5, 0x7, 0x7f, 0x7, 0x4, 0x2, 0x10000, 0x7, 0x1, 0xa500, 0x3, 0x0, 0x0, 0x7, 0xde, 0x8, 0x4, 0x5afeaa93, 0x4249, 0xffe000000000000, 0x3, 0x100, 0x3, 0x10001, 0x4, 0x100000000, 0x18c, 0xfffffffffffff963, 0x0, 0x8, 0x7, 0x0, 0x6, 0x2, 0x8, 0x3, 0x3, 0xfffffffffffffffa, 0x7, 0x3, 0x7, 0x0, 0xfb, 0x5, 0x1f, 0x9, 0x100000001, 0x6e2e1d9c, 0x8, 0x6, 0x8a7, 0x72c, 0x100000001, 0x0, 0x8, 0x80000000, 0x1f, 0x5a, 0xffffffffffffff3b, 0x19, 0x8, 0x5, 0x3, 0x8, 0x2, 0xdcd9, 0x0, 0x9, 0xfffffffffffffff8, 0x7, 0xe94, 0xf9, 0x40, 0x14c, 0x23, 0x5, 0x6c1ce483, 0x0, 0xa4c4, 0x5, 0x800, 0xffffffff, 0xdae, 0x8001, 0xffffffffffff0000, 0x8, 0x401, 0x100000000, 0x3f, 0xffffffff00000000, 0x4, 0x3, 0x8, 0x100000000, 0x7, 0x22, 0x0, 0x9, 0x81, 0x3b, 0x9, 0x4, 0x3, 0x6, 0x6, 0x2, 0x800, 0x9, 0x5, 0x6, 0x6, 0x3, 0x0, 0x0, 0x6, 0x9, 0x9, 0x6, 0xb7, 0xffffffff80000001, 0x0, 0x401, 0x0, 0x3880000000000000, 0x7, 0x5, 0x80000000], {0x0, 0x989680}})
socket$inet6(0xa, 0x80004, 0x80000001)
r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f00000001c0))
getsockopt$MISDN_TIME_STAMP(r2, 0x0, 0x1, &(0x7f00000002c0), &(0x7f0000000300)=0x4)

16:24:06 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x2, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = open(&(0x7f0000000480)='./file0\x00', 0x400000, 0x88)
ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000500)={0x2, &(0x7f00000004c0)=[{}, {<r3=>0x0}]})
ioctl$DRM_IOCTL_SET_SAREA_CTX(r2, 0x4010641c, &(0x7f0000000640)={r3, &(0x7f0000000540)=""/233})
socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x3d1a82, 0x0)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00')
r6 = msgget(0x3, 0x100)
msgctl$MSG_INFO(r6, 0xc, &(0x7f0000000400)=""/79)
sendmsg$TIPC_NL_MEDIA_SET(r4, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB="fb02ee3bd6eb51c0413b93445a032f77d351ca6a198a5816424bfc1159f8a0b5dd81201512081a861752ce58dd371182c1c36e7cb2341bbda6486318bf88fa4098af6f58808e9ff57cf2beb396bd8c4b234f98b14c7298bbfd979c0e00adbdbfc7048a2c08a2fcc9bf2bed", @ANYRES16=r5, @ANYBLOB="220027bd7000fbdbdf250c0000000c00060008000100050000000c00020008000200ffffffff"], 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x1)
r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000740)='IPVS\x00')
sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f0000000800)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x401a04}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x40, r8, 0x303, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xc8}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x3e}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x4000)
r9 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x8000, 0x0)
ioctl$TIOCGWINSZ(r9, 0x5413, &(0x7f00000000c0))
syz_open_dev$vbi(&(0x7f0000000840)='/dev/vbi#\x00', 0x2, 0x2)
write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000340)={<r10=>0xffffffffffffffff}, 0x13f, 0x1009}}, 0x20)
write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r9, &(0x7f00000003c0)={0xb, 0x10, 0xfa00, {&(0x7f0000000280), r10, 0x3}}, 0x18)
r11 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r11, r7, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)

16:24:06 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0xa00, 0x0)
ioctl$KVM_GET_PIT2(r1, 0x8070ae9f, &(0x7f0000000180))
ioctl$EVIOCGPROP(r2, 0x80404509, &(0x7f0000000080)=""/82)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet(0x2, 0x3, 0x2)
ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, 0x0)
setsockopt$inet_int(r3, 0x0, 0xd, &(0x7f0000000000), 0x10)
r4 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
pwritev(r4, 0x0, 0xffffffffffffff7d, 0x0)
open(0x0, 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
prctl$PR_GET_KEEPCAPS(0x7)
r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r6, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)

16:24:06 executing program 1:
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/mixer\x00', 0x42, 0x0)
r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qat_adf_ctl\x00', 0x44000, 0x0)
connect$l2tp(r0, &(0x7f0000000200)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x2, 0x3, 0x4, 0x2, {0xa, 0x4e24, 0x8, @loopback, 0x638b2175}}}, 0x32)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x6, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0xd)
r3 = dup3(r2, r2, 0x80000)
r4 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x2e000000000000, 0x80)
write$FUSE_POLL(r4, &(0x7f0000000000)={0x18, 0xffffffffffffffff, 0x0, {0x3}}, 0x18)
read(r2, 0x0, 0xffffff00)
r5 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x6, 0x40)
ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r3, 0x5386, &(0x7f0000000140))
fcntl$addseals(r5, 0x409, 0x2)
ioctl$KVM_GET_XCRS(r5, 0x8188aea6, &(0x7f0000000080)={0x1, 0x6, [{0x6, 0x0, 0x6}]})

16:24:06 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x3, &(0x7f0000000180)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2f, 0xffffffb5, 0x100000, 0xfc03000000000000, 0xc2000000}}, &(0x7f00000001c0)='syzkaller\x00', 0x1, 0x172, &(0x7f0000000080)=""/195, 0x0, 0x0, [0x42]}, 0x48)

16:24:06 executing program 4:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dc", 0x1c)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000240)={<r3=>0xffffffffffffffff})
geteuid()
ioctl$VT_RELDISP(r3, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getpeername$inet6(r3, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0))
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2006503})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:24:06 executing program 1:
syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x5c1a, 0x41)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x6, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd)
write$FUSE_POLL(r0, &(0x7f0000000000)={0x18}, 0x18)
read(r0, 0x0, 0xffffff00)

16:24:06 executing program 3:
r0 = socket(0x10, 0x0, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getuid()
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r5, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x1000000, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)
fchmod(r3, 0xe5)

16:24:07 executing program 2:
r0 = socket(0x10, 0x2, 0x0)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dc", 0x1c)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
r3 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r5, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r5, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000000000)={<r6=>0x0, 0x3, 0x1ff}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f00000002c0)={<r7=>0x0, @in={{0x2, 0x4e20, @broadcast}}, 0x2, 0x1ff, 0x4, 0x70, 0x5}, &(0x7f0000000200)=0x98)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000380)={r6, 0xffffffffffffffff, 0xab, 0x4, 0xcd, 0x244163dc, 0x4, 0x8, {r7, @in={{0x2, 0x4e24, @loopback}}, 0x8, 0x8, 0x8001, 0x9, 0x3}}, &(0x7f0000000440)=0xb0)
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x0, 0x0, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:24:07 executing program 0:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, 0x0)
pipe(&(0x7f00000004c0))
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x8000000, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:24:07 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x3, &(0x7f0000000180)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2f, 0xffffffb5, 0x100000, 0xfc03000000000000, 0xc2000000}}, &(0x7f00000001c0)='syzkaller\x00', 0x1, 0x172, &(0x7f0000000080)=""/195, 0x0, 0x0, [0x42]}, 0x48)

16:24:07 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x6, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xb)
write$FUSE_POLL(r0, &(0x7f0000000000)={0x18}, 0x18)
r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x600, 0x0)
sendto$inet(r1, &(0x7f0000000140)="888023bf73f81d63fbdb7d6fa78fee97d2b5f08f9fe28c9a1b68fcadec953f949de60ab8b7732d3550aff0e1f6071d93f36b60a298f59e74d16dce3a54f9099bdad2d68d24139ea6864add0f8d4fd5d6678ca27fe885dfb9f8c91ac94db58295b406eae97b08019d8976aa6b67d304574f6b51935cacb86c418c446b95062c30ca1ee34baa025793443682dbd8218ade207e12c115", 0x95, 0x84, &(0x7f0000000080)={0x2, 0x4e23, @multicast2}, 0x10)
read(r0, 0x0, 0xffffff00)

16:24:07 executing program 5:
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000140)={0x1, 0x100000001}, 0x375)
listen(r0, 0x7)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
close(r2)

16:24:07 executing program 1:
r0 = openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
fsetxattr$security_smack_entry(r0, &(0x7f00000000c0)='security.SMACK64\x00', &(0x7f0000000180)='vboxnet0\x00', 0x9, 0x3)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x80200, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0xd)
write$FUSE_POLL(r1, &(0x7f0000000000)={0x18}, 0x18)
ioctl$TIOCMGET(r1, 0x5415, &(0x7f0000000040))
read(r1, 0x0, 0xffffff00)

16:24:07 executing program 4:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dc", 0x1c)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000240)={<r3=>0xffffffffffffffff})
geteuid()
ioctl$VT_RELDISP(r3, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getpeername$inet6(r3, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0))
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x3000000})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:24:07 executing program 0:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, 0x0)
pipe(&(0x7f00000004c0))
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0xa060000, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:24:07 executing program 3:
r0 = socket(0x10, 0x0, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getuid()
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r5, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x2000000, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)
fchmod(r3, 0xe5)

16:24:07 executing program 2:
r0 = socket(0x10, 0x2, 0x0)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dc", 0x1c)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={<r2=>0x0, r1, 0x0, 0x11, &(0x7f0000000480)='cgroup@-keyring*\x00'}, 0x30)
r3 = perf_event_open(0x0, r2, 0xc, 0xffffffffffffffff, 0x2)
sendmsg$nl_netfilter(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x14c}, 0x1, 0x0, 0x0, 0x20000001}, 0x80)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
r4 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_ENDIAN(r4, 0x4008af13, &(0x7f00000002c0)={0x3, 0x7})
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0)={<r5=>0xffffffffffffffff})
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8e]})
ioctl$sock_inet6_SIOCSIFADDR(r6, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r6, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r3, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
r7 = gettid()
write$P9_RGETLOCK(r5, &(0x7f0000000440)={0x24, 0x37, 0x2, {0x1, 0x8, 0x1, r7, 0x6, '/@#@-\x84'}}, 0x24)
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x0, 0x0, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:24:07 executing program 5:
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x3, &(0x7f0000000180)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2f, 0xffffff97, 0x100000, 0x0, 0xc2000000}}, &(0x7f00000001c0)='syzkaller\x00', 0x1, 0x172, &(0x7f0000000080)=""/195, 0x0, 0x0, [0x42]}, 0x48)

16:24:07 executing program 5:
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x3, &(0x7f0000000180)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2f, 0xffffffd5, 0x100000, 0x0, 0xc2000000}}, &(0x7f00000001c0)='syzkaller\x00', 0x1, 0x172, &(0x7f0000000080)=""/195, 0x0, 0x0, [0x42]}, 0x48)

16:24:07 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00', 0x2d})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$UI_DEV_DESTROY(r0, 0x5502)
dup(r1)

16:24:07 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00', 0x2d})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$UI_DEV_DESTROY(r0, 0x5502)
dup(r1)

[ 1772.856630] input: syz0 as /devices/virtual/input/input16
[ 1772.883030] input: syz0 as /devices/virtual/input/input17
[ 1772.954021] input: syz0 as /devices/virtual/input/input18
16:24:07 executing program 3:
r0 = socket(0x10, 0x0, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getuid()
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r5, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x3000000, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)
fchmod(r3, 0xe5)

16:24:08 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00', 0x2d})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$UI_DEV_DESTROY(r0, 0x5502)
dup(r1)

[ 1773.032072] net_ratelimit: 16 callbacks suppressed
[ 1773.032079] protocol 88fb is buggy, dev hsr_slave_0
[ 1773.042213] protocol 88fb is buggy, dev hsr_slave_1
16:24:08 executing program 4:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dc", 0x1c)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000240)={<r3=>0xffffffffffffffff})
geteuid()
ioctl$VT_RELDISP(r3, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getpeername$inet6(r3, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0))
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x4000000})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

[ 1773.084795] input: syz0 as /devices/virtual/input/input19
16:24:08 executing program 1:
r0 = syz_open_dev$cec(&(0x7f00000002c0)='/dev/cec#\x00', 0x1, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xb)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffff9c, 0x84, 0x7b, &(0x7f00000000c0)={<r2=>0x0, 0x400}, &(0x7f0000000140)=0x8)
getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000180)={0x40, 0x7, 0x8401, 0x6, <r3=>r2}, &(0x7f00000001c0)=0x10)
setsockopt$inet_sctp_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f0000000000)=r3, 0x4)
read(0xffffffffffffffff, 0x0, 0xffffff00)
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40106614, &(0x7f0000000040)={0x0, @speck128})
setsockopt$RDS_GET_MR(r1, 0x114, 0x2, &(0x7f0000000280)={{&(0x7f0000000200)=""/7, 0x7}, &(0x7f0000000240), 0x22}, 0x20)

16:24:08 executing program 0:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, 0x0)
pipe(&(0x7f00000004c0))
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x13000000, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:24:08 executing program 2:
r0 = socket(0x10, 0x2, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@loopback}, 0x0, @in=@loopback}}, &(0x7f0000000200)=0xe8)
sendmsg$nl_generic(r0, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000580)={0x24c, 0x1b, 0x20, 0x70bd2b, 0x25dfdbfe, {0x4}, [@generic="cc62cd5795acacbbd25746012a1d19f106a82e0e99e7a1f0cb975f26ef65db40ef56fe4d012e89ce269c374ce157ba3f13f4cf74dae84aa2e1d9773eda349488281ccd4cb078c9835204daaf5a593606ffc2e280a2799748b849c445f8526cf62e58dc905734ab80a8e99d922dd1415af06f80da07e3d3f5a0a1613a99498e01c383f8bc52a06814f7daebe25dab0e07da86be94054a97d2e7aed2b57f9e7c52ccd3037cb1483dbf935ebfab8e39062739532bb4f4374b95e4783fa56a07ad2273e4cdb9e478f710a9edca", @typed={0x8, 0x33, @uid=r1}, @generic="cc894d3b042502a1fb14efbaab5166dc2d99cb2bc8132098d002a22d945e457794b8f350c7b934e510396e4fe35e188523f29380f49759eb9b8b5940df202d464d3113c219200885c5213d8bac82cc1cf7915704bb12d8c792844989c8c5a8f8d79ab448eea5a6f352a1", @generic="a15ff8b7898890943e0ab2fe051f30c1113ba67a18e4dc20f603c1215f7d84c32974b1a8de38e4a86ce203385e891d36f810f612268c4937104ed773c13553ca7b60e9", @generic="76aeaab7d4e812649927f32cffa7700e11b14d375d40341f76daa723c641b4be928712225e6f7af9913f315c87254acb654e2af2028477a79077789f4e039ff6585acf7e4d339f315895673f452bded804b87317095efb58de60d92dd9ab70efbbf2ab4ab7d48b47446c894493c24c11230d3ae64f94c863a00a488142052ee25a24d27fb481affba5f639b5f51d9ce3dacf840ff23ec4f5d5a583fe0b6c5ed4e9cb873179bd89fe", @typed={0x10, 0x61, @str='/dev/vcsa#\x00'}]}, 0x24c}, 0x1, 0x0, 0x0, 0x40010}, 0x40810)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dc", 0x1c)
r2 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r2, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$SG_GET_KEEP_ORPHAN(r2, 0x2288, &(0x7f0000000000))
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r3, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x50, r2, 0x0)
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x0, 0x0, &(0x7f0000000080))
ioctl(r2, 0x4161, 0x0)

16:24:08 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00', 0x2d})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$UI_DEV_DESTROY(r0, 0x5502)
dup(r1)

16:24:08 executing program 3:
r0 = socket(0x10, 0x0, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getuid()
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r5, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x4000000, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)
fchmod(r3, 0xe5)

[ 1773.382816] input: syz0 as /devices/virtual/input/input20
16:24:08 executing program 2:
r0 = socket(0x10, 0x2, 0x0)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dc", 0x1c)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
sendfile(r0, r0, &(0x7f0000000000), 0x3242)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
timerfd_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, &(0x7f0000000200))
pipe(&(0x7f00000004c0))
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@ipv4={[], [], @initdev={0xac, 0x1e, 0x1, 0x0}}, @loopback, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x0, 0x0, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:24:08 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x6, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x8)
semget$private(0x0, 0x4, 0x400)
write$FUSE_POLL(r0, &(0x7f0000000000)={0x18}, 0x18)
read(r0, 0x0, 0xffffff00)

16:24:08 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00', 0x2d})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$UI_DEV_DESTROY(r0, 0x5502)

[ 1773.511824] protocol 88fb is buggy, dev hsr_slave_0
[ 1773.511877] protocol 88fb is buggy, dev hsr_slave_0
[ 1773.516960] protocol 88fb is buggy, dev hsr_slave_1
[ 1773.521989] protocol 88fb is buggy, dev hsr_slave_1
[ 1773.527063] protocol 88fb is buggy, dev hsr_slave_0
[ 1773.537055] protocol 88fb is buggy, dev hsr_slave_1
[ 1773.542220] protocol 88fb is buggy, dev hsr_slave_0
[ 1773.547309] protocol 88fb is buggy, dev hsr_slave_1
16:24:08 executing program 4:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dc", 0x1c)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000240)={<r3=>0xffffffffffffffff})
geteuid()
ioctl$VT_RELDISP(r3, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getpeername$inet6(r3, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0))
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x5000000})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

[ 1773.626543] input: syz0 as /devices/virtual/input/input21
16:24:08 executing program 0:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, 0x0)
pipe(&(0x7f00000004c0))
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x28030000, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:24:08 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x6, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
r1 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb)
keyctl$KEYCTL_PKEY_QUERY(0x18, r1, 0x0, &(0x7f00000000c0)='posix_acl_access{&self)-bdev{\x00', &(0x7f0000000140))
write$FUSE_POLL(r0, &(0x7f0000000000)={0x18, 0x0, 0xfffffffffffffffd}, 0x18)
read(r0, 0x0, 0xffffff00)

16:24:08 executing program 2:
r0 = socket(0x10, 0x2, 0x0)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dc", 0x1c)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
r3 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0))
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_inet_SIOCGARP(r3, 0x8954, &(0x7f0000000000)={{0x2, 0x4e20, @remote}, {0x7, @dev={[], 0x28}}, 0x20, {0x2, 0x4e23, @broadcast}, 'ip6gretap0\x00'})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
r5 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r5, 0xc0505510, &(0x7f0000000380)={0x7, 0x3, 0x473, 0x4, &(0x7f00000002c0)=[{}, {}, {}]})
migrate_pages(0x0, 0x0, 0x0, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:24:08 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00', 0x2d})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$UI_DEV_DESTROY(r0, 0x5502)

[ 1773.815493] __nla_parse: 7 callbacks suppressed
[ 1773.815503] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 1773.896991] input: syz0 as /devices/virtual/input/input22
16:24:08 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00', 0x2d})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
ioctl$UI_DEV_DESTROY(r0, 0x5502)

[ 1773.984663] input: syz0 as /devices/virtual/input/input23
16:24:09 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x6, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x40, 0x0)
r2 = mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000000, 0x11, 0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffff9c, 0xc018620b, &(0x7f0000000140)={<r3=>0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x8c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {{0x4, 0x0, 0x2, 0x0, 0x11, 0x0, 0x0, 0x30, 0x10, &(0x7f0000000080)=[@fd={0x66642a85, 0x0, r0, 0x0, 0x2}, @fd={0x66642a85, 0x0, r0, 0x0, 0x4}], &(0x7f00000000c0)=[0x28, 0x78]}, 0x1ff}}, @release={0x40046306, 0x3}, @decrefs, @increfs_done={0x40106308, r2, 0x1}, @release={0x40046306, 0x3}, @increfs_done={0x40106308, r3, 0x3}], 0xe1, 0x0, &(0x7f0000000240)="ff8b736a511ed9256300f9a8659015e147b9a4912d18ae6e8c45acd6ad6ba887fb9a331ee1ad504aa6b42fb1d614526035c9f283c013e68603b7b8d1d2ce6fa88f16c4d56199c2b693decccf405ef30fbe010d815f8a0aa4eecec1a0adbe1790107d0a76264bc4fe3fa931ffe2b7c3e04140b09fc8fac4e42a7788a805f4c513333e5e446a5fab1a93dbb655fc92adbc8aa34e105df5df5a69d3c73d2994b2c80104e7956c21c771393edc2641c54aaa0e97582f40e6ad0dd6d82fe008f87eea9afbbae163197c591d5cc100184c8537ea6c4e81bb4f00b15b7b258cbeb0f7ef2b"})
write$FUSE_POLL(r0, &(0x7f0000000000)={0x18}, 0x18)
read(r0, 0x0, 0xffffff00)

16:24:09 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00', 0x2d})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
ioctl$UI_DEV_DESTROY(r0, 0x5502)

16:24:09 executing program 3:
r0 = socket(0x10, 0x0, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getuid()
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r5, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x5000000, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)
fchmod(r3, 0xe5)

16:24:09 executing program 4:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dc", 0x1c)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000240)={<r3=>0xffffffffffffffff})
geteuid()
ioctl$VT_RELDISP(r3, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getpeername$inet6(r3, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0))
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x6000000})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

[ 1774.107628] input: syz0 as /devices/virtual/input/input24
16:24:09 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00', 0x2d})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
ioctl$UI_DEV_DESTROY(r0, 0x5502)

[ 1774.273079] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 1774.348395] input: syz0 as /devices/virtual/input/input25
16:24:09 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
write$FUSE_POLL(r0, &(0x7f0000000000)={0x18}, 0x18)
read(r0, 0x0, 0xffffff00)

16:24:09 executing program 0:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, 0x0)
pipe(&(0x7f00000004c0))
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x34000000, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:24:09 executing program 2:
r0 = socket(0x10, 0x2, 0x0)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dc", 0x1c)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0))
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f0000000200)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000000})
ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000040))
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x2000, 0x0)
ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x0, 0x0, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:24:09 executing program 3:
r0 = socket(0x10, 0x0, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getuid()
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r5, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x6000000, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)
fchmod(r3, 0xe5)

16:24:09 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00', 0x2d})
syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$UI_DEV_DESTROY(r0, 0x5502)

[ 1774.513306] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'.
16:24:09 executing program 4:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dc", 0x1c)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000240)={<r3=>0xffffffffffffffff})
geteuid()
ioctl$VT_RELDISP(r3, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getpeername$inet6(r3, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0))
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x7000000})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:24:09 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x6, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
write$FUSE_POLL(r0, &(0x7f0000000000)={0x18}, 0x18)
pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x800)
ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000040)={0x9, 0x5a85, 0x3f, 0xffff, 0xb11, 0x10000})
write$P9_RXATTRCREATE(r1, &(0x7f0000000080)={0x7, 0x21, 0x2}, 0x7)
read(r0, 0x0, 0xffffff00)
ioctl$KDDELIO(r0, 0x4b35, 0x20)

16:24:09 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00', 0x2d})
syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$UI_DEV_DESTROY(r0, 0x5502)

16:24:09 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x6, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
write$FUSE_POLL(r0, &(0x7f0000000000)={0x18}, 0x18)
r1 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x9b, 0x4040)
ioctl$CAPI_MANUFACTURER_CMD(r1, 0xc0104320, &(0x7f0000000080)={0x6, &(0x7f0000000140)="e145738de7ed5cf711c8928a7cca17fab22379e095a686cdb4c11812dc4126ced5d8620f177074a57c7bea599bde18eef5323a66f40e297655106e453c5b09c1b72275c596e4c0e58443d3e1183ad8cb9d0aac2e5abe2fcfbacba47709078f67fefe1d8cc01469a48b96fd9143c22dbe90f6e086ec34414f9000ca1485b0f5159d5221000b789f866aded215b78e10df7a414acfb7003f2f70daf9c3ced34a73adf29a96f1c6e5a4a3e4f9ed7c468d592ffb55c1a6dde7b8cb165ab439aec4c9f6484d50c2d628c6f716f1c93d91e39b832613d71781f176b9df4be1cc7ed20cce05fb9dc2e4"})
read(r0, 0x0, 0xffffff00)
write$input_event(r1, &(0x7f00000000c0)={{0x0, 0x2710}, 0x7, 0x9665, 0xff}, 0x18)

16:24:09 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00', 0x2d})
syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$UI_DEV_DESTROY(r0, 0x5502)

[ 1774.808839] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'.
16:24:09 executing program 2:
r0 = socket(0x10, 0x2, 0x0)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dc", 0x1c)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0)={<r3=>0xffffffffffffffff})
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
accept$packet(r3, &(0x7f0000000400)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000440)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000000, r5})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
setsockopt$packet_buf(r2, 0x107, 0x17, &(0x7f0000000000)="72df3d", 0x3)
migrate_pages(0x0, 0x0, 0x0, &(0x7f0000000080))
r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00')
sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x88, r6, 0x800, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x949a}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xfe000}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xffffffff}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x10001}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_hsr\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0xfffffffffffffff7}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x8080}, 0x8040)
ioctl(r1, 0x4161, 0x0)

16:24:09 executing program 0:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, 0x0)
pipe(&(0x7f00000004c0))
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x38010000, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:24:09 executing program 3:
r0 = socket(0x10, 0x0, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getuid()
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r5, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x7000000, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)
fchmod(r3, 0xe5)

16:24:09 executing program 4:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dc", 0x1c)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000240)={<r3=>0xffffffffffffffff})
geteuid()
ioctl$VT_RELDISP(r3, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getpeername$inet6(r3, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0))
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x8000000})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

[ 1775.003834] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'.
16:24:10 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x6, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
write$FUSE_POLL(r0, &(0x7f0000000000)={0x18}, 0x18)
syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x8, 0x0)
read(r0, 0x0, 0xffffff00)

16:24:10 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$UI_DEV_DESTROY(r0, 0x5502)

16:24:10 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$UI_DEV_DESTROY(r0, 0x5502)

[ 1775.206044] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'.
16:24:10 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$UI_DEV_DESTROY(r0, 0x5502)

16:24:10 executing program 1:
r0 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0xf4ff, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r0, 0x800455d1, &(0x7f0000000080))
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x6, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x4)
write$FUSE_POLL(r1, &(0x7f0000000000)={0x18}, 0x18)
read(r1, 0x0, 0xffffff00)

16:24:10 executing program 2:
r0 = socket(0x10, 0x2, 0x0)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dc", 0x1c)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0))
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
shutdown(r3, 0x0)
migrate_pages(0x0, 0x0, 0x0, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:24:10 executing program 5:
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000080)={{}, 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00', 0x2d})
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0)
syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502)

16:24:10 executing program 0:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, 0x0)
pipe(&(0x7f00000004c0))
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x3f000000, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:24:10 executing program 4:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dc", 0x1c)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000240)={<r3=>0xffffffffffffffff})
geteuid()
ioctl$VT_RELDISP(r3, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getpeername$inet6(r3, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0))
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x9000000})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:24:10 executing program 3:
r0 = socket(0x10, 0x0, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getuid()
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r5, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x8000000, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)
fchmod(r3, 0xe5)

16:24:10 executing program 1:
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)={0x0, <r0=>0x0})
prctl$PR_SET_PTRACER(0x59616d61, r0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x6, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xd)
write$FUSE_POLL(r1, &(0x7f0000000000)={0x18}, 0x18)
read(r1, 0x0, 0xffffff00)

[ 1775.592588] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'.
16:24:10 executing program 5:
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000080)={{}, 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00', 0x2d})
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0)
syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502)

16:24:10 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x6, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
write$FUSE_POLL(r0, &(0x7f0000000000)={0x18}, 0x18)
openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x800, 0x0)
read(r0, 0x0, 0xffffff00)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x800, 0x0)
ioctl$CAPI_GET_FLAGS(r1, 0x80044323, &(0x7f0000000080))

[ 1775.798795] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'.
16:24:10 executing program 5:
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000080)={{}, 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00', 0x2d})
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0)
syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502)

16:24:10 executing program 2:
r0 = socket(0x10, 0x2, 0x0)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dc", 0x1c)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$key(0xf, 0x3, 0x2)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
r3 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0))
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
setsockopt$inet_sctp_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000000)=0x89f9, 0x4)
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x0, 0x0, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:24:10 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x6, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x2002, 0x0)
r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00')
pread64(r0, &(0x7f0000000280)=""/109, 0x6d, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000180))
ioctl$TCSBRKP(r0, 0x5425, 0x1f)
openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/dlm-control\x00', 0x0, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x202000}, 0xc, &(0x7f0000000200)={&(0x7f00000017c0)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="080027bd7000fcdbdf2501000000080006000800000014000100fe88000000000000000000000000010108000500030000000800063b5c0ce155c400ff0000000800050002000000080005000100009d0024e509b33d000c00040000000000080000000800040008000000"], 0x64}, 0x1, 0x0, 0x0, 0x8800}, 0x4)
ioctl$TCSETAW(r0, 0x5407, &(0x7f0000001840)={0x800, 0x0, 0x2, 0xed3, 0x7, 0xdd3, 0xde92, 0x6, 0x8001, 0x8})
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x48)
ioctl$VIDIOC_SUBDEV_S_CROP(r3, 0xc038563c, &(0x7f0000000040)={0x1, 0x0, {0x7fffffff, 0x3f, 0xfd3c, 0x59}})
read(r0, 0x0, 0xffffff00)
writev(r0, &(0x7f0000001740)=[{&(0x7f0000000340)="abcc0dc68f7333bc478e630db6219cc82ee4160270c855ff70baa4cfb3cfc7d5123955f08bd81d27d56d0cb58558a517ccd40130868a1f3e9612f501afb0f1cca12ff3d9b309679c54c0b7df9133255b305622886eb4ca36414e4bdc04861917f3db96ab", 0x64}, {&(0x7f00000003c0)="41d5b44b24ef438d720f2c3c466990c9b834b9e0bc582835f06ac3079cafacff2770ef45cc60c52683466c41779dacbf4112ef3ac14c8f6e61e2e2a7cfc2f9f63f200a1de6307419a653fe769b951ad73f99b4317322b1ed0e5eb22742e479242030c3bc1965f8908d60e4f7467df24cc76402", 0x73}, {&(0x7f0000000440)="9f40a1038e676727d2a9ce20582d21eecc1a8151a72347c144e9173e17c57f2982225844c74aebd6d78eb2b41b461e10ac92158fe5cdf772eb9697d7c58dc8416d7c1200f5153c800c82b67f8cf44e8f101854604ad34a3c04102d2e3fc555a4203ecacd2a2634c43069979a8a0fdc2c97e0d381ccdf4e1e7a1ebb996d68b00604519b2cf66ae11cb6010f157b1d5abd55557f8aca2c96fd0062341f307b74f94c44bdfc36ab37fea929bd22765328099a3266", 0xb3}, {&(0x7f0000000500)="e345bb0adf58634d37a22bf5b291492a002d359beb8ce37b2154f9a377e2d6ca2f63888c60bb8cf9214431a94b1fcb94bdf1a05df789644775046f36b7277e1a45e8dbedbea456469a871e28a31b9ed3df3cc8bbeeb06479e3591d6c317f95bf7dc2e4cba014ee06afc4db40cd1620be6b1331d8a2abef55bbc4f0c15c2fef2530bc6bfb7ee1243a56696e246a5f844279781cdb52e0188b0303d360e658a0d2b3abe58a818a8c911b54487e297574ff3658832e", 0xb4}, {&(0x7f00000005c0)="3fc324606fe5089665ba8f26b0207105957d38fbfc8c", 0x16}, {&(0x7f0000000600)="6fc151376549fd7a1fd2a3cc7f7f43f9dba972b672cab94ad129842b68b9e0bab86f1a2737a12be600cd9f641191fd6731c21de8c0d0187702d9fb67d49546d868edac575fa00f43df6bc8872609b4d199b5f86bdc39d8bf7fa86d119752798241c7d6c9621407b0e965d2a4b9785b12fd4ebb5992b06a20a09d3a60a17b2e1bc9f2e8025daeea22a65faea16e0f5d16708bfb", 0x93}, {&(0x7f00000006c0)="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", 0x1000}, {&(0x7f00000016c0)="a51e8c313e265b1c196e763902a8fffbb4399140fbdad03071edbe8f7dde89e0cae488509214052012dca54ed5ab91a3c341ab1e270f1f9af378ece959aef0a398da2f285f33827b31d91c37678c64b0f87a567516ef205c5a836907897502bffe38dd54be2a9817e3", 0x69}], 0x8)

16:24:10 executing program 4:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dc", 0x1c)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000240)={<r3=>0xffffffffffffffff})
geteuid()
ioctl$VT_RELDISP(r3, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getpeername$inet6(r3, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0))
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0xa000000})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:24:11 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00', 0x2d})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$UI_DEV_DESTROY(r0, 0x5502)

16:24:11 executing program 3:
r0 = socket(0x10, 0x0, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getuid()
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r5, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x13000000, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)
fchmod(r3, 0xe5)

16:24:11 executing program 0:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, 0x0)
pipe(&(0x7f00000004c0))
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x40000000, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

[ 1776.245725] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'.
16:24:11 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00', 0x2d})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$UI_DEV_DESTROY(r0, 0x5502)

16:24:11 executing program 2:
r0 = socket(0x10, 0x2, 0x0)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dc", 0x1c)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000000)=0xff, 0x4)
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x0, 0x0, &(0x7f0000000080))
recvmsg(r3, &(0x7f0000000800)={&(0x7f00000002c0)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000340)=""/244, 0xf4}, {&(0x7f0000000040)=""/10, 0xa}, {&(0x7f0000000580)=""/217, 0xd9}, {&(0x7f0000000680)=""/168, 0xa8}, {&(0x7f0000000740)=""/164, 0xa4}], 0x5, &(0x7f0000000200)}, 0x102)
ioctl(r1, 0x4161, 0x0)

16:24:11 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x6, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
write$FUSE_POLL(r0, &(0x7f0000000000)={0x18}, 0x18)
r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x4000, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={0x0, r1, 0xd, 0x2}, 0x14)
read(r0, 0x0, 0xffffff00)

16:24:11 executing program 4:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dc", 0x1c)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000240)={<r3=>0xffffffffffffffff})
geteuid()
ioctl$VT_RELDISP(r3, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getpeername$inet6(r3, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0))
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0xb000000})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

[ 1776.404456] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'.
16:24:11 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00', 0x2d})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$UI_DEV_DESTROY(r0, 0x5502)

16:24:11 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000080)={{}, 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00', 0x2d})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$UI_DEV_DESTROY(r0, 0x5502)

16:24:11 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x6, 0x0)
r1 = dup3(r0, r0, 0x80000)
rmdir(&(0x7f0000000080)='./file0\x00')
ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000040))
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0)='TIPCv2\x00')
sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="54010000", @ANYRES16=r2, @ANYBLOB="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"], 0x154}, 0x1, 0x0, 0x0, 0x20008800}, 0x4000)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
write$FUSE_POLL(r0, &(0x7f0000000000)={0x18}, 0x18)
read(r0, 0x0, 0xffffff00)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f00000000c0)={<r3=>0x0, 0xae4}, &(0x7f0000000140)=0x8)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000180)={r3, 0x7fff, 0x30}, 0xc)
ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000200)={0x7, <r4=>0x0, 0x10001, 0x9})
ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, &(0x7f0000000440)={0xffffffffffffffb0, r4, 0x0, 0x7})

16:24:11 executing program 0:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, 0x0)
pipe(&(0x7f00000004c0))
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x4c010000, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:24:11 executing program 3:
r0 = socket(0x10, 0x0, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getuid()
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r5, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x1c0f0000, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)
fchmod(r3, 0xe5)

16:24:11 executing program 2:
r0 = socket(0x10, 0x2, 0x0)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dc", 0x1c)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
geteuid()
ioctl$VT_RELDISP(r1, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0))
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x0, 0x0, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:24:11 executing program 4:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dc", 0x1c)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000240)={<r3=>0xffffffffffffffff})
geteuid()
ioctl$VT_RELDISP(r3, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getpeername$inet6(r3, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0))
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0xc000000})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:24:11 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000080)={{}, 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00', 0x2d})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$UI_DEV_DESTROY(r0, 0x5502)

16:24:12 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x20800, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
write$FUSE_POLL(r0, &(0x7f0000000000)={0x18}, 0x18)
read(r0, 0x0, 0xffffff00)

16:24:12 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000080)={{}, 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00', 0x2d})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$UI_DEV_DESTROY(r0, 0x5502)

16:24:12 executing program 3:
r0 = socket(0x10, 0x0, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getuid()
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r5, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x1f000000, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)
fchmod(r3, 0xe5)

16:24:12 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$UI_DEV_DESTROY(r0, 0x5502)

16:24:12 executing program 0:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, 0x0)
pipe(&(0x7f00000004c0))
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x5c010000, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:24:12 executing program 2:
r0 = socket(0x10, 0x2, 0x0)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dc", 0x1c)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
r3 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0))
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x0, 0x0, &(0x7f0000000080))
r5 = semget$private(0x0, 0x4, 0x2)
semctl$IPC_STAT(r5, 0x0, 0x2, &(0x7f00000002c0)=""/237)
ioctl(r1, 0x4161, 0x0)
ioctl$VHOST_GET_FEATURES(r3, 0x8008af00, &(0x7f0000000000))

16:24:12 executing program 1:
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x200, 0x0)
ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000180)={0xfffffffffffffc01, {0x6, 0x10001, 0x2, 0x80000000, 0x1, 0x6}})
ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, 0x0)
r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/userio\x00', 0x22001, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, &(0x7f00000001c0))
write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f0000000000)={0x1, 0x1}, 0x2)
write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000140)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000000c0)}}, 0x2)
close(r1)
r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl(0xffffffffffffffff, 0xffffffffffffffbd, &(0x7f00000000c0))
memfd_create(&(0x7f0000000040)='cgroupcpuset\x00', 0x2)
ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, &(0x7f00000001c0))
ftruncate(r1, 0x6843)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x6, 0x0)
getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000380), &(0x7f0000000280)=0xff40)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0x10)
getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, <r4=>0x0}, &(0x7f00000000c0)=0xc)
setgid(r4)
write$FUSE_POLL(r3, &(0x7f0000000000)={0x18}, 0x18)
ioctl$VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f00000003c0)={0x3, @pix={0x1, 0xbbb0, 0x59565955, 0xf, 0x5, 0x0, 0x6, 0xff, 0x1, 0x7, 0x0, 0x5}})
getsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f00000002c0), &(0x7f0000000300)=0x4)
read(r3, 0x0, 0xffffff00)
syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x80000000, 0x80)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}, &(0x7f0000000200)=0x10)

16:24:12 executing program 4:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dc", 0x1c)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000240)={<r3=>0xffffffffffffffff})
geteuid()
ioctl$VT_RELDISP(r3, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getpeername$inet6(r3, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0))
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x10000000})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:24:12 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$UI_DEV_DESTROY(r0, 0x5502)

16:24:12 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x6, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0xd)
r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x0, 0x0)
setsockopt$inet6_dccp_buf(r1, 0x21, 0xe, &(0x7f0000000140)="3614591d91d3aeca7275ea193ef3993f799ec2a504535934ef73a3ec6d1860fa4f596c03ccac19c314cacbeb6ff3e0", 0x2f)
write$FUSE_POLL(r0, &(0x7f0000000000)={0x18}, 0x18)
read(r1, 0x0, 0x2)
r2 = socket$inet6_dccp(0xa, 0x6, 0x0)
r3 = getpid()
ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f00000001c0)={[], 0x7, 0x5, 0x6, 0x6, 0x3, r3})
setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000080), 0x10)

16:24:12 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$UI_DEV_DESTROY(r0, 0x5502)

16:24:12 executing program 3:
r0 = socket(0x10, 0x0, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getuid()
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r5, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x20000000, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)
fchmod(r3, 0xe5)

16:24:12 executing program 2:
r0 = socket(0x10, 0x2, 0x0)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dc", 0x1c)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
geteuid()
ioctl$VT_RELDISP(r1, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b, 0x5]})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
r5 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x0, 0x0, &(0x7f0000000080))
ioctl$VHOST_SET_LOG_FD(r5, 0x4004af07, &(0x7f00000003c0)=r3)
ioctl(r1, 0x4161, 0x0)
r6 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f00000002c0)="517a23d92b9d477d6af902fff27a57eca56629df87a1d65974b57bb82c4c5bcea32e5b9b68395adc577a4c2d9e2c63a782059d04691ff744352ab75b41d1ea5627065f923e8f144834e627cece2090e9d3212811e16563e5bcce169e0b8fe9b930f25f2c2c2917ab83718f23c2c6a017c392433ffd524122d2ab52def321de375ba7faff08ec8f39e63aabe5734e7a65be065491f620660fe89d08d7057d93715c09a1ce2f26e46f8538b6f2806ceb17990d7f534dd6fb5f6b1e5d8a860311b2f2724f56375df2", 0xc7, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r6)
socket(0x2, 0x1, 0x80000000)

16:24:12 executing program 0:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, 0x0)
pipe(&(0x7f00000004c0))
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x80030000, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:24:13 executing program 4:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dc", 0x1c)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000240)={<r3=>0xffffffffffffffff})
geteuid()
ioctl$VT_RELDISP(r3, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getpeername$inet6(r3, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0))
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x20000000})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:24:13 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$UI_DEV_DESTROY(r0, 0x5502)

16:24:13 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x6, 0x0)
ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000040))
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
write$FUSE_POLL(r0, &(0x7f0000000000)={0x18}, 0x18)
read(r0, 0x0, 0xffffff00)

[ 1778.231774] net_ratelimit: 24 callbacks suppressed
[ 1778.231781] protocol 88fb is buggy, dev hsr_slave_0
[ 1778.241945] protocol 88fb is buggy, dev hsr_slave_1
[ 1778.278117] input: syz0 as /devices/virtual/input/input38
16:24:13 executing program 3:
r0 = socket(0x10, 0x0, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getuid()
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r5, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x3f000000, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)
fchmod(r3, 0xe5)

16:24:13 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'})
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0)
syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$UI_DEV_DESTROY(r0, 0x5502)

16:24:13 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x6, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
read(r0, 0x0, 0xffffff00)

16:24:13 executing program 2:
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000040)={0x0, 0x80000, <r0=>0xffffffffffffff9c})
fcntl$setpipe(r0, 0x407, 0x800)
r1 = socket(0x10, 0x2, 0x0)
r2 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r2, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0x8, 0x4)
r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0))
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r3, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x0, 0x0, &(0x7f0000000080))
ioctl(r2, 0x4161, 0x0)

16:24:13 executing program 0:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, 0x0)
pipe(&(0x7f00000004c0))
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x83030000, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:24:13 executing program 4:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dc", 0x1c)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000240)={<r3=>0xffffffffffffffff})
geteuid()
ioctl$VT_RELDISP(r3, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getpeername$inet6(r3, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0))
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x3f000000})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:24:13 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'})
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0)
syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$UI_DEV_DESTROY(r0, 0x5502)

16:24:13 executing program 3:
r0 = socket(0x10, 0x0, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getuid()
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r5, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x40000000, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)
fchmod(r3, 0xe5)

16:24:13 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'})
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0)
syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$UI_DEV_DESTROY(r0, 0x5502)

[ 1778.826088] __nla_parse: 7 callbacks suppressed
[ 1778.826116] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'.
16:24:13 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
syz_open_dev$evdev(0x0, 0x4, 0x0)
ioctl$UI_DEV_DESTROY(r0, 0x5502)

16:24:13 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
syz_open_dev$evdev(0x0, 0x4, 0x0)
ioctl$UI_DEV_DESTROY(r0, 0x5502)

[ 1778.957262] input: syz0 as /devices/virtual/input/input42
[ 1779.017359] input: syz0 as /devices/virtual/input/input43
16:24:14 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
syz_open_dev$evdev(0x0, 0x4, 0x0)
ioctl$UI_DEV_DESTROY(r0, 0x5502)

[ 1779.118984] input: syz0 as /devices/virtual/input/input44
16:24:14 executing program 4:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dc", 0x1c)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000240)={<r3=>0xffffffffffffffff})
geteuid()
ioctl$VT_RELDISP(r3, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getpeername$inet6(r3, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0))
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x40000000})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:24:14 executing program 2:
r0 = socket(0x10, 0x2, 0x0)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dc", 0x1c)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x80003)
socket$inet6(0xa, 0xf, 0x31)
lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@random={'btrfs.', '/dev/audio\x00'})
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
geteuid()
ioctl$EXT4_IOC_MIGRATE(r2, 0x6609)
ioctl$PIO_UNIMAPCLR(r1, 0x4b68, &(0x7f0000000200)={0x5, 0xd65b, 0x9})
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0))
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x0, 0x0, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

[ 1779.274220] protocol 88fb is buggy, dev hsr_slave_0
[ 1779.279928] protocol 88fb is buggy, dev hsr_slave_1
16:24:14 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x8, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
write$FUSE_POLL(r0, &(0x7f0000000000)={0xffffffffffffff0b, 0x0, 0x0, {0x3}}, 0x18)
read(r0, 0x0, 0xffffff00)
r1 = syz_open_dev$adsp(&(0x7f0000000140)='/dev/adsp#\x00', 0x1dcb, 0x40000)
getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000001c0)={<r2=>0x0, 0x0, 0x6, [0x16b6a2a, 0x8, 0x80000001, 0x2, 0x40, 0x101]}, &(0x7f0000000200)=0x14)
prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1)
getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000240)={r2, 0x65}, &(0x7f0000000280)=0x8)
ioctl$sock_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000180))
ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000040)=""/126)
ioctl$KVM_GET_XSAVE(r1, 0x9000aea4, &(0x7f00000002c0))
openat$autofs(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/autofs\x00', 0x400000, 0x0)

16:24:14 executing program 0:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, 0x0)
pipe(&(0x7f00000004c0))
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x8a010000, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:24:14 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0)
ioctl$UI_DEV_DESTROY(r0, 0x5502)

16:24:14 executing program 3:
r0 = socket(0x10, 0x0, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getuid()
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r5, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x89060000, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)
fchmod(r3, 0xe5)

[ 1779.480413] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 1779.514027] input: syz0 as /devices/virtual/input/input45
16:24:14 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0)
ioctl$UI_DEV_DESTROY(r0, 0x5502)

16:24:14 executing program 4:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dc", 0x1c)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000240)={<r3=>0xffffffffffffffff})
geteuid()
ioctl$VT_RELDISP(r3, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getpeername$inet6(r3, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0))
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0xffffff7f})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:24:14 executing program 2:
r0 = socket(0x10, 0x2, 0x0)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dc", 0x1c)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
getegid()
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0))
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ifreq(r0, 0x899d, &(0x7f0000000000)={'ip6erspan0\x00', @ifru_addrs=@generic={0x8, "e412921c620106648d98d6e84256"}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={&(0x7f0000ffb000/0x1000)=nil, 0x20000000040, 0x0, 0x9, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x0, 0x0, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

[ 1779.678798] input: syz0 as /devices/virtual/input/input46
[ 1779.748467] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 1779.752623] protocol 88fb is buggy, dev hsr_slave_0
[ 1779.757773] protocol 88fb is buggy, dev hsr_slave_0
[ 1779.762682] protocol 88fb is buggy, dev hsr_slave_1
[ 1779.767578] protocol 88fb is buggy, dev hsr_slave_1
[ 1779.779764] protocol 88fb is buggy, dev hsr_slave_0
[ 1779.785404] protocol 88fb is buggy, dev hsr_slave_1
16:24:14 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0)
ioctl$UI_DEV_DESTROY(r0, 0x5502)

16:24:14 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x6, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
write$FUSE_POLL(r0, &(0x7f0000000000)={0x18}, 0x18)
read(r0, 0x0, 0xfffffffffffffecd)

[ 1779.880791] input: syz0 as /devices/virtual/input/input47
16:24:14 executing program 0:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, 0x0)
pipe(&(0x7f00000004c0))
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x96030000, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:24:14 executing program 3:
r0 = socket(0x10, 0x0, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getuid()
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r5, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0xfeffffff, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)
fchmod(r3, 0xe5)

16:24:14 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502)

[ 1779.999765] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'.
16:24:15 executing program 2:
r0 = socket(0x10, 0x2, 0x0)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dc", 0x1c)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
ioctl$SNDRV_SEQ_IOCTL_PVERSION(r1, 0x80045300, &(0x7f0000000000))
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0))
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x0, 0x0, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:24:15 executing program 1:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x389000, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000480)=@assoc_value={<r1=>0x0}, &(0x7f00000004c0)=0x8)
setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000500)={r1, @in={{0x2, 0x4e23, @local}}}, 0x84)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x6, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0xd)
write$FUSE_POLL(r2, &(0x7f0000000000)={0x18}, 0x18)
r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-control\x00', 0x181000, 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000002c0)={<r4=>0x0, 0x5, 0x3}, &(0x7f0000000340)=0x8)
setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r3, 0x84, 0x5, &(0x7f0000000380)={r4, @in={{0x2, 0x4e20, @local}}}, 0x84)
read(r2, 0x0, 0xfffffffffffffed2)
r5 = syz_open_dev$admmidi(&(0x7f00000000c0)='/dev/admmidi#\x00', 0xffffffffffffff01, 0x800)
ioctl$VIDIOC_S_CROP(r5, 0x4014563c, &(0x7f00000005c0)={0xc, {0x8, 0xfffffffffffffff7, 0xf6e, 0xd257}})
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffff9c, 0x84, 0x75, &(0x7f0000000140)={<r6=>0x0, 0x6}, &(0x7f0000000180)=0x8)
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f00000001c0)={r6, 0x7}, &(0x7f0000000200)=0x8)
r7 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x3, 0x2)
ioctl$VIDIOC_TRY_ENCODER_CMD(r7, 0xc028564e, &(0x7f0000000300)={0xfffffffffffffffc, 0x1, [0x7, 0x1fffffffffffd, 0x5, 0x6, 0x1c, 0x40, 0x6, 0x101]})
ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r7, 0x4020565b, &(0x7f0000000280)={0x4, 0x400, 0x1})
ioctl$KVM_SET_TSS_ADDR(r7, 0xae47, 0xd000)

[ 1780.113731] input: syz0 as /devices/virtual/input/input48
16:24:15 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502)

16:24:15 executing program 4:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dc", 0x1c)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000240)={<r3=>0xffffffffffffffff})
geteuid()
ioctl$VT_RELDISP(r3, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getpeername$inet6(r3, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0))
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:24:15 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x6, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
write$FUSE_POLL(r0, &(0x7f0000000000)={0x18}, 0x18)
read(r0, 0x0, 0x3d4da394)
pipe2(&(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x4000)
ioctl$TIOCSLCKTRMIOS(r2, 0x5457, &(0x7f0000000200))
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000240)=ANY=[@ANYRES32=<r3=>0x0, @ANYBLOB="7f00001012275e045b558b9ba81d91135a0d9e8d2781f44c9bbf2e0bb743ad6bcce76604e488f923c8efe2d72e7a54a3258113afded82edd98a98f09331919f27849149a827a82570c6e0ef717ebad0918bf8cba050116ab4b53dad90f0bb3155bfdd601a9e0599b0606146d8cb9bf350ee5b25478c4032d152f2588224da8546cc3d547933a156aff97f04f0d2e216a979b"], &(0x7f0000000080)=0x87)
setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f00000000c0)={r3, 0x8}, 0x8)
tee(r0, r0, 0xe2, 0xa)
ioctl$RTC_WIE_OFF(r1, 0x7010)

[ 1780.307844] input: syz0 as /devices/virtual/input/input49
[ 1780.341455] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'.
16:24:15 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502)

16:24:15 executing program 2:
r0 = socket(0x10, 0x2, 0x0)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dc", 0x1c)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
geteuid()
ioctl$VT_RELDISP(r1, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0))
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x0, 0x0, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)
pread64(r0, &(0x7f0000000000)=""/118, 0x76, 0x0)

16:24:15 executing program 3:
r0 = socket(0x10, 0x0, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getuid()
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r5, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0xffffff7f, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)
fchmod(r3, 0xe5)

16:24:15 executing program 0:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, 0x0)
pipe(&(0x7f00000004c0))
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x98030000, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:24:15 executing program 1:
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)=<r0=>0x0)
ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000140)="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")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x6, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0xd)
write$FUSE_POLL(r1, &(0x7f0000000000)={0xb}, 0x18)
read(r1, 0x0, 0xffffff00)
ioctl$TCSBRK(r1, 0x5409, 0x1)

[ 1780.541019] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 1780.563109] input: syz0 as /devices/virtual/input/input50
16:24:15 executing program 4:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dc", 0x1c)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000240)={<r4=>0xffffffffffffffff})
getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000200)={<r5=>0x0, @multicast2, @loopback}, &(0x7f00000002c0)=0xc)
setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x32, &(0x7f0000000300)={@rand_addr="d54d51bac1005fd28d2d34c19a38efb7", r5}, 0x14)
geteuid()
ioctl$VT_RELDISP(r4, 0x5605)
r6 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getpeername$inet6(r4, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0))
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$int_in(r6, 0x5421, &(0x7f0000000000)=0x5)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r7, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r7, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r3, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:24:15 executing program 5:
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000005fd8)={'vcan0\x00', <r1=>0x0})
connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10)
sendmsg$can_raw(r0, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0xf7, 0x0, 0x0, 0x0, "0327e1b22b5fcef700580f02000000003f420f0000000000b2bdac3fa80acf584ecb5fee496e6866856b76b5f700000000000000004e2f9663a918fa1efd9b0b"}, 0x48}}, 0x0)

[ 1780.775984] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'.
16:24:15 executing program 1:
socket$tipc(0x1e, 0x7, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x6, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
write$FUSE_POLL(r0, &(0x7f0000000000)={0x18}, 0x18)
read(r0, 0x0, 0xffffff00)

16:24:15 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x6, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070")
socket$alg(0x26, 0x5, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4)
setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f00000000c0)=0x2, 0x4)
setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f00000004c0), 0x4)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket$inet6(0xa, 0x3, 0x84)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
syz_genetlink_get_family_id$team(0x0)
clock_gettime(0x5, &(0x7f00000001c0)={0x0, <r3=>0x0})
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0)
setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, &(0x7f0000000180)={{0x3, 0x400}}, 0x10)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
write$FUSE_POLL(r0, &(0x7f0000000000)={0x18}, 0x18)
read(r0, 0x0, 0xffffff00)

16:24:15 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x3, &(0x7f0000000180)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2f, 0xffffffb5, 0x100000, 0xc2000000, 0xc2000000}}, &(0x7f00000001c0)='syzkaller\x00', 0x1, 0x172, &(0x7f0000000080)=""/195, 0x0, 0x0, [0x42]}, 0x48)
sendto$unix(0xffffffffffffffff, &(0x7f0000000040), 0xfffffe00, 0x0, 0x0, 0x0)

16:24:15 executing program 3:
r0 = socket(0x10, 0x0, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getuid()
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r5, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0xfffffffe, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)
fchmod(r3, 0xe5)

16:24:16 executing program 0:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, 0x0)
pipe(&(0x7f00000004c0))
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0xa0020000, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:24:16 executing program 4:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dc", 0x1c)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000240)={<r3=>0xffffffffffffffff})
geteuid()
ioctl$VT_RELDISP(r3, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getpeername$inet6(r3, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r5, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000000})
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000000)={<r6=>0x0, 0xffff}, &(0x7f0000000200)=0x8)
getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r4, 0x84, 0x1b, &(0x7f00000002c0)={r6, 0x7, "d9053f7a83273d"}, &(0x7f0000000300)=0xf)
ioctl$sock_inet6_SIOCADDRT(r5, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:24:16 executing program 2:
r0 = socket(0x10, 0x2, 0x0)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dc", 0x1c)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0))
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$UI_BEGIN_FF_UPLOAD(r2, 0xc06855c8, &(0x7f0000000000)={0x254, 0x9, {0x54, 0x80000001, 0x8001, {0x3, 0xffffffffffff4625}, {0x4, 0x100}, @rumble={0x9, 0x400}}, {0x54, 0x9, 0x400, {0xffffffffffffff80, 0x2}, {0x0, 0x6}, @rumble={0x2, 0x8000}}})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x0, 0x0, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

[ 1781.184905] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'.
16:24:16 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x6, 0x0)
r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0xf4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0163404003000000000000010000000000000000000000100000000000000000ee30ffeffac2374ec9721e8abc299188000000", @ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="8561646600000000030000000000000001000000000000001600000000000000"], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x000\x00\x00\x00\x00\x00\x00\x00H\x00\x00\x00\x00\x00\x00\x008\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="11634840040000000000000002000000000000000000000011000000000000000000000000000000000000000800000000000000", @ANYPTR=&(0x7f0000000140)=ANY=[], @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB='x\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="01000000000000000c6300000d63000011634840000000000000000000000000000000000000000010000000000000000000000040000000000000000800000000000000", @ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="85616466000000000000000000000000010000000000000028000000000000008561646600000000090000000000000003000000000000000900000000000000"], @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="060000000000000004630440030000000763044001000000"], 0xe3, 0x0, &(0x7f0000000340)="7bb57c0acd9e5dbd08a31cb00583387ec4876b167d1a0fbc3dae8e57377290f4283f87e27d7fc5ff832a85e71069161bbe80b7192f596a6e3d6fec178f7069583093c0d27128dff8f21ed3605102f990d93bbf6edead86c3a88a310e1594cffe0ac2653ea2533107e9051dd653c273326a7e9c47a17414098804a8696bd3233cb001fa0d554b47cc50a283ae3575d2930c87f9abc2f8306e72b42430ffaf57df80e6e67e2f85fd22eb68e703c3c2383c1ca5ce153c491960b2833e60e6fb08c01f65c44a2737ee4319605e918a4bfafde8362cf63fe0c1cae335ee0098a733bd9375e9"})
lsetxattr$security_capability(&(0x7f0000000140)='./file0\x00', &(0x7f0000000480)='security.capability\x00', &(0x7f00000004c0)=@v1={0x1000000, [{0xfffffffffffffff7, 0xc4}]}, 0xc, 0x2)
ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f00000005c0)=[0x10001, 0x1d])
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
getsockopt$TIPC_SOCK_RECVQ_DEPTH(r1, 0x10f, 0x84, &(0x7f0000000500), &(0x7f0000000540)=0x4)
write$FUSE_POLL(r0, &(0x7f0000000000)={0x18}, 0x18)
read(r0, 0x0, 0xffffff00)
ioctl$VIDIOC_QUERYSTD(r1, 0x8008563f, &(0x7f0000000580))

[ 1781.355195] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'.
16:24:16 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x3, &(0x7f0000000180)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2f, 0xffffffb5, 0x100000, 0xc2000000, 0xc2000000}}, &(0x7f00000001c0)='syzkaller\x00', 0x1, 0x172, &(0x7f0000000080)=""/195, 0x0, 0x0, [0x42]}, 0x48)
sendto$unix(0xffffffffffffffff, &(0x7f0000000040), 0xfffffe00, 0x0, 0x0, 0x0)

[ 1781.471918] Unknown ioctl -1070571007
[ 1781.492993] Unknown ioctl 1074283780
[ 1781.506127] Unknown ioctl -2146937281
16:24:16 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x3, &(0x7f0000000180)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2f, 0xffffffb5, 0x100000, 0xc2000000, 0xc2000000}}, &(0x7f00000001c0)='syzkaller\x00', 0x1, 0x172, &(0x7f0000000080)=""/195, 0x0, 0x0, [0x42]}, 0x48)
sendto$unix(0xffffffffffffffff, &(0x7f0000000040), 0xfffffe00, 0x0, 0x0, 0x0)

16:24:16 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x6, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x1)
write$FUSE_POLL(r0, &(0x7f0000000000)={0x18}, 0x18)
read(r0, 0x0, 0xffffff00)

16:24:16 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x3, &(0x7f0000000180)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2f, 0xffffffb5, 0x100000, 0x0, 0xc2000000}, [], {0x95, 0x0, 0x49000000}}, &(0x7f00000001c0)='syzkaller\x00', 0x1, 0x172, &(0x7f0000000080)=""/195, 0x0, 0x0, [0x42]}, 0x48)
sendto$unix(0xffffffffffffffff, &(0x7f0000000040), 0xfffffe00, 0x0, 0x0, 0x0)

16:24:16 executing program 3:
r0 = socket(0x10, 0x0, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getuid()
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r5, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x1000000000000, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)
fchmod(r3, 0xe5)

16:24:16 executing program 0:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, 0x0)
pipe(&(0x7f00000004c0))
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0xb0010000, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:24:16 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x6, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x80040, 0x20)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
write$FUSE_POLL(r0, &(0x7f0000000000)={0x18}, 0x18)
read(r0, 0x0, 0xffffff00)

16:24:16 executing program 2:
r0 = socket(0x10, 0x2, 0x0)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dc", 0x1c)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0))
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
setsockopt$inet6_int(r0, 0x29, 0xcfc87c824193118a, &(0x7f0000000000)=0x6, 0x4)
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x0, 0x0, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:24:16 executing program 4:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dc", 0x1c)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
setsockopt$packet_buf(r1, 0x107, 0xd, &(0x7f00000002c0)="9cda676c25b46b271443ebf9a9915c22d1fdbac10e05071bf336decb8d8c030982de2e87f50fe3e2433d12f4bf1e563bcadbec47b1e98e91db84c932a16c96f385b080fe7738d70bd9428081eedbf5fe673a98cc34972265182c943d60dd2e21e37a41d410e04285bbb04ab2d4913560fca4c7b8d6d1", 0x76)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000240)={<r3=>0xffffffffffffffff})
geteuid()
ioctl$VT_RELDISP(r3, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getpeername$inet6(r3, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0))
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2)
ioctl(r1, 0x4161, 0x0)

[ 1781.809322] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'.
16:24:16 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x3, &(0x7f0000000180)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2f, 0xffffffb5, 0x100000, 0x0, 0xc2000000}, [], {0x95, 0x0, 0x49000000}}, &(0x7f00000001c0)='syzkaller\x00', 0x1, 0x172, &(0x7f0000000080)=""/195, 0x0, 0x0, [0x42]}, 0x48)
sendto$unix(0xffffffffffffffff, &(0x7f0000000040), 0xfffffe00, 0x0, 0x0, 0x0)

16:24:17 executing program 5:
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000013c0)=ANY=[@ANYBLOB], 0x1}}, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x1e, 0x1, 0x0)
sendmsg(r0, &(0x7f00003bbfc8)={&(0x7f0000fdbf80)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f00000000c0)={0x5, 0x10, 0xfa00, {&(0x7f0000000280)}}, 0x1220a0)
close(r0)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{0x0}], 0x1, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)

16:24:17 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x6, 0x0)
prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ff2000/0xe000)=nil)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
write$FUSE_POLL(r0, &(0x7f0000000000)={0x18}, 0x18)
read(r0, 0x0, 0xffffff00)
madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0)

16:24:17 executing program 3:
r0 = socket(0x10, 0x0, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getuid()
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r5, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x4000000000000, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)
fchmod(r3, 0xe5)

16:24:17 executing program 0:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, 0x0)
pipe(&(0x7f00000004c0))
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0xba020000, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:24:17 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x6, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
write$FUSE_POLL(r0, &(0x7f0000000000)={0x18}, 0x18)
read(r0, 0x0, 0xffffff00)
r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x100, 0x0)
ioctl$RTC_UIE_OFF(r1, 0x7004)
write$UHID_SET_REPORT_REPLY(r1, &(0x7f0000000140)={0xe, 0x2, 0xed4, 0x4, 0xa1, "aa219ff82d056a9d0492b03275ddc1337ac1653559fd6d3c4dbb69ce4ab9d589eac0a8389b4a033bc8db31dc24ff93edd513b3f9926b48b133a15a31f0558448bc3e369acdde49cda4dae127866f4f5183b9c95cf72cf58e0ba3b3218eb94bc2cdb3dab1feaa55e666c377c4207b06978131396d84f8c28478b214158b9cd3aab619fff55eb90a85ef0e17ecace86b52740b5d90c8c2acd76f148654ad2f72f288"}, 0xad)

16:24:17 executing program 4:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f00000003c0)="1f0000000104ff00ff0008000100010423dc", 0xfffffec5)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0xfffffffffffffffe, 0xc, 0x100000, r1, 0x99}, 0xfffffffffffffffe)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000240)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000440)='TIPC\x00')
sendmsg$TIPC_CMD_GET_NETID(r4, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000580)={&(0x7f0000000480)={0x1c, r5, 0x2, 0x70bd27, 0x25dfdbfd, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x44001}, 0x0)
geteuid()
ioctl$VT_RELDISP(r3, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x8000002, 0x0)
write$P9_RREADDIR(r1, &(0x7f0000000600)=ANY=[@ANYBLOB="87000000290200c2eb00004000000000050000000000000007000000000000008007002e2f66696c6530000000000006000000000000004000000000000000ff07002e2f66696c65300601000000010000000000000006000000000000000407002e2f66696c6530800100000007000000000000008107002e2f66696c653077897f4ca54dea05a07714cf492b386539cd69df6a491163a3c8bb79c7b62feecf2ac6fe022b65c74c75893bd12d06b8e948d633cc7ef18c5950d0ad45bb03ca4a6d66c69b06921917fcfcde6c012776a1236de09397f23deb1e53aea3d76f46022b0868ea46365be1776250bf9dc411897f9c88afcf"], 0x87)
getpeername$inet6(r3, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
truncate(&(0x7f0000000000)='./file0\x00', 0x6)
write$binfmt_script(r4, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0xd7)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000010c0)={{{@in6=@mcast2, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0}}, {{@in=@empty}, 0x0, @in=@local}}, &(0x7f00000011c0)=0xe8)
sendmsg$nl_route(r6, &(0x7f00000012c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001280)={&(0x7f0000001200)=@ipv4_deladdr={0x44, 0x15, 0x20, 0x70bd2c, 0x25dfdbff, {0x2, 0x78, 0x141, 0x0, r8}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x9ebe, 0x9, 0x1ff}}, @IFA_BROADCAST={0x8, 0x4, @rand_addr=0x10001}, @IFA_LOCAL={0x8, 0x2, @broadcast}, @IFA_BROADCAST={0x8, 0x4, @empty}]}, 0x44}, 0x1, 0x0, 0x0, 0xc800}, 0x4000000)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r7, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r7, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
ioctl$ASHMEM_GET_PROT_MASK(r4, 0x7706, &(0x7f0000000200))
syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x3, 0x40003)
syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0xb07, 0x0)
ioctl(r6, 0x8, 0x0)

16:24:17 executing program 2:
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x80000, 0x0)
ioctl$DRM_IOCTL_MODESET_CTL(r0, 0x40086408, &(0x7f0000000040)={0x2003b19, 0x8010000})
r1 = socket(0x10, 0x2, 0x0)
write(r1, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dc", 0x1c)
r2 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r2, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0x8, 0x4)
r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0))
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r3, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x0, 0x0, &(0x7f0000000080))
ioctl$DRM_IOCTL_MAP_BUFS(r0, 0xc0186419, &(0x7f0000000480)={0x6, &(0x7f0000000200)=""/11, &(0x7f0000001780)=[{0x7, 0x9f, 0x4, &(0x7f00000002c0)=""/159}, {0x5, 0xc6, 0x4, &(0x7f0000000380)=""/198}, {0x8, 0x7a, 0x7cbf4fa0, &(0x7f0000000580)=""/122}, {0x0, 0xee, 0x1f, &(0x7f0000000600)=""/238}, {0x8, 0x1000, 0xfffffffffffffffb, &(0x7f0000000700)=""/4096}, {0x4, 0x5f, 0x4, &(0x7f0000001700)=""/95}]})
ioctl(r2, 0x4161, 0x0)

16:24:17 executing program 5:
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000013c0)=ANY=[@ANYBLOB], 0x1}}, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x1e, 0x1, 0x0)
sendmsg(r0, &(0x7f00003bbfc8)={&(0x7f0000fdbf80)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f00000000c0)={0x5, 0x10, 0xfa00, {&(0x7f0000000280)}}, 0x1220a0)
close(r0)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{0x0}], 0x1, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)

16:24:17 executing program 3:
r0 = socket(0x10, 0x0, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getuid()
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r5, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x100000000000000, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)
fchmod(r3, 0xe5)

16:24:17 executing program 1:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x10001, 0x0)
getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f0000000080), &(0x7f0000000140)=0x18)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x6, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0xd)
write$FUSE_POLL(r1, &(0x7f0000000000)={0x18}, 0x18)
read(r1, 0x0, 0x10000020a)

16:24:17 executing program 5:
r0 = socket(0x10, 0x80002, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="000a0000400000000028001d000400dac51e407fcf207e63a3704b33000000"], 0x1}}, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0)

16:24:17 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
r1 = syz_open_pts(r0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000fd0ffc)=0x3)
ioctl$FIONREAD(r1, 0x80047437, 0x0)

16:24:17 executing program 2:
r0 = socket(0x10, 0x2, 0x0)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dc", 0x1c)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
r2 = socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
r4 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
ioctl$KVM_GET_LAPIC(r4, 0x8400ae8e, &(0x7f0000000580)={"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"})
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000980)=@nat={'nat\x00', 0x1b, 0x5, 0x5d8, 0x248, 0x0, 0x138, 0x3a8, 0x0, 0x508, 0x508, 0x508, 0x508, 0x508, 0x5, &(0x7f0000000000), {[{{@ipv6={@dev={0xfe, 0x80, [], 0x27}, @loopback, [0xffffff00, 0xff000000, 0xff0000ff, 0xffffffff], [0xffffffff, 0xff000000, 0x0, 0xffffffff], 'ifb0\x00', 'lapb0\x00', {0xff}, {}, 0x0, 0x401, 0x1, 0x4}, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@unspec=@connlabel={0x28, 'connlabel\x00', 0x0, {0x4, 0x2}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x2, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@mcast2, @gre_key=0x1, @gre_key=0x81}}}, {{@ipv6={@loopback, @mcast1, [0xff000000, 0xffffffff, 0xffffff00, 0xffffff00], [0xffffff00, 0xffffffff, 0xff000000, 0xffffffff], 'sit0\x00', 'bond_slave_0\x00', {}, {}, 0x3f, 0x6, 0x7, 0x8}, 0x0, 0xc8, 0x110}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x1, @ipv6=@rand_addr="4073e86f4673ad107e07a516acc6f085", @ipv6=@empty, @port=0x4e24, @icmp_id=0x66}}}, {{@uncond, 0x0, 0x118, 0x160, 0x0, {}, [@common=@hl={0x28, 'hl\x00', 0x0, {0x1, 0x101}}, @common=@ipv6header={0x28, 'ipv6header\x00', 0x0, {0x30, 0x4}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x8, @ipv4=@remote, @ipv4=@multicast2, @icmp_id=0x64, @port=0x4e22}}}, {{@uncond, 0x0, 0x118, 0x160, 0x0, {}, [@common=@ipv6header={0x28, 'ipv6header\x00', 0x0, {0x5, 0x8, 0x1}}, @common=@icmp6={0x28, 'icmp6\x00', 0x0, {0xb, 0x40, 0x3fb}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x1b, @ipv6=@local, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, @gre_key=0x7, @port=0x4e20}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x638)
pipe(&(0x7f00000004c0))
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r5, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r5, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r3, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x0, 0x0, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:24:18 executing program 4:
r0 = socket(0x10, 0x2, 0x3)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dc", 0x1c)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000200)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
r2 = socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f00000002c0)=<r4=>0x0)
fcntl$setownex(r0, 0xf, &(0x7f0000000300)={0x2, r4})
pipe(&(0x7f0000000240)={<r5=>0xffffffffffffffff})
geteuid()
ioctl$VT_RELDISP(r5, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getpeername$inet6(r5, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000000)=0x1c)
pipe(&(0x7f00000004c0))
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r6, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r6, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r3, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x6c, 0x0)

16:24:18 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10, 0x20000000004, 0x4, 0x8}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r1, &(0x7f0000000040), 0x0}, 0x20)

16:24:18 executing program 0:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, 0x0)
pipe(&(0x7f00000004c0))
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0xc6010000, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:24:18 executing program 3:
r0 = socket(0x10, 0x0, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getuid()
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r5, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x200000000000000, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)
fchmod(r3, 0xe5)

16:24:18 executing program 2:
r0 = socket(0x10, 0x2, 0x0)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dc", 0x1c)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f0000000340))
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x0, 0x0, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:24:18 executing program 5:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dc", 0x1c)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000240)={<r3=>0xffffffffffffffff})
geteuid()
ioctl$VT_RELDISP(r3, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getpeername$inet6(r3, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0))
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0xffffff7f})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:24:18 executing program 1:
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x200, 0x0)
ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000180)={0xfffffffffffffc01, {0x6, 0x10001, 0x2, 0x80000000, 0x1, 0x6}})
ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, 0x0)
r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/userio\x00', 0x22001, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, &(0x7f00000001c0))
write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f0000000000)={0x1, 0x1}, 0x2)
write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000140)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000000c0)}}, 0x2)
close(r1)
r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl(0xffffffffffffffff, 0xffffffffffffffbd, &(0x7f00000000c0))
memfd_create(&(0x7f0000000040)='cgroupcpuset\x00', 0x2)
ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, &(0x7f00000001c0))
ftruncate(r1, 0x6843)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x6, 0x0)
getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000380), &(0x7f0000000280)=0xff40)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0x10)
getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, <r4=>0x0}, &(0x7f00000000c0)=0xc)
setgid(r4)
write$FUSE_POLL(r3, &(0x7f0000000000)={0x18}, 0x18)
ioctl$VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f00000003c0)={0x3, @pix={0x1, 0xbbb0, 0x59565955, 0xf, 0x5, 0x0, 0x6, 0xff, 0x1, 0x7, 0x0, 0x5}})
getsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f00000002c0), &(0x7f0000000300)=0x4)
read(r3, 0x0, 0xffffff00)
syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x80000000, 0x80)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}, &(0x7f0000000200)=0x10)

[ 1783.443849] net_ratelimit: 15 callbacks suppressed
[ 1783.443887] protocol 88fb is buggy, dev hsr_slave_0
[ 1783.454655] protocol 88fb is buggy, dev hsr_slave_1
16:24:18 executing program 4:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dc", 0x1c)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
prctl$PR_GET_FPEXC(0xb, &(0x7f0000000000))
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000240)={<r3=>0xffffffffffffffff})
geteuid()
ioctl$VT_RELDISP(r3, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getpeername$inet6(r3, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0))
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:24:18 executing program 2:
r0 = socket(0x10, 0x2, 0x0)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dc", 0x1c)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f0000000300)=0x3)
r4 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
getsockopt$inet_sctp_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={<r6=>0x0, 0x1}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x18, &(0x7f0000000200)={r6, 0x6}, &(0x7f00000002c0)=0x8)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r7, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r7, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r3, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x0, 0x0, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:24:18 executing program 3:
r0 = socket(0x10, 0x0, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getuid()
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r5, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x300000000000000, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)
fchmod(r3, 0xe5)

16:24:18 executing program 0:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, 0x0)
pipe(&(0x7f00000004c0))
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0xd4030000, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

[ 1783.835530] __nla_parse: 5 callbacks suppressed
[ 1783.835540] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'.
16:24:18 executing program 5:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dc", 0x1c)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000240)={<r3=>0xffffffffffffffff})
geteuid()
ioctl$VT_RELDISP(r3, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getpeername$inet6(r3, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0))
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0xffffff7f})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

[ 1783.911797] protocol 88fb is buggy, dev hsr_slave_0
[ 1783.911804] protocol 88fb is buggy, dev hsr_slave_0
[ 1783.911849] protocol 88fb is buggy, dev hsr_slave_1
[ 1783.917062] protocol 88fb is buggy, dev hsr_slave_1
[ 1783.917149] protocol 88fb is buggy, dev hsr_slave_0
[ 1783.937256] protocol 88fb is buggy, dev hsr_slave_1
[ 1783.942468] protocol 88fb is buggy, dev hsr_slave_0
[ 1783.947537] protocol 88fb is buggy, dev hsr_slave_1
16:24:19 executing program 1:
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x200, 0x0)
ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000180)={0xfffffffffffffc01, {0x6, 0x10001, 0x2, 0x80000000, 0x1, 0x6}})
ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, 0x0)
r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/userio\x00', 0x22001, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, &(0x7f00000001c0))
write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f0000000000)={0x1, 0x1}, 0x2)
write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000140)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000000c0)}}, 0x2)
close(r1)
r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl(0xffffffffffffffff, 0xffffffffffffffbd, &(0x7f00000000c0))
memfd_create(&(0x7f0000000040)='cgroupcpuset\x00', 0x2)
ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, &(0x7f00000001c0))
ftruncate(r1, 0x6843)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x6, 0x0)
getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000380), &(0x7f0000000280)=0xff40)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0x10)
getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, <r4=>0x0}, &(0x7f00000000c0)=0xc)
setgid(r4)
write$FUSE_POLL(r3, &(0x7f0000000000)={0x18}, 0x18)
ioctl$VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f00000003c0)={0x3, @pix={0x1, 0xbbb0, 0x59565955, 0xf, 0x5, 0x0, 0x6, 0xff, 0x1, 0x7, 0x0, 0x5}})
getsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f00000002c0), &(0x7f0000000300)=0x4)
read(r3, 0x0, 0xffffff00)
syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x80000000, 0x80)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}, &(0x7f0000000200)=0x10)

[ 1784.009229] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'.
16:24:19 executing program 3:
r0 = socket(0x10, 0x0, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getuid()
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r5, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x400000000000000, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)
fchmod(r3, 0xe5)

16:24:19 executing program 5:
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x200, 0x0)
ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000180)={0xfffffffffffffc01, {0x6, 0x10001, 0x2, 0x80000000, 0x1, 0x6}})
ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, 0x0)
r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/userio\x00', 0x22001, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, &(0x7f00000001c0))
write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f0000000000)={0x1, 0x1}, 0x2)
write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000140)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000000c0)}}, 0x2)
close(r1)
r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl(0xffffffffffffffff, 0xffffffffffffffbd, &(0x7f00000000c0))
memfd_create(&(0x7f0000000040)='cgroupcpuset\x00', 0x2)
ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, &(0x7f00000001c0))
ftruncate(r1, 0x6843)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x6, 0x0)
getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000380), &(0x7f0000000280)=0xff40)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0x10)
getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, <r4=>0x0}, &(0x7f00000000c0)=0xc)
setgid(r4)
write$FUSE_POLL(r3, &(0x7f0000000000)={0x18}, 0x18)
ioctl$VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f00000003c0)={0x3, @pix={0x1, 0xbbb0, 0x59565955, 0xf, 0x5, 0x0, 0x6, 0xff, 0x1, 0x7, 0x0, 0x5}})
getsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f00000002c0), &(0x7f0000000300)=0x4)
read(r3, 0x0, 0xffffff00)
syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x80000000, 0x80)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}, &(0x7f0000000200)=0x10)

16:24:19 executing program 4:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dc", 0x1c)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x2e)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000240)={<r3=>0xffffffffffffffff})
geteuid()
ioctl$VT_RELDISP(r3, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getpeername$inet6(r3, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0))
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:24:19 executing program 0:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, 0x0)
pipe(&(0x7f00000004c0))
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0xf0030000, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:24:19 executing program 2:
r0 = socket(0x10, 0x2, 0x0)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dc", 0x1c)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0))
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x0, 0x0, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

[ 1784.334821] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'.
16:24:19 executing program 4:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dc", 0x1c)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
r2 = socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={<r3=>0x0}, &(0x7f0000000200)=0xc)
r4 = perf_event_open(0x0, r3, 0x9, 0xffffffffffffffff, 0x2)
pipe(&(0x7f0000000240)={<r5=>0xffffffffffffffff})
geteuid()
ioctl$VT_RELDISP(r5, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getpeername$inet6(r5, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0))
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r6, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r6, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r4, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

[ 1784.496349] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'.
16:24:19 executing program 2:
r0 = socket(0x10, 0x2, 0x0)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dc", 0x1c)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0)={<r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0x40042409, 0x0)
ioctl$FS_IOC_GETVERSION(r3, 0x80087601, &(0x7f0000000000))
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$TIOCCBRK(r3, 0x5428)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x0, 0x0, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:24:19 executing program 0:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, 0x0)
pipe(&(0x7f00000004c0))
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0xf5030000, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:24:19 executing program 3:
r0 = socket(0x10, 0x0, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getuid()
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r5, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x500000000000000, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)
fchmod(r3, 0xe5)

[ 1784.738175] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'.
16:24:19 executing program 4:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dc", 0x1c)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x2, r0, 0x2)
pipe(&(0x7f0000000240)={<r3=>0xffffffffffffffff})
geteuid()
ioctl$VT_RELDISP(r3, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getpeername$inet6(r3, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0))
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

[ 1784.976705] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'.
16:24:20 executing program 0:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, 0x0)
pipe(&(0x7f00000004c0))
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0xf8030000, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

[ 1785.123997] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 1785.257109] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'.
16:24:20 executing program 1:
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x200, 0x0)
ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000180)={0xfffffffffffffc01, {0x6, 0x10001, 0x2, 0x80000000, 0x1, 0x6}})
ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, 0x0)
r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/userio\x00', 0x22001, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, &(0x7f00000001c0))
write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f0000000000)={0x1, 0x1}, 0x2)
write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000140)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000000c0)}}, 0x2)
close(r1)
r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl(0xffffffffffffffff, 0xffffffffffffffbd, &(0x7f00000000c0))
memfd_create(&(0x7f0000000040)='cgroupcpuset\x00', 0x2)
ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, &(0x7f00000001c0))
ftruncate(r1, 0x6843)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x6, 0x0)
getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000380), &(0x7f0000000280)=0xff40)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0x10)
getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, <r4=>0x0}, &(0x7f00000000c0)=0xc)
setgid(r4)
write$FUSE_POLL(r3, &(0x7f0000000000)={0x18}, 0x18)
ioctl$VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f00000003c0)={0x3, @pix={0x1, 0xbbb0, 0x59565955, 0xf, 0x5, 0x0, 0x6, 0xff, 0x1, 0x7, 0x0, 0x5}})
getsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f00000002c0), &(0x7f0000000300)=0x4)
read(r3, 0x0, 0xffffff00)
syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x80000000, 0x80)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}, &(0x7f0000000200)=0x10)

16:24:20 executing program 2:
r0 = socket(0x10, 0x2, 0x0)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dc", 0x1c)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
socket$inet(0x2, 0x0, 0x2)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0))
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x0, 0x0, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:24:20 executing program 5:
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x200, 0x0)
ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000180)={0xfffffffffffffc01, {0x6, 0x10001, 0x2, 0x80000000, 0x1, 0x6}})
ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, 0x0)
r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/userio\x00', 0x22001, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, &(0x7f00000001c0))
write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f0000000000)={0x1, 0x1}, 0x2)
write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000140)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000000c0)}}, 0x2)
close(r1)
r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl(0xffffffffffffffff, 0xffffffffffffffbd, &(0x7f00000000c0))
memfd_create(&(0x7f0000000040)='cgroupcpuset\x00', 0x2)
ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, &(0x7f00000001c0))
ftruncate(r1, 0x6843)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x6, 0x0)
getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000380), &(0x7f0000000280)=0xff40)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0x10)
getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, <r4=>0x0}, &(0x7f00000000c0)=0xc)
setgid(r4)
write$FUSE_POLL(r3, &(0x7f0000000000)={0x18}, 0x18)
ioctl$VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f00000003c0)={0x3, @pix={0x1, 0xbbb0, 0x59565955, 0xf, 0x5, 0x0, 0x6, 0xff, 0x1, 0x7, 0x0, 0x5}})
getsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f00000002c0), &(0x7f0000000300)=0x4)
read(r3, 0x0, 0xffffff00)
syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x80000000, 0x80)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}, &(0x7f0000000200)=0x10)

16:24:20 executing program 3:
r0 = socket(0x10, 0x0, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getuid()
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r5, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x600000000000000, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)
fchmod(r3, 0xe5)

16:24:20 executing program 4:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dc", 0x1c)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
r2 = socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000240)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
geteuid()
ioctl$VT_RELDISP(r4, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000200)=<r6=>0x0)
perf_event_open(&(0x7f00000002c0)={0x5, 0x70, 0x1ff, 0x1f, 0x9, 0x2, 0x0, 0x5, 0x400, 0xa, 0xb3, 0x8, 0x101, 0x8, 0x7, 0x400, 0x5, 0x2, 0xfffffffffffffff9, 0x2, 0x7ff, 0x3, 0x10001, 0x6, 0x56, 0x5, 0x6, 0x2, 0x5, 0x9ba5, 0x3586, 0xffffffff, 0x10de, 0x3, 0x0, 0x6, 0x5, 0x9ebf, 0x0, 0x54, 0x2, @perf_config_ext={0x8001, 0x7}, 0x10080, 0x9, 0x10000, 0x3, 0x9, 0x1}, r6, 0x0, r1, 0x1)
getpeername$inet6(r4, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
getsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000004100)={{{@in, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r9=>0x0}}, {{@in6=@local}, 0x0, @in6=@remote}}, &(0x7f0000004200)=0xe8)
pipe(&(0x7f0000000340))
ioctl$sock_inet6_SIOCSIFADDR(r5, 0x89a1, &(0x7f0000000000)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000000, r9})
ioctl$sock_inet6_SIOCADDRT(r8, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r3, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:24:20 executing program 0:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, 0x0)
pipe(&(0x7f00000004c0))
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0xfc030000, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

[ 1785.565897] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 1785.977209] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'.
16:24:20 executing program 4:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dc", 0x1c)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000240)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
geteuid()
ioctl$VT_RELDISP(r3, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getpeername$inet6(r3, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0)={<r5=>0xffffffffffffffff})
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r6, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r6, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$KVM_ASSIGN_SET_MSIX_NR(r4, 0x4008ae73, &(0x7f0000000000)={0x7baf, 0x967})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
bind$vsock_dgram(r5, &(0x7f0000000200), 0x10)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:24:21 executing program 0:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, 0x0)
pipe(&(0x7f00000004c0))
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0xfeffffff, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:24:21 executing program 3:
r0 = socket(0x10, 0x0, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getuid()
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r5, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x700000000000000, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)
fchmod(r3, 0xe5)

16:24:21 executing program 2:
r0 = socket(0x10, 0x2, 0x0)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dc", 0x1c)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x1)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getpeername$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000000)=0xffffffffffffff66)
pipe(&(0x7f00000004c0))
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x0, 0x0, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:24:21 executing program 4:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dc", 0x1c)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000240)={<r3=>0xffffffffffffffff})
ioctl$EVIOCSKEYCODE_V2(r3, 0x40284504, &(0x7f0000000000)={0x9, 0x17, 0x5, 0xffffffffffffff39, "704816d90e79dcf4a8f13b9282060804f1befa1599f262e55212094c3bcff99b"})
geteuid()
ioctl$VT_RELDISP(r3, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getpeername$inet6(r3, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0))
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:24:21 executing program 2:
r0 = socket(0x10, 0x2, 0x0)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dc", 0x1c)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0)={<r3=>0xffffffffffffffff})
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$FS_IOC_GETVERSION(r3, 0x80087601, &(0x7f0000000000))
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x0, 0x0, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:24:21 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, 0x0)
pipe(&(0x7f00000004c0))
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x28030000, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:24:21 executing program 5:
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x200, 0x0)
ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000180)={0xfffffffffffffc01, {0x6, 0x10001, 0x2, 0x80000000, 0x1, 0x6}})
ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, 0x0)
r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/userio\x00', 0x22001, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, &(0x7f00000001c0))
write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f0000000000)={0x1, 0x1}, 0x2)
write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000140)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000000c0)}}, 0x2)
close(r1)
r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl(0xffffffffffffffff, 0xffffffffffffffbd, &(0x7f00000000c0))
memfd_create(&(0x7f0000000040)='cgroupcpuset\x00', 0x2)
ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, &(0x7f00000001c0))
ftruncate(r1, 0x6843)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x6, 0x0)
getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000380), &(0x7f0000000280)=0xff40)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0x10)
getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, <r4=>0x0}, &(0x7f00000000c0)=0xc)
setgid(r4)
write$FUSE_POLL(r3, &(0x7f0000000000)={0x18}, 0x18)
ioctl$VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f00000003c0)={0x3, @pix={0x1, 0xbbb0, 0x59565955, 0xf, 0x5, 0x0, 0x6, 0xff, 0x1, 0x7, 0x0, 0x5}})
getsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f00000002c0), &(0x7f0000000300)=0x4)
read(r3, 0x0, 0xffffff00)
syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x80000000, 0x80)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}, &(0x7f0000000200)=0x10)

16:24:21 executing program 3:
r0 = socket(0x10, 0x0, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getuid()
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r5, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x800000000000000, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)
fchmod(r3, 0xe5)

16:24:21 executing program 0:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, 0x0)
pipe(&(0x7f00000004c0))
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0xfffffffe, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:24:22 executing program 4:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dc", 0x1c)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0x4, 0x1cc)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000240)={<r3=>0xffffffffffffffff})
geteuid()
ioctl$VT_RELDISP(r3, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getpeername$inet6(r3, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0))
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:24:22 executing program 0:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, 0x0)
pipe(&(0x7f00000004c0))
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x1000000000000, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:24:22 executing program 3:
r0 = socket(0x10, 0x0, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getuid()
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r5, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x1300000000000000, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)
fchmod(r3, 0xe5)

16:24:22 executing program 2:
r0 = socket(0x10, 0x2, 0x0)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dc", 0x1c)
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000440)='/dev/btrfs-control\x00', 0x404000, 0x0)
ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000580)={0x7, 0x7, 0x4, 0x80000, {0x77359400}, {0x3, 0xc, 0x3, 0x7, 0x7fff, 0xe3, "bcc78ead"}, 0xfff, 0x3, @offset=0x1f, 0x4})
r2 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r2, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x200a82, 0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000600)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000480)=0x1c)
pipe(&(0x7f00000004c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r7 = add_key$keyring(&(0x7f0000000b00)='keyring\x00', &(0x7f0000000b40)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8)
r8 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000540)={'syz', 0x1}, &(0x7f0000000700)="0875c8ecf24f54863068afa4f7213b42b1cb73a797013574a7388ab6b2293549380e1a5d61a57c29b48e5a", 0x2b, r7)
keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000680)={r8, 0x2, 0x8001}, &(0x7f0000000b80)=ANY=[@ANYBLOB="656e633d72617720686173683d63726333322d70636c6d756c0000000000000000000000000000000000000000000000000000007133de726919f815f72b00000000000000000000000054053088ccc348c9dec465fe7d3a07c7c29629a903e15ec9bcf863bdee3d8fcaf3e7c9a62add80291279b9dcaf64a43ef5bce01383135bca6cf74fcf78c3714b4632b0d9dc6546bcdf7f275f7cbcf5723ec1fc42f1be3dcdba18309a426f6a470159d9d017b67c248cfd4cfe1e2773ac0e0d8d93e59dc0159d60404293b3bff6bff5027a904bc82958501515d8e33d2504b45bf8d0eda9bfc26a185da787e393a6407e814289b000d32dc618add7c618e0db9f03ab890bdd0f2edbd7ef94473d5facfe54a59372d89d93a3365ef100000055f41791977fe702a095176e03450b3c8579abc0a1345d88973b376be9b08cace2ba472f76fdb35498a6f2368f8d3234c8efdd9e0217559bf1d7b603f6aa166a2bba8a132299beab74be48865d7b3871f977e837fe3365758b52fc32d78128a12c1d6352f0fab47f9c787152aedfc12eb81052fa69fc805b24b7d0541ec8d144ec2b384ff6d5a94fdc1a8b99861501d1f0142b0fee6ec35b9dcfde95e0a4dfafab56eb31d8ce02987455383dc844cd07e4c0494b63685530ced9a7b4a61e9ffe896212b95b1d540900000000000000577f4329fa5733c65f40dd154232db45c023340a5ce58a686d952e1aadbf92a2b29a08c9285109e89b973f088f"], &(0x7f0000000740)="493ba091fa0a04d5898b74e9ad1635530cd212135005796f0ea26824606a1fb85fe2b7c5e4c96e3da8a605901e90d456e44c78d94255271d83623660823f6ce658b52f802182351c4fe371dea1208d97399e4537a9f4a10bdcd2aed15f7edf1e2d2b4f1c3f9a68ee8d24e2", &(0x7f00000007c0)="09d0034500d90df382d15689749f8f1d53fa1170bf0d14933b5b0551ab288066f73fb558115ecaf93d2f9075cf876e700ccbd5799481ddff75647b98ea97089355ac69c9285cdada3aa102facc6e5e0d00e8b6dcf1c7eba902bc683fbf5af68411895c19a1e0f8357fce4a98d85c197f02597cd8f7b43e3812a3ec")
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r6, 0x89a1, &(0x7f00000006c0)={@dev={0xfe, 0x80, [], 0x13}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r6, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r3, 0xc0286404, &(0x7f0000000280)={&(0x7f0000ffc000/0x2000)=nil, 0x40, 0x0, 0x1f, &(0x7f0000ffa000/0x3000)=nil, 0x8})
r9 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
r10 = fcntl$getown(r4, 0x9)
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r2, 0xc1105511, &(0x7f0000000300)={{0x2, 0x2, 0x7, 0x1, 'syz0\x00', 0x4}, 0x5, 0x10000110, 0x2000000000a, r10, 0x1, 0x9, 'syz1\x00', &(0x7f00000002c0)=['cpuset&\x00'], 0x8, [], [0x9, 0x3, 0xff, 0x80000001]})
migrate_pages(0x0, 0x0, 0x0, &(0x7f0000000080))
ioctl$VIDIOC_G_AUDOUT(r5, 0x80345631, &(0x7f0000000040))
ioctl(r2, 0x4161, 0x0)
getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r9, 0x84, 0x66, &(0x7f0000000640)={<r11=>0x0, 0x3}, &(0x7f0000000840)=0x8)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000880)={r11, @in={{0x2, 0x4e24, @multicast2}}, 0x40, 0xfffffffffffffffd, 0x7, 0x3ff, 0x41}, 0x98)

16:24:22 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, 0x0)
pipe(&(0x7f00000004c0))
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x28030000, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:24:22 executing program 5:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dc", 0x1c)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000240)={<r3=>0xffffffffffffffff})
geteuid()
ioctl$VT_RELDISP(r3, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getpeername$inet6(r3, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0))
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x3000000})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:24:22 executing program 4:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dc", 0x1c)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000240)={<r3=>0xffffffffffffffff})
geteuid()
ioctl$VT_RELDISP(r3, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getpeername$inet6(r3, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0))
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
socket$inet6(0xa, 0x5, 0x20)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:24:22 executing program 3:
r0 = socket(0x10, 0x0, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getuid()
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r5, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x1c0f000000000000, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)
fchmod(r3, 0xe5)

16:24:22 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, 0x0)
pipe(&(0x7f00000004c0))
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x28030000, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:24:22 executing program 0:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, 0x0)
pipe(&(0x7f00000004c0))
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x2000000000000, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:24:22 executing program 5:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dc", 0x1c)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000240)={<r3=>0xffffffffffffffff})
geteuid()
ioctl$VT_RELDISP(r3, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getpeername$inet6(r3, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0))
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x3000000})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:24:23 executing program 2:
r0 = socket(0x10, 0x2, 0x0)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dc", 0x1c)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f0000000000)={{0x8, 0x9fa8}, {0x100000001, 0x3}, 0x2d9e, 0x6, 0x9})
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0))
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x0, 0x0, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:24:23 executing program 4:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dc", 0x1c)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000200), 0x4)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000240)={<r2=>0xffffffffffffffff})
geteuid()
ioctl$VT_RELDISP(r2, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getpeername$inet6(r2, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0))
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f00000002c0)={0x0, 0x5, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x80800, 0x0)
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:24:23 executing program 3:
r0 = socket(0x10, 0x0, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getuid()
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r5, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x1f00000000000000, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)
fchmod(r3, 0xe5)

16:24:23 executing program 5:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dc", 0x1c)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000240)={<r3=>0xffffffffffffffff})
geteuid()
ioctl$VT_RELDISP(r3, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getpeername$inet6(r3, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0))
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x3000000})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:24:23 executing program 1:
r0 = socket(0x10, 0x0, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getuid()
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r5, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x1000000, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)
fchmod(r3, 0xe5)

16:24:23 executing program 2:
r0 = socket(0x10, 0x2, 0x0)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dc", 0x1c)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
r2 = socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
r4 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000040)=<r5=>0x0)
waitid(0x2, r5, &(0x7f00000002c0), 0x40000000, 0x0)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0))
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r6, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000000})
ioctl$DRM_IOCTL_ADD_MAP(r4, 0xc0286415, &(0x7f0000000000)={0x0, 0x5, 0x5, 0x1, &(0x7f0000ffc000/0x3000)=nil, 0x3})
ioctl$sock_inet6_SIOCADDRT(r6, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r3, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x0, 0x0, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:24:23 executing program 0:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, 0x0)
pipe(&(0x7f00000004c0))
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x3000000000000, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

[ 1788.632370] net_ratelimit: 24 callbacks suppressed
[ 1788.632379] protocol 88fb is buggy, dev hsr_slave_0
[ 1788.643333] protocol 88fb is buggy, dev hsr_slave_1
16:24:23 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0xa00, 0x0)
ioctl$KVM_GET_PIT2(r1, 0x8070ae9f, &(0x7f0000000180))
ioctl$EVIOCGPROP(r2, 0x80404509, &(0x7f0000000080)=""/82)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet(0x2, 0x3, 0x2)
ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, 0x0)
setsockopt$inet_int(r3, 0x0, 0xd, &(0x7f0000000000), 0x10)
r4 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
pwritev(r4, 0x0, 0xffffffffffffff7d, 0x0)
open(0x0, 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
prctl$PR_GET_KEEPCAPS(0x7)
r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r6, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)

16:24:23 executing program 3:
r0 = socket(0x10, 0x0, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getuid()
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r5, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x2000000000000000, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)
fchmod(r3, 0xe5)

16:24:23 executing program 4:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dc", 0x1c)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000240)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
geteuid()
r5 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000200)='NET_DM\x00')
sendmsg$NET_DM_CMD_START(r4, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r5, 0xc20, 0x70bd2a, 0x25dfdbfc, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x40050)
ioctl$VT_RELDISP(r3, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getpeername$inet6(r3, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0))
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r6, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r6, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:24:23 executing program 1:
r0 = socket(0x10, 0x0, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getuid()
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r5, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x1000000, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)
fchmod(r3, 0xe5)

16:24:23 executing program 5:
r0 = socket(0x10, 0x0, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getuid()
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r5, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x1f00, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)
fchmod(r3, 0xe5)

[ 1788.920045] __nla_parse: 12 callbacks suppressed
[ 1788.920073] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'.
16:24:24 executing program 2:
r0 = socket(0x10, 0x2, 0x0)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dc", 0x1c)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev(r3, &(0x7f0000000200)=[{&(0x7f0000000000)="fe612868ae73aeec2a0e15f8122bb8449c8a803ee14764e5dda666f9f97c0fa5c011fe3d74598f72b4705e8a706afd92b62c8bfcb63cdfdf2c97cecc1c77272bb5724fb523f7a850b36c6b0660fa21664460c2025f83ce3e3cf58e0c8f11abbf3303f5a6efc39a03a0a92e4e4a5b3a", 0x6f}, {&(0x7f00000002c0)="8e3e877a84233c26e031950f8863891e9be1f91a94d57918c3bd9d080054e18ba13a646a6e47b41a72700e36b134ed88a028c8cd3e8fee0569edd8f44c46b161ff632c2c8346f23e7c98d121b679e0fc6dac50463dad3584a4ae89de69f3bb88dea70e6468e1ef91626c58e328b6c2c9b2c7c6db48d9b416e1facbc7f664807b57eeebe9be087b7a1fb7318add691f4b027b24e07ddedf0d0ed9651ac30769bd7ef69ddf848c10c960b3960b64f4819c0a12cd85c2b9b4bc3c479ed82bbbfbab42d60c77f204c8ecad27cf3e71e2520078ee640b6ddf3bff9fcabe", 0xdb}, {&(0x7f00000003c0)="8dc72cabd278a2cf640be87f4fa152a0a9fdc85ea6a32d161c9eb2d2b04a2130118ebd0706eb99560d9373a6164d8434dc00a2ed7e6490c656186ba054ca1ae54913860877273442950bba7557a6d228a6eb743cd1a372fe5f355787e9f7e98c88675a016fdb74333ea0d853d5afe266a537d727ede66c29cbfe1cbbcc17e202d0d4c94ff130eaac201607211556aaf4c306d81d0667a9bff8c2664be7774c9ad7b702ed6d728373a98a91ab9efe3a14", 0xb0}, {&(0x7f0000000580)="a8126aaf9d6d3f833c16c6b365ce55d35cc682c17b5225e7482b369a0a3445593ac77e99a04745978d282398e46f1d4988f801bdb0e5202d755ea1aa0c1ebee9545f6ef1ce417e32955f66cc76080308011f8679ce7bda41110db2a4a011b630da1f8164ccdd7904fbab07e6ee2b2a3ca9a60b880bbc8397ab4fc0f0e24110cc3261955e4dc66c1ee41014e03b6167fc582a5d43bd5e24e488187bf5cf5798c9aa002078e7ae00111b70780d178968eed4bfa0e1aff3ed41e69995b61d8f7d0d4ac509df15dc6dee23ae", 0xca}], 0x4, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x0, 0x0, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:24:24 executing program 3:
r0 = socket(0x10, 0x0, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getuid()
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r5, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x3f00000000000000, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)
fchmod(r3, 0xe5)

16:24:24 executing program 0:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, 0x0)
pipe(&(0x7f00000004c0))
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x4000000000000, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:24:24 executing program 4:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dc", 0x1c)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000240)={<r3=>0xffffffffffffffff})
geteuid()
ioctl$VT_RELDISP(r3, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
clock_getres(0x9, 0x0)
getpeername$inet6(r3, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0))
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:24:24 executing program 5:
r0 = socket(0x10, 0x0, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getuid()
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r5, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x1f00, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)
fchmod(r3, 0xe5)

[ 1789.355633] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'.
16:24:24 executing program 1:
r0 = socket(0x10, 0x0, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getuid()
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r5, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x1000000, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)
fchmod(r3, 0xe5)

16:24:24 executing program 2:
r0 = socket(0x10, 0x2, 0x0)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dc", 0x1c)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=<r3=>0x0)
wait4(r3, 0x0, 0xa0000000, 0x0)
pipe(&(0x7f00000004c0))
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x0, 0x0, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

[ 1789.531342] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'.
16:24:24 executing program 5:
r0 = socket(0x10, 0x0, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getuid()
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r5, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x1f00, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)
fchmod(r3, 0xe5)

16:24:24 executing program 0:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, 0x0)
pipe(&(0x7f00000004c0))
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x100000000000000, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:24:24 executing program 3:
r0 = socket(0x10, 0x0, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getuid()
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r5, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x4000000000000000, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)
fchmod(r3, 0xe5)

[ 1789.672018] protocol 88fb is buggy, dev hsr_slave_0
[ 1789.677190] protocol 88fb is buggy, dev hsr_slave_1
16:24:24 executing program 4:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dc", 0x1c)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000240)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
geteuid()
ioctl$VT_RELDISP(r3, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getpeername$inet6(r3, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f00000002c0)={0x0, 0x0, @ioapic={0x5000, 0x65bf, 0x9, 0x800000000000, 0x0, [{0x15, 0xece, 0x5, [], 0x3}, {0x3, 0x5, 0x38c2588d, [], 0x2}, {0x200, 0x64, 0x20, [], 0x8}, {0x8, 0x8000, 0x1, [], 0x8}, {0x2, 0x5, 0x8, [], 0xfffffffffffff7e4}, {0x8, 0x0, 0x2, [], 0x63}, {0x8000, 0x7, 0x80, [], 0x41}, {0x100000001, 0x1e5c, 0xd72, [], 0x5}, {0x0, 0x4f, 0x7}, {0x9, 0x6, 0x1, [], 0x5}, {0x0, 0x0, 0x4, [], 0x5b}, {0xffffffffffffffe1, 0x974, 0x9, [], 0xf7ba}, {0x9, 0x3ff, 0xfcb9, [], 0x5}, {0x100, 0x1e32, 0x4, [], 0x6}, {0x2, 0x0, 0x8, [], 0x8}, {0x8, 0x8, 0x7, [], 0x800}, {0x7ff, 0xfffffffffffffff8, 0x8001, [], 0x4}, {0x87, 0x101, 0x8, [], 0x1}, {0x9, 0x4, 0x220, [], 0x400}, {0x3ff, 0x1f, 0x17, [], 0x101}, {0x6a, 0x7, 0x0, [], 0x2}, {0x9, 0x1, 0xf0, [], 0x800}, {0x9, 0x2, 0x3f, [], 0x5}, {0x7ff, 0x74, 0xf400000000000000, [], 0xea}]}})
pipe(&(0x7f00000004c0))
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r5, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r5, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

[ 1789.784114] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'.
16:24:24 executing program 5:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, 0x0)
pipe(&(0x7f00000004c0))
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x3000000000000, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

[ 1789.896633] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.5'.
16:24:24 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dc", 0x1c)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000240)={<r3=>0xffffffffffffffff})
geteuid()
ioctl$VT_RELDISP(r3, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getpeername$inet6(r3, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0))
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6, 0x700000000000000]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:24:24 executing program 2:
r0 = socket(0x10, 0x2, 0x0)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dc", 0x1c)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
geteuid()
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0))
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = socket(0xa, 0x3, 0x8)
ioctl$VIDIOC_G_FREQUENCY(0xffffffffffffffff, 0xc02c5638, 0x0)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0)
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f00000007c0)=[0x9, 0xfd])
recvmmsg(r0, &(0x7f0000004280)=[{{&(0x7f0000000000)=@nl=@proc, 0x80, &(0x7f00000019c0)=[{&(0x7f00000002c0)=""/162, 0xa2}, {&(0x7f0000000380)=""/246, 0xf6}, {&(0x7f0000000580)=""/211, 0xd3}, {&(0x7f0000000800)=""/4096, 0x1000}, {&(0x7f0000000680)=""/147, 0x93}, {&(0x7f0000000740)=""/103, 0x67}, {&(0x7f0000001800)=""/96, 0x60}, {&(0x7f0000001880)=""/169, 0xa9}, {&(0x7f0000001940)=""/113, 0x71}], 0x9, &(0x7f0000001a80)=""/174, 0xae}, 0x80000001}, {{&(0x7f0000001b40)=@nfc_llcp, 0x80, &(0x7f0000000200)=[{&(0x7f0000001bc0)=""/117, 0x75}, {&(0x7f0000001c40)=""/4096, 0x1000}, {&(0x7f0000002c40)=""/109, 0x6d}], 0x3, &(0x7f0000002cc0)=""/100, 0x64}, 0x8}, {{&(0x7f0000002d40)=@ll={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f0000004180)=[{&(0x7f0000002dc0)=""/137, 0x89}, {&(0x7f0000002e80)=""/4096, 0x1000}, {&(0x7f0000000480)=""/14, 0xe}, {&(0x7f0000003e80)=""/172, 0xac}, {&(0x7f0000003f40)=""/163, 0xa3}, {&(0x7f0000004000)=""/150, 0x96}, {&(0x7f00000040c0)=""/154, 0x9a}], 0x7, &(0x7f0000004200)=""/103, 0x67}, 0x10000}], 0x3, 0x0, 0x0)
setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000004340)={r6, 0x1, 0x6, @local}, 0x10)
ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000180)={'bridge0\x00\x00\x00\x02k\x00'})
dup3(r5, r4, 0x0)
migrate_pages(0x0, 0x0, 0x0, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

[ 1789.997754] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'.
16:24:25 executing program 4:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dc", 0x1c)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f00000002c0)={<r1=>0x0, 0x9b, "b205b63861bb0239b4bc3d4f58edc9685ee87301be067a27447e534a58795ffe87c112822ff1e9c6c3f194896993e55a9fe4aed5557ca84fbc986506260ebbbe8a270d36dc06ce923ea6c01f6f89cb82fa6293c123ccb97c8cde83a5d2fc77df132aab0e7657d1e5a47aff37c7efaf51552d5840743691f399e24836de7f86aa9b325bb6dda57d6f0f10baebd480ee76f0711b90439d0e8a610a4e"}, &(0x7f0000000000)=0xa3)
getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000200)={r1, 0x9, 0x30, 0xdb69, 0xb0c}, &(0x7f0000000380)=0x18)
r2 = syz_open_dev$sndpcmc(&(0x7f0000000480)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r2, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000240)={<r4=>0xffffffffffffffff})
geteuid()
ioctl$VT_RELDISP(r4, 0x5605)
fgetxattr(r2, &(0x7f00000003c0)=@known='com.apple.FinderInfo\x00', &(0x7f0000000400)=""/14, 0xe)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getpeername$inet6(r4, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0)={<r5=>0xffffffffffffffff})
ioctl$TIOCLINUX7(r5, 0x541c, &(0x7f0000000440)={0x7, 0x5})
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r6, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r6, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r3, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
r7 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl$SNDRV_TIMER_IOCTL_PAUSE(r7, 0x54a3)
ioctl(r2, 0x4161, 0x0)

16:24:25 executing program 3:
r0 = socket(0x10, 0x0, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getuid()
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r5, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x8906000000000000, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)
fchmod(r3, 0xe5)

16:24:25 executing program 5:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, 0x0)
pipe(&(0x7f00000004c0))
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x3000000000000, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

[ 1790.151838] protocol 88fb is buggy, dev hsr_slave_0
[ 1790.152365] protocol 88fb is buggy, dev hsr_slave_0
[ 1790.156976] protocol 88fb is buggy, dev hsr_slave_1
[ 1790.162509] protocol 88fb is buggy, dev hsr_slave_1
[ 1790.173327] protocol 88fb is buggy, dev hsr_slave_0
[ 1790.178889] protocol 88fb is buggy, dev hsr_slave_1
16:24:25 executing program 0:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, 0x0)
pipe(&(0x7f00000004c0))
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x200000000000000, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

[ 1790.212772] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1790.255350] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 1790.373650] bridge0: port 3(gretap0) entered disabled state
[ 1790.379590] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1790.386105] bridge0: port 1(bridge_slave_0) entered disabled state
16:24:25 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dc", 0x1c)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000240)={<r3=>0xffffffffffffffff})
geteuid()
ioctl$VT_RELDISP(r3, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getpeername$inet6(r3, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0))
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6, 0x700000000000000]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:24:25 executing program 5:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, 0x0)
pipe(&(0x7f00000004c0))
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x3000000000000, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

[ 1790.645231] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 1790.721529] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.5'.
16:24:25 executing program 0:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, 0x0)
pipe(&(0x7f00000004c0))
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x300000000000000, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:24:25 executing program 4:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dc", 0x1c)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000240)={<r3=>0xffffffffffffffff})
geteuid()
ioctl$VT_RELDISP(r3, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getpeername$inet6(r3, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r5, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000000})
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r4, 0x50, &(0x7f00000002c0)={0x0, <r6=>0x0}}, 0x10)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000380)=r6, 0x4)
ioctl$sock_inet6_SIOCADDRT(r5, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={r5, 0x28}, 0x10)
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:24:25 executing program 3:
r0 = socket(0x10, 0x0, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getuid()
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r5, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0xfeffffff00000000, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)
fchmod(r3, 0xe5)

16:24:25 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x6, 0x0)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x109000, 0x0)
ioctl$TCSETS(r1, 0x5402, &(0x7f00000000c0)={0x2, 0x8000, 0x5, 0x8f36, 0xa, 0x0, 0x9, 0x5, 0x7fff, 0x7000000000000, 0x200, 0xa6})
setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000080)=0x1000, 0x4)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
write$FUSE_POLL(r0, &(0x7f0000000000)={0x18}, 0x18)
read(r0, 0x0, 0xffffff00)

16:24:26 executing program 2:
r0 = socket(0x10, 0x2, 0x0)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dc", 0x1c)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x4)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0xd000)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0))
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x0, 0x0, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:24:26 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dc", 0x1c)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000240)={<r3=>0xffffffffffffffff})
geteuid()
ioctl$VT_RELDISP(r3, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getpeername$inet6(r3, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0))
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6, 0x700000000000000]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:24:26 executing program 5:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dc", 0x1c)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000240)={<r3=>0xffffffffffffffff})
geteuid()
ioctl$VT_RELDISP(r3, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getpeername$inet6(r3, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0))
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6, 0x100000000000000]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:24:26 executing program 3:
r0 = socket(0x10, 0x0, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getuid()
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r5, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0xffffff7f00000000, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)
fchmod(r3, 0xe5)

16:24:26 executing program 4:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dc", 0x1c)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000240)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
geteuid()
ioctl$VT_RELDISP(r3, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getpeername$inet6(r3, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x2b, 0x4, 0x0, {0x5, 0x0, 0x3, 0x0, [0x0, 0x0, 0x0]}}, 0x2b)
pipe(&(0x7f00000004c0))
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r5, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r5, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
ioctl$RTC_VL_CLR(r4, 0x7014)
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:24:26 executing program 0:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, 0x0)
pipe(&(0x7f00000004c0))
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x400000000000000, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:24:26 executing program 1:
r0 = socket(0x10, 0x2, 0x0)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dc", 0x1c)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0))
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000617})
ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x0, 0x0, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:24:26 executing program 5 (fault-call:4 fault-nth:0):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$UI_DEV_DESTROY(r0, 0x5502)

16:24:26 executing program 2:
r0 = socket(0x10, 0x2, 0x0)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dc", 0x1c)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
ioctl$PIO_UNIMAPCLR(r3, 0x4b68, &(0x7f0000000000)={0xfff, 0x7f, 0x1})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x0, 0x0, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

[ 1791.934614] input: syz0 as /devices/virtual/input/input63
[ 1791.967957] FAULT_INJECTION: forcing a failure.
[ 1791.967957] name failslab, interval 1, probability 0, space 0, times 0
16:24:27 executing program 0:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, 0x0)
pipe(&(0x7f00000004c0))
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x403000000000000, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

[ 1792.017235] CPU: 1 PID: 30667 Comm: syz-executor.5 Not tainted 5.0.0+ #12
[ 1792.024236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1792.033603] Call Trace:
[ 1792.036215]  dump_stack+0x172/0x1f0
[ 1792.039868]  should_fail.cold+0xa/0x15
[ 1792.043780]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[ 1792.048905]  ? ___might_sleep+0x163/0x280
[ 1792.048931]  __should_failslab+0x121/0x190
[ 1792.048956]  should_failslab+0x9/0x14
[ 1792.048977]  __kmalloc_track_caller+0x2d8/0x740
[ 1792.057368]  ? pointer+0x910/0x910
[ 1792.057390]  ? debug_smp_processor_id+0x3c/0x280
[ 1792.057408]  ? kasprintf+0xbb/0xf0
[ 1792.057427]  kvasprintf+0xc8/0x170
[ 1792.057445]  ? bust_spinlocks+0xe0/0xe0
[ 1792.057477]  ? debug_check_no_obj_freed+0x200/0x464
[ 1792.077747]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1792.077771]  kasprintf+0xbb/0xf0
[ 1792.077788]  ? kvasprintf_const+0x190/0x190
[ 1792.077808]  ? perf_trace_lock+0xeb/0x510
[ 1792.077831]  ? __lockdep_free_key_range+0x120/0x120
[ 1792.077852]  ? input_default_getkeycode+0x520/0x520
[ 1792.085353]  input_devnode+0x4c/0x90
[ 1792.085372]  device_get_devnode+0x175/0x2e0
[ 1792.085389]  ? refcount_sub_and_test_checked+0x154/0x200
[ 1792.085412]  devtmpfs_delete_node+0xaa/0x1a0
[ 1792.085431]  ? devtmpfs_create_node+0x250/0x250
[ 1792.085454]  ? __device_link_free_srcu+0x120/0x120
[ 1792.096085]  ? refcount_dec_and_test_checked+0x1b/0x20
[ 1792.096103]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[ 1792.096119]  ? kobject_put+0x84/0xe0
[ 1792.096138]  ? __device_link_free_srcu+0x120/0x120
16:24:27 executing program 3:
r0 = socket(0x10, 0x0, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getuid()
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r5, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)
fchmod(r3, 0xe5)

[ 1792.096156]  ? klist_children_put+0x4a/0x60
[ 1792.096172]  ? klist_put+0xdc/0x180
[ 1792.096195]  device_del+0x8b4/0xc40
[ 1792.096221]  ? __device_links_no_driver+0x250/0x250
[ 1792.096250]  ? mark_held_locks+0xa4/0xf0
[ 1792.096280]  ? _raw_spin_unlock_irq+0x28/0x90
[ 1792.096295]  ? __input_unregister_device+0x153/0x4a0
[ 1792.096341]  ? _raw_spin_unlock_irq+0x28/0x90
[ 1792.096364]  cdev_device_del+0x1a/0x80
[ 1792.096382]  evdev_disconnect+0x42/0xb0
[ 1792.104070]  __input_unregister_device+0x200/0x4a0
[ 1792.104100]  input_unregister_device+0xc5/0x110
[ 1792.104121]  uinput_destroy_device+0x1f4/0x250
[ 1792.104148]  uinput_ioctl_handler.isra.0+0x886/0x1cc0
[ 1792.104165]  ? tomoyo_domain+0xc5/0x160
[ 1792.104187]  ? uinput_request_submit.part.0+0x2d0/0x2d0
[ 1792.104207]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1792.104223]  ? tomoyo_path_number_perm+0x263/0x520
[ 1792.104236]  ? perf_trace_lock+0xeb/0x510
[ 1792.104254]  ? tomoyo_execute_permission+0x4a0/0x4a0
[ 1792.104271]  ? __lockdep_free_key_range+0x120/0x120
[ 1792.104296]  ? find_held_lock+0x35/0x130
[ 1792.104338]  uinput_ioctl+0x4a/0x60
[ 1792.104355]  ? uinput_compat_ioctl+0x90/0x90
[ 1792.104373]  do_vfs_ioctl+0xd6e/0x1390
[ 1792.104397]  ? ioctl_preallocate+0x210/0x210
[ 1792.104415]  ? __fget+0x367/0x540
[ 1792.104437]  ? ksys_dup3+0x3e0/0x3e0
[ 1792.104455]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[ 1792.104478]  ? tomoyo_file_ioctl+0x23/0x30
[ 1792.104495]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1792.104511]  ? security_file_ioctl+0x93/0xc0
[ 1792.104532]  ksys_ioctl+0xab/0xd0
[ 1792.104554]  __x64_sys_ioctl+0x73/0xb0
[ 1792.104575]  do_syscall_64+0x103/0x610
[ 1792.104598]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1792.104611] RIP: 0033:0x457f29
[ 1792.104628] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1792.104637] RSP: 002b:00007f4d5b709c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1792.104653] RAX: ffffffffffffffda RBX: 00007f4d5b709c90 RCX: 0000000000457f29
[ 1792.104663] RDX: 0000000000000000 RSI: 0000000000005502 RDI: 0000000000000003
[ 1792.104673] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000
[ 1792.104683] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4d5b70a6d4
[ 1792.104693] R13: 00000000004c25ca R14: 00000000004d5010 R15: 0000000000000005
16:24:27 executing program 5 (fault-call:4 fault-nth:1):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$UI_DEV_DESTROY(r0, 0x5502)

[ 1792.523973] input: syz0 as /devices/virtual/input/input64
16:24:27 executing program 4:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dc", 0x1c)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000240)={<r3=>0xffffffffffffffff})
geteuid()
ioctl$VT_RELDISP(r3, 0x5605)
r4 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
ioctl$RTC_WKALM_RD(r4, 0x80287010, &(0x7f0000000200))
getpeername$inet6(r3, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r6, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r6, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
setsockopt$netlink_NETLINK_NO_ENOBUFS(r5, 0x10e, 0x5, &(0x7f00000002c0)=0x9, 0x4)
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)
write$FUSE_INTERRUPT(r1, &(0x7f0000000000)={0x10, 0x0, 0x1}, 0x10)

[ 1792.586493] FAULT_INJECTION: forcing a failure.
[ 1792.586493] name failslab, interval 1, probability 0, space 0, times 0
16:24:27 executing program 1:
r0 = socket(0x10, 0x2, 0x0)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dc", 0x1c)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0))
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000617})
ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x0, 0x0, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

[ 1792.696028] CPU: 0 PID: 30788 Comm: syz-executor.5 Not tainted 5.0.0+ #12
[ 1792.703018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1792.712376] Call Trace:
[ 1792.714985]  dump_stack+0x172/0x1f0
[ 1792.718645]  should_fail.cold+0xa/0x15
[ 1792.722605]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[ 1792.727738]  ? ___might_sleep+0x163/0x280
[ 1792.731901]  __should_failslab+0x121/0x190
[ 1792.736142]  should_failslab+0x9/0x14
[ 1792.739948]  kmem_cache_alloc_trace+0x2d1/0x760
[ 1792.744606]  ? mutex_trylock+0x1e0/0x1e0
[ 1792.748679]  ? kasan_check_write+0x14/0x20
[ 1792.752922]  kobject_uevent_env+0x2fb/0x1030
[ 1792.757334]  ? wait_for_completion+0x440/0x440
[ 1792.761914]  kobject_uevent+0x20/0x26
[ 1792.765724]  device_del+0x758/0xc40
[ 1792.769448]  ? __device_links_no_driver+0x250/0x250
[ 1792.774494]  ? _raw_spin_unlock_irq+0x28/0x90
[ 1792.778997]  ? __input_unregister_device+0x153/0x4a0
[ 1792.784104]  ? _raw_spin_unlock_irq+0x28/0x90
[ 1792.788629]  cdev_device_del+0x1a/0x80
[ 1792.792539]  evdev_disconnect+0x42/0xb0
[ 1792.796533]  __input_unregister_device+0x200/0x4a0
[ 1792.801482]  input_unregister_device+0xc5/0x110
[ 1792.806976]  uinput_destroy_device+0x1f4/0x250
[ 1792.807003]  uinput_ioctl_handler.isra.0+0x886/0x1cc0
[ 1792.807022]  ? tomoyo_domain+0xc5/0x160
[ 1792.820986]  ? uinput_request_submit.part.0+0x2d0/0x2d0
[ 1792.826369]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1792.831933]  ? tomoyo_path_number_perm+0x263/0x520
[ 1792.836878]  ? perf_trace_lock+0xeb/0x510
[ 1792.841030]  ? tomoyo_execute_permission+0x4a0/0x4a0
[ 1792.846142]  ? __lockdep_free_key_range+0x120/0x120
[ 1792.851166]  ? find_held_lock+0x35/0x130
[ 1792.855239]  uinput_ioctl+0x4a/0x60
[ 1792.858898]  ? uinput_compat_ioctl+0x90/0x90
[ 1792.863322]  do_vfs_ioctl+0xd6e/0x1390
[ 1792.867378]  ? ioctl_preallocate+0x210/0x210
[ 1792.871799]  ? __fget+0x367/0x540
[ 1792.875244]  ? ksys_dup3+0x3e0/0x3e0
[ 1792.878951]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[ 1792.884494]  ? tomoyo_file_ioctl+0x23/0x30
[ 1792.888729]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1792.894287]  ? security_file_ioctl+0x93/0xc0
[ 1792.898722]  ksys_ioctl+0xab/0xd0
[ 1792.902225]  __x64_sys_ioctl+0x73/0xb0
[ 1792.906159]  do_syscall_64+0x103/0x610
[ 1792.910081]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1792.915278] RIP: 0033:0x457f29
[ 1792.918480] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1792.937401] RSP: 002b:00007f4d5b709c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
16:24:27 executing program 5 (fault-call:4 fault-nth:2):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$UI_DEV_DESTROY(r0, 0x5502)

[ 1792.945096] RAX: ffffffffffffffda RBX: 00007f4d5b709c90 RCX: 0000000000457f29
[ 1792.952357] RDX: 0000000000000000 RSI: 0000000000005502 RDI: 0000000000000003
[ 1792.959632] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000
[ 1792.966948] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4d5b70a6d4
[ 1792.966958] R13: 00000000004c25ca R14: 00000000004d5010 R15: 0000000000000005
[ 1793.064203] input: syz0 as /devices/virtual/input/input65
[ 1793.083433] FAULT_INJECTION: forcing a failure.
[ 1793.083433] name failslab, interval 1, probability 0, space 0, times 0
[ 1793.095490] CPU: 0 PID: 30905 Comm: syz-executor.5 Not tainted 5.0.0+ #12
[ 1793.102442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1793.111800] Call Trace:
[ 1793.114397]  dump_stack+0x172/0x1f0
[ 1793.118042]  should_fail.cold+0xa/0x15
[ 1793.121925]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[ 1793.127025]  ? ___might_sleep+0x163/0x280
[ 1793.131168]  __should_failslab+0x121/0x190
[ 1793.135396]  should_failslab+0x9/0x14
[ 1793.139209]  __kmalloc+0x2dc/0x740
[ 1793.142758]  ? kobject_uevent_env+0x2fb/0x1030
[ 1793.147363]  ? rcu_read_lock_sched_held+0x110/0x130
[ 1793.152382]  ? kobject_get_path+0xc4/0x1b0
[ 1793.156614]  kobject_get_path+0xc4/0x1b0
[ 1793.160670]  kobject_uevent_env+0x31f/0x1030
[ 1793.165068]  ? wait_for_completion+0x440/0x440
[ 1793.169646]  kobject_uevent+0x20/0x26
[ 1793.173446]  device_del+0x758/0xc40
[ 1793.177071]  ? __device_links_no_driver+0x250/0x250
[ 1793.182082]  ? _raw_spin_unlock_irq+0x28/0x90
[ 1793.186568]  ? __input_unregister_device+0x153/0x4a0
[ 1793.191667]  ? _raw_spin_unlock_irq+0x28/0x90
[ 1793.196170]  cdev_device_del+0x1a/0x80
[ 1793.200048]  evdev_disconnect+0x42/0xb0
[ 1793.204025]  __input_unregister_device+0x200/0x4a0
[ 1793.208972]  input_unregister_device+0xc5/0x110
[ 1793.213652]  uinput_destroy_device+0x1f4/0x250
[ 1793.218226]  uinput_ioctl_handler.isra.0+0x886/0x1cc0
[ 1793.223405]  ? tomoyo_domain+0xc5/0x160
[ 1793.227375]  ? uinput_request_submit.part.0+0x2d0/0x2d0
[ 1793.232730]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1793.238258]  ? tomoyo_path_number_perm+0x263/0x520
[ 1793.243176]  ? perf_trace_lock+0xeb/0x510
[ 1793.247324]  ? tomoyo_execute_permission+0x4a0/0x4a0
[ 1793.252418]  ? __lockdep_free_key_range+0x120/0x120
[ 1793.257429]  ? find_held_lock+0x35/0x130
[ 1793.261484]  uinput_ioctl+0x4a/0x60
[ 1793.265110]  ? uinput_compat_ioctl+0x90/0x90
[ 1793.269524]  do_vfs_ioctl+0xd6e/0x1390
[ 1793.273404]  ? ioctl_preallocate+0x210/0x210
[ 1793.277822]  ? __fget+0x367/0x540
[ 1793.281277]  ? ksys_dup3+0x3e0/0x3e0
[ 1793.284987]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[ 1793.290518]  ? tomoyo_file_ioctl+0x23/0x30
[ 1793.294742]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1793.300280]  ? security_file_ioctl+0x93/0xc0
[ 1793.304702]  ksys_ioctl+0xab/0xd0
[ 1793.308156]  __x64_sys_ioctl+0x73/0xb0
[ 1793.312049]  do_syscall_64+0x103/0x610
[ 1793.315930]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1793.321104] RIP: 0033:0x457f29
[ 1793.324283] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1793.343212] RSP: 002b:00007f4d5b709c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1793.350927] RAX: ffffffffffffffda RBX: 00007f4d5b709c90 RCX: 0000000000457f29
[ 1793.358195] RDX: 0000000000000000 RSI: 0000000000005502 RDI: 0000000000000003
16:24:28 executing program 5 (fault-call:4 fault-nth:3):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$UI_DEV_DESTROY(r0, 0x5502)

[ 1793.365452] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000
[ 1793.372719] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4d5b70a6d4
[ 1793.379988] R13: 00000000004c25ca R14: 00000000004d5010 R15: 0000000000000005
[ 1793.454111] input: syz0 as /devices/virtual/input/input66
[ 1793.466021] FAULT_INJECTION: forcing a failure.
[ 1793.466021] name failslab, interval 1, probability 0, space 0, times 0
[ 1793.493819] CPU: 0 PID: 30909 Comm: syz-executor.5 Not tainted 5.0.0+ #12
[ 1793.500805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1793.510171] Call Trace:
[ 1793.512781]  dump_stack+0x172/0x1f0
[ 1793.516438]  should_fail.cold+0xa/0x15
[ 1793.520339]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[ 1793.525438]  ? ___might_sleep+0x163/0x280
[ 1793.529601]  __should_failslab+0x121/0x190
[ 1793.533843]  should_failslab+0x9/0x14
[ 1793.537634]  __kmalloc+0x2dc/0x740
[ 1793.541166]  ? kobject_uevent_env+0x2fb/0x1030
[ 1793.546221]  ? rcu_read_lock_sched_held+0x110/0x130
[ 1793.546240]  ? kobject_get_path+0xc4/0x1b0
[ 1793.546261]  kobject_get_path+0xc4/0x1b0
[ 1793.546281]  kobject_uevent_env+0x31f/0x1030
[ 1793.546310]  ? wait_for_completion+0x440/0x440
[ 1793.546338]  kobject_uevent+0x20/0x26
[ 1793.546359]  device_del+0x758/0xc40
[ 1793.546386]  ? __device_links_no_driver+0x250/0x250
[ 1793.546405]  ? _raw_spin_unlock_irq+0x28/0x90
[ 1793.546421]  ? __input_unregister_device+0x153/0x4a0
[ 1793.546437]  ? _raw_spin_unlock_irq+0x28/0x90
[ 1793.546457]  cdev_device_del+0x1a/0x80
[ 1793.546474]  evdev_disconnect+0x42/0xb0
[ 1793.546491]  __input_unregister_device+0x200/0x4a0
[ 1793.546511]  input_unregister_device+0xc5/0x110
[ 1793.546530]  uinput_destroy_device+0x1f4/0x250
[ 1793.546556]  uinput_ioctl_handler.isra.0+0x886/0x1cc0
[ 1793.546572]  ? tomoyo_domain+0xc5/0x160
[ 1793.546602]  ? uinput_request_submit.part.0+0x2d0/0x2d0
[ 1793.546621]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1793.546636]  ? tomoyo_path_number_perm+0x263/0x520
[ 1793.546651]  ? perf_trace_lock+0xeb/0x510
[ 1793.546669]  ? tomoyo_execute_permission+0x4a0/0x4a0
[ 1793.546687]  ? __lockdep_free_key_range+0x120/0x120
[ 1793.546711]  ? find_held_lock+0x35/0x130
[ 1793.546739]  uinput_ioctl+0x4a/0x60
[ 1793.546756]  ? uinput_compat_ioctl+0x90/0x90
[ 1793.546774]  do_vfs_ioctl+0xd6e/0x1390
[ 1793.546798]  ? ioctl_preallocate+0x210/0x210
[ 1793.546816]  ? __fget+0x367/0x540
[ 1793.546836]  ? ksys_dup3+0x3e0/0x3e0
[ 1793.546853]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[ 1793.546876]  ? tomoyo_file_ioctl+0x23/0x30
[ 1793.546892]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1793.546908]  ? security_file_ioctl+0x93/0xc0
[ 1793.546929]  ksys_ioctl+0xab/0xd0
[ 1793.546950]  __x64_sys_ioctl+0x73/0xb0
[ 1793.546971]  do_syscall_64+0x103/0x610
[ 1793.546994]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1793.547008] RIP: 0033:0x457f29
[ 1793.547024] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1793.547034] RSP: 002b:00007f4d5b709c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
16:24:28 executing program 5 (fault-call:4 fault-nth:4):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$UI_DEV_DESTROY(r0, 0x5502)

[ 1793.547049] RAX: ffffffffffffffda RBX: 00007f4d5b709c90 RCX: 0000000000457f29
[ 1793.547059] RDX: 0000000000000000 RSI: 0000000000005502 RDI: 0000000000000003
[ 1793.547069] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000
[ 1793.547078] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4d5b70a6d4
[ 1793.547088] R13: 00000000004c25ca R14: 00000000004d5010 R15: 0000000000000005
[ 1793.831793] net_ratelimit: 16 callbacks suppressed
[ 1793.831801] protocol 88fb is buggy, dev hsr_slave_0
[ 1793.842128] protocol 88fb is buggy, dev hsr_slave_1
16:24:28 executing program 2:
r0 = socket(0x10, 0x2, 0x0)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dc", 0x1c)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0))
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
seccomp(0x0, 0x1, &(0x7f0000000200)={0x8, &(0x7f0000000040)=[{0x7, 0x31b, 0x1, 0x1}, {0xff, 0x6, 0x80000000, 0x3ff}, {0x4, 0x9, 0xfffffffffffff4d5, 0xfffffffffffffffe}, {0x0, 0x309, 0x3, 0x9}, {0x7fffffff, 0x20, 0xc517}, {0xfe0b, 0xf8a, 0x7fffffff, 0xffffffff}, {0x3f, 0x7ff, 0xfffffffffffffff9, 0x40}, {0x4, 0x39fc, 0x1ff, 0x65a30854}]})
ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000000)={@host})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x0, 0x0, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:24:28 executing program 3:
r0 = socket(0x10, 0x0, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getuid()
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r5, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)
fchmod(r3, 0xe5)

[ 1793.902367] input: syz0 as /devices/virtual/input/input67
16:24:28 executing program 0:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, 0x0)
pipe(&(0x7f00000004c0))
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x500000000000000, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:24:28 executing program 4:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dc", 0x1c)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000001700)="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")
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000240)={<r3=>0xffffffffffffffff})
geteuid()
r4 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getpeername$inet6(r4, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x3b5)
r5 = add_key(&(0x7f0000000300)='ceph\x00', &(0x7f0000000340)={'syz', 0x3}, &(0x7f0000000380)="dbae8d791214d1a1b3e9878370536cfd689b9170a8db370eeed1377ece63630e9dc012adea7ee587b3f946f919547affc9fbabefcf024ca1a191398bd8a4564589e2e56d44d6b01d0d782bf5728b08acdd184f38c3ae3378f3f82a4ce4b8875570bec697988bf203e51a24d127d4ba52dc85335fd57b264cf93b8ab8f8bc245dbd394e4b702e63918b732d325c08db0105202ce88be7d0cbbcadcc9319de57cbf7b8a4b550a4a6cceead1d2b7a6935f6472c04ab11f04e83c47820", 0xbb, 0xfffffffffffffffb)
keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000440)={r5, 0x621a2350, 0x6}, &(0x7f0000000580)={'enc=', 'pkcs1', ' hash=', {'crct10dif\x00'}}, &(0x7f0000000600)="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", &(0x7f0000001600)="b4a43bdc44b2e73e5b15bc03f69a7cd4e8d923a7053956dfc8364beaee0dfdb81c52d45fa401abc03a7cb2a53610b1593b88e6da1e6ab5fac55c688a730e33d34e4d3cc3dbca4c11ca6d6212ae836f37569618a4ebf9d1bca863ac47b0e3f6739021c342d59b26015e2e546f702992490f193a41aefa024c0ce65b0740e581d2d7fbd1442ab86349fc523749298ba2d5b8d1ad887eb508c65d2e98f4693628dddc900271d9bf065c5859d57f5a8a23c655bb1cd2cd3cc5caaa4a2a02ce57a51acb7d02e7a9df")
pipe(&(0x7f00000004c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
setsockopt$inet6_tcp_int(r3, 0x6, 0x7, &(0x7f0000002700)=0x4, 0x4)
ioctl$sock_inet6_SIOCSIFADDR(r7, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r7, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(r0, 0x111, 0x4, 0x0, 0x4)
socket$inet(0x2, 0x1, 0x0)
ioctl(r1, 0x4161, 0x0)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000000)={<r8=>0x0}, &(0x7f0000000200)=0xc)
ioctl$TIOCSPGRP(r6, 0x5410, &(0x7f00000002c0)=r8)
setsockopt$RDS_CONG_MONITOR(r4, 0x114, 0x6, &(0x7f0000000480), 0x4)

[ 1793.996129] FAULT_INJECTION: forcing a failure.
[ 1793.996129] name failslab, interval 1, probability 0, space 0, times 0
[ 1794.060543] CPU: 1 PID: 30924 Comm: syz-executor.5 Not tainted 5.0.0+ #12
[ 1794.067524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1794.076992] Call Trace:
[ 1794.077018]  dump_stack+0x172/0x1f0
[ 1794.077045]  should_fail.cold+0xa/0x15
[ 1794.077070]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[ 1794.077103]  ? ___might_sleep+0x163/0x280
[ 1794.077129]  __should_failslab+0x121/0x190
[ 1794.077152]  should_failslab+0x9/0x14
[ 1794.077175]  __kmalloc_track_caller+0x2d8/0x740
[ 1794.077190]  ? pointer+0x910/0x910
[ 1794.077213]  ? kasprintf+0xbb/0xf0
[ 1794.077235]  kvasprintf+0xc8/0x170
[ 1794.077253]  ? bust_spinlocks+0xe0/0xe0
[ 1794.077278]  ? pointer+0x910/0x910
[ 1794.077313]  kasprintf+0xbb/0xf0
[ 1794.077334]  ? kvasprintf_const+0x190/0x190
[ 1794.077362]  ? cleanup_uevent_env+0x50/0x50
[ 1794.077392]  ? input_default_getkeycode+0x520/0x520
[ 1794.077408]  input_devnode+0x4c/0x90
[ 1794.077426]  device_get_devnode+0x175/0x2e0
[ 1794.077454]  dev_uevent+0x3e8/0x580
[ 1794.156481]  ? device_get_devnode+0x2e0/0x2e0
[ 1794.156502]  ? kobject_uevent_env+0x2fb/0x1030
[ 1794.156520]  ? rcu_read_lock_sched_held+0x110/0x130
[ 1794.156555]  ? device_get_devnode+0x2e0/0x2e0
[ 1794.156577]  kobject_uevent_env+0x487/0x1030
[ 1794.156594]  ? wait_for_completion+0x440/0x440
[ 1794.156623]  kobject_uevent+0x20/0x26
[ 1794.156643]  device_del+0x758/0xc40
[ 1794.156670]  ? __device_links_no_driver+0x250/0x250
[ 1794.156691]  ? _raw_spin_unlock_irq+0x28/0x90
[ 1794.156707]  ? __input_unregister_device+0x153/0x4a0
[ 1794.156723]  ? _raw_spin_unlock_irq+0x28/0x90
16:24:29 executing program 1:
r0 = socket(0x10, 0x2, 0x0)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dc", 0x1c)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0))
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000617})
ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x0, 0x0, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

[ 1794.156746]  cdev_device_del+0x1a/0x80
[ 1794.156765]  evdev_disconnect+0x42/0xb0
[ 1794.156785]  __input_unregister_device+0x200/0x4a0
[ 1794.156807]  input_unregister_device+0xc5/0x110
[ 1794.156828]  uinput_destroy_device+0x1f4/0x250
[ 1794.156855]  uinput_ioctl_handler.isra.0+0x886/0x1cc0
[ 1794.156871]  ? tomoyo_domain+0xc5/0x160
[ 1794.156894]  ? uinput_request_submit.part.0+0x2d0/0x2d0
[ 1794.156915]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1794.156931]  ? tomoyo_path_number_perm+0x263/0x520
[ 1794.156947]  ? perf_trace_lock+0xeb/0x510
[ 1794.156966]  ? tomoyo_execute_permission+0x4a0/0x4a0
[ 1794.156984]  ? __lockdep_free_key_range+0x120/0x120
[ 1794.157008]  ? find_held_lock+0x35/0x130
[ 1794.157038]  uinput_ioctl+0x4a/0x60
[ 1794.157054]  ? uinput_compat_ioctl+0x90/0x90
[ 1794.157073]  do_vfs_ioctl+0xd6e/0x1390
[ 1794.157104]  ? ioctl_preallocate+0x210/0x210
[ 1794.157122]  ? __fget+0x367/0x540
[ 1794.157145]  ? ksys_dup3+0x3e0/0x3e0
[ 1794.157164]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[ 1794.157187]  ? tomoyo_file_ioctl+0x23/0x30
[ 1794.157204]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1794.157220]  ? security_file_ioctl+0x93/0xc0
[ 1794.157241]  ksys_ioctl+0xab/0xd0
[ 1794.157263]  __x64_sys_ioctl+0x73/0xb0
[ 1794.157284]  do_syscall_64+0x103/0x610
[ 1794.157318]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1794.157333] RIP: 0033:0x457f29
[ 1794.157350] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1794.157359] RSP: 002b:00007f4d5b6c7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1794.157376] RAX: ffffffffffffffda RBX: 00007f4d5b6c7c90 RCX: 0000000000457f29
[ 1794.157385] RDX: 0000000000000000 RSI: 0000000000005502 RDI: 0000000000000003
[ 1794.157396] RBP: 000000000073c040 R08: 0000000000000000 R09: 0000000000000000
[ 1794.157406] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4d5b6c86d4
[ 1794.157416] R13: 00000000004c25ca R14: 00000000004d5010 R15: 0000000000000005
[ 1794.162569] __nla_parse: 6 callbacks suppressed
[ 1794.162578] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 1794.314127] protocol 88fb is buggy, dev hsr_slave_0
[ 1794.314639] protocol 88fb is buggy, dev hsr_slave_1
[ 1794.315357] protocol 88fb is buggy, dev hsr_slave_0
[ 1794.315567] protocol 88fb is buggy, dev hsr_slave_1
[ 1794.316362] protocol 88fb is buggy, dev hsr_slave_0
[ 1794.316627] protocol 88fb is buggy, dev hsr_slave_1
[ 1794.322149] protocol 88fb is buggy, dev hsr_slave_0
[ 1794.392752] protocol 88fb is buggy, dev hsr_slave_1
[ 1794.500312] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'.
16:24:29 executing program 5 (fault-call:4 fault-nth:5):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$UI_DEV_DESTROY(r0, 0x5502)

16:24:29 executing program 1 (fault-call:4 fault-nth:0):
r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001)
r2 = dup2(r1, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r0, &(0x7f0000000000)=[{0x22, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76)

[ 1794.608322] input: syz0 as /devices/virtual/input/input68
[ 1794.631689] FAULT_INJECTION: forcing a failure.
[ 1794.631689] name failslab, interval 1, probability 0, space 0, times 0
[ 1794.654629] CPU: 1 PID: 31049 Comm: syz-executor.5 Not tainted 5.0.0+ #12
[ 1794.661581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1794.670940] Call Trace:
[ 1794.673542]  dump_stack+0x172/0x1f0
[ 1794.677182]  should_fail.cold+0xa/0x15
[ 1794.681089]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[ 1794.686381]  ? ___might_sleep+0x163/0x280
[ 1794.690545]  __should_failslab+0x121/0x190
[ 1794.694796]  should_failslab+0x9/0x14
[ 1794.698611]  kmem_cache_alloc_node_trace+0x270/0x720
[ 1794.703751]  __kmalloc_node_track_caller+0x3d/0x70
16:24:29 executing program 3:
r0 = socket(0x10, 0x0, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getuid()
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r5, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)
fchmod(r3, 0xe5)

16:24:29 executing program 4:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dc", 0x1c)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
pipe(&(0x7f0000000000)={<r2=>0xffffffffffffffff})
r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000240)={<r4=>0xffffffffffffffff})
geteuid()
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r2, 0xc0a85352, &(0x7f00000002c0)={{0x5f, 0x1000}, 'port0\x00', 0x40, 0x20000, 0x6, 0x6316, 0x7, 0x7, 0x4cfdb1d1, 0x0, 0x1, 0x4})
ioctl$VT_RELDISP(r4, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getpeername$inet6(r4, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0))
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r5, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r5, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r3, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080)=0x3)
ioctl(r1, 0x4161, 0x0)

16:24:29 executing program 0:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, 0x0)
pipe(&(0x7f00000004c0))
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x600000000000000, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

[ 1794.708696]  __kmalloc_reserve.isra.0+0x40/0xf0
[ 1794.713384]  __alloc_skb+0x10b/0x5e0
[ 1794.717121]  ? skb_trim+0x190/0x190
[ 1794.720765]  ? kasan_check_read+0x11/0x20
[ 1794.724939]  alloc_uevent_skb+0x83/0x1e2
[ 1794.729022]  kobject_uevent_env+0xa63/0x1030
[ 1794.733443]  ? wait_for_completion+0x440/0x440
[ 1794.738050]  kobject_uevent+0x20/0x26
[ 1794.741877]  device_del+0x758/0xc40
[ 1794.745530]  ? __device_links_no_driver+0x250/0x250
[ 1794.750567]  ? _raw_spin_unlock_irq+0x28/0x90
[ 1794.755083]  ? __input_unregister_device+0x153/0x4a0
[ 1794.760438]  ? _raw_spin_unlock_irq+0x28/0x90
[ 1794.764948]  cdev_device_del+0x1a/0x80
[ 1794.768880]  evdev_disconnect+0x42/0xb0
[ 1794.773488]  __input_unregister_device+0x200/0x4a0
[ 1794.777609] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 1794.778431]  input_unregister_device+0xc5/0x110
[ 1794.791653]  uinput_destroy_device+0x1f4/0x250
[ 1794.796264]  uinput_ioctl_handler.isra.0+0x886/0x1cc0
[ 1794.801476]  ? tomoyo_domain+0xc5/0x160
[ 1794.805467]  ? uinput_request_submit.part.0+0x2d0/0x2d0
[ 1794.810845]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1794.816393]  ? tomoyo_path_number_perm+0x263/0x520
[ 1794.821353]  ? perf_trace_lock+0xeb/0x510
[ 1794.825514]  ? tomoyo_execute_permission+0x4a0/0x4a0
[ 1794.825532]  ? __lockdep_free_key_range+0x120/0x120
[ 1794.825557]  ? find_held_lock+0x35/0x130
[ 1794.825586]  uinput_ioctl+0x4a/0x60
[ 1794.825628]  ? uinput_compat_ioctl+0x90/0x90
[ 1794.825660]  do_vfs_ioctl+0xd6e/0x1390
[ 1794.825696]  ? ioctl_preallocate+0x210/0x210
[ 1794.856187]  ? __fget+0x367/0x540
[ 1794.859664]  ? ksys_dup3+0x3e0/0x3e0
[ 1794.863397]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[ 1794.869464]  ? tomoyo_file_ioctl+0x23/0x30
[ 1794.873710]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1794.873727]  ? security_file_ioctl+0x93/0xc0
[ 1794.873749]  ksys_ioctl+0xab/0xd0
[ 1794.873772]  __x64_sys_ioctl+0x73/0xb0
[ 1794.873793]  do_syscall_64+0x103/0x610
[ 1794.873818]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1794.873830] RIP: 0033:0x457f29
[ 1794.873848] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1794.873858] RSP: 002b:00007f4d5b709c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1794.873874] RAX: ffffffffffffffda RBX: 00007f4d5b709c90 RCX: 0000000000457f29
[ 1794.873883] RDX: 0000000000000000 RSI: 0000000000005502 RDI: 0000000000000003
[ 1794.873894] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000
16:24:29 executing program 2:
r0 = socket(0x10, 0x2, 0x0)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dc", 0x1c)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x3, 0x4)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0))
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x0, 0x0, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

16:24:29 executing program 1:
r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001)
r2 = dup2(r1, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r0, &(0x7f0000000000)=[{0x22, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76)

[ 1794.873904] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4d5b70a6d4
[ 1794.873914] R13: 00000000004c25ca R14: 00000000004d5010 R15: 0000000000000005
16:24:30 executing program 5 (fault-call:4 fault-nth:6):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$UI_DEV_DESTROY(r0, 0x5502)

[ 1795.066530] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 1795.146230] input: syz0 as /devices/virtual/input/input69
16:24:30 executing program 1:
r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001)
r2 = dup2(r1, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r0, &(0x7f0000000000)=[{0x5, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76)

16:24:30 executing program 3:
r0 = socket(0x10, 0x0, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getuid()
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r5, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)
fchmod(r3, 0xe5)

[ 1795.198964] FAULT_INJECTION: forcing a failure.
[ 1795.198964] name failslab, interval 1, probability 0, space 0, times 0
[ 1795.213380] CPU: 1 PID: 31176 Comm: syz-executor.5 Not tainted 5.0.0+ #12
[ 1795.221056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1795.221065] Call Trace:
[ 1795.221098]  dump_stack+0x172/0x1f0
[ 1795.221127]  should_fail.cold+0xa/0x15
[ 1795.221151]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[ 1795.245717]  ? ___might_sleep+0x163/0x280
[ 1795.245741]  __should_failslab+0x121/0x190
[ 1795.245763]  should_failslab+0x9/0x14
[ 1795.245781]  kmem_cache_alloc+0x2b2/0x6f0
[ 1795.245799]  ? refcount_dec_and_mutex_lock+0x90/0x90
[ 1795.245815]  ? lock_downgrade+0x880/0x880
[ 1795.245843]  skb_clone+0x150/0x3b0
[ 1795.245866]  netlink_broadcast_filtered+0x870/0xb20
[ 1795.280121]  netlink_broadcast+0x3a/0x50
[ 1795.284227]  kobject_uevent_env+0xa94/0x1030
[ 1795.288647]  ? wait_for_completion+0x440/0x440
[ 1795.293267]  kobject_uevent+0x20/0x26
[ 1795.297115]  device_del+0x758/0xc40
[ 1795.300789]  ? __device_links_no_driver+0x250/0x250
[ 1795.305820]  ? _raw_spin_unlock_irq+0x28/0x90
[ 1795.310359]  ? __input_unregister_device+0x153/0x4a0
[ 1795.315489]  ? _raw_spin_unlock_irq+0x28/0x90
[ 1795.320020]  cdev_device_del+0x1a/0x80
[ 1795.323949]  evdev_disconnect+0x42/0xb0
[ 1795.327949]  __input_unregister_device+0x200/0x4a0
[ 1795.332913]  input_unregister_device+0xc5/0x110
[ 1795.337656]  uinput_destroy_device+0x1f4/0x250
[ 1795.342265]  uinput_ioctl_handler.isra.0+0x886/0x1cc0
[ 1795.347494]  ? tomoyo_domain+0xc5/0x160
[ 1795.351517]  ? uinput_request_submit.part.0+0x2d0/0x2d0
[ 1795.356908]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1795.362476]  ? tomoyo_path_number_perm+0x263/0x520
[ 1795.367421]  ? perf_trace_lock+0xeb/0x510
[ 1795.371584]  ? tomoyo_execute_permission+0x4a0/0x4a0
[ 1795.376703]  ? __lockdep_free_key_range+0x120/0x120
[ 1795.381739]  ? find_held_lock+0x35/0x130
[ 1795.385836]  uinput_ioctl+0x4a/0x60
[ 1795.389476]  ? uinput_compat_ioctl+0x90/0x90
[ 1795.393902]  do_vfs_ioctl+0xd6e/0x1390
16:24:30 executing program 1:
r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001)
r2 = dup2(r1, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r0, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76)

[ 1795.397811]  ? ioctl_preallocate+0x210/0x210
[ 1795.402243]  ? __fget+0x367/0x540
[ 1795.405717]  ? ksys_dup3+0x3e0/0x3e0
[ 1795.409452]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[ 1795.415034]  ? tomoyo_file_ioctl+0x23/0x30
[ 1795.419285]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1795.424860]  ? security_file_ioctl+0x93/0xc0
[ 1795.429285]  ksys_ioctl+0xab/0xd0
[ 1795.432854]  __x64_sys_ioctl+0x73/0xb0
[ 1795.436762]  do_syscall_64+0x103/0x610
[ 1795.440666]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1795.445862] RIP: 0033:0x457f29
[ 1795.449083] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1795.468018] RSP: 002b:00007f4d5b709c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1795.475739] RAX: ffffffffffffffda RBX: 00007f4d5b709c90 RCX: 0000000000457f29
[ 1795.483020] RDX: 0000000000000000 RSI: 0000000000005502 RDI: 0000000000000003
[ 1795.490311] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000
[ 1795.497597] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4d5b70a6d4
[ 1795.504878] R13: 00000000004c25ca R14: 00000000004d5010 R15: 0000000000000005
16:24:30 executing program 4:
r0 = socket$inet6(0xa, 0x80003, 0xff)
r1 = socket$inet6(0xa, 0x80003, 0xff)
r2 = dup2(r1, r0)
ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, &(0x7f0000000000))
r3 = socket(0x10, 0x2, 0xc)
write(r3, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dc", 0x1c)
r4 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r4, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r3, 0x111, 0x5, 0x8, 0x4)
r5 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000240)={<r6=>0xffffffffffffffff})
geteuid()
ioctl$VT_RELDISP(r6, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getpeername$inet6(r6, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0)={<r7=>0xffffffffffffffff})
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0xcbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r8, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r8, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$UFFDIO_ZEROPAGE(r7, 0xc020aa04, &(0x7f0000000200)={{&(0x7f0000ffb000/0x2000)=nil, 0x2000}, 0x1})
ioctl$DRM_IOCTL_GET_MAP(r5, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r4, 0x4161, 0x0)

16:24:30 executing program 5 (fault-call:4 fault-nth:7):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0)
ioctl$UI_DEV_DESTROY(r0, 0x5502)

16:24:30 executing program 1:
r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001)
r2 = dup2(r1, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r0, &(0x7f0000000000)=[{0x21, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76)

[ 1795.670428] input: syz0 as /devices/virtual/input/input70
[ 1795.705135] FAULT_INJECTION: forcing a failure.
[ 1795.705135] name failslab, interval 1, probability 0, space 0, times 0
[ 1795.719130] CPU: 0 PID: 31390 Comm: syz-executor.5 Not tainted 5.0.0+ #12
[ 1795.726077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1795.735436] Call Trace:
[ 1795.738057]  dump_stack+0x172/0x1f0
[ 1795.741706]  should_fail.cold+0xa/0x15
[ 1795.745617]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[ 1795.750740]  ? ___might_sleep+0x163/0x280
[ 1795.754907]  __should_failslab+0x121/0x190
[ 1795.759169]  should_failslab+0x9/0x14
[ 1795.762981]  kmem_cache_alloc_trace+0x2d1/0x760
[ 1795.767669]  ? kasan_check_write+0x14/0x20
[ 1795.771942]  kobject_uevent_env+0x2fb/0x1030
[ 1795.776390]  ? wait_for_completion+0x440/0x440
[ 1795.781016]  kobject_uevent+0x20/0x26
[ 1795.784835]  device_del+0x758/0xc40
[ 1795.788505]  ? __device_links_no_driver+0x250/0x250
[ 1795.793572]  ? trace_hardirqs_on+0x67/0x230
[ 1795.797927]  __input_unregister_device+0x3a4/0x4a0
[ 1795.802875]  input_unregister_device+0xc5/0x110
[ 1795.807565]  uinput_destroy_device+0x1f4/0x250
[ 1795.812214]  uinput_ioctl_handler.isra.0+0x886/0x1cc0
[ 1795.817420]  ? tomoyo_domain+0xc5/0x160
[ 1795.821415]  ? uinput_request_submit.part.0+0x2d0/0x2d0
[ 1795.826799]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1795.832353]  ? tomoyo_path_number_perm+0x263/0x520
[ 1795.837311]  ? perf_trace_lock+0xeb/0x510
[ 1795.841494]  ? tomoyo_execute_permission+0x4a0/0x4a0
[ 1795.846621]  ? __lockdep_free_key_range+0x120/0x120
[ 1795.851653]  ? find_held_lock+0x35/0x130
[ 1795.855735]  uinput_ioctl+0x4a/0x60
[ 1795.859374]  ? uinput_compat_ioctl+0x90/0x90
[ 1795.863816]  do_vfs_ioctl+0xd6e/0x1390
[ 1795.867721]  ? ioctl_preallocate+0x210/0x210
[ 1795.872143]  ? __fget+0x367/0x540
[ 1795.875628]  ? ksys_dup3+0x3e0/0x3e0
[ 1795.879357]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[ 1795.884913]  ? tomoyo_file_ioctl+0x23/0x30
[ 1795.889160]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1795.894707]  ? security_file_ioctl+0x93/0xc0
[ 1795.899131]  ksys_ioctl+0xab/0xd0
[ 1795.902610]  __x64_sys_ioctl+0x73/0xb0
[ 1795.906513]  do_syscall_64+0x103/0x610
[ 1795.910431]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1795.915632] RIP: 0033:0x457f29
[ 1795.918834] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1795.937744] RSP: 002b:00007f4d5b709c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1795.945461] RAX: ffffffffffffffda RBX: 00007f4d5b709c90 RCX: 0000000000457f29
[ 1795.952737] RDX: 0000000000000000 RSI: 0000000000005502 RDI: 0000000000000003
[ 1795.960013] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000
16:24:30 executing program 1:
r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001)
r2 = dup2(r1, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r0, &(0x7f0000000000)=[{0x23, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76)

[ 1795.967288] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4d5b70a6d4
[ 1795.974575] R13: 00000000004c25ca R14: 00000000004d5010 R15: 0000000000000005
[ 1796.040795] ==================================================================
[ 1796.048496] BUG: KASAN: use-after-free in string+0x208/0x230
[ 1796.054314] Read of size 1 at addr ffff8880a5f85580 by task syz-executor.5/31389
[ 1796.061852] 
[ 1796.063494] CPU: 1 PID: 31389 Comm: syz-executor.5 Not tainted 5.0.0+ #12
[ 1796.070433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1796.079797] Call Trace:
[ 1796.082404]  dump_stack+0x172/0x1f0
[ 1796.086049]  ? string+0x208/0x230
16:24:31 executing program 1:
r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001)
r2 = dup2(r1, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r0, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76)

[ 1796.089531]  print_address_description.cold+0x7c/0x20d
[ 1796.094819]  ? string+0x208/0x230
[ 1796.098286]  ? string+0x208/0x230
[ 1796.101763]  kasan_report.cold+0x1b/0x40
[ 1796.105847]  ? string+0x208/0x230
[ 1796.109323]  __asan_report_load1_noabort+0x14/0x20
[ 1796.114269]  string+0x208/0x230
[ 1796.117572]  ? widen_string+0x2e0/0x2e0
[ 1796.121561]  ? find_held_lock+0x35/0x130
[ 1796.125646]  vsnprintf+0xbfc/0x1af0
[ 1796.129333]  ? pointer+0x910/0x910
[ 1796.132891]  ? string+0x1cc/0x230
[ 1796.136368]  add_uevent_var+0x14d/0x310
[ 1796.140363]  ? cleanup_uevent_env+0x50/0x50
[ 1796.144718]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 1796.150286]  ? input_dev_uevent+0x110/0x890
[ 1796.154635]  input_dev_uevent+0x163/0x890
[ 1796.158796]  ? input_add_uevent_bm_var+0x150/0x150
[ 1796.163740]  dev_uevent+0x312/0x580
[ 1796.167404]  ? device_get_devnode+0x2e0/0x2e0
[ 1796.171923]  ? kobject_uevent_env+0x2fb/0x1030
[ 1796.176525]  ? rcu_read_lock_sched_held+0x110/0x130
[ 1796.181564]  ? kobject_uevent_env+0x37d/0x1030
[ 1796.186164]  ? device_get_devnode+0x2e0/0x2e0
[ 1796.190681]  kobject_uevent_env+0x487/0x1030
[ 1796.195111]  ? release_nodes+0x548/0x9c0
[ 1796.199203]  kobject_uevent+0x20/0x26
[ 1796.203016]  kobject_put.cold+0x177/0x2ec
[ 1796.207181]  ? evdev_handle_set_keycode_v2+0x140/0x140
[ 1796.212472]  put_device+0x20/0x30
[ 1796.215945]  evdev_free+0x51/0x70
[ 1796.219418]  device_release+0x7d/0x210
[ 1796.223334]  kobject_put.cold+0x28f/0x2ec
[ 1796.227503]  cdev_default_release+0x41/0x50
[ 1796.231844]  kobject_put.cold+0x28f/0x2ec
[ 1796.236013]  cdev_put.part.0+0x39/0x50
[ 1796.239914]  cdev_put+0x20/0x30
[ 1796.243218]  __fput+0x6d9/0x8d0
[ 1796.246523]  ____fput+0x16/0x20
[ 1796.249815]  task_work_run+0x14a/0x1c0
[ 1796.253733]  exit_to_usermode_loop+0x273/0x2c0
[ 1796.258343]  do_syscall_64+0x52d/0x610
[ 1796.262255]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1796.267453] RIP: 0033:0x411e31
[ 1796.270657] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 94 19 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01
[ 1796.289572] RSP: 002b:0000000000a4fd70 EFLAGS: 00000293 ORIG_RAX: 0000000000000003
[ 1796.297328] RAX: 0000000000000000 RBX: 0000000000000005 RCX: 0000000000411e31
[ 1796.304608] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004
[ 1796.311885] RBP: 0000000000000000 R08: 00000000a8c759c0 R09: 00000000a8c759c4
[ 1796.319171] R10: 0000000000a4fca0 R11: 0000000000000293 R12: 0000000000000001
[ 1796.326451] R13: 0000000000a4fdb0 R14: 0000000000000001 R15: 0000000000a4fdc0
[ 1796.333748] 
[ 1796.335387] Allocated by task 31390:
[ 1796.339206]  save_stack+0x45/0xd0
[ 1796.342675]  __kasan_kmalloc.constprop.0+0xcf/0xe0
[ 1796.347636]  kasan_kmalloc+0x9/0x10
[ 1796.351270]  __kmalloc_track_caller+0x158/0x740
[ 1796.355960]  kstrndup+0x5f/0xf0
[ 1796.359344]  uinput_dev_setup+0x1d4/0x310
[ 1796.363511]  uinput_ioctl_handler.isra.0+0x12b8/0x1cc0
[ 1796.368801]  uinput_ioctl+0x4a/0x60
[ 1796.372440]  do_vfs_ioctl+0xd6e/0x1390
[ 1796.376342]  ksys_ioctl+0xab/0xd0
[ 1796.379822]  __x64_sys_ioctl+0x73/0xb0
[ 1796.383718]  do_syscall_64+0x103/0x610
[ 1796.387708]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1796.392892] 
[ 1796.394523] Freed by task 31390:
[ 1796.397899]  save_stack+0x45/0xd0
[ 1796.401364]  __kasan_slab_free+0x102/0x150
[ 1796.405610]  kasan_slab_free+0xe/0x10
[ 1796.409420]  kfree+0xcf/0x230
[ 1796.412539]  uinput_destroy_device+0xf8/0x250
[ 1796.417047]  uinput_ioctl_handler.isra.0+0x886/0x1cc0
[ 1796.422253]  uinput_ioctl+0x4a/0x60
[ 1796.425893]  do_vfs_ioctl+0xd6e/0x1390
[ 1796.429789]  ksys_ioctl+0xab/0xd0
[ 1796.433258]  __x64_sys_ioctl+0x73/0xb0
[ 1796.437156]  do_syscall_64+0x103/0x610
[ 1796.441055]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1796.446250] 
[ 1796.447883] The buggy address belongs to the object at ffff8880a5f85580
[ 1796.447883]  which belongs to the cache kmalloc-32 of size 32
[ 1796.460367] The buggy address is located 0 bytes inside of
[ 1796.460367]  32-byte region [ffff8880a5f85580, ffff8880a5f855a0)
[ 1796.471983] The buggy address belongs to the page:
[ 1796.476921] page:ffffea000297e140 count:1 mapcount:0 mapping:ffff88812c3f01c0 index:0xffff8880a5f85fc1
[ 1796.486371] flags: 0x1fffc0000000200(slab)
[ 1796.490618] raw: 01fffc0000000200 ffffea00028db008 ffffea0002a8c848 ffff88812c3f01c0
[ 1796.498514] raw: ffff8880a5f85fc1 ffff8880a5f85000 000000010000002b 0000000000000000
[ 1796.506396] page dumped because: kasan: bad access detected
[ 1796.512103] 
[ 1796.513730] Memory state around the buggy address:
[ 1796.518665]  ffff8880a5f85480: fb fb fb fb fc fc fc fc fb fb fb fb fc fc fc fc
[ 1796.526032]  ffff8880a5f85500: fb fb fb fb fc fc fc fc fb fb fb fb fc fc fc fc
[ 1796.533401] >ffff8880a5f85580: fb fb fb fb fc fc fc fc fb fb fb fb fc fc fc fc
[ 1796.540764]                    ^
[ 1796.544137]  ffff8880a5f85600: 00 00 00 03 fc fc fc fc 00 fc fc fc fc fc fc fc
[ 1796.551507]  ffff8880a5f85680: 00 00 fc fc fc fc fc fc fb fb fb fb fc fc fc fc
[ 1796.558866] ==================================================================
[ 1796.566321] Disabling lock debugging due to kernel taint
[ 1796.584750] Kernel panic - not syncing: panic_on_warn set ...
16:24:31 executing program 1:
r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001)
r2 = dup2(r1, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r0, &(0x7f0000000000)=[{0x1f4, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76)

16:24:31 executing program 2:
r0 = socket(0x10, 0x2, 0x0)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dc", 0x1c)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x5b, 0x9b)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x0)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000540)=0x1c)
pipe(&(0x7f00000004c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$TIOCPKT(r3, 0x5420, &(0x7f0000000000)=0x9)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000000})
getpeername$packet(r1, &(0x7f0000000300)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000340)=0x14)
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, r5})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x0, 0x0, &(0x7f0000000080))
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000040)={0x0, 0x1, 0x80, 0x9, <r6=>0x0}, &(0x7f0000000200)=0x10)
setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f00000002c0)={r6, 0x7, 0x10001, 0x4}, 0x10)
ioctl(r1, 0x4161, 0x0)

16:24:31 executing program 0:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
socket$inet6(0xa, 0xf, 0x31)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8, 0x0, r1, 0x6}, 0x2c)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
geteuid()
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1}, 0x0)
pipe(&(0x7f00000004c0))
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)={0x0, 0x0, [0x8b]})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3f00, 0x3ef, 0xa500000000000000, 0x3f00000000000000, 0x0, 0x700000000000000, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000000})
ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000280)={0x0, 0x40, 0x0, 0x8, &(0x7f0000ffa000/0x3000)=nil, 0x8})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080))
ioctl(r1, 0x4161, 0x0)

[ 1796.590661] CPU: 1 PID: 31389 Comm: syz-executor.5 Tainted: G    B             5.0.0+ #12
[ 1796.598970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1796.608330] Call Trace:
[ 1796.610937]  dump_stack+0x172/0x1f0
[ 1796.614610]  panic+0x2cb/0x65c
[ 1796.617821]  ? __warn_printk+0xf3/0xf3
[ 1796.621715]  ? string+0x208/0x230
[ 1796.625178]  ? preempt_schedule+0x4b/0x60
[ 1796.629454]  ? ___preempt_schedule+0x16/0x18
[ 1796.633901]  ? trace_hardirqs_on+0x5e/0x230
[ 1796.638236]  ? string+0x208/0x230
[ 1796.641697]  end_report+0x47/0x4f
[ 1796.645164]  ? string+0x208/0x230
[ 1796.648627]  kasan_report.cold+0xe/0x40
[ 1796.652606]  ? string+0x208/0x230
[ 1796.656068]  __asan_report_load1_noabort+0x14/0x20
[ 1796.661006]  string+0x208/0x230
[ 1796.664293]  ? widen_string+0x2e0/0x2e0
[ 1796.668311]  ? find_held_lock+0x35/0x130
[ 1796.669200] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 1796.672386]  vsnprintf+0xbfc/0x1af0
[ 1796.672407]  ? pointer+0x910/0x910
[ 1796.672421]  ? string+0x1cc/0x230
[ 1796.672442]  add_uevent_var+0x14d/0x310
[ 1796.672458]  ? cleanup_uevent_env+0x50/0x50
[ 1796.672476]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 1796.703818] kobject: 'þ€' (00000000e5e14651): kobject_add_internal: parent: 'net', set: 'devices'
[ 1796.705377]  ? input_dev_uevent+0x110/0x890
[ 1796.705395]  input_dev_uevent+0x163/0x890
[ 1796.705410]  ? input_add_uevent_bm_var+0x150/0x150
[ 1796.705426]  dev_uevent+0x312/0x580
[ 1796.705441]  ? device_get_devnode+0x2e0/0x2e0
[ 1796.705463]  ? kobject_uevent_env+0x2fb/0x1030
[ 1796.740526]  ? rcu_read_lock_sched_held+0x110/0x130
[ 1796.745579]  ? kobject_uevent_env+0x37d/0x1030
[ 1796.745594]  ? device_get_devnode+0x2e0/0x2e0
[ 1796.745611]  kobject_uevent_env+0x487/0x1030
[ 1796.745626]  ? release_nodes+0x548/0x9c0
[ 1796.745647]  kobject_uevent+0x20/0x26
[ 1796.745663]  kobject_put.cold+0x177/0x2ec
[ 1796.745681]  ? evdev_handle_set_keycode_v2+0x140/0x140
[ 1796.745698]  put_device+0x20/0x30
[ 1796.745713]  evdev_free+0x51/0x70
[ 1796.745729]  device_release+0x7d/0x210
[ 1796.745746]  kobject_put.cold+0x28f/0x2ec
[ 1796.745763]  cdev_default_release+0x41/0x50
[ 1796.745779]  kobject_put.cold+0x28f/0x2ec
[ 1796.745795]  cdev_put.part.0+0x39/0x50
[ 1796.745809]  cdev_put+0x20/0x30
[ 1796.745824]  __fput+0x6d9/0x8d0
[ 1796.745845]  ____fput+0x16/0x20
[ 1796.745858]  task_work_run+0x14a/0x1c0
[ 1796.745881]  exit_to_usermode_loop+0x273/0x2c0
[ 1796.745899]  do_syscall_64+0x52d/0x610
[ 1796.745919]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1796.745931] RIP: 0033:0x411e31
[ 1796.745946] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 94 19 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01
[ 1796.745954] RSP: 002b:0000000000a4fd70 EFLAGS: 00000293 ORIG_RAX: 0000000000000003
[ 1796.745968] RAX: 0000000000000000 RBX: 0000000000000005 RCX: 0000000000411e31
[ 1796.745977] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004
[ 1796.745986] RBP: 0000000000000000 R08: 00000000a8c759c0 R09: 00000000a8c759c4
[ 1796.745994] R10: 0000000000a4fca0 R11: 0000000000000293 R12: 0000000000000001
[ 1796.746003] R13: 0000000000a4fdb0 R14: 0000000000000001 R15: 0000000000a4fdc0
[ 1796.746737] Kernel Offset: disabled
[ 1796.901828] Rebooting in 86400 seconds..