f0000000880)={0x454, r3, 0x0, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x3c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_LINK={0xcc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x37}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4a}]}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NODE={0x1c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_BEARER={0x174, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x3, @dev={0xfe, 0x80, [], 0x38}, 0x1a5d}}}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x30}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}]}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb910}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8811}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'macvtap0\x00'}}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9205}]}, @TIPC_NLA_LINK={0xd0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}]}, @TIPC_NLA_LINK={0xac, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xbbb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ee9a673}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xead}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}]}]}, 0x454}, 0x1, 0x0, 0x0, 0x4004044}, 0x4040) 10:07:32 executing program 2: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00'}) r1 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r1, &(0x7f0000000000)={0x11, 0x804, r2, 0x1, 0x0, 0x6, @dev}, 0x14) r3 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r3, &(0x7f0000000000)={0x11, 0x804, r4, 0x1, 0x0, 0x6, @dev}, 0x14) bind$packet(r1, &(0x7f0000000000)={0x11, 0x804, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) 10:07:33 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1524}, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xd, 0x0, 0x0, 0xffffffffffffff52) ioctl$KVM_NMI(r2, 0xae9a) syz_mount_image$cifs(&(0x7f0000000040)='cifs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x28) 10:07:33 executing program 0: pipe(&(0x7f0000000340)={0xffffffffffffffff}) r1 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r1, &(0x7f0000000000)={0x11, 0x804, r2, 0x1, 0x0, 0x6, @dev}, 0x14) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r3, 0x4b67, &(0x7f00000004c0)={0x1, &(0x7f0000000480)=[{}]}) ioctl$TIOCCONS(r3, 0x541d) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='lp\x00', 0x3) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000775b3238d075df887449802391df7c74798000ed9f79002100000ede674f366e6faf9ca31e"], 0x1c}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) splice(r0, 0x0, r4, 0x0, 0x4ffe0, 0x0) 10:07:33 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ppoll(&(0x7f0000000480)=[{r0}], 0x1, &(0x7f00000004c0)={0x0, 0x989680}, 0x0, 0x0) 10:07:33 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x814, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x600}}) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000000)={0x4, 0x100, 0x8}) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r1) 10:07:33 executing program 2: socket(0x200000000000011, 0x3, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x804, r1, 0x1, 0x0, 0x6, @dev}, 0x14) r2 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000000)={0x11, 0x804, r3, 0x1, 0x0, 0x6, @dev}, 0x14) bind$packet(r0, &(0x7f0000000000)={0x11, 0x804, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) 10:07:33 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x814, 0x616ac5c8, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x600}}) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvfrom(r1, 0x0, 0x0, 0x10020, 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x200000000000011, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r3, &(0x7f0000000240)={0x11, 0x0, r5}, 0x14) getsockname$packet(r3, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=r6, @ANYBLOB="0100000000000000200016801c00018018000c8014000000000004001400"], 0x44}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x200000000000011, 0x3, 0x0) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r9, 0x4b4e, 0x39) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r8, &(0x7f0000000240)={0x11, 0x0, r11}, 0x14) getsockname$packet(r8, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=r12, @ANYBLOB="0100000000000000200016801c00018018000c8014000000000004001400"], 0x44}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000001440)={0x0, @multicast2, @initdev}, &(0x7f0000001480)=0xc) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000001e00)={@broadcast, @multicast2}, &(0x7f0000001e40)=0xc) r13 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r13, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x2, 0x228, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000740], 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="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"]}, 0x2a0) getsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, &(0x7f00000000c0)={{{@in=@remote, @in=@multicast2}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000001f80)=0xe8) socket(0x200000000000011, 0x3, 0x0) 10:07:33 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r1) ppoll(&(0x7f0000000480)=[{r0}], 0x1, &(0x7f00000004c0)={0x0, 0x989680}, 0x0, 0x0) [ 482.264919][T31228] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 10:07:33 executing program 2: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x804, r1, 0x1, 0x0, 0x6, @dev}, 0x14) r2 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000000)={0x11, 0x804, r3, 0x1, 0x0, 0x6, @dev}, 0x14) bind$packet(r0, &(0x7f0000000000)={0x11, 0x804, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) 10:07:33 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x814, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x600}}) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000000)={0x4, 0x100, 0x8}) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r1) [ 482.345438][T31228] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 10:07:33 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r1) ppoll(&(0x7f0000000480)=[{r0}], 0x1, &(0x7f00000004c0)={0x0, 0x989680}, 0x0, 0x0) 10:07:33 executing program 2: r0 = socket(0x0, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x804, r1, 0x1, 0x0, 0x6, @dev}, 0x14) r2 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000000)={0x11, 0x804, r3, 0x1, 0x0, 0x6, @dev}, 0x14) bind$packet(r0, &(0x7f0000000000)={0x11, 0x804, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) 10:07:33 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x814, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x600}}) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000000)={0x4, 0x100, 0x8}) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r1) 10:07:34 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1524}, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xd, 0x0, 0x0, 0xffffffffffffff52) ioctl$KVM_NMI(r2, 0xae9a) syz_mount_image$cifs(&(0x7f0000000040)='cifs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x2a) 10:07:34 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r1) ppoll(&(0x7f0000000480)=[{r0}], 0x1, &(0x7f00000004c0)={0x0, 0x989680}, 0x0, 0x0) 10:07:34 executing program 2: r0 = socket(0x0, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x804, r1, 0x1, 0x0, 0x6, @dev}, 0x14) r2 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000000)={0x11, 0x804, r3, 0x1, 0x0, 0x6, @dev}, 0x14) bind$packet(r0, &(0x7f0000000000)={0x11, 0x804, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) 10:07:34 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x814, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x600}}) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0xa2400, 0x0) sendmsg$AUDIT_TTY_GET(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f8, 0x10, 0x70bd29, 0x25dfdbfc, "", ["", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000014}, 0x41) fcntl$dupfd(0xffffffffffffffff, 0x0, r1) 10:07:34 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x814, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x600}}) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000000)={0x4, 0x100, 0x8}) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, 0x0) socket$alg(0x26, 0x5, 0x0) 10:07:34 executing program 0: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x10, 0x80003, 0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000080)=0x67) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=@mpls_newroute={0x1c, 0x18, 0x21, 0x0, 0x0, {0x1c, 0x14}}, 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 10:07:34 executing program 2: r0 = socket(0x0, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x804, r1, 0x1, 0x0, 0x6, @dev}, 0x14) r2 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000000)={0x11, 0x804, r3, 0x1, 0x0, 0x6, @dev}, 0x14) bind$packet(r0, &(0x7f0000000000)={0x11, 0x804, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) 10:07:34 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x814, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x600}}) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000000)={0x4, 0x100, 0x8}) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, 0x0) 10:07:34 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) socket$inet6(0xa, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ppoll(&(0x7f0000000480)=[{r0}], 0x1, &(0x7f00000004c0)={0x0, 0x989680}, 0x0, 0x0) 10:07:34 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x814, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x600}}) r1 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r1, &(0x7f0000000000)={0x11, 0x804, r2, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_GET_KEY(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r4, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@NL80211_ATTR_KEY={0x10, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "4b1b55b03f"}]}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "df37963b44"}]}, 0x30}, 0x1, 0x0, 0x0, 0x64000}, 0x0) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r5) 10:07:34 executing program 2: r0 = socket(0x200000000000011, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x804, r1, 0x1, 0x0, 0x6, @dev}, 0x14) r2 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000000)={0x11, 0x804, r3, 0x1, 0x0, 0x6, @dev}, 0x14) bind$packet(r0, &(0x7f0000000000)={0x11, 0x804, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) 10:07:34 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x814, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x600}}) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000000)={0x4, 0x100, 0x8}) 10:07:35 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1524}, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xd, 0x0, 0x0, 0xffffffffffffff52) ioctl$KVM_NMI(r2, 0xae9a) syz_mount_image$cifs(&(0x7f0000000040)='cifs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x2c) 10:07:35 executing program 2: r0 = socket(0x200000000000011, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x804, r1, 0x1, 0x0, 0x6, @dev}, 0x14) r2 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000000)={0x11, 0x804, r3, 0x1, 0x0, 0x6, @dev}, 0x14) bind$packet(r0, &(0x7f0000000000)={0x11, 0x804, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) 10:07:35 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x814, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000000)={0x4, 0x100, 0x8}) 10:07:35 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) socket$inet6(0xa, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ppoll(&(0x7f0000000480)=[{r0}], 0x1, &(0x7f00000004c0)={0x0, 0x989680}, 0x0, 0x0) 10:07:35 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x6, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x814, 0x0, 0x0, 0x0, 0x0, 0x4, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x600}}) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x0, 0x0) r3 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r3, &(0x7f0000000000)={0x11, 0x804, r4, 0x1, 0x0, 0x6, @dev}, 0x14) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x70, &(0x7f0000000100)={r7}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000080)={r7, 0x7}, &(0x7f00000000c0)=0x8) getsockname$netlink(r2, &(0x7f0000000140), &(0x7f00000001c0)=0xc) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000100)={r8, 0xffffffff}, 0x8) 10:07:35 executing program 0: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000080)=@mpls_newroute={0x1c, 0x18, 0x21, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0x0, 0x0, 0xc8, 0x5}}, 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 10:07:35 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x814, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, &(0x7f0000000000)={0x4, 0x100, 0x8}) 10:07:35 executing program 2: r0 = socket(0x200000000000011, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x804, r1, 0x1, 0x0, 0x6, @dev}, 0x14) r2 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000000)={0x11, 0x804, r3, 0x1, 0x0, 0x6, @dev}, 0x14) bind$packet(r0, &(0x7f0000000000)={0x11, 0x804, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) 10:07:35 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x814, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, &(0x7f0000000000)={0x4, 0x100, 0x8}) 10:07:35 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) socket$inet6(0xa, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ppoll(&(0x7f0000000480)=[{r0}], 0x1, &(0x7f00000004c0)={0x0, 0x989680}, 0x0, 0x0) 10:07:35 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x814, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, &(0x7f0000000000)={0x4, 0x100, 0x8}) 10:07:35 executing program 2: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x804, r1, 0x1, 0x0, 0x6, @dev}, 0x14) r2 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000000)={0x11, 0x804, r3, 0x1, 0x0, 0x6, @dev}, 0x14) bind$packet(r0, &(0x7f0000000000)={0x11, 0x804, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) 10:07:36 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1524}, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xd, 0x0, 0x0, 0xffffffffffffff52) ioctl$KVM_NMI(r2, 0xae9a) syz_mount_image$cifs(&(0x7f0000000040)='cifs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x2e) 10:07:36 executing program 4: perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8006, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x2, 0xffffffffffffffff, 0x8) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x600}}) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r1) 10:07:36 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) socket$inet6(0xa, 0x2, 0x0) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ppoll(&(0x7f0000000480)=[{r0}], 0x1, &(0x7f00000004c0)={0x0, 0x989680}, 0x0, 0x0) 10:07:36 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000000)={0x4, 0x100, 0x8}) 10:07:36 executing program 2: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x804, r1, 0x1, 0x0, 0x6, @dev}, 0x14) r2 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000000)={0x11, 0x804, r3, 0x1, 0x0, 0x6, @dev}, 0x14) bind$packet(r0, &(0x7f0000000000)={0x11, 0x804, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) 10:07:36 executing program 0: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0x3da, 0x0) ioctl$USBDEVFS_CONNECTINFO(r2, 0x40085511, &(0x7f00000000c0)) r3 = socket$inet_udp(0x2, 0x2, 0x0) llistxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=""/227, 0xe3) close(r3) socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=@mpls_newroute={0x1c, 0x18, 0x21, 0x0, 0x0, {0x1c, 0x14}}, 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000080)={0x0, 0x81}, 0xc) splice(r0, 0x0, r3, 0x0, 0x4ffe0, 0x0) 10:07:36 executing program 3: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, &(0x7f0000000000)={0x4, 0x100, 0x8}) 10:07:36 executing program 3: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, &(0x7f0000000000)={0x4, 0x100, 0x8}) 10:07:36 executing program 2: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x804, r1, 0x1, 0x0, 0x6, @dev}, 0x14) r2 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000000)={0x11, 0x804, r3, 0x1, 0x0, 0x6, @dev}, 0x14) bind$packet(r0, &(0x7f0000000000)={0x11, 0x804, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) 10:07:36 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) socket$inet6(0xa, 0x2, 0x0) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ppoll(&(0x7f0000000480)=[{r0}], 0x1, &(0x7f00000004c0)={0x0, 0x989680}, 0x0, 0x0) 10:07:36 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x814, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x0, 0xb, 0x4, 0x8, 0x7, {0x77359400}, {0x4, 0x1, 0x6, 0x3f, 0x7, 0x6, "d856437c"}, 0x7, 0x4, @fd=r0, 0x4, 0x0, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80000001}]}, 0x1c}, 0x1, 0x0, 0x0, 0xbc948dde3525188e}, 0x10) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x600}}) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r3) 10:07:36 executing program 3: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, &(0x7f0000000000)={0x4, 0x100, 0x8}) 10:07:37 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1524}, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xd, 0x0, 0x0, 0xffffffffffffff52) ioctl$KVM_NMI(r2, 0xae9a) syz_mount_image$cifs(&(0x7f0000000040)='cifs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x30) 10:07:37 executing program 2: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) bind$packet(r0, &(0x7f0000000000)={0x11, 0x804, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) r1 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r1, &(0x7f0000000000)={0x11, 0x804, r2, 0x1, 0x0, 0x6, @dev}, 0x14) bind$packet(r0, &(0x7f0000000000)={0x11, 0x804, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) 10:07:37 executing program 4: perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x814, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x600}}) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f00000004c0)={0x1, &(0x7f0000000480)=[{}]}) ioctl$KDGKBMODE(r1, 0x4b44, &(0x7f0000000000)) fcntl$getflags(r1, 0xb) r2 = socket$alg(0x26, 0x5, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r2) 10:07:37 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r0, 0x5609, 0x0) 10:07:37 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) socket$inet6(0xa, 0x2, 0x0) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ppoll(&(0x7f0000000480)=[{r0}], 0x1, &(0x7f00000004c0)={0x0, 0x989680}, 0x0, 0x0) 10:07:37 executing program 0: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x10, 0x80003, 0x0) ioctl$KVM_SET_SREGS(r1, 0x4138ae84, &(0x7f0000000080)={{0x3000, 0x4, 0x0, 0xa2, 0x80, 0x40, 0x4, 0x8, 0x6, 0x80, 0x0, 0xfe}, {0x2000, 0xd000, 0x10, 0x3f, 0x7, 0x0, 0x3, 0x99, 0x81, 0x4a, 0x1f, 0x1f}, {0x2000, 0x4, 0xa, 0xea, 0x40, 0x80, 0x7, 0xe8, 0x1, 0x7, 0x3f, 0x45}, {0x5000, 0xf000, 0x10, 0x81, 0x4, 0x8, 0xf7, 0x6b, 0x1f, 0x1, 0xb6, 0x1}, {0x2000, 0x3000, 0xc, 0x80, 0x4, 0xe0, 0x3f, 0x4, 0x0, 0x40, 0xc7, 0x9}, {0x4, 0xd000, 0x9, 0x1c, 0x0, 0x2, 0x90, 0x1, 0x1, 0x8, 0x4, 0x1}, {0x100000, 0x100000, 0x8, 0xfe, 0x4, 0x2, 0x3f, 0x6, 0x53, 0x1, 0x81, 0xff}, {0x4000, 0xf000, 0x9, 0x5, 0x0, 0xfb, 0x1, 0x7, 0x1f, 0x9, 0x4, 0xff}, {0x100000, 0x1}, {0x5000, 0x6000}, 0x80000002, 0x0, 0x4, 0x100, 0x3, 0x4800, 0x2000, [0x119a, 0xffffffff80000001, 0x3, 0x9]}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=@mpls_newroute={0x1c, 0x18, 0x21, 0x0, 0x0, {0x1c, 0x14}}, 0x1c}}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0x3da, 0x0) write$P9_RWALK(r3, &(0x7f00000001c0)={0x7e, 0x6f, 0x2, {0x9, [{0x8, 0x4, 0x8}, {0x20, 0x2, 0x7}, {0x20, 0x3, 0x8}, {0x80, 0x3, 0x6}, {0x8, 0x1, 0x6}, {0x0, 0x1, 0x7}, {0x8, 0x2, 0x1}, {0x1, 0x4, 0x1}, {0xa0, 0x0, 0x4}]}}, 0x7e) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 10:07:37 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r0, 0x5609, 0x0) 10:07:37 executing program 2: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) bind$packet(r0, &(0x7f0000000000)={0x11, 0x804, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) r1 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r1, &(0x7f0000000000)={0x11, 0x804, r2, 0x1, 0x0, 0x6, @dev}, 0x14) bind$packet(r0, &(0x7f0000000000)={0x11, 0x804, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) 10:07:37 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r0, 0x5609, 0x0) 10:07:37 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ppoll(&(0x7f0000000480)=[{r0}], 0x1, &(0x7f00000004c0)={0x0, 0x989680}, 0x0, 0x0) 10:07:37 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x814, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x600}}) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) r3 = socket$key(0xf, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) recvfrom(r3, 0x0, 0x0, 0x10020, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000240)={r3}) recvfrom$ax25(r4, &(0x7f0000000280)=""/8, 0x8, 0x40000000, &(0x7f00000002c0)={{0x3, @null, 0x6}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) 10:07:37 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000000)={0x0, 0x100, 0x8}) 10:07:38 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1524}, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xd, 0x0, 0x0, 0xffffffffffffff52) ioctl$KVM_NMI(r2, 0xae9a) syz_mount_image$cifs(&(0x7f0000000040)='cifs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x32) 10:07:38 executing program 2: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) bind$packet(r0, &(0x7f0000000000)={0x11, 0x804, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) r1 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r1, &(0x7f0000000000)={0x11, 0x804, r2, 0x1, 0x0, 0x6, @dev}, 0x14) bind$packet(r0, &(0x7f0000000000)={0x11, 0x804, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) 10:07:38 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ppoll(&(0x7f0000000480)=[{r0}], 0x1, &(0x7f00000004c0)={0x0, 0x989680}, 0x0, 0x0) 10:07:38 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000000)={0x0, 0x0, 0x8}) 10:07:38 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x814, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x600}}) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r1) r2 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil) shmat(r2, &(0x7f0000ffa000/0x1000)=nil, 0x0) shmctl$SHM_LOCK(r2, 0xb) 10:07:38 executing program 0: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$key(0xf, 0x3, 0x2) recvfrom(r2, 0x0, 0x0, 0x10020, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) recvfrom(r3, 0x0, 0x0, 0x10020, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000240)) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x1, 0x0) getsockopt$inet_tcp_int(r4, 0x6, 0xc, &(0x7f00000001c0), &(0x7f0000000200)=0x4) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r5, 0x4040534e, &(0x7f0000000380)={0x20, @time={0x20, 0xe385}, 0x5, {0x20, 0xff}, 0xff, 0x7388aa9bcdf1a3f3, 0x40}) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000080)={0x0, r3, 0x4, 0x10000, 0x4726, 0x8}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) ioctl$SNDRV_PCM_IOCTL_READI_FRAMES(r0, 0x80184151, &(0x7f0000000140)={0x0, &(0x7f00000000c0)="8a6c00d0b2b4cd8e8fc719971006565d98fe4fbfab739d62fd01f98c939ba825c06ba0dbae0794977721d420082aacf0c2cbdce91af4ba2e64eafb87ee948c3fd45b74ef35929688fadef6181641132f1a", 0x51}) socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001800210000000000000000001c140000000000e2ffffff00"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup2(r7, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_S_PARM(r9, 0xc0285629, &(0x7f00000000c0)={0x3}) ioctl$VIDIOC_G_EDID(r9, 0xc0285628, &(0x7f0000000400)={0x0, 0x0, 0x200, [], &(0x7f00000003c0)=0x6}) splice(r0, 0x0, r6, 0x0, 0x4ffe0, 0x0) r10 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r10, &(0x7f00000017c0), 0x3da, 0x0) renameat2(r8, &(0x7f00000002c0)='./file0\x00', r4, &(0x7f0000000300)='./file0\x00', 0x0) 10:07:38 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000000)={0x0, 0x0, 0x8}) 10:07:38 executing program 2: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x804, r1, 0x1, 0x0, 0x6, @dev}, 0x14) r2 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000000)={0x11, 0x804, r3, 0x1, 0x0, 0x6, @dev}, 0x14) bind$packet(r0, &(0x7f0000000000)={0x11, 0x804, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) 10:07:38 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ppoll(&(0x7f0000000480)=[{r0}], 0x1, &(0x7f00000004c0)={0x0, 0x989680}, 0x0, 0x0) 10:07:38 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000000)={0x0, 0x0, 0x8}) 10:07:38 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x814, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x600}}) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f00000004c0)={0x1, &(0x7f0000000480)=[{}]}) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000000)={0x2, 0x7174, 0xfffffb19, 0x1, 0xd, "b1f4dcc796b486da8ea7703f81d1bb84ced4a6"}) r2 = socket$alg(0x26, 0x5, 0x0) pwrite64(r1, &(0x7f0000000080)="266a840532c7108428561bd95a1ffd80ffde031884a29256ff3b297f7c4752effc3d6c", 0x23, 0x3) fcntl$dupfd(0xffffffffffffffff, 0x0, r2) 10:07:38 executing program 0: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) lremovexattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@random={'osx.', '\x00'}) socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=@mpls_newroute={0x1c, 0x18, 0x21, 0x0, 0x0, {0x1c, 0x14}}, 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x80200400200) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 10:07:39 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1524}, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xd, 0x0, 0x0, 0xffffffffffffff52) ioctl$KVM_NMI(r2, 0xae9a) syz_mount_image$cifs(&(0x7f0000000040)='cifs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x34) 10:07:39 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ppoll(&(0x7f0000000480)=[{r0}], 0x1, &(0x7f00000004c0)={0x0, 0x989680}, 0x0, 0x0) 10:07:39 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000000)={0x0, 0x100}) 10:07:39 executing program 2: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x804, r1, 0x1, 0x0, 0x6, @dev}, 0x14) r2 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000000)={0x11, 0x804, r3, 0x1, 0x0, 0x6, @dev}, 0x14) bind$packet(r0, &(0x7f0000000000)={0x11, 0x804, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) 10:07:39 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x814, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') ioctl$TCXONC(r1, 0x540a, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) ioctl$KVM_GET_TSC_KHZ(r2, 0xaea3) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x600}}) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, r3) fsync(r4) write$binfmt_script(r2, &(0x7f0000000340)={'#! ', './file0', [{0x20, '!\'/\'vmnet0'}, {0x20, 'fd/3\x00'}, {0x20, 'trusted'}, {}, {0x20, 'fdinfo/3\x00'}, {0x20, 'fdinfo/3\x00'}, {0x20, 'vboxnet1#'}], 0xa, "7fd2892f89d77a166bb1a5a3ef0c2379b40e7fca7bbb74f3e34280189e2d6e6fee679ce7a9f6fd229219e1db4a5758366a76d3fb5995bb591a41d370ae6429bbdbdcb2a35402cc04151d0862d2ad2ed47896717f0651d8aee682efb53baf081438946837a60682478f0cf26cf1f69e6f7e5d7ee02be9569e29bd9e7ad68d66f18800499e99da8a350984bdc5137afde460826d57dbb2192f4eb6fe25cafc6762c33b72485004251923f4c8416552b625db0c9f8aaba71a46d0affef5b9cfcb9970ff2672d6e9386a0e3a10e3ccef8e7bda21073581a95468b1"}, 0x11c) sendmsg$key(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x2, 0x14, 0xca, 0x9, 0x11, 0x0, 0x70bd29, 0x25dfdbfc, [@sadb_x_nat_t_port={0x1, 0x15, 0x4e20}, @sadb_x_filter={0x5, 0x1a, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote, 0x4, 0x4}, @sadb_x_kmaddress={0x8, 0x19, 0x0, @in6={0xa, 0x4e20, 0xffff, @mcast1, 0x8001}, @in6={0xa, 0x4e20, 0x6, @rand_addr="262d61ecdc27d0af3356c523815334a4", 0x10000}}, @sadb_x_nat_t_port={0x1, 0x15, 0x4e21}]}, 0x88}}, 0x20000004) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x0) write$P9_RREAD(r5, &(0x7f0000000080)={0x102, 0x75, 0x1, {0xf7, "cfc924fbc58cffa0a41dd39ce02f27c43bfd3ccbbf0482f78eb2abb3d17c4fdbe8d28ad29c9c12210fd7e40757441411e17e481c5fe7d6aa04df3af3f693dc643e8106f284477b0957727510cd40002e7ce8292aae0fb18931c786cc441b1b2d88adb8cb408654149f298133299eb455d5499025b21aa55ab6257e4af3347cefc22a0348b10954ec4207133f70949c4bf1e3f26db4883f6486806f7d022e5f2555a599e60913c3b7ce3a3d4d9b62f876b5337cf50f2d972f23b039a251502aa89bbb2ef446a75956fba82a71ac975e046a5ed63a58cf66acc87ac28bed432c97da094316515b102ba66bd93457b1f085c78d53cd05e5e8"}}, 0x102) 10:07:39 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x814, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x600}}) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) r3 = socket$key(0xf, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) recvfrom(r3, 0x0, 0x0, 0x10020, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000240)={r3}) recvfrom$ax25(r4, &(0x7f0000000280)=""/8, 0x8, 0x40000000, &(0x7f00000002c0)={{0x3, @null, 0x6}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) 10:07:39 executing program 0: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x10, 0x80003, 0x0) r3 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r3, &(0x7f0000000000)={0x11, 0x804, r4, 0x1, 0x0, 0x6, @dev}, 0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="21000000000000583a73db75db900ac0a90000150106006e1a0d7900000000d4f5420d980de0e2f8938a5a99057300e8d2128a46e4f5b1"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$key(0xf, 0x3, 0x2) recvfrom(r6, 0x0, 0x0, 0x10020, 0x0, 0x0) write$binfmt_elf32(r6, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x7, 0x1, 0xea, 0x1, 0x7, 0x3, 0x3, 0xa931, 0xca, 0x38, 0x233, 0x7ff, 0x7ec7, 0x20, 0x2, 0x3, 0x2, 0x101}, [{0x6, 0xfffffff9, 0x8, 0x7fff, 0x101, 0x2800000, 0x80000000, 0xcc01}], "5987efc6de160e724938", [[], [], [], [], [], []]}, 0x662) r7 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 10:07:39 executing program 2: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x804, r1, 0x1, 0x0, 0x6, @dev}, 0x14) r2 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000000)={0x11, 0x804, r3, 0x1, 0x0, 0x6, @dev}, 0x14) bind$packet(r0, &(0x7f0000000000)={0x11, 0x804, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) 10:07:39 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ppoll(&(0x7f0000000480)=[{r0}], 0x1, &(0x7f00000004c0)={0x0, 0x989680}, 0x0, 0x0) 10:07:39 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x814, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x600}}) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) r3 = socket$key(0xf, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) recvfrom(r3, 0x0, 0x0, 0x10020, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000240)={r3}) recvfrom$ax25(r4, &(0x7f0000000280)=""/8, 0x8, 0x40000000, &(0x7f00000002c0)={{0x3, @null, 0x6}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) 10:07:39 executing program 2: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00'}) bind$packet(r0, 0x0, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r1, &(0x7f0000000000)={0x11, 0x804, r2, 0x1, 0x0, 0x6, @dev}, 0x14) bind$packet(r0, &(0x7f0000000000)={0x11, 0x804, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) 10:07:39 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ppoll(&(0x7f0000000480)=[{r0}], 0x1, &(0x7f00000004c0)={0x0, 0x989680}, 0x0, 0x0) 10:07:40 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1524}, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xd, 0x0, 0x0, 0xffffffffffffff52) ioctl$KVM_NMI(r2, 0xae9a) syz_mount_image$cifs(&(0x7f0000000040)='cifs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x36) 10:07:40 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x814, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x600}}) r1 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r1, &(0x7f0000000000)={0x11, 0x804, r2, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_GET_KEY(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r4, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@NL80211_ATTR_KEY={0x10, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "4b1b55b03f"}]}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "df37963b44"}]}, 0x30}, 0x1, 0x0, 0x0, 0x64000}, 0x0) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r5) 10:07:40 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x814, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x600}}) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvfrom(r1, 0x0, 0x0, 0x10020, 0x0, 0x0) fdatasync(r1) r2 = socket$alg(0x26, 0x5, 0x0) socket$inet(0x2, 0x4, 0x20) r3 = socket$key(0xf, 0x3, 0x2) recvfrom(r3, 0x0, 0x0, 0x10020, 0x0, 0x0) r4 = socket$key(0xf, 0x3, 0x2) recvfrom(r4, 0x0, 0x0, 0x10020, 0x0, 0x0) sendfile(r3, r4, 0x0, 0x56) fcntl$dupfd(0xffffffffffffffff, 0x0, r2) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) r5 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x2400, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) r8 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r7, 0x84, 0x70, &(0x7f0000000100)={r9}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, &(0x7f00000001c0)={r9, 0x8001, 0x1}, 0x8) r10 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r10, 0x4b67, &(0x7f00000004c0)={0x1, &(0x7f0000000480)=[{}]}) ioctl$TCXONC(r10, 0x540a, 0x3) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f0000000140)={0x4, 0xffff, 0xd8, 0x0, 0x7}) 10:07:40 executing program 2: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00'}) bind$packet(r0, 0x0, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r1, &(0x7f0000000000)={0x11, 0x804, r2, 0x1, 0x0, 0x6, @dev}, 0x14) bind$packet(r0, &(0x7f0000000000)={0x11, 0x804, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) 10:07:40 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ppoll(&(0x7f0000000480)=[{r0}], 0x1, &(0x7f00000004c0)={0x0, 0x989680}, 0x0, 0x0) 10:07:40 executing program 0: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=@mpls_newroute={0x1c, 0x18, 0x21, 0x0, 0x0, {0x1c, 0x14}}, 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000080)=ANY=[@ANYRES64=r0], 0x8) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 10:07:40 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x814, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x600}}) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000000)={0x4, 0x100, 0x8}) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, 0x0) socket$alg(0x26, 0x5, 0x0) [ 489.326799][T32668] QAT: Invalid ioctl 10:07:40 executing program 0: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=@mpls_newroute={0x1c, 0x18, 0x21, 0x0, 0x0, {0x1c, 0x14}}, 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r4, &(0x7f00000017c0), 0x3da, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000140)={0x2, &(0x7f0000000080)=[{0x0}, {}]}) ioctl$DRM_IOCTL_NEW_CTX(r4, 0x40086425, &(0x7f0000000100)={r5, 0x1}) r6 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 10:07:40 executing program 2: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00'}) bind$packet(r0, 0x0, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r1, &(0x7f0000000000)={0x11, 0x804, r2, 0x1, 0x0, 0x6, @dev}, 0x14) bind$packet(r0, &(0x7f0000000000)={0x11, 0x804, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) 10:07:40 executing program 5: setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ppoll(&(0x7f0000000480)=[{}], 0x1, &(0x7f00000004c0)={0x0, 0x989680}, 0x0, 0x0) 10:07:40 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000280)=[{&(0x7f0000000100)=""/140, 0x8c}, {&(0x7f00000001c0)=""/157, 0x9d}], 0x2, 0x0) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000000)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x814, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x600}}) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r2) 10:07:40 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r1) ppoll(&(0x7f0000000480)=[{r0}], 0x1, &(0x7f00000004c0)={0x0, 0x989680}, 0x0, 0x0) 10:07:41 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1524}, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xd, 0x0, 0x0, 0xffffffffffffff52) ioctl$KVM_NMI(r2, 0xae9a) syz_mount_image$cifs(&(0x7f0000000040)='cifs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x38) 10:07:41 executing program 2: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @dev}, 0x14) r2 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000000)={0x11, 0x804, r3, 0x1, 0x0, 0x6, @dev}, 0x14) bind$packet(r0, &(0x7f0000000000)={0x11, 0x804, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) 10:07:41 executing program 5: setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ppoll(&(0x7f0000000480)=[{}], 0x1, &(0x7f00000004c0)={0x0, 0x989680}, 0x0, 0x0) 10:07:41 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r1) ppoll(&(0x7f0000000480)=[{r0}], 0x1, &(0x7f00000004c0)={0x0, 0x989680}, 0x0, 0x0) 10:07:41 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x814, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x600}}) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0x3da, 0x0) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x200000, 0x0) ioctl$KVM_X86_SETUP_MCE(r3, 0x4008ae9c, &(0x7f0000000140)={0x20, 0x6, 0xa}) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, 0x0) r4 = socket$key(0xf, 0x3, 0x2) recvfrom(r4, 0x0, 0x0, 0x10020, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000000)={0x0, r0, 0x9, 0xede, 0x80}) r5 = socket$alg(0x26, 0x5, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r5) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r6, 0x4b67, &(0x7f00000004c0)={0x1, &(0x7f0000000480)=[{}]}) ioctl$TIOCL_SETVESABLANK(r6, 0x541c, &(0x7f0000000080)) 10:07:41 executing program 0: bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040)={0x8, 0x81}, 0xc) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xfffffffffffffd9a, &(0x7f000000b000)={&(0x7f0000000000)=@mpls_newroute={0x1c, 0x18, 0x100, 0x0, 0x0, {0x1c, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x200}}, 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 10:07:41 executing program 5: setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ppoll(&(0x7f0000000480)=[{}], 0x1, &(0x7f00000004c0)={0x0, 0x989680}, 0x0, 0x0) 10:07:41 executing program 2: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @dev}, 0x14) r2 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000000)={0x11, 0x804, r3, 0x1, 0x0, 0x6, @dev}, 0x14) bind$packet(r0, &(0x7f0000000000)={0x11, 0x804, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) 10:07:41 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r1) ppoll(&(0x7f0000000480)=[{r0}], 0x1, &(0x7f00000004c0)={0x0, 0x989680}, 0x0, 0x0) 10:07:41 executing program 5: r0 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ppoll(&(0x7f0000000480)=[{r0}], 0x1, &(0x7f00000004c0)={0x0, 0x989680}, 0x0, 0x0) 10:07:41 executing program 5: r0 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ppoll(&(0x7f0000000480)=[{r0}], 0x1, &(0x7f00000004c0)={0x0, 0x989680}, 0x0, 0x0) 10:07:41 executing program 2: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @dev}, 0x14) r2 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000000)={0x11, 0x804, r3, 0x1, 0x0, 0x6, @dev}, 0x14) bind$packet(r0, &(0x7f0000000000)={0x11, 0x804, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) 10:07:42 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1524}, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xd, 0x0, 0x0, 0xffffffffffffff52) ioctl$KVM_NMI(r2, 0xae9a) syz_mount_image$cifs(&(0x7f0000000040)='cifs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x3a) 10:07:42 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) socket$inet6(0xa, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f0000000480)=[{r0}], 0x1, &(0x7f00000004c0)={0x0, 0x989680}, 0x0, 0x0) 10:07:42 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x814, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000100)=0x0, &(0x7f0000000140), &(0x7f0000000180)) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={[{@uid={'uid', 0x3d, r4}}]}) syz_mount_image$xfs(&(0x7f0000000080)='xfs\x00', &(0x7f00000000c0)='./bus\x00', 0x3ff, 0x1, &(0x7f0000000100)=[{&(0x7f00000005c0)="bd91ca81ed068bc7f85b273b3b059233a9100da9ba92830ba82e8644602db1a8a7a4605d96250ff90b1db786c8839e799e239e472ee78277122cf2e7217b736c7f931dd41da95e9751f84cad2b", 0x4d, 0x2}], 0x30c4028, &(0x7f0000000640)={[], [{@subj_role={'subj_role'}}, {@context={'context', 0x3d, 'staff_u'}}, {@fowner_eq={'fowner', 0x3d, r4}}, {@dont_measure='dont_measure'}]}) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000006c0)={{0x1, 0x0, 0x0, r4, r5, 0x0, 0x8}, 0x100000001, 0x1000, 0x0, 0x0, 0x0, 0x0, 0xf04c}) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={[{@uid={'uid', 0x3d, r7}}]}) syz_mount_image$xfs(&(0x7f0000000080)='xfs\x00', &(0x7f00000000c0)='./bus\x00', 0x3ff, 0x1, &(0x7f0000000100)=[{&(0x7f00000005c0)="bd91ca81ed068bc7f85b273b3b059233a9100da9ba92830ba82e8644602db1a8a7a4605d96250ff90b1db786c8839e799e239e472ee78277122cf2e7217b736c7f931dd41da95e9751f84cad2b", 0x4d, 0x2}], 0x30c4028, &(0x7f0000000640)={[], [{@subj_role={'subj_role'}}, {@context={'context', 0x3d, 'staff_u'}}, {@fowner_eq={'fowner', 0x3d, r7}}, {@dont_measure='dont_measure'}]}) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000006c0)={{0x1, 0x0, 0x0, r7, r8, 0x0, 0x8}, 0x100000001, 0x1000, 0x0, 0x0, 0x0, 0x0, 0xf04c}) getgroups(0x6, &(0x7f00000001c0)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, r5, r8]) r10 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={[{@uid={'uid', 0x3d, r11}}]}) syz_mount_image$xfs(&(0x7f0000000080)='xfs\x00', &(0x7f00000000c0)='./bus\x00', 0x3ff, 0x1, &(0x7f0000000100)=[{&(0x7f00000005c0)="bd91ca81ed068bc7f85b273b3b059233a9100da9ba92830ba82e8644602db1a8a7a4605d96250ff90b1db786c8839e799e239e472ee78277122cf2e7217b736c7f931dd41da95e9751f84cad2b", 0x4d, 0x2}], 0x30c4028, &(0x7f0000000640)={[], [{@subj_role={'subj_role'}}, {@context={'context', 0x3d, 'staff_u'}}, {@fowner_eq={'fowner', 0x3d, r11}}, {@dont_measure='dont_measure'}]}) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000006c0)={{0x1, 0x0, 0x0, r11, r12, 0x0, 0x8}, 0x100000001, 0x1000, 0x0, 0x0, 0x0, 0x0, 0xf04c}) newfstatat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) lstat(&(0x7f00000002c0)='.\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000400)=0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) setgroups(0x9, &(0x7f0000000500)=[r1, r2, r9, r12, r13, r14, r15, 0xee01, r16]) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x5fe}}) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, 0x0) r17 = socket$alg(0x26, 0x5, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r17) 10:07:42 executing program 2: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00'}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x804, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) r1 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r1, &(0x7f0000000000)={0x11, 0x804, r2, 0x1, 0x0, 0x6, @dev}, 0x14) bind$packet(r0, &(0x7f0000000000)={0x11, 0x804, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) 10:07:42 executing program 5: r0 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ppoll(&(0x7f0000000480)=[{r0}], 0x1, &(0x7f00000004c0)={0x0, 0x989680}, 0x0, 0x0) 10:07:42 executing program 0: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=@mpls_newroute={0x1c, 0x18, 0x21, 0x0, 0x0, {0x1c, 0x14}}, 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x100, 0x0) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x102080, 0x0) getsockopt$inet_mreq(r6, 0x0, 0x23, &(0x7f0000000100)={@local}, &(0x7f0000000140)=0x8) ioctl$KDMKTONE(r5, 0x4b30, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r7, &(0x7f00000017c0), 0x3da, 0x0) ioctl$PPPIOCGDEBUG(r7, 0x80047441, &(0x7f0000000180)) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 10:07:42 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ppoll(&(0x7f0000000480)=[{r0}], 0x1, &(0x7f00000004c0)={0x0, 0x989680}, 0x0, 0x0) [ 491.440129][ T595] hfs: uid requires an argument 10:07:42 executing program 2: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00'}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x804, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) r1 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r1, &(0x7f0000000000)={0x11, 0x804, r2, 0x1, 0x0, 0x6, @dev}, 0x14) bind$packet(r0, &(0x7f0000000000)={0x11, 0x804, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) [ 491.473173][ T595] hfs: unable to parse mount options 10:07:42 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) socket$inet6(0xa, 0x2, 0x0) ppoll(&(0x7f0000000480)=[{r0}], 0x1, &(0x7f00000004c0)={0x0, 0x989680}, 0x0, 0x0) 10:07:42 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x814, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x600}}) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r1) prctl$PR_GET_FP_MODE(0x2e) 10:07:42 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ppoll(&(0x7f0000000480)=[{r0}], 0x1, &(0x7f00000004c0)={0x0, 0x989680}, 0x0, 0x0) 10:07:42 executing program 2: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00'}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x804, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) r1 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r1, &(0x7f0000000000)={0x11, 0x804, r2, 0x1, 0x0, 0x6, @dev}, 0x14) bind$packet(r0, &(0x7f0000000000)={0x11, 0x804, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) 10:07:43 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1524}, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xd, 0x0, 0x0, 0xffffffffffffff52) ioctl$KVM_NMI(r2, 0xae9a) syz_mount_image$cifs(&(0x7f0000000040)='cifs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x3c) 10:07:43 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) ppoll(&(0x7f0000000480)=[{r0}], 0x1, &(0x7f00000004c0)={0x0, 0x989680}, 0x0, 0x0) 10:07:43 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ppoll(&(0x7f0000000480)=[{r0}], 0x1, &(0x7f00000004c0)={0x0, 0x989680}, 0x0, 0x0) 10:07:43 executing program 2: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x804, r1, 0x1, 0x0, 0x6, @dev}, 0x14) r2 = socket(0x0, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000000)={0x11, 0x804, r3, 0x1, 0x0, 0x6, @dev}, 0x14) bind$packet(r0, &(0x7f0000000000)={0x11, 0x804, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) 10:07:43 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x814, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x600}}) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) r3 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000280)={'syz'}, &(0x7f0000000600)="08000000000000003759540d01ab3409d020ce89f347f85954148506ada508", 0x1f, r3) r4 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r3) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f0000000140)={0xfffffff, 0x4, 0x300, r0, 0x0, &(0x7f0000000100)={0x9a091f, 0x8000, [], @p_u8=&(0x7f00000000c0)=0x8}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)={0x1c, r6, 0xb0343aabd1184b87, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x200000000000011, 0x3, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r8, &(0x7f0000000240)={0x11, 0x0, r10}, 0x14) getsockname$packet(r8, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=r11, @ANYBLOB="0100000000000000200016801c00018018000c8014000000000004001400"], 0x44}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) sendmsg$NL80211_CMD_SET_BSS(r5, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)={0x4c, r6, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@NL80211_STA_WME_MAX_SP={0x19, 0x2, "a2d29a9f6ca5f8f3da098f3e7011576312cb979f1c"}, @NL80211_STA_WME_MAX_SP={0x4}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r11}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0xda}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24000000}, 0x48005) keyctl$revoke(0x3, r4) fcntl$dupfd(0xffffffffffffffff, 0x0, r2) 10:07:43 executing program 0: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x10, 0x80003, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000640)={{{@in=@local, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@remote}}, &(0x7f0000000400)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000600)=@mpls_newroute={0x28, 0x18, 0x1, 0x0, 0x0, {0x1c, 0x14}, [@RTA_MULTIPATH={0xc, 0x9, {0x265c, 0x5, 0x4, r3}}]}, 0x28}}, 0x0) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-control\x00', 0x102000, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, &(0x7f0000000240)=0x5, 0x4) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r5 = socket$key(0xf, 0x3, 0x2) recvfrom(r5, 0x0, 0x0, 0x10020, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[@ANYRES64, @ANYPTR64=&(0x7f0000000000)=ANY=[@ANYRES16=0x0]], 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup2(r6, r6) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r8, &(0x7f00000017c0), 0x3da, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r8, 0xc0a85352, &(0x7f0000000280)={{0x7, 0x6}, 'port0\x00', 0x0, 0x40044, 0x30d5ffd7, 0x9, 0x13038246, 0x1ff, 0x80000000, 0x0, 0x3, 0x7f}) prctl$PR_SET_FPEXC(0xc, 0x80) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$SNDCTL_DSP_STEREO(0xffffffffffffffff, 0xc0045003, &(0x7f0000000180)) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x4) ioctl$SG_SET_KEEP_ORPHAN(r8, 0x2287, &(0x7f0000000080)=0xba4) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x800) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r9, 0xc0502100, &(0x7f0000000380)) 10:07:43 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) ppoll(&(0x7f0000000480)=[{r0}], 0x1, &(0x7f00000004c0)={0x0, 0x989680}, 0x0, 0x0) [ 492.466848][ T850] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 10:07:43 executing program 2: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x804, r1, 0x1, 0x0, 0x6, @dev}, 0x14) r2 = socket(0x0, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000000)={0x11, 0x804, r3, 0x1, 0x0, 0x6, @dev}, 0x14) bind$packet(r0, &(0x7f0000000000)={0x11, 0x804, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) 10:07:43 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x0, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ppoll(&(0x7f0000000480)=[{r0}], 0x1, &(0x7f00000004c0)={0x0, 0x989680}, 0x0, 0x0) 10:07:43 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x814, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x600}}) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x100800) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r6, &(0x7f00000017c0), 0x3da, 0x0) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000100)={0x3, 0x6, 0x4, 0x671f8166a265b457, 0xfffffff9, {r3, r4/1000+30000}, {0x5, 0x2, 0x4f, 0x9, 0x6, 0x6, "ff8566f9"}, 0x8, 0x3, @fd=r6, 0x4, 0x0, 0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r2, 0xab00, r7) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) fcntl$dupfd(0xffffffffffffffff, 0x0, r1) 10:07:43 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) ppoll(&(0x7f0000000480)=[{r0}], 0x1, &(0x7f00000004c0)={0x0, 0x989680}, 0x0, 0x0) 10:07:43 executing program 2: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x804, r1, 0x1, 0x0, 0x6, @dev}, 0x14) r2 = socket(0x0, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000000)={0x11, 0x804, r3, 0x1, 0x0, 0x6, @dev}, 0x14) bind$packet(r0, &(0x7f0000000000)={0x11, 0x804, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) 10:07:44 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1524}, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xd, 0x0, 0x0, 0xffffffffffffff52) ioctl$KVM_NMI(r2, 0xae9a) syz_mount_image$cifs(&(0x7f0000000040)='cifs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x3e) 10:07:44 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) ppoll(&(0x7f0000000480)=[{r0}], 0x1, &(0x7f00000004c0)={0x0, 0x989680}, 0x0, 0x0) 10:07:44 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x0, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ppoll(&(0x7f0000000480)=[{r0}], 0x1, &(0x7f00000004c0)={0x0, 0x989680}, 0x0, 0x0) 10:07:44 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x814, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x101000) ioctl$VIDIOC_DECODER_CMD(r1, 0xc0485660, &(0x7f0000000080)={0x4, 0x1, @stop_pts=0x3}) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x600}}) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r2) 10:07:44 executing program 2: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x804, r1, 0x1, 0x0, 0x6, @dev}, 0x14) r2 = socket(0x200000000000011, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000000)={0x11, 0x804, r3, 0x1, 0x0, 0x6, @dev}, 0x14) bind$packet(r0, &(0x7f0000000000)={0x11, 0x804, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) 10:07:44 executing program 0: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x10, 0x80003, 0x0) r3 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r3, &(0x7f0000000000)={0x11, 0x804, r4, 0x1, 0x0, 0x6, @dev}, 0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv4_delrule={0x34, 0x21, 0x400, 0x70bd2b, 0x25dfdbfd, {0x2, 0x10, 0x14, 0x0, 0x2, 0x0, 0x0, 0x2, 0x10002}, [@FRA_FLOW={0x8, 0xb, 0x1}, @FRA_GENERIC_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e20, 0x4e20}}, @FRA_DST={0x8, 0x1, @empty}]}, 0x34}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x9, 0x40a800) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000004c0)={0x60, 0x0, &(0x7f00000003c0)=[@acquire, @increfs_done={0x40106308, 0x1}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x68, 0x18, &(0x7f00000002c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/200, 0xc8, 0x2, 0x7}, @ptr={0x70742a85, 0x1, &(0x7f0000000280)=""/19, 0x13, 0x0, 0x3e}, @flat=@binder={0x73622a85, 0x100, 0x3}}, &(0x7f0000000380)={0x0, 0x28, 0x50}}}], 0x6a, 0x0, &(0x7f0000000440)="38315729b12e8c36d777205679aade9b5184afb193326a138b4fc829354671307fcef6c72a2475d8af266a4f244ee43284e9bbb1583e9db999853348b3588d46751bd11c33959e210646fe96e3c8865e01d6c982f8273bac7ecf8f5df76cbb356bc0c80bfe1cf180925c"}) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 10:07:44 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) ppoll(&(0x7f0000000480)=[{r0}], 0x1, &(0x7f00000004c0)={0x0, 0x989680}, 0x0, 0x0) 10:07:44 executing program 2: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x804, r1, 0x1, 0x0, 0x6, @dev}, 0x14) r2 = socket(0x200000000000011, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000000)={0x11, 0x804, r3, 0x1, 0x0, 0x6, @dev}, 0x14) bind$packet(r0, &(0x7f0000000000)={0x11, 0x804, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) 10:07:44 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x0, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ppoll(&(0x7f0000000480)=[{r0}], 0x1, &(0x7f00000004c0)={0x0, 0x989680}, 0x0, 0x0) 10:07:44 executing program 2: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x804, r1, 0x1, 0x0, 0x6, @dev}, 0x14) r2 = socket(0x200000000000011, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000000)={0x11, 0x804, r3, 0x1, 0x0, 0x6, @dev}, 0x14) bind$packet(r0, &(0x7f0000000000)={0x11, 0x804, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) 10:07:44 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) ppoll(&(0x7f0000000480)=[{r0}], 0x1, &(0x7f00000004c0)={0x0, 0x989680}, 0x0, 0x0) 10:07:44 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x814, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x600}}) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x10000, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000140)={r4, 0x7, 0x1, 0x7b24, 0x37, 0x5}, &(0x7f00000001c0)=0x14) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x70, &(0x7f0000000100)={r4}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000100)=@assoc_value={r4, 0x20}, 0x8) pipe(&(0x7f0000000000)) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000380)=0x14, 0x800) r7 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/dlm-monitor\x00', 0x20000, 0x0) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r8, &(0x7f00000017c0), 0x3da, 0x0) write$P9_RMKNOD(r8, &(0x7f0000000680)={0x14, 0x13, 0x2, {0x40, 0x0, 0x6}}, 0x14) r9 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r9, &(0x7f00000017c0), 0x3da, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000005c0)={r9, 0x10, &(0x7f0000000580)={&(0x7f0000000480)=""/225, 0xe1, 0xffffffffffffffff}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x9, 0x5, &(0x7f0000000200)=@raw=[@jmp={0x5, 0x1, 0xb, 0xf, 0x7, 0xfffffffffffffff8, 0xffffffffffffffff}, @ldst={0x1, 0x1, 0x0, 0x3, 0x3, 0xfffffffffffffff0, 0x4}, @alu={0x4, 0x0, 0x1, 0x6, 0x9, 0xffffffffffffffff, 0x1}, @alu={0x7, 0x1, 0x22c23c0cc7860ad9, 0x0, 0x3, 0xfffffffffffffffc, 0x8}, @exit], &(0x7f0000000240)='GPL\x00', 0x200, 0x97, &(0x7f0000000280)=""/151, 0x41000, 0x6, [], r6, 0x15, r7, 0x8, &(0x7f0000000400)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x1, 0x5, 0x81, 0x1f}, 0x10, r10}, 0x78) write$USERIO_CMD_SEND_INTERRUPT(r5, &(0x7f00000000c0)={0x2, 0x3}, 0xffffffffffffff57) r11 = socket$alg(0x26, 0x5, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r11) 10:07:45 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, 0x0, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ppoll(&(0x7f0000000480)=[{r0}], 0x1, &(0x7f00000004c0)={0x0, 0x989680}, 0x0, 0x0) 10:07:45 executing program 2: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x804, r1, 0x1, 0x0, 0x6, @dev}, 0x14) r2 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000000)={0x11, 0x804, r3, 0x1, 0x0, 0x6, @dev}, 0x14) bind$packet(r0, &(0x7f0000000000)={0x11, 0x804, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) 10:07:45 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) ppoll(&(0x7f0000000480)=[{r0}], 0x1, &(0x7f00000004c0)={0x0, 0x989680}, 0x0, 0x0) 10:07:45 executing program 4: syz_genetlink_get_family_id$l2tp(&(0x7f0000000000)='l2tp\x00') openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x5a800, 0x0) perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x5, 0xe, 0x80, 0x2, 0x0, 0x7, 0x4, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_bp={0x0, 0x2}, 0x814, 0x191, 0x9005, 0x4, 0x0, 0x4, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x5110c0, 0x0) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x600}}) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0x3da, 0x0) ioctl$EVIOCGPROP(r2, 0x80404509, &(0x7f0000000100)=""/4096) fcntl$dupfd(0xffffffffffffffff, 0x0, r1) 10:07:45 executing program 0: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000180021000012853c3b467111030000000000001a10000000001f0000000000"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) socket$unix(0x1, 0x2, 0x0) 10:07:45 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1524}, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xd, 0x0, 0x0, 0xffffffffffffff52) ioctl$KVM_NMI(r2, 0xae9a) syz_mount_image$cifs(&(0x7f0000000040)='cifs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x41) 10:07:45 executing program 3: setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) ppoll(&(0x7f0000000480)=[{}], 0x1, &(0x7f00000004c0)={0x0, 0x989680}, 0x0, 0x0) 10:07:45 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, 0x0, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ppoll(&(0x7f0000000480)=[{r0}], 0x1, &(0x7f00000004c0)={0x0, 0x989680}, 0x0, 0x0) 10:07:45 executing program 2: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x804, r1, 0x1, 0x0, 0x6, @dev}, 0x14) r2 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000000)={0x11, 0x804, r3, 0x1, 0x0, 0x6, @dev}, 0x14) bind$packet(r0, &(0x7f0000000000)={0x11, 0x804, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) 10:07:45 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0xa9, 0x0, 0x0, 0x0, 0xff, 0x0, 0x7, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x814, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x600}}) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) fgetxattr(r2, &(0x7f0000000080)=@random={'os2.', '\xf6!selfselfprocbdev\'\\&%selinux\x0e-]:em1\x00'}, &(0x7f00000000c0)=""/177, 0xb1) fcntl$dupfd(0xffffffffffffffff, 0x0, r1) 10:07:45 executing program 3: setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) ppoll(&(0x7f0000000480)=[{}], 0x1, &(0x7f00000004c0)={0x0, 0x989680}, 0x0, 0x0) 10:07:46 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, 0x0, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ppoll(&(0x7f0000000480)=[{r0}], 0x1, &(0x7f00000004c0)={0x0, 0x989680}, 0x0, 0x0) 10:07:46 executing program 2: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x804, r1, 0x1, 0x0, 0x6, @dev}, 0x14) r2 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000000)={0x11, 0x804, r3, 0x1, 0x0, 0x6, @dev}, 0x14) bind$packet(r0, &(0x7f0000000000)={0x11, 0x804, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) 10:07:46 executing program 3: setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) ppoll(&(0x7f0000000480)=[{}], 0x1, &(0x7f00000004c0)={0x0, 0x989680}, 0x0, 0x0) 10:07:46 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x814, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x600}}) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r1) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0x3da, 0x0) ioctl$UI_SET_RELBIT(r2, 0x40045566, 0x6) 10:07:46 executing program 3: r0 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) ppoll(&(0x7f0000000480)=[{r0}], 0x1, &(0x7f00000004c0)={0x0, 0x989680}, 0x0, 0x0) 10:07:46 executing program 0: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=@mpls_newroute={0x1c, 0x18, 0x21, 0x0, 0x0, {0x1c, 0x14, 0x10, 0x0, 0x0, 0x1}}, 0x1c}}, 0x24004010) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r4, &(0x7f00000017c0), 0x3da, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r4, 0x2401, 0xfffffffffffffff8) r5 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 10:07:46 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1524}, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xd, 0x0, 0x0, 0xffffffffffffff52) ioctl$KVM_NMI(r2, 0xae9a) syz_mount_image$cifs(&(0x7f0000000040)='cifs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x42) 10:07:46 executing program 2: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x804, r1, 0x1, 0x0, 0x6, @dev}, 0x14) r2 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) bind$packet(r2, &(0x7f0000000000)={0x11, 0x804, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) bind$packet(r0, &(0x7f0000000000)={0x11, 0x804, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) 10:07:46 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080), 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ppoll(&(0x7f0000000480)=[{r0}], 0x1, &(0x7f00000004c0)={0x0, 0x989680}, 0x0, 0x0) 10:07:46 executing program 3: r0 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) ppoll(&(0x7f0000000480)=[{r0}], 0x1, &(0x7f00000004c0)={0x0, 0x989680}, 0x0, 0x0) 10:07:46 executing program 4: perf_event_open(&(0x7f000001d000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x80, 0x0, 0x1000007, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x814, 0x0, 0x4000000, 0x0, 0x0, 0x10001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x600}}) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x1, 0xbd, 0x401, 0x3, 0x2, "2c9bc67c6ca905128dc6b0f2495c678b5c6161"}) r1 = socket$alg(0x26, 0x5, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r1) 10:07:46 executing program 3: r0 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) ppoll(&(0x7f0000000480)=[{r0}], 0x1, &(0x7f00000004c0)={0x0, 0x989680}, 0x0, 0x0) 10:07:46 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x814, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$SNDCTL_DSP_RESET(0xffffffffffffffff, 0x5000, 0x0) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x600}}) r1 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r1, &(0x7f0000000000)={0x11, 0x804, r2, 0x1, 0x0, 0x6, @dev}, 0x14) getsockopt$IP6T_SO_GET_ENTRIES(r1, 0x29, 0x41, &(0x7f0000000080)={'mangle\x00', 0xa6, "31ee17aa20d0dbbd317c72d5336dfebc0fb234d7643dceb13b68abd3e76f3a30f6cff3267b57b5eadac3f2a7d6cb3d0c85707684cfa9789dff6690056265eab34993a5eacf921218ed885ed0593cf2aea9b63ab804cad1ea7dba7f7a9e4ddfbde7c0febffa9da3a944b345c7168d68ad0e26e1592ebe9d11640ff5466b60c34742168f36930eb22d559fa5d8629f0fb51b4f0e8beea9a44b91a2dbdcfec53993d21c5f4d6f5c"}, &(0x7f0000000000)=0xca) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r3) 10:07:46 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080), 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ppoll(&(0x7f0000000480)=[{r0}], 0x1, &(0x7f00000004c0)={0x0, 0x989680}, 0x0, 0x0) 10:07:46 executing program 2: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x804, r1, 0x1, 0x0, 0x6, @dev}, 0x14) r2 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) bind$packet(r2, &(0x7f0000000000)={0x11, 0x804, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) bind$packet(r0, &(0x7f0000000000)={0x11, 0x804, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) 10:07:46 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) ppoll(&(0x7f0000000480)=[{r0}], 0x1, &(0x7f00000004c0)={0x0, 0x989680}, 0x0, 0x0) 10:07:46 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x814, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x2200) write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f0000000080), 0x2) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x600}}) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r2) 10:07:47 executing program 0: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001800040000000000000000001c1400"/28], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 10:07:47 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1524}, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xd, 0x0, 0x0, 0xffffffffffffff52) ioctl$KVM_NMI(r2, 0xae9a) syz_mount_image$cifs(&(0x7f0000000040)='cifs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x43) 10:07:47 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080), 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ppoll(&(0x7f0000000480)=[{r0}], 0x1, &(0x7f00000004c0)={0x0, 0x989680}, 0x0, 0x0) 10:07:47 executing program 2: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x804, r1, 0x1, 0x0, 0x6, @dev}, 0x14) r2 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) bind$packet(r2, &(0x7f0000000000)={0x11, 0x804, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) bind$packet(r0, &(0x7f0000000000)={0x11, 0x804, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) 10:07:47 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) ppoll(&(0x7f0000000480)=[{r0}], 0x1, &(0x7f00000004c0)={0x0, 0x989680}, 0x0, 0x0) 10:07:47 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x814, 0x0, 0xfc9, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x600}}) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r1) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0x3da, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r4) r5 = getgid() write$FUSE_CREATE_OPEN(r2, &(0x7f0000000080)={0xa0, 0x0, 0x2, {{0x6, 0x3, 0xffffffffffffffc0, 0x0, 0xffffffff, 0x1ff, {0x5, 0x1000, 0x21, 0x91a0, 0x182, 0x1, 0x1f, 0x0, 0x4, 0x123, 0x4, r4, r5, 0x852a, 0x1e}}, {0x0, 0x4}}}, 0xa0) 10:07:47 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x814, 0x0, 0x0, 0x0, 0x3afb, 0x4, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyprintk\x00', 0x840, 0x0) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0xfffe, 0x600}}) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r1) 10:07:47 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ppoll(&(0x7f0000000480)=[{r0}], 0x1, &(0x7f00000004c0)={0x0, 0x989680}, 0x0, 0x0) 10:07:47 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) ppoll(&(0x7f0000000480)=[{r0}], 0x1, &(0x7f00000004c0)={0x0, 0x989680}, 0x0, 0x0) 10:07:47 executing program 2: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x804, r1, 0x1, 0x0, 0x6, @dev}, 0x14) r2 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x804, r3, 0x1, 0x0, 0x6, @dev}, 0x14) bind$packet(r0, &(0x7f0000000000)={0x11, 0x804, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) 10:07:48 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ppoll(&(0x7f0000000480)=[{r0}], 0x1, &(0x7f00000004c0)={0x0, 0x989680}, 0x0, 0x0) 10:07:48 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7, 0x198c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5000000000000000, 0x14}, 0x1894, 0x0, 0x0, 0x0, 0x0, 0x6, 0x20}, 0x0, 0x4, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x600}}) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r1) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000000)) 10:07:48 executing program 0: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0006001800210000000000000000001c1400"/28], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 10:07:48 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1524}, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xd, 0x0, 0x0, 0xffffffffffffff52) ioctl$KVM_NMI(r2, 0xae9a) syz_mount_image$cifs(&(0x7f0000000040)='cifs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x44) 10:07:48 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x0, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) ppoll(&(0x7f0000000480)=[{r0}], 0x1, &(0x7f00000004c0)={0x0, 0x989680}, 0x0, 0x0) 10:07:48 executing program 2: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x804, r1, 0x1, 0x0, 0x6, @dev}, 0x14) r2 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x804, r3, 0x1, 0x0, 0x6, @dev}, 0x14) bind$packet(r0, &(0x7f0000000000)={0x11, 0x804, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) 10:07:48 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ppoll(&(0x7f0000000480)=[{r0}], 0x1, &(0x7f00000004c0)={0x0, 0x989680}, 0x0, 0x0) 10:07:48 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x814, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x600}}) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) ioctl$KVM_X86_SET_MCE(r1, 0x4040ae9e, &(0x7f0000000240)={0x880000000000000, 0x1000, 0xffff, 0x8, 0x1b}) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, 0x0) r2 = socket$pptp(0x18, 0x1, 0x2) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f0000000080)={0x2, 'vlan0\x00'}) r3 = socket$alg(0x26, 0x5, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, r5, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x7}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x2}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xdfed}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000800}, 0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, r3) getsockopt$inet_dccp_buf(r1, 0x21, 0x80, &(0x7f0000000280)=""/24, &(0x7f00000002c0)=0x18) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x20000, 0x0) ioctl$PPPIOCGFLAGS1(r6, 0x8004745a, &(0x7f0000000200)) 10:07:48 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ppoll(&(0x7f0000000480)=[{r0}], 0x1, &(0x7f00000004c0)={0x0, 0x989680}, 0x0, 0x0) 10:07:48 executing program 2: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x804, r1, 0x1, 0x0, 0x6, @dev}, 0x14) r2 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x804, r3, 0x1, 0x0, 0x6, @dev}, 0x14) bind$packet(r0, &(0x7f0000000000)={0x11, 0x804, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) 10:07:48 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x0, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) ppoll(&(0x7f0000000480)=[{r0}], 0x1, &(0x7f00000004c0)={0x0, 0x989680}, 0x0, 0x0) 10:07:48 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x814, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x600}}) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r2, 0x4b67, &(0x7f00000004c0)={0x1, &(0x7f0000000480)=[{}]}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r3, 0x4b67, &(0x7f00000004c0)={0x1, &(0x7f0000000480)=[{}]}) ioctl$KDGKBLED(r3, 0x4b64, &(0x7f0000000000)) ioctl$TIOCNXCL(r2, 0x540d) fcntl$dupfd(0xffffffffffffffff, 0x0, r1) 10:07:48 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ppoll(&(0x7f0000000480)=[{r0}], 0x1, &(0x7f00000004c0)={0x0, 0x989680}, 0x0, 0x0) 10:07:49 executing program 0: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x10, 0x80003, 0x0) r3 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r3, &(0x7f0000000000)={0x11, 0x804, r4, 0x1, 0x0, 0x6, @dev}, 0x14) r5 = socket$key(0xf, 0x3, 0x2) recvfrom(r5, 0x0, 0x0, 0x10020, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000040)={{{@in=@multicast1, @in6=@ipv4={[], [], @multicast2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}}}, &(0x7f0000000140)=0xe8) setsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000180)={{{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, @in6=@remote, 0x4e20, 0x80, 0x4e20, 0xe6a8, 0x2, 0x90, 0x0, 0xa9, r6, r7}, {0x0, 0x500, 0x1f, 0x0, 0x7, 0x0, 0x1, 0x4}, {0x2, 0xffffffffffffffff, 0xfffffffffffffe15, 0x5}, 0x3, 0x6e6bb8, 0x0, 0x0, 0x2}, {{@in6=@remote, 0x4d4, 0x3c}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x4, 0x0, 0x0, 0x80, 0x1, 0x3}}, 0xe8) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup2(r8, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 10:07:49 executing program 2: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x804, r1, 0x1, 0x0, 0x6, @dev}, 0x14) r2 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syz_tun\x00'}) bind$packet(r2, 0x0, 0x0) bind$packet(r0, &(0x7f0000000000)={0x11, 0x804, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) 10:07:49 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1524}, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xd, 0x0, 0x0, 0xffffffffffffff52) ioctl$KVM_NMI(r2, 0xae9a) syz_mount_image$cifs(&(0x7f0000000040)='cifs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x45) 10:07:49 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x0, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) ppoll(&(0x7f0000000480)=[{r0}], 0x1, &(0x7f00000004c0)={0x0, 0x989680}, 0x0, 0x0) 10:07:49 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ppoll(&(0x7f0000000480)=[{r0}], 0x1, &(0x7f00000004c0)={0x0, 0x989680}, 0x0, 0x0) 10:07:49 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x814, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x600}}) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000000)={0x11, 0x804, r3, 0x1, 0x0, 0x6, @dev}, 0x14) r4 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r4, &(0x7f0000000000)={0x11, 0x804, r5, 0x1, 0x0, 0x6, @dev}, 0x14) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000000)={0x2, 0x4, 0x1, 0x3, 0xfffffffc, 0x7fffffff, 0x10001, 0xaf, 0x0}, &(0x7f0000000080)=0x20) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f00000000c0)={r6, @in6={{0xa, 0x4e22, 0x80000000, @mcast1, 0x36}}, [0x6, 0x7ff, 0xff, 0x3ff, 0x1, 0xfffffffffffffffd, 0x0, 0x4, 0x7fffffff, 0x3, 0x5, 0x77, 0x3, 0x8, 0x14b]}, &(0x7f00000001c0)=0x100) fcntl$dupfd(0xffffffffffffffff, 0x0, r1) 10:07:49 executing program 2: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x804, r1, 0x1, 0x0, 0x6, @dev}, 0x14) r2 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syz_tun\x00'}) bind$packet(r2, 0x0, 0x0) bind$packet(r0, &(0x7f0000000000)={0x11, 0x804, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) 10:07:49 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x0, 0x6, 0x8000, 0x6}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ppoll(&(0x7f0000000480)=[{r0}], 0x1, &(0x7f00000004c0)={0x0, 0x989680}, 0x0, 0x0) 10:07:49 executing program 2: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x804, r1, 0x1, 0x0, 0x6, @dev}, 0x14) r2 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syz_tun\x00'}) bind$packet(r2, 0x0, 0x0) bind$packet(r0, &(0x7f0000000000)={0x11, 0x804, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) 10:07:49 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb1d3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x814, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x600}}) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r1) 10:07:49 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, 0x0, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) ppoll(&(0x7f0000000480)=[{r0}], 0x1, &(0x7f00000004c0)={0x0, 0x989680}, 0x0, 0x0) 10:07:49 executing program 2: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x804, r1, 0x1, 0x0, 0x6, @dev}, 0x14) r2 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @dev}, 0x14) bind$packet(r0, &(0x7f0000000000)={0x11, 0x804, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) 10:07:50 executing program 0: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=@ipv4_getroute={0x1c, 0x1a, 0x0, 0x70bd25, 0x25dfdbfe, {0x2, 0x20, 0x14, 0x4, 0x0, 0x0, 0x0, 0x3, 0x2b00}, ["", ""]}, 0x1c}}, 0x4000000) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r5, &(0x7f0000000000)={0x11, 0x804, r6, 0x1, 0x0, 0x6, @dev}, 0x14) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@mcast2, @in=@loopback}}, {{@in=@remote}, 0x0, @in6=@dev}}, &(0x7f0000000380)=0xe8) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 10:07:50 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x0, 0x6, 0x8000, 0x6}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ppoll(&(0x7f0000000480)=[{r0}], 0x1, &(0x7f00000004c0)={0x0, 0x989680}, 0x0, 0x0) 10:07:50 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1524}, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xd, 0x0, 0x0, 0xffffffffffffff52) ioctl$KVM_NMI(r2, 0xae9a) syz_mount_image$cifs(&(0x7f0000000040)='cifs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x46) 10:07:50 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, 0x0, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) ppoll(&(0x7f0000000480)=[{r0}], 0x1, &(0x7f00000004c0)={0x0, 0x989680}, 0x0, 0x0) 10:07:50 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x814, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0x3da, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ocfs2_control\x00', 0x28000, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000140)={0x5, 0x1, 0x1, 'queue1\x00', 0x2}) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x600}}) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4) r6 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x1, 0x10402) r7 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r7, &(0x7f0000000000)={0x11, 0x804, r8, 0x1, 0x0, 0x6, @dev}, 0x14) getsockname$tipc(r7, &(0x7f0000000200)=@name, &(0x7f0000000240)=0x10) ioctl$TIOCGRS485(r6, 0x542e, &(0x7f00000000c0)) ioctl$BLKGETSIZE(r5, 0x1260, &(0x7f0000000000)) 10:07:50 executing program 2: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x804, r1, 0x1, 0x0, 0x6, @dev}, 0x14) r2 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @dev}, 0x14) bind$packet(r0, &(0x7f0000000000)={0x11, 0x804, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) 10:07:50 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x0, 0x6, 0x8000, 0x6}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ppoll(&(0x7f0000000480)=[{r0}], 0x1, &(0x7f00000004c0)={0x0, 0x989680}, 0x0, 0x0) 10:07:50 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x0, 0x8000, 0x6}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ppoll(&(0x7f0000000480)=[{r0}], 0x1, &(0x7f00000004c0)={0x0, 0x989680}, 0x0, 0x0) 10:07:50 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, 0x0, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) ppoll(&(0x7f0000000480)=[{r0}], 0x1, &(0x7f00000004c0)={0x0, 0x989680}, 0x0, 0x0) 10:07:50 executing program 2: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x804, r1, 0x1, 0x0, 0x6, @dev}, 0x14) r2 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @dev}, 0x14) bind$packet(r0, &(0x7f0000000000)={0x11, 0x804, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) 10:07:50 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080), 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) ppoll(&(0x7f0000000480)=[{r0}], 0x1, &(0x7f00000004c0)={0x0, 0x989680}, 0x0, 0x0) 10:07:50 executing program 0: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x44, r4, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_virt_wifi\x00'}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r4, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x401}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8000}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xad0c}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffa}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}]}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x0) close(r2) socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=@mpls_newroute={0x1c, 0x18, 0x21, 0x0, 0x0, {0x1c, 0x14}}, 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 10:07:51 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x0, 0x8000, 0x6}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ppoll(&(0x7f0000000480)=[{r0}], 0x1, &(0x7f00000004c0)={0x0, 0x989680}, 0x0, 0x0) 10:07:51 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x814, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x600}}) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket$key(0xf, 0x3, 0x2) recvfrom(r2, 0x0, 0x0, 0x10020, 0x0, 0x0) fcntl$dupfd(r2, 0x0, r1) 10:07:51 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1524}, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xd, 0x0, 0x0, 0xffffffffffffff52) ioctl$KVM_NMI(r2, 0xae9a) syz_mount_image$cifs(&(0x7f0000000040)='cifs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x47) 10:07:51 executing program 2: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x804, r1, 0x1, 0x0, 0x6, @dev}, 0x14) r2 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syz_tun\x00'}) bind$packet(r2, &(0x7f0000000000)={0x11, 0x804, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) bind$packet(r0, &(0x7f0000000000)={0x11, 0x804, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) 10:07:51 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x0, 0x8000, 0x6}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ppoll(&(0x7f0000000480)=[{r0}], 0x1, &(0x7f00000004c0)={0x0, 0x989680}, 0x0, 0x0) 10:07:51 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080), 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) ppoll(&(0x7f0000000480)=[{r0}], 0x1, &(0x7f00000004c0)={0x0, 0x989680}, 0x0, 0x0) 10:07:51 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, @perf_bp={0x0}, 0x814, 0x0, 0x0, 0x0, 0x0, 0x8, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x600}}) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r1) r2 = semget$private(0x0, 0x4, 0x0) semctl$SEM_STAT(r2, 0x0, 0x12, &(0x7f0000001180)=""/4096) r3 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) r5 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_S_PARM(r5, 0xc0285629, &(0x7f00000000c0)={0x3}) ioctl$VIDIOC_SUBDEV_S_FMT(r5, 0xc0585605, &(0x7f0000000240)={0x1, 0x0, {0xff, 0x23d, 0x2018, 0x9, 0xc, 0x1, 0x0, 0x1}}) bind$packet(r3, &(0x7f0000000000)={0x11, 0x804, r4, 0x1, 0x0, 0x6, @dev}, 0x14) sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x3c, 0x0, 0x9, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x80000001}}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x1c}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xfffffe1d}]}, 0x3c}, 0x1, 0x0, 0x0, 0x5}, 0x4) semctl$SEM_STAT_ANY(r2, 0x3, 0x14, &(0x7f0000000080)=""/146) 10:07:51 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x0, 0x6}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ppoll(&(0x7f0000000480)=[{r0}], 0x1, &(0x7f00000004c0)={0x0, 0x989680}, 0x0, 0x0) 10:07:51 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x0, 0x6}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ppoll(&(0x7f0000000480)=[{r0}], 0x1, &(0x7f00000004c0)={0x0, 0x989680}, 0x0, 0x0) 10:07:51 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080), 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) ppoll(&(0x7f0000000480)=[{r0}], 0x1, &(0x7f00000004c0)={0x0, 0x989680}, 0x0, 0x0) 10:07:51 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x814, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x1, 0x0, 0x7ff}}) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)=0x101, 0x12) r1 = socket$alg(0x26, 0x5, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) r3 = openat$cgroup_ro(r2, &(0x7f0000000000)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r3, 0x80404509, &(0x7f0000000080)=""/40) 10:07:51 executing program 2: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x804, r1, 0x1, 0x0, 0x6, @dev}, 0x14) r2 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syz_tun\x00'}) bind$packet(r2, &(0x7f0000000000)={0x11, 0x804, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) bind$packet(r0, &(0x7f0000000000)={0x11, 0x804, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) 10:07:52 executing program 0: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r0, 0x4122, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0x3da, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r2, 0x40206417, &(0x7f0000000080)={0x4, 0x7fa74c6a, 0x4, 0x6, 0xe, 0x74f}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$inet(0x10, 0x80003, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000140)={0x8001006, 0x9, 0x1}) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcs\x00', 0x28400, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x200000000000011, 0x3, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r7, &(0x7f0000000240)={0x11, 0x0, r9}, 0x14) clock_gettime(0x0, &(0x7f00000004c0)={0x0, 0x0}) r12 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r12, &(0x7f00000017c0), 0x3da, 0x0) r13 = socket$key(0xf, 0x3, 0x2) recvfrom(r13, 0x0, 0x0, 0x10020, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000540)={0x7ff, 0xb, 0x4, 0x0, 0x6, {r10, r11/1000+30000}, {0x5, 0xc, 0xd1, 0x5, 0x6, 0x8, "ecd674af"}, 0xfffffff0, 0x1, @fd=r12, 0x0, 0x0, r13}) getsockname$packet(r14, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000480)=0xfffffffffffffd64) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB='\f\x00'/20, @ANYRES32=r15, @ANYBLOB="0100000000000000200016801c00a4d7018018000c8014000000000004007b4b6353ff4a29710dd7461400"], 0x3}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) r16 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r16, &(0x7f0000000000)={0x11, 0x804, r17, 0x1, 0x0, 0x6, @dev}, 0x14) r18 = accept4$packet(r16, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000280)=0x14, 0x80800) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x78, r5, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'wg2\x00'}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r15}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x5}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8, 0x1}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r19}, @NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x2, 0x1}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000810}, 0x4000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000f9170021000000f600000000001c14edc40000fd01000a000000008b47c063"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r20 = socket$inet6_tcp(0xa, 0x1, 0x0) r21 = dup2(r20, r20) r22 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r22, &(0x7f00000017c0), 0x3da, 0x0) r23 = socket$key(0xf, 0x3, 0x2) recvfrom(r23, 0x0, 0x0, 0x10020, 0x0, 0x0) r24 = socket$key(0xf, 0x3, 0x2) recvfrom(r24, 0x0, 0x0, 0x10020, 0x0, 0x0) r25 = socket$key(0xf, 0x3, 0x2) recvfrom(r25, 0x0, 0x0, 0x10020, 0x0, 0x0) r26 = socket$key(0xf, 0x3, 0x2) recvfrom(r26, 0x0, 0x0, 0x10020, 0x0, 0x0) write$FUSE_NOTIFY_DELETE(r22, &(0x7f0000000800)=ANY=[@ANYRESDEC, @ANYRESOCT=r24, @ANYPTR, @ANYRES32=r25, @ANYPTR64=&(0x7f00000005c0)=ANY=[@ANYRESDEC=r2, @ANYBLOB="5bf289c3faea9f64cefe89b3d1d71e862aad972bd46f0a1682d478781519d0c9c80cb2c697d4cc98911ac3b7983df9dcb43e08745f28e6a29cb6fd9ea0caa538ed6d", @ANYBLOB="a0c993fb2104a84dceaae3ea923e70aa282f79b69c5a7328597c5a70143b", @ANYPTR64, @ANYRES64, @ANYBLOB="d2faf3d14078875ee80e93c7964348b5dcc2061df1a8778a948fbacefebab5d56479ca02da117cd370b1f29aff44e788cf9bea46cbdf3f9c1bc9f4653294a14acd793f1fcbb53df42bdba6cd18a2d1f207169c4222e881e1d9bd6c8ed18a8259e23aeea4d8823325a604f97d034d82d837b4a57ad58d0e36fbba5bf44529e1162b12a98c8393c6df8241188e1d1e3aeee116e306114964a06e4d3d22a5204d9d1a06fab93f3acb30738c1005984b85b12ac0d1fbfe207284c68d6a6c35b5dc954594e9f6ca3d9a6fdf9de1887a4ce074f4adf77d7d944f60b467a3c4892c980957423c04b0119a1d", @ANYRES64, @ANYRESDEC=r18], @ANYRESHEX=r26, @ANYRESOCT, @ANYRES32=r13, @ANYPTR=&(0x7f0000000780)=ANY=[@ANYBLOB="822b1f572b88aa6bbae78386619dd5830cb365341a3e871486d78a43f785ec03cd8ba8026a5123e6e2a2185d1ba1a28a926421296e8745", @ANYPTR64, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYPTR]]], 0x74) ioctl$PERF_EVENT_IOC_ENABLE(r21, 0x8912, 0x400200) splice(r0, 0x0, r3, 0x0, 0x4ffe0, 0x0) 10:07:52 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x0, 0x6}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ppoll(&(0x7f0000000480)=[{r0}], 0x1, &(0x7f00000004c0)={0x0, 0x989680}, 0x0, 0x0) 10:07:52 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xff, 0x0, 0x3, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x814, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x600}}) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r1) 10:07:52 executing program 2: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x804, r1, 0x1, 0x0, 0x6, @dev}, 0x14) r2 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syz_tun\x00'}) bind$packet(r2, &(0x7f0000000000)={0x11, 0x804, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) bind$packet(r0, &(0x7f0000000000)={0x11, 0x804, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) 10:07:52 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) ppoll(&(0x7f0000000480)=[{r0}], 0x1, &(0x7f00000004c0)={0x0, 0x989680}, 0x0, 0x0) 10:07:52 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ppoll(&(0x7f0000000480)=[{r0}], 0x1, &(0x7f00000004c0)={0x0, 0x989680}, 0x0, 0x0) 10:07:52 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1524}, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xd, 0x0, 0x0, 0xffffffffffffff52) ioctl$KVM_NMI(r2, 0xae9a) syz_mount_image$cifs(&(0x7f0000000040)='cifs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x48) 10:07:52 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) ppoll(&(0x7f0000000480)=[{r0}], 0x1, &(0x7f00000004c0)={0x0, 0x989680}, 0x0, 0x0) 10:07:52 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ppoll(&(0x7f0000000480)=[{r0}], 0x1, &(0x7f00000004c0)={0x0, 0x989680}, 0x0, 0x0) 10:07:52 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x814, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x600}}) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r1) 10:07:52 executing program 2: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x804, r1, 0x1, 0x0, 0x6, @dev}, 0x14) r2 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000000)={0x11, 0x804, r3, 0x1, 0x0, 0x6, @dev}, 0x14) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x804, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) 10:07:52 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ppoll(&(0x7f0000000480)=[{r0}], 0x1, &(0x7f00000004c0)={0x0, 0x989680}, 0x0, 0x0) 10:07:53 executing program 0: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=@mpls_newroute={0x1c, 0x18, 0x21, 0x0, 0x0, {0x1c, 0x14}}, 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x428000, 0x0) sendmsg$AUDIT_GET(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x3e8, 0x20, 0x70bd2a, 0x25dfdbff, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x2000000}, 0x4018) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 10:07:53 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) ppoll(&(0x7f0000000480)=[{r0}], 0x1, &(0x7f00000004c0)={0x0, 0x989680}, 0x0, 0x0) 10:07:53 executing program 2: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x804, r1, 0x1, 0x0, 0x6, @dev}, 0x14) r2 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000000)={0x11, 0x804, r3, 0x1, 0x0, 0x6, @dev}, 0x14) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x804, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) 10:07:53 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x814, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x600}}) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r1) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000000)) 10:07:53 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(0xffffffffffffffff, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ppoll(&(0x7f0000000480)=[{r0}], 0x1, &(0x7f00000004c0)={0x0, 0x989680}, 0x0, 0x0) 10:07:53 executing program 2: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x804, r1, 0x1, 0x0, 0x6, @dev}, 0x14) r2 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000000)={0x11, 0x804, r3, 0x1, 0x0, 0x6, @dev}, 0x14) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x804, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) 10:07:53 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1524}, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xd, 0x0, 0x0, 0xffffffffffffff52) ioctl$KVM_NMI(r2, 0xae9a) syz_mount_image$cifs(&(0x7f0000000040)='cifs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x49) 10:07:53 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, 0x0, 0x0) ppoll(&(0x7f0000000480)=[{r0}], 0x1, &(0x7f00000004c0)={0x0, 0x989680}, 0x0, 0x0) 10:07:53 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(0xffffffffffffffff, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ppoll(&(0x7f0000000480)=[{r0}], 0x1, &(0x7f00000004c0)={0x0, 0x989680}, 0x0, 0x0) 10:07:53 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8815, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x5, 0x80000) ioctl$VIDIOC_S_PARM(r0, 0xc0285629, &(0x7f00000000c0)={0x3}) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) r3 = socket$key(0xf, 0x3, 0x2) recvfrom(r3, 0x0, 0x0, 0x10020, 0x0, 0x0) r4 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r4, &(0x7f0000000000)={0x11, 0x804, r5, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$inet6_IPV6_ADDRFORM(r4, 0x29, 0x1, &(0x7f00000005c0), 0x4) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000140)={0x9, 0x6, 0x4, 0x4000000, 0x7, {r1, r2/1000+30000}, {0x4, 0x1, 0x2, 0x2, 0x80, 0x7, "e51f040e"}, 0x9, 0x2, @userptr, 0x7, 0x0, r3}) setsockopt$packet_buf(r6, 0x107, 0xd, &(0x7f00000001c0)="2c56a57ea2524b62d82443327715a1b5cc314e72cc94688b081d6ce81f39e87d2315ac6dce8417021511fdd21600b871a476d40c1a17dc52c94a462ee905091df1bab48736f1443d2376a29a99d9fedf808f0a11f6299cf59028ab000a31568e5321b1c93f7583796b9475df8a76730dde59002b09cbaa2437f82ed451e36dac48aece0a75f749f19b6370ca2c6ce3dce5a27f888a5b9b5ab6158fa5e363bc4f6a7a511d69f3fc86dbecac38de363111be80b473693cadd23fc53977c78c4672cfee6aab544cd3c9bfa64cadea", 0xcd) r7 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r7, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x600}}) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, 0x0) socket$alg(0x26, 0x5, 0x0) r8 = socket$key(0xf, 0x3, 0x2) recvfrom(r8, 0x0, 0x0, 0x10020, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=0x800, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x4, 0x3}, 0x0, 0x0, &(0x7f00000002c0)={0x1, 0xb, 0x40}, &(0x7f0000000380)=0x3, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=0x1}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x4, 0x11, &(0x7f0000000a80)=ANY=[@ANYBLOB="0da3feff08ef810000a509a2322d1c7aa047585dfd57575b09fb02b2ed0030f1ccd7010000004db5821045820d55b166f7db27297166b15850d9488e69f6c746ddf39963593c13770baef9231f9d300000000000000003d916f0103efdeeeedd7b3dac3fb0a2755a9ac4e790b5cd47b0c7869c87278a989b97750cda93d98b3aca251a71c9a123af"], &(0x7f0000000640)='syzkaller\x00', 0x80056, 0x89, &(0x7f0000000680)=""/137, 0x41100, 0x3, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r9}, 0x78) r10 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=r9, 0x4) fcntl$dupfd(r10, 0x0, r8) r11 = socket$key(0xf, 0x3, 0x2) recvfrom(r11, 0x0, 0x0, 0x10020, 0x0, 0x0) accept(r11, &(0x7f0000000080)=@l2tp={0x2, 0x0, @initdev}, &(0x7f0000000000)=0x80) r12 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r12, &(0x7f00000017c0), 0x3da, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r12, 0x40045730, &(0x7f0000000580)=0xfffffff9) r13 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r13, &(0x7f0000000000)={0x11, 0x804, r14, 0x1, 0x0, 0x6, @dev}, 0x14) sendto$netrom(r13, &(0x7f0000000300)="03561d9ca0fb83454c293f922cbf6318f6e9d1f43be6b7f96a4267f8ce9b6dd19c6fbceaec542f7f50023ec206354312a0b3936a571329db085c149494f74c1bb669f00bd8ad617eb7c812cc94209a7478f6d65391124ca49a319651e407ce37792dab016ed12cd460e05d6c03b4bec1c895384c8993", 0x76, 0x20008010, &(0x7f0000000500)={{0x3, @null}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default]}, 0x48) 10:07:53 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, 0x0, 0x0) ppoll(&(0x7f0000000480)=[{r0}], 0x1, &(0x7f00000004c0)={0x0, 0x989680}, 0x0, 0x0) 10:07:53 executing program 2: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x804, r1, 0x1, 0x0, 0x6, @dev}, 0x14) r2 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000000)={0x11, 0x804, r3, 0x1, 0x0, 0x6, @dev}, 0x14) bind$packet(r0, 0x0, 0x0) 10:07:54 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(0xffffffffffffffff, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ppoll(&(0x7f0000000480)=[{r0}], 0x1, &(0x7f00000004c0)={0x0, 0x989680}, 0x0, 0x0) 10:07:54 executing program 2: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x804, r1, 0x1, 0x0, 0x6, @dev}, 0x14) r2 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000000)={0x11, 0x804, r3, 0x1, 0x0, 0x6, @dev}, 0x14) bind$packet(r0, 0x0, 0x0) 10:07:54 executing program 0: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=@mpls_newroute={0x1c, 0x18, 0x21, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1400}}, 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 10:07:54 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, 0x0, 0x0) ppoll(&(0x7f0000000480)=[{r0}], 0x1, &(0x7f00000004c0)={0x0, 0x989680}, 0x0, 0x0) 10:07:54 executing program 4: perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x814, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read$eventfd(0xffffffffffffffff, &(0x7f0000000100), 0xfffffd78) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x600}}) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r1) 10:07:54 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x0, 0x6, 0x8000, 0x6}, 0x1c) ppoll(&(0x7f0000000480)=[{r0}], 0x1, &(0x7f00000004c0)={0x0, 0x989680}, 0x0, 0x0) 10:07:54 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1524}, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xd, 0x0, 0x0, 0xffffffffffffff52) ioctl$KVM_NMI(r2, 0xae9a) syz_mount_image$cifs(&(0x7f0000000040)='cifs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x4a) 10:07:54 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x814, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x10000, &(0x7f0000000080)="555e8d43dc5f2d19c76b250564815be4494e23279915d8590a378c392bcd45a2913d27a43a7550bb861ec9ca610e29392321ed185c8c5561511445a2e8ba3da274e71d319f1363b006ff001cf044a7ce73bd882f6c245abda9501aa201bd2a851fd79045f6aae27096a7bc73332f050e5c7842ddc308d3aba4f20d1472073c4b48dde04bb11d703963e196ae1dd4f52584d5c75f6156697caa5858ca6687e1ca94eb730b2a174ecd5264770e9533e6a6556c0d9fddeadb9a3e998b5ae18f0fcbfdfd035794dae818305bfadeb0", &(0x7f0000000000), &(0x7f0000000180), &(0x7f00000001c0)="73ff85606117ec187ea23a0120a357902c3009c7230bbb3aafc8ad94825bd195b766c5f1de6117ca6d52d4883a876f9842d55a9a62216d96a8d881801ce2c1dd1ec6047d2cca6a776a8781b248e2743b6c2157bfafa251fee452c9e8b5ef5340") r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x600}}) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r1) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0x3da, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r2, 0xc0245720, &(0x7f0000000240)={0x1}) 10:07:54 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ppoll(&(0x7f0000000480)=[{r0}], 0x1, &(0x7f00000004c0)={0x0, 0x989680}, 0x0, 0x0) 10:07:54 executing program 2: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x804, r1, 0x1, 0x0, 0x6, @dev}, 0x14) r2 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000000)={0x11, 0x804, r3, 0x1, 0x0, 0x6, @dev}, 0x14) bind$packet(r0, 0x0, 0x0) 10:07:54 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x0, 0x6, 0x8000, 0x6}, 0x1c) ppoll(&(0x7f0000000480)=[{r0}], 0x1, &(0x7f00000004c0)={0x0, 0x989680}, 0x0, 0x0) 10:07:54 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ppoll(&(0x7f0000000480)=[{r0}], 0x1, &(0x7f00000004c0)={0x0, 0x989680}, 0x0, 0x0) 10:07:54 executing program 2: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x804, r1, 0x1, 0x0, 0x6, @dev}, 0x14) r2 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000000)={0x11, 0x804, r3, 0x1, 0x0, 0x6, @dev}, 0x14) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) 10:07:54 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x0, 0x6, 0x8000, 0x6}, 0x1c) ppoll(&(0x7f0000000480)=[{r0}], 0x1, &(0x7f00000004c0)={0x0, 0x989680}, 0x0, 0x0) 10:07:55 executing program 0: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c2ce1b4a3cfc7ddd8000000000000001c1400000001000600000000"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 10:07:55 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x890, 0x2, 0xa, 0xa, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000840)={0x4, 0x6, 0x3, r1, 0x0, &(0x7f0000000800)={0x3a0935, 0xffff2eed, [], @ptr=0x8001}}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r2, 0x4b67, &(0x7f00000004c0)={0x1, &(0x7f0000000480)=[{}]}) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x603}}) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='net/dev_snmp6\x00') ioctl$sock_inet_udp_SIOCINQ(r4, 0x541b, &(0x7f0000000680)) r5 = accept4$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x2710, @hyper}, 0x10, 0x800) r6 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x800, 0x40000) setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f00000005c0)=@nat={'nat\x00', 0x19, 0x3, 0x46a, [0x20000140, 0x0, 0x0, 0x2000026e, 0x2000029e], 0x0, &(0x7f0000000100), &(0x7f0000000140)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff0100000003000000060000000a017663616e3000000000000000000000006c6f000000800000000000000000000076657468305f746f5f6272696467650073797a6b616c6c6572310000000000000180c2000003007f00ff0000aaaaaaaaaaaa00ffff00ff009e000000ce000000fe0000006367726f757000000000000000000000000000000000000000000000000000000800000000000000dc83362b0100000000000000000000000000000000000000000000000000000000000000000000000800000000000000ffffffff000000004e465155455545000000000000000000000000000000000000000000000000000800000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff010000000900000008000000886c6272696467655f736c6176655f3000006970365f7674693000000000000000006970766c616e310000000000000000006e657464657673696d30000000000000aaaaaaaaaaaaff00ffffffffaaaaaaaaaa3400ffffffffffbe000000be000000f60000006e66616363740000000000000000000000000000000000000000000000000000280000000000000073797a31000000000000000000000000000000000000000000000000000000000700000000000000736e61740000000000000000000000000000000000000000000000000000000010000000000000000180c200000e0000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000fcffffff01000000050000004100000000f576657468315f766972745f77696669007866726d30000000000000000000000067656e65766530000000000000000000726f7365300000000000000000000000aaaaaaaaaabbff0000ffffffaaaaaaaaaabbffffffffff00ce0000007e010000b6010000617270000000000000000000000000000000000000000000000000000000000038000000000000000204600600080000e000000200000000ac141415ffffff00bbbbbbbbbbbb0000ff0000ffaaaaaaaaaabb00ff0000ff0000170000000000006e666c6f67000000000000000000000000000000000000000000000000000000500000000000000008000000531c020000000000b7bc13052c5e5d5066a349709c0c7de784e0d6272eb176143e176cb95d2550158996a4bbe9a7aa755637558411a8489a72f9099450c4c0218eb07bba12d55cee00000000736e61740000000000000000000000000000000000000000000000000000000010000000000000000180c20000020000ffffffff00000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000275c56fc8cbc00001000000000000000"]}, 0x4e2) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r5, 0x28, 0x1, &(0x7f0000000080)=0xa1, 0x8) r7 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/cachefiles\x00', 0x86080, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) r9 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r8, 0x84, 0x70, &(0x7f0000000100)={r10}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000700)={r10, 0x4}, &(0x7f0000000740)=0x8) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f00000007c0)={0x2, {0x2, 0x8, 0x4, 0x6, 0x6, 0x4}}) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r7, 0x84, 0x19, &(0x7f0000000780)={r11, 0x7}, 0x8) fcntl$dupfd(0xffffffffffffffff, 0x0, r3) 10:07:55 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x0, 0x8000, 0x6}, 0x1c) ppoll(&(0x7f0000000480)=[{r0}], 0x1, &(0x7f00000004c0)={0x0, 0x989680}, 0x0, 0x0) 10:07:55 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x814, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x10000, &(0x7f0000000080)="555e8d43dc5f2d19c76b250564815be4494e23279915d8590a378c392bcd45a2913d27a43a7550bb861ec9ca610e29392321ed185c8c5561511445a2e8ba3da274e71d319f1363b006ff001cf044a7ce73bd882f6c245abda9501aa201bd2a851fd79045f6aae27096a7bc73332f050e5c7842ddc308d3aba4f20d1472073c4b48dde04bb11d703963e196ae1dd4f52584d5c75f6156697caa5858ca6687e1ca94eb730b2a174ecd5264770e9533e6a6556c0d9fddeadb9a3e998b5ae18f0fcbfdfd035794dae818305bfadeb0", &(0x7f0000000000), &(0x7f0000000180), &(0x7f00000001c0)="73ff85606117ec187ea23a0120a357902c3009c7230bbb3aafc8ad94825bd195b766c5f1de6117ca6d52d4883a876f9842d55a9a62216d96a8d881801ce2c1dd1ec6047d2cca6a776a8781b248e2743b6c2157bfafa251fee452c9e8b5ef5340") r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x600}}) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r1) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0x3da, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r2, 0xc0245720, &(0x7f0000000240)={0x1}) 10:07:55 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1524}, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xd, 0x0, 0x0, 0xffffffffffffff52) ioctl$KVM_NMI(r2, 0xae9a) syz_mount_image$cifs(&(0x7f0000000040)='cifs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x4b) 10:07:55 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ppoll(&(0x7f0000000480)=[{r0}], 0x1, &(0x7f00000004c0)={0x0, 0x989680}, 0x0, 0x0) 10:07:55 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x0, 0x8000, 0x6}, 0x1c) ppoll(&(0x7f0000000480)=[{r0}], 0x1, &(0x7f00000004c0)={0x0, 0x989680}, 0x0, 0x0) 10:07:55 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8815, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x5, 0x80000) ioctl$VIDIOC_S_PARM(r0, 0xc0285629, &(0x7f00000000c0)={0x3}) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) r3 = socket$key(0xf, 0x3, 0x2) recvfrom(r3, 0x0, 0x0, 0x10020, 0x0, 0x0) r4 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r4, &(0x7f0000000000)={0x11, 0x804, r5, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$inet6_IPV6_ADDRFORM(r4, 0x29, 0x1, &(0x7f00000005c0), 0x4) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000140)={0x9, 0x6, 0x4, 0x4000000, 0x7, {r1, r2/1000+30000}, {0x4, 0x1, 0x2, 0x2, 0x80, 0x7, "e51f040e"}, 0x9, 0x2, @userptr, 0x7, 0x0, r3}) setsockopt$packet_buf(r6, 0x107, 0xd, &(0x7f00000001c0)="2c56a57ea2524b62d82443327715a1b5cc314e72cc94688b081d6ce81f39e87d2315ac6dce8417021511fdd21600b871a476d40c1a17dc52c94a462ee905091df1bab48736f1443d2376a29a99d9fedf808f0a11f6299cf59028ab000a31568e5321b1c93f7583796b9475df8a76730dde59002b09cbaa2437f82ed451e36dac48aece0a75f749f19b6370ca2c6ce3dce5a27f888a5b9b5ab6158fa5e363bc4f6a7a511d69f3fc86dbecac38de363111be80b473693cadd23fc53977c78c4672cfee6aab544cd3c9bfa64cadea", 0xcd) r7 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r7, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x600}}) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, 0x0) socket$alg(0x26, 0x5, 0x0) r8 = socket$key(0xf, 0x3, 0x2) recvfrom(r8, 0x0, 0x0, 0x10020, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=0x800, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x4, 0x3}, 0x0, 0x0, &(0x7f00000002c0)={0x1, 0xb, 0x40}, &(0x7f0000000380)=0x3, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=0x1}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x4, 0x11, &(0x7f0000000a80)=ANY=[@ANYBLOB="0da3feff08ef810000a509a2322d1c7aa047585dfd57575b09fb02b2ed0030f1ccd7010000004db5821045820d55b166f7db27297166b15850d9488e69f6c746ddf39963593c13770baef9231f9d300000000000000003d916f0103efdeeeedd7b3dac3fb0a2755a9ac4e790b5cd47b0c7869c87278a989b97750cda93d98b3aca251a71c9a123af"], &(0x7f0000000640)='syzkaller\x00', 0x80056, 0x89, &(0x7f0000000680)=""/137, 0x41100, 0x3, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r9}, 0x78) r10 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=r9, 0x4) fcntl$dupfd(r10, 0x0, r8) r11 = socket$key(0xf, 0x3, 0x2) recvfrom(r11, 0x0, 0x0, 0x10020, 0x0, 0x0) accept(r11, &(0x7f0000000080)=@l2tp={0x2, 0x0, @initdev}, &(0x7f0000000000)=0x80) r12 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r12, &(0x7f00000017c0), 0x3da, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r12, 0x40045730, &(0x7f0000000580)=0xfffffff9) r13 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r13, &(0x7f0000000000)={0x11, 0x804, r14, 0x1, 0x0, 0x6, @dev}, 0x14) sendto$netrom(r13, &(0x7f0000000300)="03561d9ca0fb83454c293f922cbf6318f6e9d1f43be6b7f96a4267f8ce9b6dd19c6fbceaec542f7f50023ec206354312a0b3936a571329db085c149494f74c1bb669f00bd8ad617eb7c812cc94209a7478f6d65391124ca49a319651e407ce37792dab016ed12cd460e05d6c03b4bec1c895384c8993", 0x76, 0x20008010, &(0x7f0000000500)={{0x3, @null}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default]}, 0x48) 10:07:55 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x814, 0x0, 0x81, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x600}}) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r1) 10:07:55 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x0, 0x8000, 0x6}, 0x1c) ppoll(&(0x7f0000000480)=[{r0}], 0x1, &(0x7f00000004c0)={0x0, 0x989680}, 0x0, 0x0) 10:07:56 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ppoll(&(0x7f0000000480)=[{r0}], 0x1, &(0x7f00000004c0)={0x0, 0x989680}, 0x0, 0x0) 10:07:56 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x0, 0x6}, 0x1c) ppoll(&(0x7f0000000480)=[{r0}], 0x1, &(0x7f00000004c0)={0x0, 0x989680}, 0x0, 0x0) 10:07:56 executing program 0: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=@mpls_newroute={0x1c, 0x18, 0x21, 0x0, 0x0, {0x1c, 0x14}}, 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xffffffffe52c77c7, 0x80000) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 10:07:56 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ppoll(&(0x7f0000000480)=[{r0}], 0x1, &(0x7f00000004c0)={0x0, 0x989680}, 0x0, 0x0) 10:07:56 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x814, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x600}}) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r1) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000000)) 10:07:56 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r0, 0x800448d3, &(0x7f00000002c0)={@none, 0x0, 0x0, 0x7, 0x1f, 0x5, "c2a138e4f8f58a56df88a2f8a31957923956427d43aa42766a027c807088ebbf34920a87fd485ebfb3192480c37ffa08170f1abdfb734f0a8609363605d09bb93a72d49bb618104da5c9f880fa9f738ecfcf5111310399df03a4d5624fdabb21e429925c3dc102e2042d13f4e3e24f0350ec589cbb8f1f2b8e8022e7a38f8ae3"}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x814, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvfrom(r1, 0x0, 0x0, 0x10020, 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) r3 = socket$key(0xf, 0x3, 0x2) recvfrom(r3, 0x0, 0x0, 0x10020, 0x0, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f00000000c0)=0xc) stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={[{@uid={'uid', 0x3d, r8}}]}) syz_mount_image$xfs(&(0x7f0000000080)='xfs\x00', &(0x7f00000000c0)='./bus\x00', 0x3ff, 0x1, &(0x7f0000000100)=[{&(0x7f00000005c0)="bd91ca81ed068bc7f85b273b3b059233a9100da9ba92830ba82e8644602db1a8a7a4605d96250ff90b1db786c8839e799e239e472ee78277122cf2e7217b736c7f931dd41da95e9751f84cad2b", 0x4d, 0x2}], 0x30c4028, &(0x7f0000000640)={[], [{@subj_role={'subj_role'}}, {@context={'context', 0x3d, 'staff_u'}}, {@fowner_eq={'fowner', 0x3d, r8}}, {@dont_measure='dont_measure'}]}) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000006c0)={{0x1, 0x0, 0x0, r8, r9, 0x0, 0x8}, 0x100000001, 0x1000, 0x0, 0x0, 0x0, 0x0, 0xf04c}) r10 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={[{@uid={'uid', 0x3d, r11}}]}) syz_mount_image$xfs(&(0x7f0000000080)='xfs\x00', &(0x7f00000000c0)='./bus\x00', 0x3ff, 0x1, &(0x7f0000000100)=[{&(0x7f00000005c0)="bd91ca81ed068bc7f85b273b3b059233a9100da9ba92830ba82e8644602db1a8a7a4605d96250ff90b1db786c8839e799e239e472ee78277122cf2e7217b736c7f931dd41da95e9751f84cad2b", 0x4d, 0x2}], 0x30c4028, &(0x7f0000000640)=ANY=[@ANYBLOB='subj_role=,context=staff_u,fowner=', @ANYRESDEC=r11, @ANYBLOB="2c648dfa745d6d6561737572652c00"]) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000006c0)={{0x1, 0x0, 0x0, r11, r12, 0x0, 0x8}, 0x100000001, 0x1000, 0x0, 0x0, 0x0, 0x0, 0xf04c}) r13 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={[{@uid={'uid', 0x3d, r14}}]}) syz_mount_image$xfs(&(0x7f0000000080)='xfs\x00', &(0x7f00000000c0)='./bus\x00', 0x3ff, 0x1, &(0x7f0000000100)=[{&(0x7f00000005c0)="bd91ca81ed068bc7f85b273b3b059233a9100da9ba92830ba82e8644602db1a8a7a4605d96250ff90b1db786c8839e799e239e472ee78277122cf2e7217b736c7f931dd41da95e9751f84cad2b", 0x4d, 0x2}], 0x30c4028, &(0x7f0000000640)=ANY=[@ANYBLOB='subj_role=,context=staff_u,fowner=', @ANYRESDEC=r14, @ANYBLOB='\fdont_measure,\x00']) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000006c0)={{0x1, 0x0, 0x0, r14, r15, 0x0, 0x8}, 0x100000001, 0x1000, 0x0, 0x0, 0x0, 0x0, 0xf04c}) r16 = getegid() r17 = getgid() r18 = socket$key(0xf, 0x3, 0x2) recvfrom(r18, 0x0, 0x0, 0x10020, 0x0, 0x0) getsockopt$sock_cred(r18, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0xc) statx(r0, &(0x7f0000000240)='./file0\x00', 0x400, 0x2, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={[{@uid={'uid', 0x3d, r22}}]}) syz_mount_image$xfs(&(0x7f0000000080)='xfs\x00', &(0x7f00000000c0)='./bus\x00', 0x3ff, 0x0, &(0x7f0000000100), 0x30c4028, &(0x7f0000000740)={[], [{@subj_role={'subj_role', 0x3d, '\x15\xcd\xdfG\x86j\x04G\xde\x16\x80\x17\xfa\xb4\x8b\x8f\x94\n\x1fGBlK\xa03\xacm\xd9cR\xe5\xfb9\xa0\xf8\xa8\a\f\x90<\'\xae\xf1\x19!\xf1*\xfb\xdf\xe8;\rA.v\xec\xf6\xbf\xf8n\xc8\x19X\x8dM\xc4\xdc=\xa3a\xa7M\xbc\xb40\x1c\xd2\xc5\x1bm\xf4P\xca7\x1fe,\x9arb$\'\x90[I\xdc\\6\x0f\x10\x12M\xc2\xcf\x84>?\xed\x9bK\xb9\xbaD\xb5\xfb\xa9#\xce\x8a^\x18\x82\x1c\x89\xfc+\x8bm\n\xb1\xa1i2\x99\xc3\xf2\xa6\xa0\x01\xfd_\xc3p)_05\x82\xcb\\e\x14n\xf3\xbc\xf1\xec\xcd\xd8j\a\xf0\xbd\x81\xdbpm\n\x80#6\xd7o}I\xf7\x96+P\xa2\xcb=\xdd\xb7\x95\xdbk~u\xd9\xba\xb7\xd4\xb6/\x86\x96T\xb6\xbf=\xc2\xbd\xf7\xd3\x11\xfe\xb5\x80\xc5'}}, {@context={'context', 0x3d, 'staff_u'}}, {@fowner_eq={'fowner', 0x3d, r22}}, {@seclabel='seclabel'}]}) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000006c0)={{0x1, 0x0, 0x0, r4, r19, 0x0, 0x8}, 0x100000001, 0xffd, 0x0, 0x0, 0x0, 0x0, 0xf04c}) setgroups(0xa, &(0x7f0000000480)=[r5, r6, r9, r12, r15, r16, r17, 0x0, r20, r23]) recvfrom(r2, 0x0, 0x0, 0x10020, 0x0, 0x0) r24 = dup2(r1, r2) ioctl$SIOCGIFMTU(r24, 0x8921, &(0x7f0000000000)) r25 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r25, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x600}}) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, 0x0) r26 = socket$alg(0x26, 0x5, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r26) [ 505.416120][ T4552] hfs: uid requires an argument [ 505.432945][ T4552] hfs: unable to parse mount options 10:07:56 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1524}, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xd, 0x0, 0x0, 0xffffffffffffff52) ioctl$KVM_NMI(r2, 0xae9a) syz_mount_image$cifs(&(0x7f0000000040)='cifs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x4c) 10:07:56 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, @perf_bp={0x0}, 0x814, 0x0, 0x0, 0x0, 0x0, 0x8, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x600}}) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r1) r2 = semget$private(0x0, 0x4, 0x0) semctl$SEM_STAT(r2, 0x0, 0x12, &(0x7f0000001180)=""/4096) r3 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) r5 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_S_PARM(r5, 0xc0285629, &(0x7f00000000c0)={0x3}) ioctl$VIDIOC_SUBDEV_S_FMT(r5, 0xc0585605, &(0x7f0000000240)={0x1, 0x0, {0xff, 0x23d, 0x2018, 0x9, 0xc, 0x1, 0x0, 0x1}}) bind$packet(r3, &(0x7f0000000000)={0x11, 0x804, r4, 0x1, 0x0, 0x6, @dev}, 0x14) sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x3c, 0x0, 0x9, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x80000001}}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x1c}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xfffffe1d}]}, 0x3c}, 0x1, 0x0, 0x0, 0x5}, 0x4) semctl$SEM_STAT_ANY(r2, 0x3, 0x14, &(0x7f0000000080)=""/146) 10:07:56 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x0, 0x6}, 0x1c) ppoll(&(0x7f0000000480)=[{r0}], 0x1, &(0x7f00000004c0)={0x0, 0x989680}, 0x0, 0x0) 10:07:56 executing program 0: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x804, r1, 0x1, 0x0, 0x6, @dev}, 0x14) accept4$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x0, @none}, &(0x7f0000000300)=0xe, 0x800) keyctl$invalidate(0x15, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) socket$inet(0x10, 0x80003, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x200000000000011, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r6, &(0x7f0000000240)={0x11, 0x0, r8}, 0x14) getsockname$packet(r6, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=r9, @ANYBLOB="0100000000000000200016801c00018018000c8014000000000004001400"], 0x44}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) r10 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r10, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x2, 0x228, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000740], 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="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"]}, 0x2a0) getsockopt$inet_IP_IPSEC_POLICY(r10, 0x0, 0x10, &(0x7f00000019c0)={{{@in=@multicast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6}}, &(0x7f0000001ac0)=0xe8) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000080)=@bridge_getlink={0x0, 0x12, 0x20, 0x70bd2d, 0x25dfdbfb, {0x7, 0x0, 0x0, r9, 0x408, 0x8}, [@IFLA_LINK_NETNSID={0x0, 0x25, 0x2}, @IFLA_PORT_SELF={0x0, 0x19, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x0, 0x5, "6905b206c7aa54b93048a111daf1f339"}, @IFLA_PORT_VF={0x0, 0x1, 0x40}, @IFLA_PORT_VF={0x0, 0x1, 0xd0ed}, @IFLA_PORT_VF={0x0, 0x1, 0x41d}, @IFLA_PORT_HOST_UUID={0x0, 0x5, "7f046ace23a027f8c78e5ba459c365a0"}, @IFLA_PORT_HOST_UUID={0x0, 0x5, "4d616fa9ae6e3ad97302bf9e493010fa"}, @IFLA_PORT_INSTANCE_UUID={0x0, 0x4, "e877f14fc5ce8f29daf605aa00"}]}, @IFLA_GSO_MAX_SIZE={0x0, 0x29, 0x9b1e}, @IFLA_PROTO_DOWN={0x0, 0x27, 0x9}, @IFLA_MASTER={0x0, 0xa, r11}]}, 0xfffffffffffffe07}}, 0x0) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, 0xd, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x800) write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xfffffecc) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) r13 = dup2(r12, r12) ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200) splice(r2, 0x0, r4, 0x0, 0x4ffe0, 0x0) 10:07:56 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ppoll(&(0x7f0000000480)=[{r0}], 0x1, &(0x7f00000004c0)={0x0, 0x989680}, 0x0, 0x0) [ 505.903688][ T4680] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 10:07:57 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1524}, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xd, 0x0, 0x0, 0xffffffffffffff52) ioctl$KVM_NMI(r2, 0xae9a) syz_mount_image$cifs(&(0x7f0000000040)='cifs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x4b) 10:07:57 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x0, 0x6}, 0x1c) ppoll(&(0x7f0000000480)=[{r0}], 0x1, &(0x7f00000004c0)={0x0, 0x989680}, 0x0, 0x0) 10:07:57 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) ppoll(&(0x7f0000000480)=[{r0}], 0x1, &(0x7f00000004c0)={0x0, 0x989680}, 0x0, 0x0) 10:07:57 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000}, 0x1c) ppoll(&(0x7f0000000480)=[{r0}], 0x1, &(0x7f00000004c0)={0x0, 0x989680}, 0x0, 0x0) 10:07:57 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) ppoll(&(0x7f0000000480)=[{r0}], 0x1, &(0x7f00000004c0)={0x0, 0x989680}, 0x0, 0x0) 10:07:57 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000}, 0x1c) ppoll(&(0x7f0000000480)=[{r0}], 0x1, &(0x7f00000004c0)={0x0, 0x989680}, 0x0, 0x0) 10:07:57 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000}, 0x1c) ppoll(&(0x7f0000000480)=[{r0}], 0x1, &(0x7f00000004c0)={0x0, 0x989680}, 0x0, 0x0) 10:07:58 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1524}, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xd, 0x0, 0x0, 0xffffffffffffff52) ioctl$KVM_NMI(r2, 0xae9a) syz_mount_image$cifs(&(0x7f0000000040)='cifs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x4d) 10:07:58 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) ppoll(&(0x7f0000000480)=[{r0}], 0x1, &(0x7f00000004c0)={0x0, 0x989680}, 0x0, 0x0) 10:07:58 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) ppoll(0x0, 0x0, &(0x7f00000004c0)={0x0, 0x989680}, 0x0, 0x0) 10:07:58 executing program 0: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=@mpls_newroute={0x1c, 0x18, 0x21, 0x0, 0x0, {0x1c, 0x14}}, 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$key(0xf, 0x3, 0x2) recvfrom(r5, 0x0, 0x0, 0x10020, 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x0, [], [{0x6, 0x80000001, 0x9, 0x1, 0x8, 0x80000000}, {0x80000000, 0x400, 0x9898, 0x3f, 0x1, 0x4}], [[], [], []]}) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000240)={0x9e0000, 0xfffffff9, 0x80000001, r4, 0x0, &(0x7f0000000200)={0x98090d, 0x7, [], @value64=0x40}}) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f00000002c0)={0xc, @multicast2, 0x4e21, 0x3, 'sh\x00', 0x20, 0x6, 0x7c}, 0x2c) ioctl$SNDCTL_DSP_GETIPTR(r6, 0x800c5011, &(0x7f0000000280)) r7 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 10:07:58 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1524}, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xd, 0x0, 0x0, 0xffffffffffffff52) ioctl$KVM_NMI(r2, 0xae9a) syz_mount_image$cifs(&(0x7f0000000040)='cifs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x4b) 10:07:58 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) ppoll(0x0, 0x0, &(0x7f00000004c0)={0x0, 0x989680}, 0x0, 0x0) 10:07:58 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ppoll(0x0, 0x0, &(0x7f00000004c0)={0x0, 0x989680}, 0x0, 0x0) 10:07:58 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ppoll(0x0, 0x0, &(0x7f00000004c0)={0x0, 0x989680}, 0x0, 0x0) 10:07:58 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) ppoll(0x0, 0x0, &(0x7f00000004c0)={0x0, 0x989680}, 0x0, 0x0) 10:07:58 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ppoll(0x0, 0x0, &(0x7f00000004c0)={0x0, 0x989680}, 0x0, 0x0) 10:07:58 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) ppoll(&(0x7f0000000480), 0x0, &(0x7f00000004c0)={0x0, 0x989680}, 0x0, 0x0) 10:07:58 executing program 0: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001800210000000000000000001c14000000f2857360ab4616b78ddd848d247b59ef9ee9c1122f1c40187e5f275852a531e4fd4416a4ea5e55104cc436c8d5665c7fd7da8629bc50fe99fabee71a25625b57755c66ad0ea890e81fe4ac2d80403c2abf6558487bd0ddb608bcfa72f0ef84e1c6b9"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) prctl$PR_SET_TSC(0x1a, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x0) ioctl$BLKRRPART(r5, 0x125f, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) prctl$PR_GET_NAME(0x10, &(0x7f0000000100)=""/108) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 10:07:59 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1524}, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xd, 0x0, 0x0, 0xffffffffffffff52) ioctl$KVM_NMI(r2, 0xae9a) syz_mount_image$cifs(&(0x7f0000000040)='cifs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x4e) 10:07:59 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1524}, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xd, 0x0, 0x0, 0xffffffffffffff52) ioctl$KVM_NMI(r2, 0xae9a) syz_mount_image$cifs(&(0x7f0000000040)='cifs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x4b) 10:07:59 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) ppoll(&(0x7f0000000480), 0x0, &(0x7f00000004c0)={0x0, 0x989680}, 0x0, 0x0) 10:07:59 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ppoll(&(0x7f0000000480), 0x0, &(0x7f00000004c0)={0x0, 0x989680}, 0x0, 0x0) 10:07:59 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) ppoll(&(0x7f0000000480), 0x0, &(0x7f00000004c0)={0x0, 0x989680}, 0x0, 0x0) 10:07:59 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ppoll(&(0x7f0000000480), 0x0, &(0x7f00000004c0)={0x0, 0x989680}, 0x0, 0x0) 10:07:59 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) ppoll(&(0x7f0000000480)=[{}], 0x1, &(0x7f00000004c0)={0x0, 0x989680}, 0x0, 0x0) 10:07:59 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ppoll(&(0x7f0000000480), 0x0, &(0x7f00000004c0)={0x0, 0x989680}, 0x0, 0x0) 10:07:59 executing program 0: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x10, 0x8000d, 0xfc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x40, &(0x7f000000b000)={&(0x7f0000000000)=@mpls_newroute={0x1c, 0x18, 0x21, 0x4, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xff}}, 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) prctl$PR_MCE_KILL_GET(0x22) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) r5 = add_key(&(0x7f0000000080)='logon\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000100)="9b9b0529fd52a6ee5ac66f", 0xb, 0xffffffffffffffff) keyctl$read(0xb, r5, &(0x7f0000000140)=""/42, 0x2a) 10:08:00 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) ppoll(&(0x7f0000000480)=[{}], 0x1, &(0x7f00000004c0)={0x0, 0x989680}, 0x0, 0x0) 10:08:00 executing program 0: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=@mpls_newroute={0x1c, 0x18, 0x21, 0x0, 0x0, {0x1c, 0x14}}, 0x1c}}, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$key(0xf, 0x3, 0x2) r5 = socket$key(0xf, 0x3, 0x2) recvfrom(r5, 0x0, 0x0, 0x10020, 0x0, 0x0) recvfrom(r5, 0x0, 0x0, 0x10020, 0x0, 0x0) splice(r4, 0x0, r1, 0x0, 0x4ffe0, 0x0) 10:08:00 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ppoll(&(0x7f0000000480)=[{}], 0x1, &(0x7f00000004c0)={0x0, 0x989680}, 0x0, 0x0) 10:08:00 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1524}, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xd, 0x0, 0x0, 0xffffffffffffff52) ioctl$KVM_NMI(r2, 0xae9a) syz_mount_image$cifs(&(0x7f0000000040)='cifs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x4f) 10:08:00 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, @perf_bp={0x0}, 0x814, 0x0, 0x0, 0x0, 0x0, 0x8, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x600}}) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r1) r2 = semget$private(0x0, 0x4, 0x0) semctl$SEM_STAT(r2, 0x0, 0x12, &(0x7f0000001180)=""/4096) r3 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) r5 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_S_PARM(r5, 0xc0285629, &(0x7f00000000c0)={0x3}) ioctl$VIDIOC_SUBDEV_S_FMT(r5, 0xc0585605, &(0x7f0000000240)={0x1, 0x0, {0xff, 0x23d, 0x2018, 0x9, 0xc, 0x1, 0x0, 0x1}}) bind$packet(r3, &(0x7f0000000000)={0x11, 0x804, r4, 0x1, 0x0, 0x6, @dev}, 0x14) sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x3c, 0x0, 0x9, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x80000001}}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x1c}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xfffffe1d}]}, 0x3c}, 0x1, 0x0, 0x0, 0x5}, 0x4) semctl$SEM_STAT_ANY(r2, 0x3, 0x14, &(0x7f0000000080)=""/146) 10:08:00 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) ppoll(&(0x7f0000000480)=[{}], 0x1, &(0x7f00000004c0)={0x0, 0x989680}, 0x0, 0x0) 10:08:00 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ppoll(&(0x7f0000000480)=[{}], 0x1, &(0x7f00000004c0)={0x0, 0x989680}, 0x0, 0x0) 10:08:00 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x814, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x600}}) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r2, 0x4b67, &(0x7f00000004c0)={0x1, &(0x7f0000000480)=[{}]}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r3, 0x4b67, &(0x7f00000004c0)={0x1, &(0x7f0000000480)=[{}]}) ioctl$KDGKBLED(r3, 0x4b64, &(0x7f0000000000)) ioctl$TIOCNXCL(r2, 0x540d) fcntl$dupfd(0xffffffffffffffff, 0x0, r1) 10:08:00 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) ppoll(&(0x7f0000000480)=[{r0}], 0x1, 0x0, 0x0, 0x0) 10:08:00 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ppoll(&(0x7f0000000480)=[{}], 0x1, &(0x7f00000004c0)={0x0, 0x989680}, 0x0, 0x0) 10:08:00 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x814, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x600}}) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0x3da, 0x0) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x200000, 0x0) ioctl$KVM_X86_SETUP_MCE(r3, 0x4008ae9c, &(0x7f0000000140)={0x20, 0x6, 0xa}) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, 0x0) r4 = socket$key(0xf, 0x3, 0x2) recvfrom(r4, 0x0, 0x0, 0x10020, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000000)={0x0, r0, 0x9, 0xede, 0x80}) r5 = socket$alg(0x26, 0x5, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r5) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r6, 0x4b67, &(0x7f00000004c0)={0x1, &(0x7f0000000480)=[{}]}) ioctl$TIOCL_SETVESABLANK(r6, 0x541c, &(0x7f0000000080)) 10:08:00 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ppoll(&(0x7f0000000480)=[{r0}], 0x1, 0x0, 0x0, 0x0) 10:08:00 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r1, &(0x7f0000000000)={0x11, 0x804, r2, 0x1, 0x0, 0x6, @dev}, 0x14) r3 = socket$key(0xf, 0x3, 0x2) recvfrom(r3, 0x0, 0x0, 0x10020, 0x0, 0x0) fsetxattr(r3, &(0x7f0000000180)=@known='trusted.syz\x00', &(0x7f00000001c0)='{\x00', 0x2, 0x1) getsockopt$packet_buf(r1, 0x107, 0x0, &(0x7f0000000000)=""/55, &(0x7f0000000040)=0x37) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$TIOCSRS485(r6, 0x542f, &(0x7f0000000100)={0x4, 0x7, 0x1}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) connect$inet6(r4, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0) ppoll(&(0x7f0000000480)=[{r0}], 0x1, &(0x7f00000004c0)={0x0, 0x989680}, 0x0, 0x0) 10:08:01 executing program 0: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket(0x200000000000011, 0x3, 0x0) r6 = socket$key(0xf, 0x3, 0x2) recvfrom(r6, 0x0, 0x0, 0x10020, 0x0, 0x0) r7 = pidfd_getfd(0xffffffffffffffff, r6, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x1f, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e21, 0x2acd, @loopback, 0x4}}, 0x9, 0x1}, &(0x7f0000000100)=0x90) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r5, &(0x7f0000000000)={0x11, 0x804, r8, 0x1, 0x0, 0x6, @dev}, 0x14) getsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000080), &(0x7f00000000c0)=0x4) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 10:08:01 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1524}, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xd, 0x0, 0x0, 0xffffffffffffff52) ioctl$KVM_NMI(r2, 0xae9a) syz_mount_image$cifs(&(0x7f0000000040)='cifs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x5c) 10:08:01 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) ppoll(&(0x7f0000000480)=[{r0}], 0x1, 0x0, 0x0, 0x0) 10:08:01 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x814, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x600}}) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvfrom(r1, 0x0, 0x0, 0x10020, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, r1) 10:08:01 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ppoll(&(0x7f0000000480)=[{r0}], 0x1, 0x0, 0x0, 0x0) 10:08:01 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x814, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x600}}) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvfrom(r1, 0x0, 0x0, 0x10020, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, r1) 10:08:02 executing program 0: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=@mpls_newroute={0x1c, 0x18, 0x21, 0x0, 0x0, {0x1c, 0x14}}, 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x0) ioctl$KVM_PPC_GET_PVINFO(r5, 0x4080aea1, &(0x7f0000000080)=""/83) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 10:08:02 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x814, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x600}}) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvfrom(r1, 0x0, 0x0, 0x10020, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, r1) 10:08:02 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x40, 0x0, 0x800000000000007, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x814, 0x0, 0x0, 0x0, 0x0, 0x10000004}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x600}}) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r2, 0x4b67, &(0x7f00000004c0)={0x1, &(0x7f0000000480)=[{}]}) ioctl$TCXONC(r2, 0x540a, 0x2) fcntl$dupfd(0xffffffffffffffff, 0x0, r1) 10:08:02 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x40, 0x0, 0x800000000000007, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x814, 0x0, 0x0, 0x0, 0x0, 0x10000004}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x600}}) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r2, 0x4b67, &(0x7f00000004c0)={0x1, &(0x7f0000000480)=[{}]}) ioctl$TCXONC(r2, 0x540a, 0x2) fcntl$dupfd(0xffffffffffffffff, 0x0, r1) 10:08:02 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x40, 0x0, 0x800000000000007, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x814, 0x0, 0x0, 0x0, 0x0, 0x10000004}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x600}}) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r2, 0x4b67, &(0x7f00000004c0)={0x1, &(0x7f0000000480)=[{}]}) ioctl$TCXONC(r2, 0x540a, 0x2) fcntl$dupfd(0xffffffffffffffff, 0x0, r1) 10:08:02 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) ppoll(&(0x7f0000000480)=[{r0}], 0x1, 0x0, 0x0, 0x0) 10:08:02 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x40, 0x0, 0x800000000000007, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x814, 0x0, 0x0, 0x0, 0x0, 0x10000004}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x600}}) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f00000004c0)={0x1, &(0x7f0000000480)=[{}]}) ioctl$TCXONC(r1, 0x540a, 0x2) 10:08:02 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1524}, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xd, 0x0, 0x0, 0xffffffffffffff52) ioctl$KVM_NMI(r2, 0xae9a) syz_mount_image$cifs(&(0x7f0000000040)='cifs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x64) 10:08:02 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x40, 0x0, 0x800000000000007, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x814, 0x0, 0x0, 0x0, 0x0, 0x10000004}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x600}}) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r1, 0x540a, 0x2) 10:08:02 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ppoll(&(0x7f0000000480)=[{r0}], 0x1, 0x0, 0x0, 0x0) 10:08:02 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x40, 0x0, 0x800000000000007, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x814, 0x0, 0x0, 0x0, 0x0, 0x10000004}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x600}}) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, 0x0) socket$alg(0x26, 0x5, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x2) 10:08:02 executing program 0: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$key(0xf, 0x3, 0x2) recvfrom(r2, 0x0, 0x0, 0x10020, 0x0, 0x0) splice(r1, &(0x7f0000000080)=0x5, r2, &(0x7f00000000c0)=0x6, 0x100, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c00e500180000000800000000000000000000600000000000000000"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) splice(r0, 0x0, r3, 0x0, 0x4ffe0, 0x0) 10:08:03 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x40, 0x0, 0x800000000000007, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x814, 0x0, 0x0, 0x0, 0x0, 0x10000004}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x600}}) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, 0x0) socket$alg(0x26, 0x5, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x2) 10:08:03 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x40, 0x0, 0x800000000000007, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x814, 0x0, 0x0, 0x0, 0x0, 0x10000004}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x600}}) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, 0x0) socket$alg(0x26, 0x5, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x2) 10:08:03 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x40, 0x0, 0x800000000000007, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x814, 0x0, 0x0, 0x0, 0x0, 0x10000004}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x600}}) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r1, 0x540a, 0x2) 10:08:03 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x40, 0x0, 0x800000000000007, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x814, 0x0, 0x0, 0x0, 0x0, 0x10000004}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x600}}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r1, 0x540a, 0x2) 10:08:03 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x40, 0x0, 0x800000000000007, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x814, 0x0, 0x0, 0x0, 0x0, 0x10000004}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x540a, 0x2) 10:08:03 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x814, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r1, &(0x7f0000000000)={0x11, 0x804, r2, 0x1, 0x0, 0x6, @dev}, 0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x200000000000011, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r4, &(0x7f0000000240)={0x11, 0x0, r6}, 0x14) getsockname$packet(r4, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=r7, @ANYBLOB="0100000000000000200016801c00018018000c8014000000000004001400"], 0x44}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x808080}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)=@gettfilter={0x34, 0x2e, 0x1, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0xa, 0xb}, {0xc, 0xf}, {0x2, 0xffff}}, [{0x8, 0xb, 0x7}, {0x8, 0xb, 0x5d}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x4000040) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x2, 0x228, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000740], 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"]}, 0x2c0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x26, &(0x7f0000000080)={@rand_addr=0x1, @multicast1, @remote}, 0xc) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x600}}) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) r10 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_S_PARM(r10, 0xc0285629, &(0x7f00000000c0)={0x3}) ioctl$VIDIOC_DQBUF(r10, 0xc0585611, &(0x7f00000000c0)={0x8000, 0x3, 0x4, 0x40, 0x9c4, {0x77359400}, {0x2, 0x1, 0x7, 0x1, 0x20, 0x14, "5c5edb75"}, 0x4, 0x3, @fd, 0x9, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ALLOC(r8, 0xc0206434, &(0x7f0000000140)={0x9, 0x0, 0x0, 0x20}) ioctl$DRM_IOCTL_AGP_BIND(r11, 0x40106436, &(0x7f0000000180)={r12, 0x2}) ioctl$PIO_UNIMAP(r9, 0x4b67, &(0x7f00000004c0)={0x1, &(0x7f0000000480)=[{}]}) ioctl$TIOCSISO7816(r9, 0xc0285443, &(0x7f0000000000)={0x40, 0x20, 0xcd8, 0x400, 0x7fff}) fcntl$dupfd(0xffffffffffffffff, 0x0, r8) 10:08:03 executing program 3: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001800210000000000f4e800001c1400"/28], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 512.668219][ T4972] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 10:08:03 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1524}, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xd, 0x0, 0x0, 0xffffffffffffff52) ioctl$KVM_NMI(r2, 0xae9a) syz_mount_image$cifs(&(0x7f0000000040)='cifs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x65) 10:08:03 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x40, 0x0, 0x800000000000007, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x814, 0x0, 0x0, 0x0, 0x0, 0x10000004}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x540a, 0x2) 10:08:03 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x814, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x600}}) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r1) 10:08:03 executing program 0: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) recvfrom(r3, 0x0, 0x0, 0x10020, 0x0, 0x0) ioctl$sock_SIOCGSKNS(r3, 0x894c, &(0x7f00000001c0)=0x9) close(r2) socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYRESOCT], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) r6 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp1\x00', 0x80, 0x0) preadv(r6, &(0x7f0000000380)=[{&(0x7f0000000240)=""/254, 0xfe}], 0x1, 0x5) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r7, &(0x7f00000017c0), 0x3da, 0x0) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r8, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x8001}, {0xa, 0x0, 0x0, @remote}, r9}}, 0x48) write$RDMA_USER_CM_CMD_JOIN_MCAST(r7, &(0x7f00000000c0)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x2, r9, 0x30, 0x0, @in={0x2, 0x4e24, @multicast1}}}, 0xa0) 10:08:03 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x540a, 0x2) 10:08:03 executing program 5: syz_genetlink_get_family_id$netlbl_mgmt(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_PCM_IOCTL_DROP(r1, 0x4143, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)) io_setup(0x16f7, &(0x7f0000000100)=0x0) io_submit(r3, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x7, 0x800, r2, &(0x7f0000000340)='i', 0x1}]) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)) ioctl$KDSETKEYCODE(0xffffffffffffffff, 0x4b4d, &(0x7f00000000c0)={0x9}) 10:08:03 executing program 4: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x400400, 0x0) setsockopt$CAIFSO_REQ_PARAM(r0, 0x116, 0x80, &(0x7f0000000080)="173ca18f8c83d315224aef3676ab8e52dde7809db1ff27c236cea1bdb067ab6800311077499a155a393aa4ceecf50f", 0x2f) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x814, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x600}}) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r2) 10:08:04 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x540a, 0x2) 10:08:04 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x2) 10:08:04 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) r1 = getpgid(0xffffffffffffffff) write$cgroup_pid(r0, &(0x7f0000000080)=r1, 0x12) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0xff, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x814, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x600}}) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, 0x0) ioctl$EVIOCGID(r2, 0x80084502, &(0x7f0000000180)=""/177) r4 = socket$alg(0x26, 0x5, 0x0) fsetxattr$trusted_overlay_nlink(r4, &(0x7f0000000100)='trusted.overlay.nlink\x00', &(0x7f0000000140)={'L+', 0x7ff}, 0x16, 0x3) r5 = semget(0x0, 0x0, 0x300) semctl$SETALL(r5, 0x0, 0x11, &(0x7f0000000000)=[0x4, 0x8850]) fcntl$dupfd(0xffffffffffffffff, 0x0, r4) 10:08:04 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x814, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r1, &(0x7f0000000000)={0x11, 0x804, r2, 0x1, 0x0, 0x6, @dev}, 0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x200000000000011, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r4, &(0x7f0000000240)={0x11, 0x0, r6}, 0x14) getsockname$packet(r4, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=r7, @ANYBLOB="0100000000000000200016801c00018018000c8014000000000004001400"], 0x44}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x808080}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)=@gettfilter={0x34, 0x2e, 0x1, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0xa, 0xb}, {0xc, 0xf}, {0x2, 0xffff}}, [{0x8, 0xb, 0x7}, {0x8, 0xb, 0x5d}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x4000040) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x2, 0x228, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000740], 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"]}, 0x2c0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x26, &(0x7f0000000080)={@rand_addr=0x1, @multicast1, @remote}, 0xc) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x600}}) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) r10 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_S_PARM(r10, 0xc0285629, &(0x7f00000000c0)={0x3}) ioctl$VIDIOC_DQBUF(r10, 0xc0585611, &(0x7f00000000c0)={0x8000, 0x3, 0x4, 0x40, 0x9c4, {0x77359400}, {0x2, 0x1, 0x7, 0x1, 0x20, 0x14, "5c5edb75"}, 0x4, 0x3, @fd, 0x9, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ALLOC(r8, 0xc0206434, &(0x7f0000000140)={0x9, 0x0, 0x0, 0x20}) ioctl$DRM_IOCTL_AGP_BIND(r11, 0x40106436, &(0x7f0000000180)={r12, 0x2}) ioctl$PIO_UNIMAP(r9, 0x4b67, &(0x7f00000004c0)={0x1, &(0x7f0000000480)=[{}]}) ioctl$TIOCSISO7816(r9, 0xc0285443, &(0x7f0000000000)={0x40, 0x20, 0xcd8, 0x400, 0x7fff}) fcntl$dupfd(0xffffffffffffffff, 0x0, r8) [ 513.358948][ T5318] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 10:08:04 executing program 3: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001800210000000000f4e800001c1400"/28], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 10:08:04 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1524}, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xd, 0x0, 0x0, 0xffffffffffffff52) ioctl$KVM_NMI(r2, 0xae9a) syz_mount_image$cifs(&(0x7f0000000040)='cifs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x66) 10:08:04 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x814, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x1, 0x0) ioctl$ASHMEM_SET_NAME(r1, 0x41007701, &(0x7f0000000080)=']ppp0]GPL}\x00') ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x600}}) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vsock\x00', 0x200, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x2}}, 0x20) r5 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r5, &(0x7f0000000000)={0x11, 0x804, r6, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$inet_tcp_buf(r5, 0x6, 0x21, &(0x7f0000000240)="a786edb4f7dcf8bb6e4073d954ba26b1dd2a8d4400e777785d2418f380a0f8ede83cc6fc4d74ede3673376beeb94edea23912dbcd4d00e156731b7fea395fc6dd08371981e10afeb21e444e585f3d34470f1ce1c508e8cbe408abe199c3b6972c139900f263ae04da652c53215ae7688c0caa269a83edb1b1e1425be34c29e33f03265e6e963d783d621227825794254da21e0b9e55801e73a9775beb836085ef318078245f82fc48379ffde081b3d304f93137180cc9011e4a53a09c98ede07ddc2a43cc1c19e1a7e5a30", 0xcb) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x8001}, {0xa, 0x0, 0x0, @remote}, r4}}, 0x48) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000100)={0x14, 0x88, 0xfa00, {r4, 0x1c, 0x0, @in={0x2, 0x4e20, @rand_addr=0x9c}}}, 0x90) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r7) 10:08:04 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x2) 10:08:04 executing program 0: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=@mpls_newroute={0x1c, 0x18, 0x21, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) setsockopt$inet_opts(r3, 0x0, 0x9, &(0x7f0000000080)="9e5e5de2c7429ad93ba3c59e393776fb1a61", 0x12) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = creat(&(0x7f00000000c0)='./file0\x00', 0x19) getsockopt$ARPT_SO_GET_ENTRIES(r6, 0x0, 0x61, &(0x7f0000000100)={'filter\x00', 0xfa, "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"}, &(0x7f0000000240)=0x11e) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 10:08:04 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x814, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r1, &(0x7f0000000000)={0x11, 0x804, r2, 0x1, 0x0, 0x6, @dev}, 0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x200000000000011, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r4, &(0x7f0000000240)={0x11, 0x0, r6}, 0x14) getsockname$packet(r4, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=r7, @ANYBLOB="0100000000000000200016801c00018018000c8014000000000004001400"], 0x44}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x808080}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)=@gettfilter={0x34, 0x2e, 0x1, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0xa, 0xb}, {0xc, 0xf}, {0x2, 0xffff}}, [{0x8, 0xb, 0x7}, {0x8, 0xb, 0x5d}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x4000040) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x2, 0x228, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000740], 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"]}, 0x2c0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x26, &(0x7f0000000080)={@rand_addr=0x1, @multicast1, @remote}, 0xc) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x600}}) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) r10 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_S_PARM(r10, 0xc0285629, &(0x7f00000000c0)={0x3}) ioctl$VIDIOC_DQBUF(r10, 0xc0585611, &(0x7f00000000c0)={0x8000, 0x3, 0x4, 0x40, 0x9c4, {0x77359400}, {0x2, 0x1, 0x7, 0x1, 0x20, 0x14, "5c5edb75"}, 0x4, 0x3, @fd, 0x9, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ALLOC(r8, 0xc0206434, &(0x7f0000000140)={0x9, 0x0, 0x0, 0x20}) ioctl$DRM_IOCTL_AGP_BIND(r11, 0x40106436, &(0x7f0000000180)={r12, 0x2}) ioctl$PIO_UNIMAP(r9, 0x4b67, &(0x7f00000004c0)={0x1, &(0x7f0000000480)=[{}]}) ioctl$TIOCSISO7816(r9, 0xc0285443, &(0x7f0000000000)={0x40, 0x20, 0xcd8, 0x400, 0x7fff}) fcntl$dupfd(0xffffffffffffffff, 0x0, r8) 10:08:04 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x2) 10:08:05 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x540a, 0x0) [ 514.031198][ T5454] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 10:08:05 executing program 4: perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000, 0x0, 0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0x1}, 0x1702, 0x3, 0x20000, 0x0, 0x0, 0x2004}, 0x0, 0xc, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vsock\x00', 0x40, 0x0) accept4$netrom(r1, &(0x7f0000000440)={{0x3, @null}, [@rose, @default, @remote, @rose, @rose, @null, @default, @netrom]}, &(0x7f00000002c0)=0x48, 0x400) socket$key(0xf, 0x3, 0x2) r2 = socket$key(0xf, 0x3, 0x2) recvfrom(r2, 0x0, 0x0, 0x10020, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) recvfrom(r3, 0x0, 0x0, 0x10020, 0x0, 0x0) fstat(r3, &(0x7f0000000200)) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0406618, &(0x7f0000000080)={{0x4, 0x0, @reserved="ac893d8ceafda8c65a1bf25f67d4c0f235d39cd47ed2fcdfb5ee5ea94dd35ddb"}}) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x600}}) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r4, &(0x7f00000017c0), 0x3da, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x0) ioctl$KVM_GET_PIT2(r5, 0x8070ae9f, &(0x7f0000000100)) read$char_usb(0xffffffffffffffff, &(0x7f0000000180)=""/128, 0x80) ioctl$EVIOCSABS2F(r4, 0x401845ef, &(0x7f0000000000)={0x6, 0x2, 0x7, 0x800, 0x8000, 0x7fffffff}) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r6) 10:08:05 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x540a, 0x0) 10:08:05 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x540a, 0x0) 10:08:05 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x814, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r1, &(0x7f0000000000)={0x11, 0x804, r2, 0x1, 0x0, 0x6, @dev}, 0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x200000000000011, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r4, &(0x7f0000000240)={0x11, 0x0, r6}, 0x14) getsockname$packet(r4, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=r7, @ANYBLOB="0100000000000000200016801c00018018000c8014000000000004001400"], 0x44}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x808080}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)=@gettfilter={0x34, 0x2e, 0x1, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0xa, 0xb}, {0xc, 0xf}, {0x2, 0xffff}}, [{0x8, 0xb, 0x7}, {0x8, 0xb, 0x5d}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x4000040) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x2, 0x228, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000740], 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff010000000900000000000000883e76657468315f746f5f7465616d000000b72d36746e6c3000000000000000000069726c616e300000000000000000000069666230000000000000000000000000aaaaaaaaaabb000000000000aaaaaaaaaa000000000000000000ac000000ac000000d4050000000000000000000000000000000000000000000000000000000000000000000018000000000000400000000001000000000000000700000000000a004155444954000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff0000000000000000fa5bb6c60000000000000000000000000000000000000000000000000000000001000000feffffff010000001100000000000000000076ff7468315f746f5f7465616d00000079616d30000000000000000000000000697036677265300000000000000000007663616e3000000004000000000000000180c2000000000000000000aaaaaaaaaaaa00000000000000009c0000009c000000c400000063707500000000000000000000000000000000000000000000000000000000000800000000000000010000ed41554449540000000000000000000000000000000000000000000000000000000400000000000000d01d41f28936774614112d4bd06a606aec042f1044203950d8707d723724489e"]}, 0x2c0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x26, &(0x7f0000000080)={@rand_addr=0x1, @multicast1, @remote}, 0xc) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x600}}) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) r10 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_S_PARM(r10, 0xc0285629, &(0x7f00000000c0)={0x3}) ioctl$VIDIOC_DQBUF(r10, 0xc0585611, &(0x7f00000000c0)={0x8000, 0x3, 0x4, 0x40, 0x9c4, {0x77359400}, {0x2, 0x1, 0x7, 0x1, 0x20, 0x14, "5c5edb75"}, 0x4, 0x3, @fd, 0x9, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ALLOC(r8, 0xc0206434, &(0x7f0000000140)={0x9, 0x0, 0x0, 0x20}) ioctl$DRM_IOCTL_AGP_BIND(r11, 0x40106436, &(0x7f0000000180)={r12, 0x2}) ioctl$PIO_UNIMAP(r9, 0x4b67, &(0x7f00000004c0)={0x1, &(0x7f0000000480)=[{}]}) ioctl$TIOCSISO7816(r9, 0xc0285443, &(0x7f0000000000)={0x40, 0x20, 0xcd8, 0x400, 0x7fff}) fcntl$dupfd(0xffffffffffffffff, 0x0, r8) 10:08:05 executing program 3: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001800210000000000f4e800001c1400"/28], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 514.330309][ T5483] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 10:08:05 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1524}, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xd, 0x0, 0x0, 0xffffffffffffff52) ioctl$KVM_NMI(r2, 0xae9a) syz_mount_image$cifs(&(0x7f0000000040)='cifs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x67) 10:08:05 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x814, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x600, 0x0, 0xe00}}) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r1) 10:08:05 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x814, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x600}}) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000000)={0x1, 0x81, 0x2}) fcntl$dupfd(0xffffffffffffffff, 0x0, r1) 10:08:05 executing program 0: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=@mpls_newroute={0x1c, 0x18, 0x21, 0x0, 0x0, {0x1c, 0x14}}, 0x1c}}, 0x0) recvfrom$x25(0xffffffffffffffff, &(0x7f0000000080)=""/3, 0x3, 0x40010002, &(0x7f00000000c0)={0x9, @null=' \x00'}, 0x12) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x0) ioctl$MON_IOCQ_URB_LEN(r5, 0x9201) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$UI_GET_SYSNAME(r4, 0x8040552c, &(0x7f0000000100)) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 10:08:05 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x814, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x600, 0x0, 0xa00}}) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r1) 10:08:05 executing program 2: syz_genetlink_get_family_id$netlbl_mgmt(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) io_submit(r2, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000340)='i', 0x1}]) r3 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000100)="42d5a7e1141d5ceeef2859bdf8f732dec276f2f8984df128742897a13bc971d9be91e73aa0560a9ccb7f4db0eb380bc23997d2d816", 0x35, 0xfffffffffffffffe) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x189041, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000001c0)={0x8e3, 0x1, 0x5, 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000240)={0x1ff, 0x7fffffff, 0x7fff, 0x5, r5}) keyctl$assume_authority(0x10, r3) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000100)=0xe) ioctl$TCGETS(r6, 0x541a, &(0x7f0000000200)) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)) 10:08:05 executing program 5: syz_genetlink_get_family_id$netlbl_mgmt(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) io_submit(r2, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000340)='i', 0x1}]) r3 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000100)="42d5a7e1141d5ceeef2859bdf8f732dec276f2f8984df128742897a13bc971d9be91e73aa0560a9ccb7f4db0eb380bc23997d2d816", 0x35, 0xfffffffffffffffe) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x189041, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000001c0)={0x8e3, 0x1, 0x5, 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000240)={0x1ff, 0x7fffffff, 0x7fff, 0x5, r5}) keyctl$assume_authority(0x10, r3) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000100)=0xe) ioctl$TCGETS(r6, 0x541a, &(0x7f0000000200)) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)) 10:08:06 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x814, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x608}}) r1 = socket(0x200000000000011, 0x3, 0x0) r2 = socket$key(0xf, 0x3, 0x2) recvfrom(r2, 0x0, 0x0, 0x10020, 0x0, 0x0) fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000240)='trusted.overlay.origin\x00', &(0x7f0000000280)='y\x00', 0x2, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r1, &(0x7f0000000000)={0x11, 0x804, r3, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$SIOCX25SCALLUSERDATA(r1, 0x89e5, &(0x7f0000000080)={0x7f, "e525218ef1d6dea97daa0fbe5041b641ebb25ec1bd775f868623df67e89687cdf026627a87187ec6f7114ee9d474f01b811242e18a39c629c11183756d5417b2e53ffeaf2a1188301da5c68b3448dff50c0639a3879e27111a25a7cf39e8f4781f4137b39850362b3bd1c2ddcbfa754ce0ca2488b35dc8dcc3db79c2992d6517"}) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r4) r5 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'veth1_to_bridge\x00', 0x0}) bind$packet(r5, &(0x7f0000000000)={0x11, 0x804, r6, 0x1, 0x0, 0x6, @dev}, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r5, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000480}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="3e22cc6c2700"/32], 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x80) 10:08:06 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x814, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x600, 0x0, 0x300}}) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r1) 10:08:06 executing program 3: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001800210000000000f4e800001c1400"/28], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r3, r3) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 10:08:06 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x814, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x600, 0x0, 0x300}}) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r1) 10:08:06 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x814, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x600, 0x2500}}) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r1) 10:08:06 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1524}, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xd, 0x0, 0x0, 0xffffffffffffff52) ioctl$KVM_NMI(r2, 0xae9a) syz_mount_image$cifs(&(0x7f0000000040)='cifs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xa9) 10:08:06 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x814, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0xe, {0xf, 0x0, 0x600}}) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r1) 10:08:06 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x7a, 0x0, 0x36d4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x814, 0x0, 0x0, 0x7, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x600}}) setpriority(0x0, 0x0, 0x3) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r1) 10:08:06 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x814, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x600, 0x0, 0x300}}) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r1) 10:08:06 executing program 0: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) recvfrom(r3, 0x0, 0x0, 0x10020, 0x0, 0x0) fsetxattr$security_evm(r3, &(0x7f0000000080)='security.evm\x00', &(0x7f00000000c0)=@md5={0x1, "7743eb8823d389eb151be82c51aad3fd"}, 0x11, 0x3) close(r2) socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=@mpls_newroute={0x1c, 0x18, 0x21, 0x0, 0x0, {0x1c, 0x14}}, 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100)={'#! ', './file0', [{0x20, 'security.evm\x00'}], 0xa, "297b5739b12a580058f29cb23a4ddf94d4e08b86f6db0b4eae4169d64728bbbc7d3076c04a473a5df3c8dc494c5b48f22266823b0d26f667e7deec6c829a5fb448356b3ee6f36a8276b5aca9a7be770c6605fa73255df17f76e059b5cbbc1920ff4eee7463f39555ded72536c7b440602e631d55860dddb7eb28700c42fa159f07996ae169aed831ae0662b207af4f251ce9944175a41e8a3827a6341597315bb63795e2340ef80cb930c4527820248819700c72f1891f2671c9fa0e327501c6306e20f188732d15c4fd2002d2b8c5b538e0ed9f2e9da7ec67d18f41631244fd06dae124d6cc5db9bec6ef1bbcf5990a923d"}, 0x10b) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) r6 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r6, &(0x7f0000000000)={0x11, 0x804, r7, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$SIOCX25SENDCALLACCPT(r6, 0x89e9) 10:08:06 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x814, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x600, 0x0, 0x300}}) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, 0x0) socket$alg(0x26, 0x5, 0x0) 10:08:06 executing program 5: open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x2c) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0x5521, 0x0) connect$inet6(r0, 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0xffff) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x501080, 0x0) ioctl$BLKPG(r3, 0x1269, &(0x7f0000000140)={0x4, 0x0, 0x74, &(0x7f00000000c0)="053c567aaed3b78aae68183279c89800ac0342913dbdb1f8163c08d52c6b01a6f6dbd0ed90a1e002be50592083951e81732be64ec184b15b9ec82e663665193e0e056cff8739e234ddbfdf2fe336818633eae59c6c99adb762718c8f9e53f3b981eb736889886311a192bc3697ee16619f3e3d46"}) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) io_submit(r4, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r2, &(0x7f0000000340)='i', 0x1}]) socket$inet(0x10, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) io_submit(0x0, 0x1, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x0, r5, 0x0}]) socket$inet_tcp(0x2, 0x1, 0x0) 10:08:07 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x814, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x600, 0x0, 0x300}}) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, 0x0) 10:08:07 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7bdd356b0cd673c6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4000000000005bf, 0x100}, 0x19, 0x0, 0x1, 0x2, 0x0, 0x4}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x1) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x600}}) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') socket$inet6(0xa, 0x1, 0x81) preadv(r2, &(0x7f00000017c0), 0x3da, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0x10001) fcntl$dupfd(0xffffffffffffffff, 0x0, r1) 10:08:07 executing program 3: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001800210000000000f4e800001c1400"/28], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r3, r3) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 10:08:07 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x814, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x600, 0x0, 0x300}}) 10:08:07 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x814, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x600, 0x0, 0x300}}) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, 0x0) socket$alg(0x26, 0x5, 0x0) 10:08:07 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1524}, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xd, 0x0, 0x0, 0xffffffffffffff52) ioctl$KVM_NMI(r2, 0xae9a) syz_mount_image$cifs(&(0x7f0000000040)='cifs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xd8) 10:08:07 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x814, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x600, 0x0, 0x300}}) 10:08:07 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x814, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x600}}) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) r3 = socket$key(0xf, 0x3, 0x2) recvfrom(r3, 0x0, 0x0, 0x10020, 0x0, 0x0) fchmod(r3, 0x0) sendmmsg$alg(r2, &(0x7f0000000bc0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="61974e8f7eac1078d44941bdf80785e56b8e2edccfe7463f35aae6a80b9dfe87310219d4ac79e22e346732641923a02d4b14c87c28b792f860799de93ea048bd07f3b7ee532105a9deec05e9c47131e3d1bcaec021bba882b7abcf3f8647a98c15f7cff09ae14e0e3c8bb369f87bf066864a3630c8ac6c254e2115b31dcdc53790ab42fd46213d0103bc684c33552e48cf10f4f0a3f6d3c0534bb587bea4e0511b2fa57cf09e78351613cc0dd3a2bcea8a1f", 0xb2}, {&(0x7f0000000140)="5f78236eeffd4d7acb691f29661f0230c9864346db90982bcb43653e129293fdd9a7bc705f06ddf44d66fa3a8f044b2b1510d8438fb055ce694ee3d36988844070524622e0ec75d1411972fba9c41277423a46e175af74e5fff5b1316d01336dbbb1", 0x62}], 0x2, &(0x7f00000001c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x9}, @assoc={0x18, 0x117, 0x4, 0x3}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0xb}], 0x78, 0x40804}, {0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000240)="c35ac02093dfee64d463f728a5cac3c0ce731b3bd9b0fbc8bf9b94035c7a44693a505985df3b86d4e7dc91c655fec76e900ee24cf947c2bfbc26ff6b448aeeb604c4e1d697daf5a95384a4ed8735056ab70e100771fbb0ca729276b96df8ba99208d33e8161cdc9df5639b4ba045e7a5a09192cd2081b2dc61674950cd1e52bf415ab397cc5621b0d56f48b6e4d50e63264e1e6e859fb2cb74ca9da7254ff5ae7e4bb69d88fb9ac5aa34cf3446dc36eeef615820bf66d6fabd3cae6e58a230e1ac8a5c5a11f166e816a39309", 0xcc}], 0x1, &(0x7f0000000380)=[@assoc={0x18, 0x117, 0x4, 0x711184f2}], 0x18, 0x20008800}, {0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000003c0)="b2888ed658f249429eb74c3a95ec59ead9e9b72da065d2dafdbe773ab0383fc28e1d8ad8687fa37e25f20eb0128bffdda9ad39e59ed249a63a024917a9974207f4457aab671743f16c53725a8cb469021c44c42a6e21689bdc22aac821ff55b81d9f9c54832a37740cb799c4eafbfa523271aad74ba6374e88cabec893b7584d293d45f9f33f6426358502d8b1fe2aac31ee4eb499c1d80c27dbc9fde82e1f01af895f04ebec18f7d206f59412775fb1d92cb102182b3cabf55e125e2896868bc816522f", 0xc4}, {&(0x7f00000004c0)="00997a5c19799912fac1479b421a7ef2d87a81020b22c64f1d2b2cabbcd36e9900d5f17b5d41baec2c5c7f24a2628eb0c5bead95cbaf310a2dd2a3ba31b569c32c8ee7605420c5fe21074138e3a4c1402d160840d17b063ea00dbad52cfee27e45d5a6838ab1f27285a304ccfebd687454b092f4421dce3dfa87c46f30b1ba9a2a31f6e1c963af828b879dc0c3f2a328e12322fd94531c571cc8bcac046c82f804bc6c9349c3a5b0fd5e1de3ff9150ed91342c4b78b24ed05e495b17759b0c75aa69c3a36fc45b76f4e12d9ac03d5d7ab47fbb653d5f", 0xd6}], 0x2}, {0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000600)="51e6ee73d510c0", 0x7}, {&(0x7f0000000640)="001acee9f2a1f1dcd8a89dcf89bbcbe456c6b3e70882e24abbfdd00e0ef308180281834be97d136334819178f5178f75960ce8e129bf1f846b48a184befe27b7677bf9ca0e92", 0x46}, {&(0x7f00000006c0)="6cbdd27ef1905c751364f9b0c5b5ffe32c32357e7aa5d5ca79c8092764e70ee22b705beee56f33f13c87141a92b1a28536c7a7a775c37a4f7b13785de08e09a12fb874f09a081619ac3b8f6b1de70f58e8444ba48e3081aedb858b8ee20ef2863aea91b8ad743513157319b53be5c799705c9381ad07310580e94c6a3e5cf5c234a6438102673f1be9f54c7e35cf138342dc5e04b12b790c8240b548e4b3afacb3db4c0606626a3a5bd901d8814fe608f116f2", 0xb3}, {&(0x7f0000000780)="024a0123b26ee4a22e09993bf60f156108e69d6f51142915fe94716c88cb840efe55009efe8d3fd06a157ac663c567403256487a778b4ea349e9365a427720c3c064e4c181a202cc465f34468ab3de00d740c67fe5b6278981fba901cf4adea3698827167c24ed71aa5ef68a5bcb04066deb1da9acfdfd6580893e45eaf501e0317b8c7ea2930d6a", 0x88}, {&(0x7f0000000840)="42ea6df693efa7fa38e6e7f7e064fa1d8df92fddc765963d4f9d1e1ce3a6bceeb4f37dafbc0325680c3bf4510f9cdae78e0a56b6ce7b774cf818dbf668fbcfd941d799bf4e14ebdbade82fe983329b46be5836f4880a44e8e7b2b4f38a7fa57785fa2c41abb33e7bb3f16fe20fe4a68e7d3ffc8992ea08fb1fcba5016372080586690f49e451bef6", 0x88}, {&(0x7f0000000900)="66e95f9a9de2ff9cc013c025ca9c01a101bb4a2adfea1fd79ce357596c75390b03ea3a2eb9e98abf3b5b225ff009b8d5050323054e", 0x35}, {&(0x7f0000000940)="5d2600b9a8313d89f4e9bbba344506329f2400f20eb07287a803622a99798b8b15c2f9303b0e1eff07382ca82e04994ed41c09ef6e68922a116099021ab73b018477763e636ea861b291d674c50d00e895aefa6aa1c5467897ec94d1b8ef0cebbf393c78fa370063d41bc6d2ef23326e2384877dee7233a0db60f1c74b427df0c6eabfb8ff6113aa8c98ee329780e94d5d3a9d90fe530ac8bef2256153baaff33f0ba1b77f7853d09c02e268e9c329885cc3598ec40641d47dd5961f901f35ec70bfa5ff7c14d506", 0xc8}, {&(0x7f0000000a40)="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", 0xfc}], 0x8, 0x0, 0x0, 0x4000801}], 0x4, 0x20000000) 10:08:07 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x814, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x600, 0x0, 0x300}}) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, 0x0) socket$alg(0x26, 0x5, 0x0) 10:08:07 executing program 0: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=@mpls_newroute={0x1c, 0x18, 0x21, 0x0, 0x0, {0x1c, 0x14}}, 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, 0x0, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0xff}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1f}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000010}, 0x4000004) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vsock\x00', 0x404000, 0x0) ioctl$KDGETKEYCODE(r4, 0x4b4c, &(0x7f0000000240)={0x1ff, 0x400}) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r5, 0x119, 0x1, &(0x7f00000000c0)=0x721, 0x4) r6 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 10:08:07 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x814, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x600, 0x0, 0x300}}) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, 0x0) socket$alg(0x26, 0x5, 0x0) 10:08:07 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x814, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x600, 0x0, 0x300}}) 10:08:08 executing program 3: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001800210000000000f4e800001c1400"/28], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r3, r3) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 10:08:08 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x814, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x600, 0x0, 0x300}}) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, 0x0) 10:08:08 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x814, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x600, 0x0, 0x300}}) 10:08:08 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x814, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x600}}) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r1) 10:08:08 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x600, 0x0, 0x300}}) 10:08:08 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1524}, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xd, 0x0, 0x0, 0xffffffffffffff52) ioctl$KVM_NMI(r2, 0xae9a) syz_mount_image$cifs(&(0x7f0000000040)='cifs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x300) 10:08:08 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x814, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x600, 0x0, 0x300}}) 10:08:08 executing program 2: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x600, 0x0, 0x300}}) 10:08:08 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x814, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x600, 0x0, 0x300}}) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, 0x0) 10:08:08 executing program 0: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=@mpls_newroute={0x1c, 0x18, 0x21, 0x0, 0x0, {0x1c, 0x14}}, 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r5, 0x40605346, &(0x7f0000000080)={0xb71, 0x1, {0x3, 0x0, 0x8, 0x2, 0x800}, 0x9}) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x20000000000) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 10:08:08 executing program 2: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x600, 0x0, 0x300}}) 10:08:08 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x814, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x600, 0x0, 0x300}}) 10:08:08 executing program 3: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001800210000000000f4e800001c1400"/28], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 10:08:08 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x814, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x600, 0x0, 0x300}}) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, 0x0) 10:08:09 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x814, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x600, 0x0, 0x300}}) 10:08:09 executing program 2: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x600, 0x0, 0x300}}) 10:08:09 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x814, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x600, 0x0, 0x300}}) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, 0x0) 10:08:09 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1524}, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xd, 0x0, 0x0, 0xffffffffffffff52) ioctl$KVM_NMI(r2, 0xae9a) syz_mount_image$cifs(&(0x7f0000000040)='cifs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x3e8) 10:08:09 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, 0x0) 10:08:09 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x814, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x600, 0x0, 0x300}}) 10:08:09 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x814, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x600, 0x0, 0x300}}) 10:08:09 executing program 0: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x10, 0x80003, 0x0) recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000004b00)={&(0x7f00000017c0)=@ll={0x11, 0x0, 0x0}, 0x80, &(0x7f0000003a80)=[{&(0x7f0000001840)=""/16, 0x10}, {&(0x7f0000001880)=""/4096, 0x1000}, {&(0x7f0000002880)=""/90, 0x5a}, {&(0x7f0000002900)=""/4096, 0x1000}, {&(0x7f0000003900)=""/91, 0x5b}, {&(0x7f0000003980)=""/223, 0xdf}], 0x6, &(0x7f0000003b00)=""/4096, 0x1000}, 0x10060) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000004b40)=ANY=[@ANYBLOB="28000000180021002abd7000000000001c1400000000fd000040dac8b78a8f3cf51fdc17", @ANYRES32=r3, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000000), 0x4) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 10:08:09 executing program 3: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001800210000000000f4e800001c1400"/28], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 10:08:09 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, 0x0) 10:08:10 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x600, 0x0, 0x300}}) 10:08:10 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, 0x0) 10:08:10 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x814, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x600, 0x0, 0x300}}) 10:08:10 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x600, 0x0, 0x300}}) 10:08:10 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:10 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1524}, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xd, 0x0, 0x0, 0xffffffffffffff52) ioctl$KVM_NMI(r2, 0xae9a) syz_mount_image$cifs(&(0x7f0000000040)='cifs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x480) 10:08:10 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x600, 0x0, 0x300}}) 10:08:10 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x814, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x600, 0x0, 0x300}}) 10:08:10 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf}}) 10:08:10 executing program 0: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=@mpls_newroute={0x1c, 0x18, 0x21, 0x0, 0x0, {0x1c, 0x14}}, 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) flock(0xffffffffffffffff, 0xc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 10:08:10 executing program 3: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001800210000000000f4e800001c1400"/28], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 10:08:10 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x600, 0x0, 0x300}}) 10:08:10 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x814, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x600, 0x0, 0x300}}) 10:08:11 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf}}) 10:08:11 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf}}) 10:08:11 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x814, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x600, 0x0, 0x300}}) 10:08:11 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, 0x0) 10:08:11 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1524}, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xd, 0x0, 0x0, 0xffffffffffffff52) ioctl$KVM_NMI(r2, 0xae9a) syz_mount_image$cifs(&(0x7f0000000040)='cifs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x500) 10:08:11 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x814, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x600}}) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) r3 = socket$key(0xf, 0x3, 0x2) recvfrom(r3, 0x0, 0x0, 0x10020, 0x0, 0x0) fchmod(r3, 0x0) sendmmsg$alg(r2, &(0x7f0000000bc0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="61974e8f7eac1078d44941bdf80785e56b8e2edccfe7463f35aae6a80b9dfe87310219d4ac79e22e346732641923a02d4b14c87c28b792f860799de93ea048bd07f3b7ee532105a9deec05e9c47131e3d1bcaec021bba882b7abcf3f8647a98c15f7cff09ae14e0e3c8bb369f87bf066864a3630c8ac6c254e2115b31dcdc53790ab42fd46213d0103bc684c33552e48cf10f4f0a3f6d3c0534bb587bea4e0511b2fa57cf09e78351613cc0dd3a2bcea8a1f", 0xb2}, {&(0x7f0000000140)="5f78236eeffd4d7acb691f29661f0230c9864346db90982bcb43653e129293fdd9a7bc705f06ddf44d66fa3a8f044b2b1510d8438fb055ce694ee3d36988844070524622e0ec75d1411972fba9c41277423a46e175af74e5fff5b1316d01336dbbb1", 0x62}], 0x2, &(0x7f00000001c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x9}, @assoc={0x18, 0x117, 0x4, 0x3}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0xb}], 0x78, 0x40804}, {0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000240)="c35ac02093dfee64d463f728a5cac3c0ce731b3bd9b0fbc8bf9b94035c7a44693a505985df3b86d4e7dc91c655fec76e900ee24cf947c2bfbc26ff6b448aeeb604c4e1d697daf5a95384a4ed8735056ab70e100771fbb0ca729276b96df8ba99208d33e8161cdc9df5639b4ba045e7a5a09192cd2081b2dc61674950cd1e52bf415ab397cc5621b0d56f48b6e4d50e63264e1e6e859fb2cb74ca9da7254ff5ae7e4bb69d88fb9ac5aa34cf3446dc36eeef615820bf66d6fabd3cae6e58a230e1ac8a5c5a11f166e816a39309", 0xcc}], 0x1, &(0x7f0000000380)=[@assoc={0x18, 0x117, 0x4, 0x711184f2}], 0x18, 0x20008800}, {0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000003c0)="b2888ed658f249429eb74c3a95ec59ead9e9b72da065d2dafdbe773ab0383fc28e1d8ad8687fa37e25f20eb0128bffdda9ad39e59ed249a63a024917a9974207f4457aab671743f16c53725a8cb469021c44c42a6e21689bdc22aac821ff55b81d9f9c54832a37740cb799c4eafbfa523271aad74ba6374e88cabec893b7584d293d45f9f33f6426358502d8b1fe2aac31ee4eb499c1d80c27dbc9fde82e1f01af895f04ebec18f7d206f59412775fb1d92cb102182b3cabf55e125e2896868bc816522f", 0xc4}, {&(0x7f00000004c0)="00997a5c19799912fac1479b421a7ef2d87a81020b22c64f1d2b2cabbcd36e9900d5f17b5d41baec2c5c7f24a2628eb0c5bead95cbaf310a2dd2a3ba31b569c32c8ee7605420c5fe21074138e3a4c1402d160840d17b063ea00dbad52cfee27e45d5a6838ab1f27285a304ccfebd687454b092f4421dce3dfa87c46f30b1ba9a2a31f6e1c963af828b879dc0c3f2a328e12322fd94531c571cc8bcac046c82f804bc6c9349c3a5b0fd5e1de3ff9150ed91342c4b78b24ed05e495b17759b0c75aa69c3a36fc45b76f4e12d9ac03d5d7ab47fbb653d5f", 0xd6}], 0x2}, {0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000600)="51e6ee73d510c0", 0x7}, {&(0x7f0000000640)="001acee9f2a1f1dcd8a89dcf89bbcbe456c6b3e70882e24abbfdd00e0ef308180281834be97d136334819178f5178f75960ce8e129bf1f846b48a184befe27b7677bf9ca0e92", 0x46}, {&(0x7f00000006c0)="6cbdd27ef1905c751364f9b0c5b5ffe32c32357e7aa5d5ca79c8092764e70ee22b705beee56f33f13c87141a92b1a28536c7a7a775c37a4f7b13785de08e09a12fb874f09a081619ac3b8f6b1de70f58e8444ba48e3081aedb858b8ee20ef2863aea91b8ad743513157319b53be5c799705c9381ad07310580e94c6a3e5cf5c234a6438102673f1be9f54c7e35cf138342dc5e04b12b790c8240b548e4b3afacb3db4c0606626a3a5bd901d8814fe608f116f2", 0xb3}, {&(0x7f0000000780)="024a0123b26ee4a22e09993bf60f156108e69d6f51142915fe94716c88cb840efe55009efe8d3fd06a157ac663c567403256487a778b4ea349e9365a427720c3c064e4c181a202cc465f34468ab3de00d740c67fe5b6278981fba901cf4adea3698827167c24ed71aa5ef68a5bcb04066deb1da9acfdfd6580893e45eaf501e0317b8c7ea2930d6a", 0x88}, {&(0x7f0000000840)="42ea6df693efa7fa38e6e7f7e064fa1d8df92fddc765963d4f9d1e1ce3a6bceeb4f37dafbc0325680c3bf4510f9cdae78e0a56b6ce7b774cf818dbf668fbcfd941d799bf4e14ebdbade82fe983329b46be5836f4880a44e8e7b2b4f38a7fa57785fa2c41abb33e7bb3f16fe20fe4a68e7d3ffc8992ea08fb1fcba5016372080586690f49e451bef6", 0x88}, {&(0x7f0000000900)="66e95f9a9de2ff9cc013c025ca9c01a101bb4a2adfea1fd79ce357596c75390b03ea3a2eb9e98abf3b5b225ff009b8d5050323054e", 0x35}, {&(0x7f0000000940)="5d2600b9a8313d89f4e9bbba344506329f2400f20eb07287a803622a99798b8b15c2f9303b0e1eff07382ca82e04994ed41c09ef6e68922a116099021ab73b018477763e636ea861b291d674c50d00e895aefa6aa1c5467897ec94d1b8ef0cebbf393c78fa370063d41bc6d2ef23326e2384877dee7233a0db60f1c74b427df0c6eabfb8ff6113aa8c98ee329780e94d5d3a9d90fe530ac8bef2256153baaff33f0ba1b77f7853d09c02e268e9c329885cc3598ec40641d47dd5961f901f35ec70bfa5ff7c14d506", 0xc8}, {&(0x7f0000000a40)="e265980717167bead1a84371ce915cac9340e1640104002ea91a161b3770143f8d073deed00315efda9a21bd1ebeb397ee0a05f09022a6957e38f2e23a24eb0b151b40668250607102dc5aa0222c23f254f52b551b94a70a9d6160c49c9da697d39621440f991417face3a9c5ed0724da76e92c9008f0773516ae6f3e1ce5b4acf5c5c2e5bc445dc5bffe511aa2ef9f00bbb4fc1dee86deec1ea867c6e0218e73dd28839ea8e28c2638e775cedd47f79bd5d4aef3674906fa4269b6f31055ce9300d35387ed1f8654c36a1f42015b8bc767481eee0e04ce198c8e53a02a922ed42ef4de98cbaa5a1de071d976fb342bfd11cdd40d84460e9c29b00fb", 0xfc}], 0x8, 0x0, 0x0, 0x4000801}], 0x4, 0x20000000) 10:08:11 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, 0x0) 10:08:11 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x600, 0x0, 0x300}}) 10:08:11 executing program 0: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=@mpls_newroute={0x1c, 0x18, 0x200, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}}, 0x1c}}, 0x0) r3 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r3, &(0x7f0000000000)={0x11, 0x804, r4, 0x1, 0x0, 0x6, @dev}, 0x14) getsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000280)=0x81, &(0x7f00000002c0)=0x4) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) r7 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_S_PARM(r7, 0xc0285629, &(0x7f00000000c0)={0x3}) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r7, 0xc0905664, &(0x7f00000001c0)={0x0, 0x0, [], @raw_data=[0x9d5, 0x8, 0x80000001, 0x5, 0x5, 0xffffffff, 0x3f, 0xfff, 0x10, 0x8, 0x40, 0x2, 0x97, 0x1ff, 0x7, 0x400, 0x6, 0x7, 0x3, 0xe7e, 0x7fffffff, 0x3f, 0x9, 0x6, 0x5, 0x0, 0x2890, 0x2, 0x20, 0x0, 0x7f]}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) r8 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r8, &(0x7f0000000000)={0x11, 0x804, r9, 0x1, 0x0, 0x6, @dev}, 0x14) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x200000000000011, 0x3, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r11, &(0x7f0000000240)={0x11, 0x0, r13}, 0x14) getsockname$packet(r11, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=r14, @ANYBLOB="0100000000000000200016801c00018018000c8014000000000004001400"], 0x44}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) sendmsg$nl_route(r8, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)=@ipv6_getroute={0x64, 0x1a, 0x2, 0x70bd2d, 0x25dfdbfd, {0xa, 0x14, 0x4, 0x3, 0x0, 0x2, 0xfd, 0x6, 0x800}, [@RTA_GATEWAY={0x14, 0x5, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @RTA_PREF={0x5, 0x14, 0x7}, @RTA_PRIORITY={0x8, 0x6, 0x6}, @RTA_OIF={0x8, 0x4, r14}, @RTA_GATEWAY={0x14, 0x5, @mcast1}, @RTA_PREF={0x5, 0x14, 0x7}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x800) r15 = socket(0x200000000000011, 0x3, 0x0) setsockopt$inet_dccp_buf(r0, 0x21, 0xd, &(0x7f0000000300)="6aaaf310", 0x4) ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) ioctl$sock_ifreq(0xffffffffffffffff, 0x891b, &(0x7f0000000380)={'veth0\x00', @ifru_flags=0x8000}) bind$packet(r15, &(0x7f0000000000)={0x11, 0x804, r16, 0x1, 0x0, 0x6, @dev}, 0x14) sendmsg$NFQNL_MSG_VERDICT_BATCH(r15, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x54, 0x3, 0x3, 0x301, 0x0, 0x0, {0x2, 0x0, 0xa013}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x81}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x4}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x2}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffb, 0x80000000}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x1}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffd}}]}, 0x54}, 0x1, 0x0, 0x0, 0x14008000}, 0x4008084) 10:08:11 executing program 3: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001800210000000000f4e800001c1400"/28], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 10:08:12 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x600, 0x0, 0x300}}) 10:08:12 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, 0x0) [ 521.057552][ T6607] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 10:08:12 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x814, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x600}}) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) r3 = socket$key(0xf, 0x3, 0x2) recvfrom(r3, 0x0, 0x0, 0x10020, 0x0, 0x0) fchmod(r3, 0x0) sendmmsg$alg(r2, &(0x7f0000000bc0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="61974e8f7eac1078d44941bdf80785e56b8e2edccfe7463f35aae6a80b9dfe87310219d4ac79e22e346732641923a02d4b14c87c28b792f860799de93ea048bd07f3b7ee532105a9deec05e9c47131e3d1bcaec021bba882b7abcf3f8647a98c15f7cff09ae14e0e3c8bb369f87bf066864a3630c8ac6c254e2115b31dcdc53790ab42fd46213d0103bc684c33552e48cf10f4f0a3f6d3c0534bb587bea4e0511b2fa57cf09e78351613cc0dd3a2bcea8a1f", 0xb2}, {&(0x7f0000000140)="5f78236eeffd4d7acb691f29661f0230c9864346db90982bcb43653e129293fdd9a7bc705f06ddf44d66fa3a8f044b2b1510d8438fb055ce694ee3d36988844070524622e0ec75d1411972fba9c41277423a46e175af74e5fff5b1316d01336dbbb1", 0x62}], 0x2, &(0x7f00000001c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x9}, @assoc={0x18, 0x117, 0x4, 0x3}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0xb}], 0x78, 0x40804}, {0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000240)="c35ac02093dfee64d463f728a5cac3c0ce731b3bd9b0fbc8bf9b94035c7a44693a505985df3b86d4e7dc91c655fec76e900ee24cf947c2bfbc26ff6b448aeeb604c4e1d697daf5a95384a4ed8735056ab70e100771fbb0ca729276b96df8ba99208d33e8161cdc9df5639b4ba045e7a5a09192cd2081b2dc61674950cd1e52bf415ab397cc5621b0d56f48b6e4d50e63264e1e6e859fb2cb74ca9da7254ff5ae7e4bb69d88fb9ac5aa34cf3446dc36eeef615820bf66d6fabd3cae6e58a230e1ac8a5c5a11f166e816a39309", 0xcc}], 0x1, &(0x7f0000000380)=[@assoc={0x18, 0x117, 0x4, 0x711184f2}], 0x18, 0x20008800}, {0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000003c0)="b2888ed658f249429eb74c3a95ec59ead9e9b72da065d2dafdbe773ab0383fc28e1d8ad8687fa37e25f20eb0128bffdda9ad39e59ed249a63a024917a9974207f4457aab671743f16c53725a8cb469021c44c42a6e21689bdc22aac821ff55b81d9f9c54832a37740cb799c4eafbfa523271aad74ba6374e88cabec893b7584d293d45f9f33f6426358502d8b1fe2aac31ee4eb499c1d80c27dbc9fde82e1f01af895f04ebec18f7d206f59412775fb1d92cb102182b3cabf55e125e2896868bc816522f", 0xc4}, {&(0x7f00000004c0)="00997a5c19799912fac1479b421a7ef2d87a81020b22c64f1d2b2cabbcd36e9900d5f17b5d41baec2c5c7f24a2628eb0c5bead95cbaf310a2dd2a3ba31b569c32c8ee7605420c5fe21074138e3a4c1402d160840d17b063ea00dbad52cfee27e45d5a6838ab1f27285a304ccfebd687454b092f4421dce3dfa87c46f30b1ba9a2a31f6e1c963af828b879dc0c3f2a328e12322fd94531c571cc8bcac046c82f804bc6c9349c3a5b0fd5e1de3ff9150ed91342c4b78b24ed05e495b17759b0c75aa69c3a36fc45b76f4e12d9ac03d5d7ab47fbb653d5f", 0xd6}], 0x2}, {0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000600)="51e6ee73d510c0", 0x7}, {&(0x7f0000000640)="001acee9f2a1f1dcd8a89dcf89bbcbe456c6b3e70882e24abbfdd00e0ef308180281834be97d136334819178f5178f75960ce8e129bf1f846b48a184befe27b7677bf9ca0e92", 0x46}, {&(0x7f00000006c0)="6cbdd27ef1905c751364f9b0c5b5ffe32c32357e7aa5d5ca79c8092764e70ee22b705beee56f33f13c87141a92b1a28536c7a7a775c37a4f7b13785de08e09a12fb874f09a081619ac3b8f6b1de70f58e8444ba48e3081aedb858b8ee20ef2863aea91b8ad743513157319b53be5c799705c9381ad07310580e94c6a3e5cf5c234a6438102673f1be9f54c7e35cf138342dc5e04b12b790c8240b548e4b3afacb3db4c0606626a3a5bd901d8814fe608f116f2", 0xb3}, {&(0x7f0000000780)="024a0123b26ee4a22e09993bf60f156108e69d6f51142915fe94716c88cb840efe55009efe8d3fd06a157ac663c567403256487a778b4ea349e9365a427720c3c064e4c181a202cc465f34468ab3de00d740c67fe5b6278981fba901cf4adea3698827167c24ed71aa5ef68a5bcb04066deb1da9acfdfd6580893e45eaf501e0317b8c7ea2930d6a", 0x88}, {&(0x7f0000000840)="42ea6df693efa7fa38e6e7f7e064fa1d8df92fddc765963d4f9d1e1ce3a6bceeb4f37dafbc0325680c3bf4510f9cdae78e0a56b6ce7b774cf818dbf668fbcfd941d799bf4e14ebdbade82fe983329b46be5836f4880a44e8e7b2b4f38a7fa57785fa2c41abb33e7bb3f16fe20fe4a68e7d3ffc8992ea08fb1fcba5016372080586690f49e451bef6", 0x88}, {&(0x7f0000000900)="66e95f9a9de2ff9cc013c025ca9c01a101bb4a2adfea1fd79ce357596c75390b03ea3a2eb9e98abf3b5b225ff009b8d5050323054e", 0x35}, {&(0x7f0000000940)="5d2600b9a8313d89f4e9bbba344506329f2400f20eb07287a803622a99798b8b15c2f9303b0e1eff07382ca82e04994ed41c09ef6e68922a116099021ab73b018477763e636ea861b291d674c50d00e895aefa6aa1c5467897ec94d1b8ef0cebbf393c78fa370063d41bc6d2ef23326e2384877dee7233a0db60f1c74b427df0c6eabfb8ff6113aa8c98ee329780e94d5d3a9d90fe530ac8bef2256153baaff33f0ba1b77f7853d09c02e268e9c329885cc3598ec40641d47dd5961f901f35ec70bfa5ff7c14d506", 0xc8}, {&(0x7f0000000a40)="e265980717167bead1a84371ce915cac9340e1640104002ea91a161b3770143f8d073deed00315efda9a21bd1ebeb397ee0a05f09022a6957e38f2e23a24eb0b151b40668250607102dc5aa0222c23f254f52b551b94a70a9d6160c49c9da697d39621440f991417face3a9c5ed0724da76e92c9008f0773516ae6f3e1ce5b4acf5c5c2e5bc445dc5bffe511aa2ef9f00bbb4fc1dee86deec1ea867c6e0218e73dd28839ea8e28c2638e775cedd47f79bd5d4aef3674906fa4269b6f31055ce9300d35387ed1f8654c36a1f42015b8bc767481eee0e04ce198c8e53a02a922ed42ef4de98cbaa5a1de071d976fb342bfd11cdd40d84460e9c29b00fb", 0xfc}], 0x8, 0x0, 0x0, 0x4000801}], 0x4, 0x20000000) 10:08:12 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:12 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x600, 0x0, 0x300}}) 10:08:12 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x600, 0x0, 0x300}}) 10:08:13 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1524}, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xd, 0x0, 0x0, 0xffffffffffffff52) ioctl$KVM_NMI(r2, 0xae9a) syz_mount_image$cifs(&(0x7f0000000040)='cifs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x600) 10:08:13 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf}}) 10:08:13 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x814, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x600}}) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) r3 = socket$key(0xf, 0x3, 0x2) recvfrom(r3, 0x0, 0x0, 0x10020, 0x0, 0x0) fchmod(r3, 0x0) sendmmsg$alg(r2, &(0x7f0000000bc0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="61974e8f7eac1078d44941bdf80785e56b8e2edccfe7463f35aae6a80b9dfe87310219d4ac79e22e346732641923a02d4b14c87c28b792f860799de93ea048bd07f3b7ee532105a9deec05e9c47131e3d1bcaec021bba882b7abcf3f8647a98c15f7cff09ae14e0e3c8bb369f87bf066864a3630c8ac6c254e2115b31dcdc53790ab42fd46213d0103bc684c33552e48cf10f4f0a3f6d3c0534bb587bea4e0511b2fa57cf09e78351613cc0dd3a2bcea8a1f", 0xb2}, {&(0x7f0000000140)="5f78236eeffd4d7acb691f29661f0230c9864346db90982bcb43653e129293fdd9a7bc705f06ddf44d66fa3a8f044b2b1510d8438fb055ce694ee3d36988844070524622e0ec75d1411972fba9c41277423a46e175af74e5fff5b1316d01336dbbb1", 0x62}], 0x2, &(0x7f00000001c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x9}, @assoc={0x18, 0x117, 0x4, 0x3}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0xb}], 0x78, 0x40804}, {0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000240)="c35ac02093dfee64d463f728a5cac3c0ce731b3bd9b0fbc8bf9b94035c7a44693a505985df3b86d4e7dc91c655fec76e900ee24cf947c2bfbc26ff6b448aeeb604c4e1d697daf5a95384a4ed8735056ab70e100771fbb0ca729276b96df8ba99208d33e8161cdc9df5639b4ba045e7a5a09192cd2081b2dc61674950cd1e52bf415ab397cc5621b0d56f48b6e4d50e63264e1e6e859fb2cb74ca9da7254ff5ae7e4bb69d88fb9ac5aa34cf3446dc36eeef615820bf66d6fabd3cae6e58a230e1ac8a5c5a11f166e816a39309", 0xcc}], 0x1, &(0x7f0000000380)=[@assoc={0x18, 0x117, 0x4, 0x711184f2}], 0x18, 0x20008800}, {0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000003c0)="b2888ed658f249429eb74c3a95ec59ead9e9b72da065d2dafdbe773ab0383fc28e1d8ad8687fa37e25f20eb0128bffdda9ad39e59ed249a63a024917a9974207f4457aab671743f16c53725a8cb469021c44c42a6e21689bdc22aac821ff55b81d9f9c54832a37740cb799c4eafbfa523271aad74ba6374e88cabec893b7584d293d45f9f33f6426358502d8b1fe2aac31ee4eb499c1d80c27dbc9fde82e1f01af895f04ebec18f7d206f59412775fb1d92cb102182b3cabf55e125e2896868bc816522f", 0xc4}, {&(0x7f00000004c0)="00997a5c19799912fac1479b421a7ef2d87a81020b22c64f1d2b2cabbcd36e9900d5f17b5d41baec2c5c7f24a2628eb0c5bead95cbaf310a2dd2a3ba31b569c32c8ee7605420c5fe21074138e3a4c1402d160840d17b063ea00dbad52cfee27e45d5a6838ab1f27285a304ccfebd687454b092f4421dce3dfa87c46f30b1ba9a2a31f6e1c963af828b879dc0c3f2a328e12322fd94531c571cc8bcac046c82f804bc6c9349c3a5b0fd5e1de3ff9150ed91342c4b78b24ed05e495b17759b0c75aa69c3a36fc45b76f4e12d9ac03d5d7ab47fbb653d5f", 0xd6}], 0x2}, {0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000600)="51e6ee73d510c0", 0x7}, {&(0x7f0000000640)="001acee9f2a1f1dcd8a89dcf89bbcbe456c6b3e70882e24abbfdd00e0ef308180281834be97d136334819178f5178f75960ce8e129bf1f846b48a184befe27b7677bf9ca0e92", 0x46}, {&(0x7f00000006c0)="6cbdd27ef1905c751364f9b0c5b5ffe32c32357e7aa5d5ca79c8092764e70ee22b705beee56f33f13c87141a92b1a28536c7a7a775c37a4f7b13785de08e09a12fb874f09a081619ac3b8f6b1de70f58e8444ba48e3081aedb858b8ee20ef2863aea91b8ad743513157319b53be5c799705c9381ad07310580e94c6a3e5cf5c234a6438102673f1be9f54c7e35cf138342dc5e04b12b790c8240b548e4b3afacb3db4c0606626a3a5bd901d8814fe608f116f2", 0xb3}, {&(0x7f0000000780)="024a0123b26ee4a22e09993bf60f156108e69d6f51142915fe94716c88cb840efe55009efe8d3fd06a157ac663c567403256487a778b4ea349e9365a427720c3c064e4c181a202cc465f34468ab3de00d740c67fe5b6278981fba901cf4adea3698827167c24ed71aa5ef68a5bcb04066deb1da9acfdfd6580893e45eaf501e0317b8c7ea2930d6a", 0x88}, {&(0x7f0000000840)="42ea6df693efa7fa38e6e7f7e064fa1d8df92fddc765963d4f9d1e1ce3a6bceeb4f37dafbc0325680c3bf4510f9cdae78e0a56b6ce7b774cf818dbf668fbcfd941d799bf4e14ebdbade82fe983329b46be5836f4880a44e8e7b2b4f38a7fa57785fa2c41abb33e7bb3f16fe20fe4a68e7d3ffc8992ea08fb1fcba5016372080586690f49e451bef6", 0x88}, {&(0x7f0000000900)="66e95f9a9de2ff9cc013c025ca9c01a101bb4a2adfea1fd79ce357596c75390b03ea3a2eb9e98abf3b5b225ff009b8d5050323054e", 0x35}, {&(0x7f0000000940)="5d2600b9a8313d89f4e9bbba344506329f2400f20eb07287a803622a99798b8b15c2f9303b0e1eff07382ca82e04994ed41c09ef6e68922a116099021ab73b018477763e636ea861b291d674c50d00e895aefa6aa1c5467897ec94d1b8ef0cebbf393c78fa370063d41bc6d2ef23326e2384877dee7233a0db60f1c74b427df0c6eabfb8ff6113aa8c98ee329780e94d5d3a9d90fe530ac8bef2256153baaff33f0ba1b77f7853d09c02e268e9c329885cc3598ec40641d47dd5961f901f35ec70bfa5ff7c14d506", 0xc8}, {&(0x7f0000000a40)="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", 0xfc}], 0x8, 0x0, 0x0, 0x4000801}], 0x4, 0x20000000) 10:08:13 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x600, 0x0, 0x300}}) 10:08:13 executing program 3: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001800210000000000f4e800001c1400"/28], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 10:08:13 executing program 0: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=@mpls_newroute={0x1c, 0x18, 0x21, 0x0, 0x0, {0x1c, 0x14}}, 0x1c}}, 0x0) r4 = socket$key(0xf, 0x3, 0x2) recvfrom(r4, 0x0, 0x0, 0x10020, 0x0, 0x0) r5 = socket$key(0xf, 0x3, 0x2) recvfrom(r5, 0x0, 0x0, 0x10020, 0x0, 0x0) r6 = socket$key(0xf, 0x3, 0x2) recvfrom(r6, 0x0, 0x0, 0x10020, 0x0, 0x0) r7 = socket$key(0xf, 0x3, 0x2) recvfrom(r7, 0x0, 0x0, 0x10020, 0x0, 0x0) r8 = socket$key(0xf, 0x3, 0x2) recvfrom(r8, 0x0, 0x0, 0x10020, 0x0, 0x0) r9 = socket$key(0xf, 0x3, 0x2) recvfrom(r9, 0x0, 0x0, 0x10020, 0x0, 0x0) r10 = socket$key(0xf, 0x3, 0x2) recvfrom(r10, 0x0, 0x0, 0x10020, 0x0, 0x0) r11 = socket$key(0xf, 0x3, 0x2) recvfrom(r11, 0x0, 0x0, 0x10020, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000380)=ANY=[@ANYRESHEX=r4, @ANYRES32=r5, @ANYPTR=&(0x7f0000000140)=ANY=[@ANYRESDEC, @ANYRES16=r6, @ANYPTR64=&(0x7f0000000080)=ANY=[@ANYRESHEX=r4, @ANYRES32=r3, @ANYPTR, @ANYRES16=r7, @ANYPTR, @ANYPTR, @ANYRES32=r3], @ANYRES64, @ANYPTR64=&(0x7f00000000c0)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYRES64, @ANYPTR, @ANYPTR, @ANYPTR64, @ANYPTR]], @ANYRES32=r6, @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="7dd8812e6360e327915a22318ebe0ccbf23f21ada652944222d191eb021a01", @ANYPTR64=&(0x7f0000000180)=ANY=[@ANYRES64=r11, @ANYRES16=r9, @ANYBLOB="d8978f89715859fab9d69dace1b2b96ea5d23cc1f2ee90aa59b317c1ad6d9d6d99a86aff6bd5dad7319d77a774bd3c1d85ebe6cd17bfad473539f9dd8261db7216eadeb6a3ca541ff9c6609fab4f0f6bf7501bbb198593594cca69fcfe6a7e02358fb0ee7ef080f0027d4c9604f3590016f8b642929822aa40e21049cc879ee5bdc11725b9cd76419695d849eb7d25a0ef2c81b4d2fe9a72051e3597a0f5aab4c0681860d8e4c0d1", @ANYRES16, @ANYRES64=r10], @ANYRES64, @ANYRESHEX=r4], @ANYPTR, @ANYBLOB="247e6c023427a4d2acf5ca76ef2ad7ffab145c59e8883da4f18707c006706e426919aa15eeb3d43833bea0e9d1783558fa4073c76a439874d924b936ba740138fb00dda0bb17cb5153574c4b0c00d763c5076dbd3ab21f5a115220bf150b956aa52d0b2ba2fa915662544b1e0fdf8680345dde853feab9f8a6dc477c866d7392bc5078ec8972df54c7be1f76bde87b20c091a6b842c1f41639ad400a3104c1ff83d67d48a08b447cbdec5cdccdfab5fde873"], 0xe4) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) r13 = dup2(r12, r12) ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 10:08:13 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf}}) 10:08:13 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x600, 0x0, 0x300}}) 10:08:13 executing program 2: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=@mpls_newroute={0x1c, 0x18, 0x200, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}}, 0x1c}}, 0x0) r3 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r3, &(0x7f0000000000)={0x11, 0x804, r4, 0x1, 0x0, 0x6, @dev}, 0x14) getsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000280)=0x81, &(0x7f00000002c0)=0x4) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) r7 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_S_PARM(r7, 0xc0285629, &(0x7f00000000c0)={0x3}) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r7, 0xc0905664, &(0x7f00000001c0)={0x0, 0x0, [], @raw_data=[0x9d5, 0x8, 0x80000001, 0x5, 0x5, 0xffffffff, 0x3f, 0xfff, 0x10, 0x8, 0x40, 0x2, 0x97, 0x1ff, 0x7, 0x400, 0x6, 0x7, 0x3, 0xe7e, 0x7fffffff, 0x3f, 0x9, 0x6, 0x5, 0x0, 0x2890, 0x2, 0x20, 0x0, 0x7f]}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) r8 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r8, &(0x7f0000000000)={0x11, 0x804, r9, 0x1, 0x0, 0x6, @dev}, 0x14) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x200000000000011, 0x3, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r11, &(0x7f0000000240)={0x11, 0x0, r13}, 0x14) getsockname$packet(r11, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=r14, @ANYBLOB="0100000000000000200016801c00018018000c8014000000000004001400"], 0x44}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) sendmsg$nl_route(r8, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)=@ipv6_getroute={0x64, 0x1a, 0x2, 0x70bd2d, 0x25dfdbfd, {0xa, 0x14, 0x4, 0x3, 0x0, 0x2, 0xfd, 0x6, 0x800}, [@RTA_GATEWAY={0x14, 0x5, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @RTA_PREF={0x5, 0x14, 0x7}, @RTA_PRIORITY={0x8, 0x6, 0x6}, @RTA_OIF={0x8, 0x4, r14}, @RTA_GATEWAY={0x14, 0x5, @mcast1}, @RTA_PREF={0x5, 0x14, 0x7}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x800) r15 = socket(0x200000000000011, 0x3, 0x0) setsockopt$inet_dccp_buf(r0, 0x21, 0xd, &(0x7f0000000300)="6aaaf310", 0x4) ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) ioctl$sock_ifreq(0xffffffffffffffff, 0x891b, &(0x7f0000000380)={'veth0\x00', @ifru_flags=0x8000}) bind$packet(r15, &(0x7f0000000000)={0x11, 0x804, r16, 0x1, 0x0, 0x6, @dev}, 0x14) sendmsg$NFQNL_MSG_VERDICT_BATCH(r15, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x54, 0x3, 0x3, 0x301, 0x0, 0x0, {0x2, 0x0, 0xa013}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x81}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x4}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x2}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffb, 0x80000000}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x1}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffd}}]}, 0x54}, 0x1, 0x0, 0x0, 0x14008000}, 0x4008084) 10:08:13 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf}}) 10:08:13 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x600, 0x0, 0x300}}) 10:08:13 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, 0x0) [ 522.353915][ T6674] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 10:08:14 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1524}, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xd, 0x0, 0x0, 0xffffffffffffff52) ioctl$KVM_NMI(r2, 0xae9a) syz_mount_image$cifs(&(0x7f0000000040)='cifs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x700) 10:08:14 executing program 5: open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x2c) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0x5521, 0x0) connect$inet6(r0, 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x501080, 0x0) ioctl$BLKPG(r3, 0x1269, &(0x7f0000000140)={0x4, 0x0, 0x74, &(0x7f00000000c0)="053c567aaed3b78aae68183279c89800ac0342913dbdb1f8163c08d52c6b01a6f6dbd0ed90a1e002be50592083951e81732be64ec184b15b9ec82e663665193e0e056cff8739e234ddbfdf2fe336818633eae59c6c99adb762718c8f9e53f3b981eb736889886311a192bc3697ee16619f3e3d46"}) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) io_submit(r4, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r2, &(0x7f0000000340)='i', 0x1}]) socket$inet(0x10, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) io_submit(0x0, 0x1, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x0, r5, 0x0}]) socket$inet_tcp(0x2, 0x1, 0x0) 10:08:14 executing program 3: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001800210000000000f4e800001c1400"/28], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 10:08:14 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, 0x0) 10:08:14 executing program 0: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0x3da, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r4, &(0x7f00000017c0), 0x3da, 0x0) ioctl$CAPI_NCCI_OPENCOUNT(r4, 0x80044326, &(0x7f0000000480)=0x20) close(r2) socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=@mpls_newroute={0x1c, 0x18, 0x21, 0x0, 0x0, {0x1c, 0x14}}, 0x1c}}, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000400)='/dev/nullb0\x00', 0x10000, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000080)=""/31, 0x1f}, {&(0x7f00000000c0)=""/78, 0x4e}, {&(0x7f0000000140)=""/39, 0x27}, {&(0x7f0000000180)=""/235, 0xeb}], 0x4) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x5, 0x2}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000380)={r7, 0x1f, 0x9, [0x6, 0xffc8, 0x20, 0xad9, 0x120, 0x1, 0xf46b, 0x100, 0xc8a7]}, &(0x7f00000003c0)=0x1a) 10:08:14 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, 0x0) 10:08:14 executing program 2: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=@mpls_newroute={0x1c, 0x18, 0x200, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}}, 0x1c}}, 0x0) r3 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r3, &(0x7f0000000000)={0x11, 0x804, r4, 0x1, 0x0, 0x6, @dev}, 0x14) getsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000280)=0x81, &(0x7f00000002c0)=0x4) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) r7 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_S_PARM(r7, 0xc0285629, &(0x7f00000000c0)={0x3}) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r7, 0xc0905664, &(0x7f00000001c0)={0x0, 0x0, [], @raw_data=[0x9d5, 0x8, 0x80000001, 0x5, 0x5, 0xffffffff, 0x3f, 0xfff, 0x10, 0x8, 0x40, 0x2, 0x97, 0x1ff, 0x7, 0x400, 0x6, 0x7, 0x3, 0xe7e, 0x7fffffff, 0x3f, 0x9, 0x6, 0x5, 0x0, 0x2890, 0x2, 0x20, 0x0, 0x7f]}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) r8 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r8, &(0x7f0000000000)={0x11, 0x804, r9, 0x1, 0x0, 0x6, @dev}, 0x14) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x200000000000011, 0x3, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r11, &(0x7f0000000240)={0x11, 0x0, r13}, 0x14) getsockname$packet(r11, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=r14, @ANYBLOB="0100000000000000200016801c00018018000c8014000000000004001400"], 0x44}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) sendmsg$nl_route(r8, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)=@ipv6_getroute={0x64, 0x1a, 0x2, 0x70bd2d, 0x25dfdbfd, {0xa, 0x14, 0x4, 0x3, 0x0, 0x2, 0xfd, 0x6, 0x800}, [@RTA_GATEWAY={0x14, 0x5, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @RTA_PREF={0x5, 0x14, 0x7}, @RTA_PRIORITY={0x8, 0x6, 0x6}, @RTA_OIF={0x8, 0x4, r14}, @RTA_GATEWAY={0x14, 0x5, @mcast1}, @RTA_PREF={0x5, 0x14, 0x7}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x800) r15 = socket(0x200000000000011, 0x3, 0x0) setsockopt$inet_dccp_buf(r0, 0x21, 0xd, &(0x7f0000000300)="6aaaf310", 0x4) ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) ioctl$sock_ifreq(0xffffffffffffffff, 0x891b, &(0x7f0000000380)={'veth0\x00', @ifru_flags=0x8000}) bind$packet(r15, &(0x7f0000000000)={0x11, 0x804, r16, 0x1, 0x0, 0x6, @dev}, 0x14) sendmsg$NFQNL_MSG_VERDICT_BATCH(r15, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x54, 0x3, 0x3, 0x301, 0x0, 0x0, {0x2, 0x0, 0xa013}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x81}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x4}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x2}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffb, 0x80000000}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x1}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffd}}]}, 0x54}, 0x1, 0x0, 0x0, 0x14008000}, 0x4008084) 10:08:14 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:14 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:14 executing program 5: open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x2c) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0x5521, 0x0) connect$inet6(r0, 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x501080, 0x0) ioctl$BLKPG(r3, 0x1269, &(0x7f0000000140)={0x4, 0x0, 0x74, &(0x7f00000000c0)="053c567aaed3b78aae68183279c89800ac0342913dbdb1f8163c08d52c6b01a6f6dbd0ed90a1e002be50592083951e81732be64ec184b15b9ec82e663665193e0e056cff8739e234ddbfdf2fe336818633eae59c6c99adb762718c8f9e53f3b981eb736889886311a192bc3697ee16619f3e3d46"}) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) io_submit(r4, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r2, &(0x7f0000000340)='i', 0x1}]) socket$inet(0x10, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) io_submit(0x0, 0x1, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x0, r5, 0x0}]) socket$inet_tcp(0x2, 0x1, 0x0) [ 523.318977][ T6718] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 10:08:14 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf}}) 10:08:14 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf}}) 10:08:15 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1524}, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xd, 0x0, 0x0, 0xffffffffffffff52) ioctl$KVM_NMI(r2, 0xae9a) syz_mount_image$cifs(&(0x7f0000000040)='cifs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x900) 10:08:15 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf}}) 10:08:15 executing program 5: open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x2c) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0x5521, 0x0) connect$inet6(r0, 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0xffff) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x501080, 0x0) ioctl$BLKPG(r3, 0x1269, &(0x7f0000000140)={0x4, 0x0, 0x74, &(0x7f00000000c0)="053c567aaed3b78aae68183279c89800ac0342913dbdb1f8163c08d52c6b01a6f6dbd0ed90a1e002be50592083951e81732be64ec184b15b9ec82e663665193e0e056cff8739e234ddbfdf2fe336818633eae59c6c99adb762718c8f9e53f3b981eb736889886311a192bc3697ee16619f3e3d46"}) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) io_submit(r4, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r2, &(0x7f0000000340)='i', 0x1}]) socket$inet(0x10, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) io_submit(0x0, 0x1, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x0, r5, 0x0}]) socket$inet_tcp(0x2, 0x1, 0x0) 10:08:15 executing program 3: pipe(&(0x7f0000000340)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001800210000000000f4e800001c1400"/28], 0x1c}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) splice(r0, 0x0, r1, 0x0, 0x4ffe0, 0x0) 10:08:15 executing program 0: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000001800210000000000000000000000000000000000009ecd3a4520ac760a0fad690b7563fe1e7552548731f227a676a4e01fbda2873b0000ffffffea00000000000000"], 0x1c}}, 0x0) vmsplice(r3, &(0x7f0000000440)=[{&(0x7f0000000280)="047b1f768cbf13e12a72ffae45471135bb7a999640aa3ed6c20dc798bf731264c03734b2064dba9bdd2ade5433ad5b9b88d0e32b7d832ebbd89154388b4f64cb96970f85ce2f736e68251c71b678d40500dcfb0bacd58299a484ba873f2da9fe88a5634e856bf21dd71e9e20c583a3bee57e3174d5804d724e44bd020edfcb88f06098468f87e3bc74b8b3b310d6ea4cad0c9752cd6a629bd442cd63168536be2c", 0xa1}, {&(0x7f0000000380)="c4871831cf0627fae274938abac0bbfea22888be6aabcb3394fb9b8a8c28b331970c86e6388a67ed82f12e275cd958cf76ddfc3ef7492fc40af87d6a609c7dbdca054b79784e237be7578c3f3e7b41520b6f317ab5c1cd52b4018f151902b726d355953628c221bf3023ab1cb51015ffac9084c71db75f227207bcda72335cd428b4665151657d479cbf2eb158f28d23636597cd66d7ac2627c81f58", 0x9c}], 0x2, 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000000)={0x7, 0x4, [0x40000]}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) r6 = gettid() ptrace$getregs(0xe, r6, 0x20, &(0x7f00000001c0)=""/138) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) r7 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x40040, 0x0) accept$unix(r7, &(0x7f00000000c0), &(0x7f0000000140)=0x6e) 10:08:15 executing program 4: open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x2c) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0x5521, 0x0) connect$inet6(r0, 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0xffff) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x501080, 0x0) ioctl$BLKPG(r3, 0x1269, &(0x7f0000000140)={0x4, 0x0, 0x74, &(0x7f00000000c0)="053c567aaed3b78aae68183279c89800ac0342913dbdb1f8163c08d52c6b01a6f6dbd0ed90a1e002be50592083951e81732be64ec184b15b9ec82e663665193e0e056cff8739e234ddbfdf2fe336818633eae59c6c99adb762718c8f9e53f3b981eb736889886311a192bc3697ee16619f3e3d46"}) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) io_submit(r4, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r2, &(0x7f0000000340)='i', 0x1}]) socket$inet(0x10, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) io_submit(0x0, 0x1, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x0, r5, 0x0}]) socket$inet_tcp(0x2, 0x1, 0x0) 10:08:15 executing program 2: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=@mpls_newroute={0x1c, 0x18, 0x200, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}}, 0x1c}}, 0x0) r3 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r3, &(0x7f0000000000)={0x11, 0x804, r4, 0x1, 0x0, 0x6, @dev}, 0x14) getsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000280)=0x81, &(0x7f00000002c0)=0x4) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) r7 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_S_PARM(r7, 0xc0285629, &(0x7f00000000c0)={0x3}) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r7, 0xc0905664, &(0x7f00000001c0)={0x0, 0x0, [], @raw_data=[0x9d5, 0x8, 0x80000001, 0x5, 0x5, 0xffffffff, 0x3f, 0xfff, 0x10, 0x8, 0x40, 0x2, 0x97, 0x1ff, 0x7, 0x400, 0x6, 0x7, 0x3, 0xe7e, 0x7fffffff, 0x3f, 0x9, 0x6, 0x5, 0x0, 0x2890, 0x2, 0x20, 0x0, 0x7f]}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) r8 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r8, &(0x7f0000000000)={0x11, 0x804, r9, 0x1, 0x0, 0x6, @dev}, 0x14) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x200000000000011, 0x3, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r11, &(0x7f0000000240)={0x11, 0x0, r13}, 0x14) getsockname$packet(r11, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=r14, @ANYBLOB="0100000000000000200016801c00018018000c8014000000000004001400"], 0x44}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) sendmsg$nl_route(r8, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)=@ipv6_getroute={0x64, 0x1a, 0x2, 0x70bd2d, 0x25dfdbfd, {0xa, 0x14, 0x4, 0x3, 0x0, 0x2, 0xfd, 0x6, 0x800}, [@RTA_GATEWAY={0x14, 0x5, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @RTA_PREF={0x5, 0x14, 0x7}, @RTA_PRIORITY={0x8, 0x6, 0x6}, @RTA_OIF={0x8, 0x4, r14}, @RTA_GATEWAY={0x14, 0x5, @mcast1}, @RTA_PREF={0x5, 0x14, 0x7}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x800) r15 = socket(0x200000000000011, 0x3, 0x0) setsockopt$inet_dccp_buf(r0, 0x21, 0xd, &(0x7f0000000300)="6aaaf310", 0x4) ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) ioctl$sock_ifreq(0xffffffffffffffff, 0x891b, &(0x7f0000000380)={'veth0\x00', @ifru_flags=0x8000}) bind$packet(r15, &(0x7f0000000000)={0x11, 0x804, r16, 0x1, 0x0, 0x6, @dev}, 0x14) sendmsg$NFQNL_MSG_VERDICT_BATCH(r15, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x54, 0x3, 0x3, 0x301, 0x0, 0x0, {0x2, 0x0, 0xa013}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x81}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x4}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x2}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffb, 0x80000000}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x1}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffd}}]}, 0x54}, 0x1, 0x0, 0x0, 0x14008000}, 0x4008084) 10:08:15 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x814, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4020940d, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x600}}) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r1) [ 524.350115][ T6775] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 10:08:15 executing program 5 (fault-call:2 fault-nth:0): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) [ 524.508014][ T6812] FAULT_INJECTION: forcing a failure. [ 524.508014][ T6812] name failslab, interval 1, probability 0, space 0, times 0 [ 524.538100][ T6812] CPU: 0 PID: 6812 Comm: syz-executor.5 Not tainted 5.6.0-rc2-syzkaller #0 [ 524.546720][ T6812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 524.556789][ T6812] Call Trace: [ 524.560088][ T6812] dump_stack+0x1fb/0x318 [ 524.564418][ T6812] should_fail+0x4b8/0x660 [ 524.568829][ T6812] __should_failslab+0xb9/0xe0 [ 524.573574][ T6812] ? tomoyo_realpath_from_path+0xe8/0x6b0 [ 524.579274][ T6812] should_failslab+0x9/0x20 [ 524.583754][ T6812] __kmalloc+0x7a/0x340 [ 524.587964][ T6812] ? tomoyo_realpath_from_path+0xdb/0x6b0 [ 524.593703][ T6812] ? kfree+0x1f/0x220 [ 524.597684][ T6812] tomoyo_realpath_from_path+0xe8/0x6b0 [ 524.603221][ T6812] tomoyo_path_number_perm+0x18f/0x690 [ 524.608697][ T6812] ? smack_file_ioctl+0x225/0x2e0 [ 524.613724][ T6812] tomoyo_file_ioctl+0x23/0x30 [ 524.618490][ T6812] security_file_ioctl+0x68/0xd0 [ 524.623422][ T6812] __se_sys_ioctl+0x4e/0x190 [ 524.627992][ T6812] ? do_syscall_64+0x1d/0x1c0 [ 524.632647][ T6812] __x64_sys_ioctl+0x7b/0x90 [ 524.637223][ T6812] do_syscall_64+0xf7/0x1c0 [ 524.641739][ T6812] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 524.647660][ T6812] RIP: 0033:0x45c429 [ 524.651534][ T6812] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 524.671152][ T6812] RSP: 002b:00007f2df49b5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 524.679555][ T6812] RAX: ffffffffffffffda RBX: 00007f2df49b66d4 RCX: 000000000045c429 [ 524.687507][ T6812] RDX: 0000000020000040 RSI: 000000000000541c RDI: 0000000000000003 [ 524.695478][ T6812] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 10:08:15 executing program 5 (fault-call:2 fault-nth:1): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) [ 524.703445][ T6812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 524.711400][ T6812] R13: 0000000000000574 R14: 00000000004c7c4f R15: 0000000000000000 [ 524.722217][ T6812] ERROR: Out of memory at tomoyo_realpath_from_path. [ 524.784566][ T6885] FAULT_INJECTION: forcing a failure. [ 524.784566][ T6885] name failslab, interval 1, probability 0, space 0, times 0 [ 524.797827][ T6885] CPU: 0 PID: 6885 Comm: syz-executor.5 Not tainted 5.6.0-rc2-syzkaller #0 [ 524.806423][ T6885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 524.816485][ T6885] Call Trace: [ 524.819796][ T6885] dump_stack+0x1fb/0x318 [ 524.824143][ T6885] should_fail+0x4b8/0x660 [ 524.828577][ T6885] __should_failslab+0xb9/0xe0 [ 524.833342][ T6885] ? tomoyo_encode2+0x262/0x580 [ 524.838200][ T6885] should_failslab+0x9/0x20 [ 524.842705][ T6885] __kmalloc+0x7a/0x340 [ 524.846960][ T6885] tomoyo_encode2+0x262/0x580 [ 524.851665][ T6885] tomoyo_realpath_from_path+0x65c/0x6b0 [ 524.857337][ T6885] tomoyo_path_number_perm+0x18f/0x690 [ 524.862863][ T6885] ? smack_file_ioctl+0x225/0x2e0 [ 524.867907][ T6885] tomoyo_file_ioctl+0x23/0x30 [ 524.872671][ T6885] security_file_ioctl+0x68/0xd0 [ 524.877704][ T6885] __se_sys_ioctl+0x4e/0x190 [ 524.882300][ T6885] ? do_syscall_64+0x1d/0x1c0 [ 524.886983][ T6885] __x64_sys_ioctl+0x7b/0x90 [ 524.891576][ T6885] do_syscall_64+0xf7/0x1c0 [ 524.896084][ T6885] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 524.901970][ T6885] RIP: 0033:0x45c429 [ 524.905920][ T6885] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 524.925522][ T6885] RSP: 002b:00007f2df49b5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 524.933936][ T6885] RAX: ffffffffffffffda RBX: 00007f2df49b66d4 RCX: 000000000045c429 [ 524.941913][ T6885] RDX: 0000000020000040 RSI: 000000000000541c RDI: 0000000000000003 [ 524.949881][ T6885] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 524.957848][ T6885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 524.965822][ T6885] R13: 0000000000000574 R14: 00000000004c7c4f R15: 0000000000000001 10:08:16 executing program 0: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=ANY=[@ANYBLOB="9bfdffff18002104000000f8ffffffff1b1400d5ff01000900000000"], 0x1c}}, 0x20004040) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 524.983920][ T6885] ERROR: Out of memory at tomoyo_realpath_from_path. 10:08:16 executing program 3: pipe(&(0x7f0000000340)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001800210000000000f4e800001c1400"/28], 0x1c}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) splice(r0, 0x0, r1, 0x0, 0x4ffe0, 0x0) 10:08:16 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1524}, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xd, 0x0, 0x0, 0xffffffffffffff52) ioctl$KVM_NMI(r2, 0xae9a) syz_mount_image$cifs(&(0x7f0000000040)='cifs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xa00) 10:08:16 executing program 5 (fault-call:2 fault-nth:2): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:16 executing program 4 (fault-call:1 fault-nth:0): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:16 executing program 2 (fault-call:1 fault-nth:0): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) [ 525.336022][ T6908] FAULT_INJECTION: forcing a failure. [ 525.336022][ T6908] name failslab, interval 1, probability 0, space 0, times 0 [ 525.372580][ T6908] CPU: 1 PID: 6908 Comm: syz-executor.4 Not tainted 5.6.0-rc2-syzkaller #0 [ 525.381188][ T6908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 525.391239][ T6908] Call Trace: [ 525.394527][ T6908] dump_stack+0x1fb/0x318 [ 525.398858][ T6908] should_fail+0x4b8/0x660 [ 525.403281][ T6908] __should_failslab+0xb9/0xe0 [ 525.408035][ T6908] ? tomoyo_realpath_from_path+0xe8/0x6b0 [ 525.413754][ T6908] should_failslab+0x9/0x20 [ 525.418247][ T6908] __kmalloc+0x7a/0x340 [ 525.422388][ T6908] ? tomoyo_realpath_from_path+0xdb/0x6b0 [ 525.428094][ T6908] ? kfree+0x1f/0x220 [ 525.432069][ T6908] tomoyo_realpath_from_path+0xe8/0x6b0 [ 525.437621][ T6908] tomoyo_path_number_perm+0x18f/0x690 [ 525.443113][ T6908] ? smack_file_ioctl+0x225/0x2e0 [ 525.448148][ T6908] tomoyo_file_ioctl+0x23/0x30 [ 525.452902][ T6908] security_file_ioctl+0x68/0xd0 [ 525.457834][ T6908] __se_sys_ioctl+0x4e/0x190 [ 525.462414][ T6908] ? do_syscall_64+0x1d/0x1c0 [ 525.467083][ T6908] __x64_sys_ioctl+0x7b/0x90 [ 525.471665][ T6908] do_syscall_64+0xf7/0x1c0 [ 525.476162][ T6908] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 525.482051][ T6908] RIP: 0033:0x45c429 [ 525.485932][ T6908] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 525.506477][ T6908] RSP: 002b:00007f89f771bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 525.514873][ T6908] RAX: ffffffffffffffda RBX: 00007f89f771c6d4 RCX: 000000000045c429 [ 525.522832][ T6908] RDX: 0000000020000040 RSI: 000000000000541c RDI: 0000000000000003 10:08:16 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) [ 525.530789][ T6908] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 525.538749][ T6908] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 525.546707][ T6908] R13: 0000000000000574 R14: 00000000004c7c4f R15: 0000000000000000 [ 525.560095][ T6908] ERROR: Out of memory at tomoyo_realpath_from_path. 10:08:16 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:16 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x2, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:16 executing program 4 (fault-call:1 fault-nth:1): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:16 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x2, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) [ 525.791357][ T6931] FAULT_INJECTION: forcing a failure. [ 525.791357][ T6931] name failslab, interval 1, probability 0, space 0, times 0 [ 525.812537][ T6931] CPU: 0 PID: 6931 Comm: syz-executor.4 Not tainted 5.6.0-rc2-syzkaller #0 [ 525.821142][ T6931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 525.832151][ T6931] Call Trace: [ 525.835466][ T6931] dump_stack+0x1fb/0x318 [ 525.839834][ T6931] should_fail+0x4b8/0x660 [ 525.844276][ T6931] __should_failslab+0xb9/0xe0 [ 525.849049][ T6931] ? tomoyo_encode2+0x262/0x580 [ 525.853928][ T6931] should_failslab+0x9/0x20 [ 525.858619][ T6931] __kmalloc+0x7a/0x340 [ 525.862786][ T6931] tomoyo_encode2+0x262/0x580 [ 525.867486][ T6931] tomoyo_realpath_from_path+0x65c/0x6b0 [ 525.873137][ T6931] tomoyo_path_number_perm+0x18f/0x690 [ 525.878648][ T6931] ? smack_file_ioctl+0x225/0x2e0 [ 525.883729][ T6931] tomoyo_file_ioctl+0x23/0x30 10:08:16 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x10, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) [ 525.883744][ T6931] security_file_ioctl+0x68/0xd0 [ 525.883764][ T6931] __se_sys_ioctl+0x4e/0x190 10:08:16 executing program 3: pipe(&(0x7f0000000340)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001800210000000000f4e800001c1400"/28], 0x1c}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) splice(r0, 0x0, r1, 0x0, 0x4ffe0, 0x0) [ 525.883777][ T6931] ? do_syscall_64+0x1d/0x1c0 10:08:16 executing program 0: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=@mpls_newroute={0x1c, 0x18, 0x21, 0x0, 0x0, {0x1c, 0x14}}, 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket(0x200000000000011, 0x3, 0x0) timerfd_gettime(r1, &(0x7f0000000100)) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'vlan0\x00', 0x0}) bind$packet(r4, &(0x7f0000000000)={0x11, 0x804, r5, 0x1, 0x0, 0x6, @dev}, 0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x200000000000011, 0x3, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ubi_ctrl\x00', 0x40002, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000440)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r8 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r8, &(0x7f0000000000)={0x11, 0x804, r9, 0x1, 0x0, 0x6, @dev}, 0x14) sendmsg$NFNL_MSG_CTHELPER_NEW(r8, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)={0x2c, 0x0, 0x9, 0x201, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x7f7b8820}}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x40083) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = socket$key(0xf, 0x3, 0x2) recvfrom(r11, 0x0, 0x0, 0x10020, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r7, &(0x7f0000000240)={0x11, 0x0, r12}, 0x14) getsockname$packet(r7, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=r13, @ANYBLOB="0100000000000000200016801c00018018000c8014000000000004001400"], 0x44}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) r14 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/conn_reuse_mode\x00', 0x2, 0x0) ioctl$VHOST_SET_LOG_FD(r14, 0x4004af07, &(0x7f0000000400)=r0) r15 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r15, &(0x7f00000017c0), 0x3da, 0x0) ioctl$CAPI_NCCI_OPENCOUNT(r15, 0x80044326, &(0x7f0000000140)=0x7) bind$xdp(r4, &(0x7f0000000080)={0x2c, 0x7, r13, 0x31, r0}, 0x10) r16 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r16, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 525.883794][ T6931] __x64_sys_ioctl+0x7b/0x90 [ 525.883817][ T6931] do_syscall_64+0xf7/0x1c0 [ 525.883837][ T6931] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 525.883847][ T6931] RIP: 0033:0x45c429 [ 525.883858][ T6931] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 525.883864][ T6931] RSP: 002b:00007f89f771bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 525.883876][ T6931] RAX: ffffffffffffffda RBX: 00007f89f771c6d4 RCX: 000000000045c429 [ 525.883883][ T6931] RDX: 0000000020000040 RSI: 000000000000541c RDI: 0000000000000003 [ 525.883890][ T6931] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 525.883897][ T6931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 525.883903][ T6931] R13: 0000000000000574 R14: 00000000004c7c4f R15: 0000000000000001 [ 525.942256][ T6931] ERROR: Out of memory at tomoyo_realpath_from_path. [ 526.042614][ T6945] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 10:08:17 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1524}, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xd, 0x0, 0x0, 0xffffffffffffff52) ioctl$KVM_NMI(r2, 0xae9a) syz_mount_image$cifs(&(0x7f0000000040)='cifs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xb00) 10:08:17 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b2f, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:17 executing program 4 (fault-call:1 fault-nth:2): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:17 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x10, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) [ 526.357809][ T6959] FAULT_INJECTION: forcing a failure. [ 526.357809][ T6959] name failslab, interval 1, probability 0, space 0, times 0 [ 526.395125][ T6959] CPU: 0 PID: 6959 Comm: syz-executor.4 Not tainted 5.6.0-rc2-syzkaller #0 [ 526.403739][ T6959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 526.403744][ T6959] Call Trace: [ 526.403762][ T6959] dump_stack+0x1fb/0x318 [ 526.403783][ T6959] should_fail+0x4b8/0x660 [ 526.425862][ T6959] __should_failslab+0xb9/0xe0 [ 526.430628][ T6959] ? tomoyo_encode2+0x262/0x580 [ 526.435485][ T6959] should_failslab+0x9/0x20 [ 526.440008][ T6959] __kmalloc+0x7a/0x340 [ 526.440028][ T6959] tomoyo_encode2+0x262/0x580 [ 526.448871][ T6959] tomoyo_realpath_from_path+0x65c/0x6b0 10:08:17 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b2f, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) [ 526.448900][ T6959] tomoyo_path_number_perm+0x18f/0x690 [ 526.460037][ T6959] ? smack_file_ioctl+0x225/0x2e0 [ 526.460062][ T6959] tomoyo_file_ioctl+0x23/0x30 [ 526.460075][ T6959] security_file_ioctl+0x68/0xd0 [ 526.460093][ T6959] __se_sys_ioctl+0x4e/0x190 [ 526.460107][ T6959] ? do_syscall_64+0x1d/0x1c0 [ 526.460121][ T6959] __x64_sys_ioctl+0x7b/0x90 [ 526.460136][ T6959] do_syscall_64+0xf7/0x1c0 [ 526.460153][ T6959] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 526.460162][ T6959] RIP: 0033:0x45c429 [ 526.460172][ T6959] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 526.460177][ T6959] RSP: 002b:00007f89f771bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 526.460188][ T6959] RAX: ffffffffffffffda RBX: 00007f89f771c6d4 RCX: 000000000045c429 [ 526.460194][ T6959] RDX: 0000000020000040 RSI: 000000000000541c RDI: 0000000000000003 [ 526.460200][ T6959] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 10:08:17 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b30, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) [ 526.460207][ T6959] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 526.460213][ T6959] R13: 0000000000000574 R14: 00000000004c7c4f R15: 0000000000000002 [ 526.465119][ T6959] ERROR: Out of memory at tomoyo_realpath_from_path. 10:08:17 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b30, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:17 executing program 4 (fault-call:1 fault-nth:3): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:17 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b31, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:17 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b31, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:17 executing program 3: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x10, 0x80003, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 10:08:18 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:18 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1524}, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xd, 0x0, 0x0, 0xffffffffffffff52) ioctl$KVM_NMI(r2, 0xae9a) syz_mount_image$cifs(&(0x7f0000000040)='cifs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xc00) 10:08:18 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b32, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:18 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b32, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:18 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x2, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:18 executing program 0: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x10, 0x80003, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0x3da, 0x0) ioctl$NS_GET_OWNER_UID(r3, 0xb704, &(0x7f0000000140)=0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x200000000000011, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r6, &(0x7f0000000240)={0x11, 0x0, r8}, 0x14) getsockname$packet(r6, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=r9, @ANYBLOB="0100000000000000200016801c00018018000c8014000000000004001400"], 0x44}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=@can_newroute={0xc0, 0x18, 0x8, 0x70bd27, 0x25dfdbfe, {0x1d, 0x1, 0x2}, [@CGW_MOD_XOR={0x15, 0x3, {{{0x3}, 0x2, 0x2, 0x0, 0x0, "c2a85cabe84a2683"}, 0x1}}, @CGW_MOD_UID={0x8, 0xe, r4}, @CGW_DST_IF={0x8, 0xa, r9}, @CGW_MOD_SET={0x15, 0x4, {{{0x2, 0x0, 0x1}, 0x4, 0x3, 0x0, 0x0, "d44e48da2f704428"}, 0x3}}, @CGW_FILTER={0xc, 0xb, {{0x3, 0x1, 0x0, 0x1}, {0x2, 0x0, 0x0, 0x1}}}, @CGW_MOD_XOR={0x15, 0x3, {{{0x3, 0x0, 0x0, 0x1}, 0x5, 0x0, 0x0, 0x0, "129d3ea972938d03"}}}, @CGW_MOD_AND={0x15, 0x1, {{{0x2, 0x0, 0x1, 0x1}, 0x6, 0x2, 0x0, 0x0, "6e7bbf62bc69e7c6"}, 0x1}}, @CGW_MOD_AND={0x15, 0x1, {{{0x3, 0x1, 0x1, 0x1}, 0x2, 0x0, 0x0, 0x0, "533baaa562561040"}, 0x1}}, @CGW_MOD_OR={0x15, 0x2, {{{0x2, 0x1, 0x0, 0x1}, 0x3, 0x2, 0x0, 0x0, "4cb7bbb8bdf674f4"}}}]}, 0xc0}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = dup2(r10, r10) r12 = gettid() ptrace$setopts(0x4206, r12, 0x0, 0x0) tkill(r12, 0x3c) ptrace$cont(0x18, r12, 0x0, 0x0) ptrace$setregs(0xd, r12, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r12, 0x0, 0x0) r13 = syz_open_procfs(r12, &(0x7f0000000100)='net/mcfilter6\x00') preadv(r13, &(0x7f00000017c0), 0x3da, 0x0) r14 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r14, &(0x7f00000017c0), 0x3da, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r14, 0x8912, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r11, 0x40206435, &(0x7f0000000080)={0x9, 0x0, 0x10000}) 10:08:18 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x10, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:18 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b33, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:18 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b33, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) [ 527.506201][ T7012] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 10:08:18 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b34, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:18 executing program 0: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=@mpls_newroute={0x1c, 0x18, 0x21, 0x0, 0x0, {0x1c, 0x14}}, 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$key(0xf, 0x3, 0x2) recvfrom(r4, 0x0, 0x0, 0x10020, 0x0, 0x0) fcntl$setsig(r4, 0xa, 0x6) r5 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 10:08:18 executing program 3: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x10, 0x80003, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 10:08:18 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b2f, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:19 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1524}, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xd, 0x0, 0x0, 0xffffffffffffff52) ioctl$KVM_NMI(r2, 0xae9a) syz_mount_image$cifs(&(0x7f0000000040)='cifs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xd00) 10:08:19 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b34, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:19 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b35, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:19 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b30, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:19 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b36, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:19 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b35, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:19 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b31, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:19 executing program 0: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=@mpls_newroute={0x1c, 0x18, 0x21, 0x0, 0x0, {0x1c, 0x14}}, 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x800c2, 0x0) ioctl$FBIOGET_CON2FBMAP(r3, 0x460f, &(0x7f00000000c0)={0x2c, 0x1}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 10:08:19 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b37, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:19 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b36, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:19 executing program 3: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x10, 0x80003, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 10:08:19 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b32, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:20 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1524}, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xd, 0x0, 0x0, 0xffffffffffffff52) ioctl$KVM_NMI(r2, 0xae9a) syz_mount_image$cifs(&(0x7f0000000040)='cifs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xe00) 10:08:20 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b3a, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:20 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b37, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:20 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b33, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:20 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b3b, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:20 executing program 0: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=@mpls_newroute={0x1c, 0x18, 0x21, 0x0, 0x0, {0x1c, 0x14}}, 0x1c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x200000000000011, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r4, &(0x7f0000000240)={0x11, 0x0, r6}, 0x14) getsockname$packet(r4, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=r7, @ANYBLOB="0100000000000000200016801c00018018000c8014000000000004001400"], 0x44}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv0\x00', r7}) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r8 = socket$key(0xf, 0x3, 0x2) recvfrom(r8, 0x0, 0x0, 0x10020, 0x0, 0x0) ftruncate(r8, 0xd78) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup2(r9, r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 10:08:20 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b3a, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:20 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b34, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:20 executing program 3: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001800210000000000f4e800001c1400"/28], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 529.695627][ T7122] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 10:08:20 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b35, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:20 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b3c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:20 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b3b, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:21 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1524}, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xd, 0x0, 0x0, 0xffffffffffffff52) ioctl$KVM_NMI(r2, 0xae9a) syz_mount_image$cifs(&(0x7f0000000040)='cifs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xf00) 10:08:21 executing program 3: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001800210000000000f4e800001c1400"/28], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 10:08:21 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b36, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:21 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b3c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:21 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b3d, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:21 executing program 0: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=@mpls_newroute={0x1c, 0x18, 0x21, 0x0, 0x0, {0x1c, 0x14}}, 0x1c}}, 0x0) r3 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, r3) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$key(0xf, 0x3, 0x2) recvfrom(r6, 0x0, 0x0, 0x10020, 0x0, 0x0) r7 = dup(r6) sendmsg$IPSET_CMD_SAVE(r7, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, 0x8, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 10:08:21 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b3d, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:21 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b40, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:21 executing program 3: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001800210000000000f4e800001c1400"/28], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 10:08:21 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b37, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:21 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b40, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:21 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b41, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:22 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1524}, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xd, 0x0, 0x0, 0xffffffffffffff52) ioctl$KVM_NMI(r2, 0xae9a) syz_mount_image$cifs(&(0x7f0000000040)='cifs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xf78) 10:08:22 executing program 3: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001800210000000000f4e800001c1400"/28], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 10:08:22 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b3a, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:22 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b41, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:22 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b44, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:22 executing program 0: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000001800210000000000000000001c1400000020000000000000"], 0x1}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r4, &(0x7f00000017c0), 0x3da, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_GET_CTX(r4, 0xc0086423, &(0x7f0000000100)={r5, 0x2}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@rand_addr="76b973ab3262d49d62cbb6bd1462529e", 0x1, 0x1, 0x0, 0x7, 0x1000, 0x1f}, 0x20) r6 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 10:08:22 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b44, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:22 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b3b, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:22 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b3c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:22 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b45, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:22 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b45, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:22 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b3d, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:23 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1524}, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xd, 0x0, 0x0, 0xffffffffffffff52) ioctl$KVM_NMI(r2, 0xae9a) syz_mount_image$cifs(&(0x7f0000000040)='cifs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xf7c) 10:08:23 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b46, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:23 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b46, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:23 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b40, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:23 executing program 0: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=@mpls_newroute={0x1c, 0x18, 0x21, 0x0, 0x0, {0x1c, 0x14}}, 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mISDNtimer\x00', 0x0, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 10:08:23 executing program 3: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001800210000000000f4e800001c1400"/28], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 10:08:23 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:23 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b41, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:23 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:23 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b48, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:23 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b44, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:23 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b49, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:24 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1524}, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xd, 0x0, 0x0, 0xffffffffffffff52) ioctl$KVM_NMI(r2, 0xae9a) syz_mount_image$cifs(&(0x7f0000000040)='cifs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x10d8) 10:08:24 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b48, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:24 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b45, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:24 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b4a, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:24 executing program 3: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001800210000000000f4e800001c1400"/28], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 10:08:24 executing program 0: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x10, 0x80003, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0x3da, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r4, &(0x7f00000017c0), 0x3da, 0x0) r5 = getpgrp(0x0) r6 = gettid() ptrace$setopts(0x4206, r6, 0x0, 0x0) tkill(r6, 0x3c) ptrace$cont(0x18, r6, 0x0, 0x0) ptrace$setregs(0xd, r6, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r6, 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000080)=0x0) r8 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f00000000c0)=@RTM_GETNSID={0x5c, 0x5a, 0x800, 0x70bd29, 0x25dfdbfc, {}, [@NETNSA_FD={0x8, 0x3, r3}, @NETNSA_FD={0x8, 0x3, r4}, @NETNSA_NSID={0x8, 0x1, 0x4}, @NETNSA_PID={0x8, 0x2, r5}, @NETNSA_NSID={0x8, 0x1, 0x3}, @NETNSA_PID={0x8, 0x2, r6}, @NETNSA_FD={0x8, 0x3, r1}, @NETNSA_PID={0x8, 0x2, r7}, @NETNSA_FD={0x8, 0x3, r8}]}, 0x5c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup2(r9, r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) r11 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) r13 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r13, &(0x7f0000000000)={0x11, 0x804, r14, 0x1, 0x0, 0x6, @dev}, 0x14) r15 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)={0x1c, r15, 0xb0343aabd1184b87, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(r13, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x20, r15, 0x300, 0x70bd29, 0x25dfdbfb, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x200, 0x2}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000) bind$packet(r11, &(0x7f0000000000)={0x11, 0x804, r12, 0x1, 0x0, 0x6, @dev}, 0x14) r16 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140)='batadv\x00') sendmsg$BATADV_CMD_GET_HARDIF(r11, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r16, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x24}}, 0x4004001) 10:08:24 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b46, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:24 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b4b, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:24 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b49, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:24 executing program 0: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x10, 0x80003, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000180)=@broute={'broute\x00', 0x20, 0x3, 0x522, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000380], 0x0, &(0x7f0000000140), &(0x7f0000000380)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x9, 0x1c, 0x86dd, 'ipvlan1\x00', 'vlan1\x00', 'caif0\x00', '\x00', @multicast, [0x0, 0xff, 0x0, 0x0, 0xff, 0xff], @multicast, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0xde, 0x156, 0x1a6, [@rateest={{'rateest\x00', 0x0, 0x48}, {{'macvlan1\x00', 'dummy0\x00', 0x10, 0x1, 0x8, 0x4, 0x800, 0x0, {0x1}, {0x4}}}}], [@common=@ERROR={'ERROR\x00', 0x20, {"1e6b46e9f536116c1866b407845020f4321280cfd989c3130cf19fb14197"}}, @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x81}}}], @common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x0, 0x1000, {0x80}}}}}, {0x9, 0x0, 0x8848, 'tunl0\x00', 'hsr0\x00', 'syzkaller1\x00', '\x00', @broadcast, [0x0, 0x0, 0xff, 0xff], @local, [0xff, 0xff, 0x0, 0xff], 0x126, 0x126, 0x156, [@limit={{'limit\x00', 0x0, 0x20}, {{0x49, 0x8, 0x8, 0x9, 0x3, 0xffffff81}}}, @stp={{'stp\x00', 0x0, 0x48}, {{0x0, {0x0, 0x3, 0x7, @dev={[], 0x38}, [0xff, 0xff, 0x0, 0xff, 0xff, 0xff], 0x100, 0x8f98, 0x47, 0x9, @broadcast, [0x0, 0xff, 0x0, 0xff], 0x4e20, 0x4e21, 0x7f, 0x3, 0x56e, 0x1, 0x8, 0x4, 0x8001, 0x9}, 0xd4, 0x718}}}], [], @common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0xfffe}}}}]}, {0x0, '\x00', 0x2, 0x3, 0x1, [{0x15, 0x11, 0x9200, '\x00', 'ipvlan1\x00', 'bond0\x00', 'ipvlan1\x00', @broadcast, [0xff], @broadcast, [0x0, 0xff, 0x0, 0x0, 0xff], 0xde, 0x14e, 0x196, [@cgroup0={{'cgroup\x00', 0x0, 0x8}, {{0xfffffffb}}}, @mark_m={{'mark_m\x00', 0x0, 0x18}, {{0xff, 0x7, 0x0, 0x1}}}], [@common=@mark={'mark\x00', 0x10, {{0xffffffc0, 0xffffffffffffffff}}}, @common=@dnat={'dnat\x00', 0x10, {{@dev={[], 0x2f}, 0xfffffffffffffffc}}}], @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x3, 0x35, {0xa037}}}}}]}, {0x0, '\x00', 0x3, 0xffffffffffffffff}]}, 0x59a) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=@mpls_newroute={0x1c, 0x18, 0x21, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0x0, 0x2}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000810}, 0x20004805) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x60080, 0x0) splice(r4, &(0x7f00000000c0)=0x1, r3, &(0x7f0000000100)=0x8, 0x1, 0x3) dup2(r3, r3) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 10:08:24 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b4a, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:24 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:25 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1524}, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xd, 0x0, 0x0, 0xffffffffffffff52) ioctl$KVM_NMI(r2, 0xae9a) syz_mount_image$cifs(&(0x7f0000000040)='cifs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x1100) 10:08:25 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b4c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:25 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b4b, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:25 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b48, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:25 executing program 3: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001800210000000000f4e800001c1400"/28], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe0, 0x0) 10:08:25 executing program 0: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f00000000c0)=@newneigh={0x40, 0x1c, 0x20, 0x70bd25, 0x25dfdbfb, {0xa, 0x0, 0x0, 0x0, 0x80, 0x1c, 0x4}, [@NDA_VLAN={0x6, 0x5, 0x2}, @NDA_LLADDR={0x0, 0x2, @dev={[], 0x3a}}, @NDA_LLADDR={0xa, 0x2, @dev={[], 0x42}}, @NDA_VLAN={0x6, 0x5, 0x4}]}, 0xfffffffffffffcb2}, 0x1, 0x0, 0x0, 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = accept$nfc_llcp(r4, &(0x7f0000000140), &(0x7f0000000000)=0x60) splice(r0, 0x0, r5, 0x0, 0x4ffdd, 0x0) 10:08:25 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b49, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:25 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b4d, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:25 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b4c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:25 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b4a, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:25 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b4e, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:25 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b4d, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:26 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1524}, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xd, 0x0, 0x0, 0xffffffffffffff52) ioctl$KVM_NMI(r2, 0xae9a) syz_mount_image$cifs(&(0x7f0000000040)='cifs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x1200) 10:08:26 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b4e, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:26 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b4b, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:26 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b52, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:26 executing program 0: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=@mpls_newroute={0x1c, 0x18, 0x21, 0x0, 0x0, {0x1c, 0x14}}, 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 10:08:26 executing program 3: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001800210000000000f4e800001c1400"/28], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe0, 0x0) 10:08:26 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b52, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:26 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b4c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:26 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b60, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:26 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b60, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:26 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b61, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:26 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b4d, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:27 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1524}, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xd, 0x0, 0x0, 0xffffffffffffff52) ioctl$KVM_NMI(r2, 0xae9a) syz_mount_image$cifs(&(0x7f0000000040)='cifs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x1300) 10:08:27 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b61, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:27 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b4e, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:27 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b62, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:27 executing program 3: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001800210000000000f4e800001c1400"/28], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe0, 0x0) 10:08:27 executing program 0: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r3, &(0x7f0000001700)=[{&(0x7f0000001780)=""/36, 0x24}, {&(0x7f0000001500)=""/140, 0x8c}, {&(0x7f00000015c0)=""/142, 0x8e}, {&(0x7f0000001680)=""/117, 0x75}], 0x4, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000001480)) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, 0xffffffffffffffff) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000080)={0x6, 0xffffffffffffffff, 0x1}) vmsplice(r4, &(0x7f00000002c0)=[{&(0x7f0000000100)="78c4e70733a55871e7ec1a08aa3ec57e19a75c2726cc07d5d7e011ef5011b3e061beca374bc6ec0a660a397a", 0x2c}, {&(0x7f0000001ac0)="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", 0x1085}, {&(0x7f0000001900)="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", 0x10a}, {&(0x7f0000001a40)="ceb9c903e3ad711d990c0d8ded35655f18a77ab86f29dbe0d2fa9d6a0f42669d4bed4e92586e8433651e0ea9bc6d61df5d5d060003853227dca38baf73464ec8048523f2f5abcf72813d", 0x4a}, {&(0x7f0000000200)="03ecf306e2287458b0c6e2c00097f55acf68f7c94c639d9ec0a409119fc47577e5b01bc931bfd290546aaa13e7c0b15e50831ff7f41469d4cfc08b98959a654af23c7bf7e000fcf1495528a88ae0feec769be939ace4e1d496886205ee9cb296fd8b49dbb4966541f35e0dbaa0e1587e9625158800150368070f9ac48936", 0x7e}, {&(0x7f00000017c0)="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", 0x125}, {&(0x7f0000000280)="6590592997849fe93529d8305d628f1483c59ad5547cd67c6312", 0x1a}], 0x7, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 10:08:27 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b63, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:27 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b52, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:27 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b62, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:28 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b60, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:28 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b64, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:28 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b63, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:28 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1524}, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xd, 0x0, 0x0, 0xffffffffffffff52) ioctl$KVM_NMI(r2, 0xae9a) syz_mount_image$cifs(&(0x7f0000000040)='cifs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x1400) 10:08:28 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b61, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:28 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b64, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:28 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b65, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:28 executing program 0: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001800210000000000000000001c14000000000000000000002154c1d4f0113f68f6f3"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x70, &(0x7f0000000100)={r7}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000080)={r7, 0xfff, 0x0, 0x2, 0x8001, 0x6}, &(0x7f00000000c0)=0x14) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 10:08:28 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001800210000000000f4e800001c1400"/28], 0x1c}}, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffecc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x4ffe0, 0x0) 10:08:28 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001800210000000000f4e800001c1400"/28], 0x1c}}, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffecc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x4ffe0, 0x0) 10:08:28 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b66, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:28 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b65, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:28 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b62, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:29 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001800210000000000f4e800001c1400"/28], 0x1c}}, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffecc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x4ffe0, 0x0) 10:08:29 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b66, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:29 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1524}, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xd, 0x0, 0x0, 0xffffffffffffff52) ioctl$KVM_NMI(r2, 0xae9a) syz_mount_image$cifs(&(0x7f0000000040)='cifs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x1500) 10:08:29 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b63, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:29 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b67, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:29 executing program 3: pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001800210000000000f4e800001c1400"/28], 0x1c}}, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffecc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x4ffe0, 0x0) 10:08:29 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b67, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:29 executing program 0: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000000)={0x11, 0x804, r3, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000180)={{0xa, 0x4e21, 0x5f, @rand_addr="75f7cc79b2204eb417bbe97a913390e0", 0x9}, {0xa, 0x4e23, 0x3, @empty, 0x2}, 0x4, [0x9, 0x6, 0x3a4, 0x8001, 0x1c, 0x8000, 0x5, 0x517]}, 0x5c) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) socket$inet(0x10, 0x80003, 0x0) r5 = accept$netrom(r2, &(0x7f0000000200)={{0x3, @default}, [@default, @null, @default, @bcast, @netrom, @netrom, @remote, @bcast]}, &(0x7f00000002c0)=0x48) ioctl$SIOCGSTAMP(r5, 0x8906, &(0x7f0000000140)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001800210064b63fa2c43d457500000000000000001c140000"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r6, r6) splice(r0, 0x0, r4, 0x0, 0x4ffe0, 0x0) 10:08:29 executing program 3: pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001800210000000000f4e800001c1400"/28], 0x1c}}, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffecc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x4ffe0, 0x0) 10:08:29 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b68, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:29 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b64, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:29 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b68, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:30 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b69, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:30 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b65, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:30 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1524}, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xd, 0x0, 0x0, 0xffffffffffffff52) ioctl$KVM_NMI(r2, 0xae9a) syz_mount_image$cifs(&(0x7f0000000040)='cifs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x1600) 10:08:30 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b69, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:30 executing program 3: pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001800210000000000f4e800001c1400"/28], 0x1c}}, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffecc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x4ffe0, 0x0) 10:08:30 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b6a, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:30 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b66, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:30 executing program 0: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=@mpls_newroute={0x1c, 0x18, 0x21, 0x0, 0x0, {0x1c, 0x14}}, 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f00000000c0)=ANY=[@ANYRESDEC=0x0], 0x14) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) r5 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x42) r6 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r6, &(0x7f0000000000)={0x11, 0x804, r7, 0x1, 0x0, 0x6, @dev}, 0x14) r8 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$bt_l2cap_L2CAP_CONNINFO(r6, 0x6, 0x2, &(0x7f0000000300), &(0x7f0000000380)=0x6) r9 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000100)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x14, r9, 0x5}, 0x14}, 0x1, 0x6c}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r6, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="ccd1208b97992e8867731d2658f330000000", @ANYRES16=r9, @ANYBLOB="000428bd7000fddbdf250300000014000100ff0100000000000000000000000000010800040001000000"], 0x30}, 0x1, 0x0, 0x0, 0x40051}, 0x20000000) r10 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0x40, 0x10f0c1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r10, 0x4040534e, &(0x7f00000002c0)={0x102, @tick=0xffffffe0, 0x9, {0x7f, 0x80}, 0x8, 0x1, 0xe9}) ioctl$SNDRV_TIMER_IOCTL_STOP(r5, 0x54a1) 10:08:31 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b6b, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:31 executing program 0: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=@mpls_newroute={0x1c, 0x18, 0x21, 0x0, 0x0, {0x1c, 0x14}}, 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) r5 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r5, &(0x7f0000000000)={0x11, 0x804, r6, 0x1, 0x0, 0x6, @dev}, 0x14) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r5, 0x84, 0x7, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 10:08:31 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b67, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:31 executing program 3: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001800210000000000f4e800001c1400"/28], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 10:08:31 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b6a, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:31 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b68, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:32 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1524}, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xd, 0x0, 0x0, 0xffffffffffffff52) ioctl$KVM_NMI(r2, 0xae9a) syz_mount_image$cifs(&(0x7f0000000040)='cifs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x1700) 10:08:32 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b6b, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:32 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b6c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:32 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b69, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:32 executing program 0: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=@mpls_newroute={0x1c, 0x18, 0x21, 0x0, 0x0, {0x1c, 0x14}}, 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r4, 0x4b67, &(0x7f00000004c0)={0x1, &(0x7f0000000480)=[{}]}) ioctl$TIOCPKT(r4, 0x5420, &(0x7f0000000140)=0x9) r5 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x44000, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r6, 0xc0096616, &(0x7f00000001c0)={0x4, [0x0, 0x0, 0x0, 0x0]}) r7 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r7, &(0x7f0000000000)={0x11, 0x804, r8, 0x1, 0x0, 0x6, @dev}, 0x14) accept4$bt_l2cap(r7, 0x0, &(0x7f0000000100), 0x80800) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)={&(0x7f0000000080)='./file0\x00', 0x0, 0x8}, 0x10) 10:08:32 executing program 3: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001800210000000000f4e800001c1400"/28], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 10:08:32 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b6c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:32 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b6a, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:32 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b6d, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:32 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b6d, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:32 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b70, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:32 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b6b, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:33 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1524}, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xd, 0x0, 0x0, 0xffffffffffffff52) ioctl$KVM_NMI(r2, 0xae9a) syz_mount_image$cifs(&(0x7f0000000040)='cifs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x1800) 10:08:33 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b71, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:33 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b70, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:33 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b6c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:33 executing program 3: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001800210000000000f4e800001c1400"/28], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 10:08:33 executing program 0: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000480)=ANY=[@ANYBLOB="3600030000002100000000000000e9001c8000000075f2c4717aa4efbc30f8240e58000000000000007fbdec3668f13a5bed125fb73750ab980c4f08634fa749550101dcbcd1e5590075254b8377d0db0f013cc84832f83908d8d6626e6931d1b5527cd54da2ed1ebcc53c36f05b590f5545c8b7b1e40b72d2802119fe44b98c02dbda2f81192969fc1ed5fc9016b9cba490aef1a594ba9560d98286a2c2d345786ee9fc938ac87224a44ae997334110de4069f487c8265b2a33a3"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb6, 0xb6, 0x5, [@ptr={0x1}, @datasec={0x9, 0x2, 0x0, 0xf, 0x2, [{0x1, 0xffffffff, 0x8001}, {0x1, 0xc3, 0x8}], "0ba1"}, @func={0x9, 0x0, 0x0, 0xc, 0x1}, @typedef={0x4, 0x0, 0x0, 0x8, 0x3}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x3, 0x200007}}, @union={0x2, 0x3, 0x0, 0x5, 0x0, 0x200, [{0xa, 0x0, 0x11}, {0x0, 0x5, 0x4}, {0xb, 0x2, 0x2}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x8, 0xfde}}, @typedef={0x0, 0x0, 0x0, 0x8, 0x4}]}, {0x0, [0x61, 0x30, 0x30]}}, &(0x7f00000001c0)=""/81, 0xfffffffffffffd32, 0x51}, 0x20) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r5, 0x800442d3, &(0x7f0000000380)={0x1d0d8a8f, 0xd4, 0x5, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'vcan0\x00'}) r6 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_S_PARM(r6, 0xc0285629, &(0x7f00000000c0)={0xa, @capture={0x0, 0x0, {0x0, 0x400}, 0xfffffffc}}) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000280)={0x8, 0x1, 0x4, 0x2, 0x6, {0x0, 0x7530}, {0x4, 0x0, 0xfa, 0xfb, 0x7, 0x0, "90232fa1"}, 0x8, 0x3, @fd, 0x9, 0x0, r3}) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r7, 0x6, 0x15, &(0x7f0000000240)=0x7, 0x4) ioctl$VIDIOC_S_PARM(r6, 0xc0cc5616, &(0x7f0000000080)={0x5, @output={0x1000, 0x0, {0xffffffff, 0x9}, 0x3, 0xfffff51b}}) 10:08:33 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b72, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:33 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b6d, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:33 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b71, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:33 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b72, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:33 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b70, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:33 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4bfa, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:34 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1524}, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xd, 0x0, 0x0, 0xffffffffffffff52) ioctl$KVM_NMI(r2, 0xae9a) syz_mount_image$cifs(&(0x7f0000000040)='cifs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x1900) 10:08:34 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4bfb, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:34 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b71, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:34 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4bfa, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:34 executing program 3: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001800210000000000f4e800001c1400"/28], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 10:08:34 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4bfb, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:34 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b72, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:34 executing program 3: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001800210000000000f4e800001c1400"/28], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 10:08:34 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4c01, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:34 executing program 0: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=@mpls_newroute={0x1c, 0x18, 0x21, 0x0, 0x0, {0x1c, 0x14}}, 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$key(0xf, 0x3, 0x2) recvfrom(r3, 0x0, 0x0, 0x10020, 0x0, 0x0) r4 = eventfd2(0x8001, 0x80000) r5 = dup2(r4, r0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$smc(&(0x7f0000000280)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x14, r7, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r7, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x40) 10:08:34 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4bfa, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:34 executing program 3: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x10, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001800210000000000f4e800001c1400"/28], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 10:08:35 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1524}, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xd, 0x0, 0x0, 0xffffffffffffff52) ioctl$KVM_NMI(r2, 0xae9a) syz_mount_image$cifs(&(0x7f0000000040)='cifs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x1a00) 10:08:35 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4c01, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:35 executing program 0: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x10, 0x80003, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x200000000000011, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r4, &(0x7f0000000240)={0x11, 0x0, r6}, 0x14) getsockname$packet(r4, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='\x00'/20, @ANYRES32=r7, @ANYBLOB="0100000000000000200016801c00018018000c8014000000000004001400"], 0x44}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) write$RDMA_USER_CM_CMD_ACCEPT(r1, &(0x7f0000000540)={0x8, 0x120, 0xfa00, {0x4, {0x6, 0x4, "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", 0x5, 0x9, 0x7f, 0x4, 0x4, 0x0, 0x85}}}, 0x128) r9 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r9, &(0x7f00000017c0), 0x3da, 0x0) ioctl$VHOST_SET_FEATURES(r9, 0x4008af00, &(0x7f0000000100)=0x8000000) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r10) ioctl$EXT4_IOC_SWAP_BOOT(r4, 0x6611) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000080)=@ipmr_newroute={0x5c, 0x18, 0x800, 0x70bd2a, 0x25dfdbfb, {0x80, 0x80, 0x14, 0x0, 0xfe, 0x0, 0xff, 0x6, 0x1100}, [@RTA_FLOW={0x8, 0xb, 0x1f}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x6}, @RTA_OIF={0x8, 0x4, r7}, @RTA_SRC={0x8, 0x2, @rand_addr=0xffffffc0}, @RTA_UID={0x8, 0x19, r10}, @RTA_OIF={0x8}, @RTA_GATEWAY={0x8, 0x5, @multicast2}, @RTA_MARK={0x8}]}, 0x5c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = dup2(r11, r11) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 10:08:35 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4bfb, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:35 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5409, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:35 executing program 3: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 10:08:35 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4c01, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:35 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5409, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:35 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x540b, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:35 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x540b, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:35 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5409, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:35 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x540c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:36 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x540b, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:36 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x540c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:36 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x540d, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:36 executing program 3: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 10:08:36 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1524}, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xd, 0x0, 0x0, 0xffffffffffffff52) ioctl$KVM_NMI(r2, 0xae9a) syz_mount_image$cifs(&(0x7f0000000040)='cifs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x1b00) 10:08:36 executing program 0: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x10, 0x80003, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=@mpls_newroute={0x1c, 0x18, 0x20, 0x0, 0x0, {0x1c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}}, 0x1c}}, 0x80) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x3, 0x0) ioctl$UFFDIO_ZEROPAGE(r5, 0xc020aa04, &(0x7f00000000c0)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}}) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 10:08:36 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x540d, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:36 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x540c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:36 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x540e, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:36 executing program 0: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x10, 0x80003, 0x0) r3 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r3, &(0x7f0000000000)={0x11, 0x804, r4, 0x1, 0x0, 0x6, @dev}, 0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=@mpls_newroute={0x1c, 0x18, 0x21, 0x0, 0x0, {0x1c, 0x14}}, 0x1c}}, 0xc0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0x0, 0x7703, 0x3f, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x9a091e, 0x8, [], @value=0x7358af00}}) ioctl$DRM_IOCTL_INFO_BUFS(r5, 0xc0106418, &(0x7f0000000140)={0x6de, 0x5, 0x6, 0x1, 0x1, 0x1}) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 10:08:36 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x540e, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:36 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x540f, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:36 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x540d, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:36 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5410, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:36 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x540f, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:37 executing program 3: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 10:08:37 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1524}, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xd, 0x0, 0x0, 0xffffffffffffff52) ioctl$KVM_NMI(r2, 0xae9a) syz_mount_image$cifs(&(0x7f0000000040)='cifs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x1c00) 10:08:37 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x540e, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:37 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5412, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:37 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5410, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:37 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0xffff, 0x13, 0x9, 0xffffffff}, {0x6, 0x6, 0x7, 0x2}]}, 0x10) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=@mpls_newroute={0x1c, 0x18, 0x21, 0x0, 0x0, {0x1c, 0x14}}, 0x1c}}, 0x0) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) splice(r1, 0x0, r3, 0x0, 0x4ffe0, 0x0) 10:08:37 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x540f, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:37 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5412, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:37 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5413, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:37 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5414, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:37 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5410, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:37 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5413, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:37 executing program 3: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 10:08:38 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1524}, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xd, 0x0, 0x0, 0xffffffffffffff52) ioctl$KVM_NMI(r2, 0xae9a) syz_mount_image$cifs(&(0x7f0000000040)='cifs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x1d00) 10:08:38 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5415, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:38 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5412, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:38 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5414, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:38 executing program 0: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001800210000000000000000001c14000000000000000000003d8c2b5087d81b282a04a7d708a230e6"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 10:08:38 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5413, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:38 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5415, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:38 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5416, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:38 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5414, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:38 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5416, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:38 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5417, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:38 executing program 3: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 10:08:39 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1524}, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xd, 0x0, 0x0, 0xffffffffffffff52) ioctl$KVM_NMI(r2, 0xae9a) syz_mount_image$cifs(&(0x7f0000000040)='cifs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x1e00) 10:08:39 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5415, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:39 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5418, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:39 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5417, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:39 executing program 0: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$key(0xf, 0x3, 0x2) recvfrom(r3, 0x0, 0x0, 0x10020, 0x0, 0x0) dup(r3) socket$inet(0x10, 0x80003, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x200000000000011, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r5, &(0x7f0000000240)={0x11, 0x0, r7}, 0x14) getsockname$packet(r5, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=r8, @ANYBLOB="0100000000000000200016801c00018018000c8014000000000004001400"], 0x44}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x200000000000011, 0x3, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r10, &(0x7f0000000240)={0x11, 0x0, r12}, 0x14) getsockname$packet(r10, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=r13, @ANYBLOB="0100000000000000200016801c00018018000c8014000000000004001400"], 0x44}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f00000000c0)=@mpls_newroute={0x44, 0x18, 0x21, 0x0, 0x0, {0x1c, 0x14, 0x90}, [@RTA_MULTIPATH={0xc, 0x9, {0x2, 0x9, 0x40, r8}}, @RTA_MULTIPATH={0xc, 0x9, {0x0, 0x5, 0xa4, r13}}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x1}, @RTA_DST={0x8, 0x1, {0x7, 0x0, 0x1}}]}, 0x44}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r14 = socket$inet6_tcp(0xa, 0x1, 0x0) r15 = dup2(r14, r14) ioctl$PERF_EVENT_IOC_ENABLE(r15, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 10:08:39 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5416, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:39 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5418, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:39 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541b, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) [ 548.376009][ T8054] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 548.406113][ T8054] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 10:08:39 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541d, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:39 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5417, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:39 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541e, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:39 executing program 3: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 10:08:40 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1524}, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xd, 0x0, 0x0, 0xffffffffffffff52) ioctl$KVM_NMI(r2, 0xae9a) syz_mount_image$cifs(&(0x7f0000000040)='cifs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x1f00) 10:08:40 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541b, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:40 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5418, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:40 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541e, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:40 executing program 0: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=@mpls_newroute={0x1c, 0x18, 0x21, 0x0, 0x0, {0x1c, 0x14}}, 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) r5 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000100)="42a5762bd5c625a297de62820f5ddf5d24f2c1f7835f170d7405c4195f73c23a420b451f667ef822ed9d2fdf520494f375da61b3e986afd91bdfc7f3d03b8460afb9658ec84baaccb2161196fa834cac636f1729d7a053bb6d9273882687821f27ef303b56a3cf5dfab6a8e7", 0x6c, 0xfffffffffffffff8) r6 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000280)={'syz'}, &(0x7f0000000600)="08000000000000003759540d01ab3409d020ce89f347f85954148506ada508", 0x1f, r6) r7 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, r6) keyctl$instantiate(0xc, r5, 0x0, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000200)='/dev/nullb0\x00', 0x4040, 0x0) 10:08:40 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541b, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:40 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541d, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:40 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5421, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:40 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541e, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:40 executing program 3: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 10:08:40 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5422, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:40 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541d, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:41 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1524}, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xd, 0x0, 0x0, 0xffffffffffffff52) ioctl$KVM_NMI(r2, 0xae9a) syz_mount_image$cifs(&(0x7f0000000040)='cifs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x2500) 10:08:41 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541e, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:41 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5423, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:41 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541e, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:41 executing program 0: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=@mpls_newroute={0x1c, 0x18, 0x21, 0x0, 0x0, {0x1c, 0x14}}, 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$FUSE_IOCTL(r0, &(0x7f00000000c0)={0x20, 0xffffffffffffffda, 0x2, {0x800, 0x4, 0x36f, 0x2}}, 0x20) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) ioctl$ASHMEM_GET_PIN_STATUS(r5, 0x7709, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r6, 0x4b67, &(0x7f00000004c0)={0x1, &(0x7f0000000480)=[{}]}) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) r8 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r7, 0x84, 0x70, &(0x7f0000000100)={r9}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000100)={r9, 0x67, "2065f7b54dfe2351eef2656d6b7a33136a4bd5466a272eccf7e5cd7a5be6911975afc7eecc063d52a4663a4feb3af1b79af9d097f58f66ba76e7579b0e95360ffae642963455b28db051200ac8bdecb6456d18f01f469bdb45e5553631dcdc0c2216fa49aafe81"}, &(0x7f0000000180)=0x6f) ioctl$PIO_FONT(r6, 0x4b61, &(0x7f0000000080)="78f7cc5e22cd992eef861c17028ff97559342f400593d38a09f78d97febad52638") splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 10:08:41 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541e, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:41 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5424, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:41 executing program 3: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 10:08:41 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5421, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:41 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5425, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:41 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5421, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:41 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5422, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:42 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1524}, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xd, 0x0, 0x0, 0xffffffffffffff52) ioctl$KVM_NMI(r2, 0xae9a) syz_mount_image$cifs(&(0x7f0000000040)='cifs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x2600) 10:08:42 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5422, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:42 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5427, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:42 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5423, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:42 executing program 0: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001801000000000000000000001c1400000000000000"], 0x1c}}, 0x0) r3 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x28003) preadv(r3, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f00000000c0)=""/219, 0xdb}, {&(0x7f00000001c0)=""/88, 0x58}, {&(0x7f0000000240)=""/19, 0x13}], 0x4, 0x101) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 10:08:42 executing program 3: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 10:08:42 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5423, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:42 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5428, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:42 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5424, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:42 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5424, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:42 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5429, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:42 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5425, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:43 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1524}, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xd, 0x0, 0x0, 0xffffffffffffff52) ioctl$KVM_NMI(r2, 0xae9a) syz_mount_image$cifs(&(0x7f0000000040)='cifs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x2800) 10:08:43 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5427, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:43 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5425, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:43 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5437, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:43 executing program 3: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=ANY=[]}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 10:08:43 executing program 0: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x10, 0x80003, 0x0) ioctl$KVM_GET_SREGS(r0, 0x8138ae83, &(0x7f0000000080)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=@mpls_newroute={0x1c, 0x18, 0x21, 0x0, 0x0, {0x1c, 0x14}}, 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcs\x00', 0x40, 0x0) ioctl$KDGKBENT(r4, 0x4b46, &(0x7f0000000200)={0x2, 0x8, 0x1000}) r5 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 10:08:43 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5427, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:43 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5441, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:43 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5428, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:43 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5428, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:43 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5429, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:43 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5450, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:44 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1524}, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xd, 0x0, 0x0, 0xffffffffffffff52) ioctl$KVM_NMI(r2, 0xae9a) syz_mount_image$cifs(&(0x7f0000000040)='cifs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x2a00) 10:08:44 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5437, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:44 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5429, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:44 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5451, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:44 executing program 3: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=ANY=[]}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 10:08:44 executing program 0: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=@mpls_newroute={0x1c, 0x18, 0x21, 0x0, 0x4, {0x1c, 0x20}}, 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$key(0xf, 0x3, 0x2) recvfrom(r5, 0x0, 0x0, 0x10020, 0x0, 0x0) splice(r5, 0x0, r0, 0x0, 0x9, 0x0) 10:08:44 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5437, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:44 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5452, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:44 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5441, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:44 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5450, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:44 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5441, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:44 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x545d, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:45 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1524}, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xd, 0x0, 0x0, 0xffffffffffffff52) ioctl$KVM_NMI(r2, 0xae9a) syz_mount_image$cifs(&(0x7f0000000040)='cifs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x2c00) 10:08:45 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5460, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:45 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5451, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:45 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5450, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:45 executing program 3: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=ANY=[]}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 10:08:45 executing program 0: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=@mpls_newroute={0x1c, 0x18, 0x21, 0x0, 0x0, {0x1c, 0x14}}, 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) r5 = socket$key(0xf, 0x3, 0x2) recvfrom(r5, 0x0, 0x0, 0x10020, 0x0, 0x0) getsockopt$sock_int(r5, 0x1, 0x20, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 10:08:45 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5452, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:45 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5600, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:45 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5451, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:45 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x545d, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:45 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5452, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:45 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5601, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:46 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x545d, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:46 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5460, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:46 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5602, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:46 executing program 3: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 10:08:46 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1524}, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xd, 0x0, 0x0, 0xffffffffffffff52) ioctl$KVM_NMI(r2, 0xae9a) syz_mount_image$cifs(&(0x7f0000000040)='cifs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x2e00) 10:08:46 executing program 0: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=@mpls_newroute={0x1c, 0x18, 0x21, 0x0, 0x0, {0x1c, 0x14}}, 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[@ANYPTR64=&(0x7f0000000080)=ANY=[@ANYRES64=r2], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYRES32=0x0]], 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 10:08:46 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5603, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:46 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5460, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:46 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5600, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:46 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5600, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:46 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5605, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:46 executing program 0: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x10, 0x80003, 0x0) r3 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r3, &(0x7f0000000000)={0x11, 0x804, r4, 0x1, 0x0, 0x6, @dev}, 0x14) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140)='batadv\x00') r6 = socket(0x0, 0x5, 0x0) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$BATADV_CMD_SET_VLAN(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x1c, r5, 0x1, 0x0, 0x0, {0x11}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0x30, r5, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={[], 0x2b}}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8c}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1ff}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x91) r7 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r7, &(0x7f0000000000)={0x11, 0x804, r8, 0x1, 0x0, 0x6, @dev}, 0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001800210000000000000000001c1400000000000000010000"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r9 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r9, &(0x7f00000017c0), 0x3da, 0x0) write$P9_RSETATTR(r9, &(0x7f0000000180)={0x7, 0x1b, 0x2}, 0x7) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = dup2(r10, r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 10:08:46 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5601, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:46 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5601, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:47 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5606, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:47 executing program 3: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 10:08:47 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1524}, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xd, 0x0, 0x0, 0xffffffffffffff52) ioctl$KVM_NMI(r2, 0xae9a) syz_mount_image$cifs(&(0x7f0000000040)='cifs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x3000) 10:08:47 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5602, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:47 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5602, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:47 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5607, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:47 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5603, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:47 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5608, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:47 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5603, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:47 executing program 0: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=@mpls_newroute={0x1c, 0x18, 0x21, 0x0, 0x0, {0x1c, 0x14}}, 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, 0x1, 0x4, 0x101, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x1}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0xd2330ceb3f30eb55}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x5}, @NFULA_CFG_MODE={0xa, 0x2, {0x3}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20010) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 10:08:47 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5605, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:47 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5609, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:47 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5605, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:48 executing program 3: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 10:08:48 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1524}, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xd, 0x0, 0x0, 0xffffffffffffff52) ioctl$KVM_NMI(r2, 0xae9a) syz_mount_image$cifs(&(0x7f0000000040)='cifs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x3200) 10:08:48 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5606, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:48 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5606, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:48 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x560a, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:48 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5607, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:48 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5607, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:48 executing program 0: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000001800210000000000000000001c14000000000000000000008ca9477f110c6b5e79f9bf1f1bcd764c34385b8b9a162f3eaafeb7f6fdb10653c72c36184594d5dadfbd4add6c6c0600203fddfd1ec07fe24d413aa762772a766bff89a60680333809e18667a7160ff94fa8177c34a6523369ed3a798d47bbf3d21024e6a0256874b357916f1ad5b9c28aeef145bdc2012b2f9a97db6519c1a72b58b3138b14ce24324469aec658379dd1adea10e33bc00a6edd2aa2ef6e1519d5132128d02787f98f74657dbd43184d0d2f8e93f9b69980baadd9b6a2f20000000000000000"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 10:08:48 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5608, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:49 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5608, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:49 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x560b, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:49 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5609, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:49 executing program 3: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001800210000000000f4e8"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 10:08:49 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1524}, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xd, 0x0, 0x0, 0xffffffffffffff52) ioctl$KVM_NMI(r2, 0xae9a) syz_mount_image$cifs(&(0x7f0000000040)='cifs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x3400) 10:08:49 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5609, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:49 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x560a, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:49 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x560c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:49 executing program 0: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=@mpls_newroute={0x1c, 0x18, 0x21, 0x0, 0x0, {0x1c, 0x14}}, 0x1c}}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) recvfrom(r3, 0x0, 0x0, 0x38bf5cb1c1205d04, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f00000000c0)=ANY=[@ANYPTR, @ANYPTR=&(0x7f0000000080)=ANY=[@ANYRES16, @ANYRESDEC=r3], @ANYRESOCT], 0x27) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='hybla\x00', 0x6) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 10:08:49 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x560a, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:49 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x560d, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:50 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x560b, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:50 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:50 executing program 3: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001800210000000000f4e8"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 10:08:50 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x560b, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:50 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x560e, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:50 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1524}, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xd, 0x0, 0x0, 0xffffffffffffff52) ioctl$KVM_NMI(r2, 0xae9a) syz_mount_image$cifs(&(0x7f0000000040)='cifs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x3600) 10:08:50 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x560c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:50 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:50 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x560c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:50 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x560f, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:50 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x560d, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:50 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x6364, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:50 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x560d, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:50 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:51 executing program 3: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001800210000000000f4e8"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 10:08:51 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x560e, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:51 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x8912, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:51 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1524}, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xd, 0x0, 0x0, 0xffffffffffffff52) ioctl$KVM_NMI(r2, 0xae9a) syz_mount_image$cifs(&(0x7f0000000040)='cifs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x3800) 10:08:51 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x560e, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:51 executing program 0: ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x4b47, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:51 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x560f, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:51 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x8933, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:51 executing program 0: ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x4b47, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:51 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x6364, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:51 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x8946, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:51 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x560f, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:51 executing program 3: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001800210000000000f4e800001c14000000"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 10:08:52 executing program 0: ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x4b47, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:52 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x89e0, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:52 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1524}, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xd, 0x0, 0x0, 0xffffffffffffff52) ioctl$KVM_NMI(r2, 0xae9a) syz_mount_image$cifs(&(0x7f0000000040)='cifs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x3a00) 10:08:52 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x6364, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:52 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x8933, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:52 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x4b47, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:52 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0xae01, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:52 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x400454ca, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:52 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x4b47, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:52 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x8912, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:52 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x400454ca, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:52 executing program 3: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001800210000000000f4e8"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 10:08:53 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x4b47, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:53 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x8933, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:53 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1524}, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xd, 0x0, 0x0, 0xffffffffffffff52) ioctl$KVM_NMI(r2, 0xae9a) syz_mount_image$cifs(&(0x7f0000000040)='cifs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x3c00) 10:08:53 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x40049409, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:53 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x40049409, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:53 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, 0x0) 10:08:53 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x8941, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:53 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x40186366, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:53 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x40186366, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:53 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, 0x0) 10:08:53 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x894b, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:53 executing program 3: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001800210000000000f4e8"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 10:08:54 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4020940d, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:54 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4020940d, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:54 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1524}, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xd, 0x0, 0x0, 0xffffffffffffff52) ioctl$KVM_NMI(r2, 0xae9a) syz_mount_image$cifs(&(0x7f0000000040)='cifs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x3e00) 10:08:54 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, 0x0) 10:08:54 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x894c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:54 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x80045432, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:54 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x80045430, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:54 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0xae01, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:54 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x80045432, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:54 executing program 3: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001800210000000000f4e8"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 10:08:54 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000040)={0x2, {0xf}}) 10:08:54 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x80045440, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:55 executing program 0 (fault-call:1 fault-nth:0): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000040)={0x2, {0xf}}) 10:08:55 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0xae41, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) [ 564.176350][ T9041] FAULT_INJECTION: forcing a failure. [ 564.176350][ T9041] name failslab, interval 1, probability 0, space 0, times 0 [ 564.190460][ T9041] CPU: 0 PID: 9041 Comm: syz-executor.0 Not tainted 5.6.0-rc2-syzkaller #0 [ 564.199054][ T9041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 564.209088][ T9041] Call Trace: [ 564.212421][ T9041] dump_stack+0x1fb/0x318 [ 564.216740][ T9041] should_fail+0x4b8/0x660 [ 564.221163][ T9041] __should_failslab+0xb9/0xe0 [ 564.225922][ T9041] ? tomoyo_realpath_from_path+0xe8/0x6b0 [ 564.231619][ T9041] should_failslab+0x9/0x20 [ 564.236098][ T9041] __kmalloc+0x7a/0x340 [ 564.240231][ T9041] ? tomoyo_realpath_from_path+0xdb/0x6b0 [ 564.245927][ T9041] ? kfree+0x1f/0x220 [ 564.249891][ T9041] tomoyo_realpath_from_path+0xe8/0x6b0 [ 564.255448][ T9041] tomoyo_path_number_perm+0x18f/0x690 [ 564.261031][ T9041] ? smack_file_ioctl+0x225/0x2e0 [ 564.266110][ T9041] tomoyo_file_ioctl+0x23/0x30 [ 564.270873][ T9041] security_file_ioctl+0x68/0xd0 [ 564.275799][ T9041] __se_sys_ioctl+0x4e/0x190 [ 564.280371][ T9041] ? do_syscall_64+0x1d/0x1c0 [ 564.285031][ T9041] __x64_sys_ioctl+0x7b/0x90 [ 564.289603][ T9041] do_syscall_64+0xf7/0x1c0 [ 564.294090][ T9041] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 564.299960][ T9041] RIP: 0033:0x45c429 [ 564.303842][ T9041] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 564.323440][ T9041] RSP: 002b:00007fabd7a25c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 564.331837][ T9041] RAX: ffffffffffffffda RBX: 00007fabd7a266d4 RCX: 000000000045c429 [ 564.339837][ T9041] RDX: 0000000020000040 RSI: 0000000000004b47 RDI: 0000000000000003 [ 564.347793][ T9041] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 564.355744][ T9041] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 564.363694][ T9041] R13: 0000000000000574 R14: 00000000004c7c4f R15: 0000000000000000 [ 564.385877][ T9041] ERROR: Out of memory at tomoyo_realpath_from_path. 10:08:55 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1524}, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xd, 0x0, 0x0, 0xffffffffffffff52) ioctl$KVM_NMI(r2, 0xae9a) syz_mount_image$cifs(&(0x7f0000000040)='cifs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x4000) 10:08:55 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x80045440, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:55 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x80086301, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:55 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0xae60, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:55 executing program 0 (fault-call:1 fault-nth:1): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000040)={0x2, {0xf}}) 10:08:55 executing program 3: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001800210000000000f4e800001c14"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 10:08:55 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x80086301, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) [ 564.917458][ T9060] FAULT_INJECTION: forcing a failure. [ 564.917458][ T9060] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 564.930688][ T9060] CPU: 0 PID: 9060 Comm: syz-executor.0 Not tainted 5.6.0-rc2-syzkaller #0 [ 564.939268][ T9060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 564.949326][ T9060] Call Trace: [ 564.952625][ T9060] dump_stack+0x1fb/0x318 [ 564.956978][ T9060] should_fail+0x4b8/0x660 [ 564.961408][ T9060] ? __kasan_check_read+0x11/0x20 10:08:56 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0xae80, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) [ 564.966472][ T9060] should_fail_alloc_page+0x4f/0x60 [ 564.971674][ T9060] prepare_alloc_pages+0x283/0x460 [ 564.976823][ T9060] __alloc_pages_nodemask+0xb2/0x5d0 [ 564.976853][ T9060] kmem_getpages+0x4c/0x930 [ 564.986634][ T9060] cache_grow_begin+0x7e/0x2e0 [ 564.991425][ T9060] ? cache_alloc_pfmemalloc+0x1e/0x1a0 [ 564.991445][ T9060] cache_alloc_refill+0x328/0x400 [ 564.991460][ T9060] ? debug_smp_processor_id+0x9/0x20 [ 564.991479][ T9060] __kmalloc+0x318/0x340 [ 564.991490][ T9060] ? tomoyo_realpath_from_path+0xe8/0x6b0 [ 564.991508][ T9060] tomoyo_realpath_from_path+0xe8/0x6b0 [ 565.022762][ T9060] tomoyo_path_number_perm+0x18f/0x690 [ 565.022825][ T9060] ? smack_file_ioctl+0x225/0x2e0 [ 565.033275][ T9060] tomoyo_file_ioctl+0x23/0x30 [ 565.033298][ T9060] security_file_ioctl+0x68/0xd0 [ 565.042995][ T9060] __se_sys_ioctl+0x4e/0x190 [ 565.047576][ T9060] ? do_syscall_64+0x1d/0x1c0 [ 565.052249][ T9060] __x64_sys_ioctl+0x7b/0x90 [ 565.056854][ T9060] do_syscall_64+0xf7/0x1c0 [ 565.061339][ T9060] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 565.067207][ T9060] RIP: 0033:0x45c429 [ 565.071081][ T9060] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 565.090658][ T9060] RSP: 002b:00007fabd7a25c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 565.099051][ T9060] RAX: ffffffffffffffda RBX: 00007fabd7a266d4 RCX: 000000000045c429 [ 565.107013][ T9060] RDX: 0000000020000040 RSI: 0000000000004b47 RDI: 0000000000000003 [ 565.114964][ T9060] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 565.122911][ T9060] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 565.130858][ T9060] R13: 0000000000000574 R14: 00000000004c7c4f R15: 0000000000000001 10:08:56 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0xc0045878, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:56 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0xc0045878, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:56 executing program 0 (fault-call:1 fault-nth:2): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000040)={0x2, {0xf}}) [ 565.292412][ T9079] FAULT_INJECTION: forcing a failure. [ 565.292412][ T9079] name failslab, interval 1, probability 0, space 0, times 0 [ 565.357267][ T9079] CPU: 1 PID: 9079 Comm: syz-executor.0 Not tainted 5.6.0-rc2-syzkaller #0 [ 565.365908][ T9079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 565.375964][ T9079] Call Trace: [ 565.379270][ T9079] dump_stack+0x1fb/0x318 [ 565.383684][ T9079] should_fail+0x4b8/0x660 [ 565.388130][ T9079] __should_failslab+0xb9/0xe0 [ 565.393005][ T9079] ? tomoyo_encode2+0x262/0x580 [ 565.397865][ T9079] should_failslab+0x9/0x20 [ 565.402374][ T9079] __kmalloc+0x7a/0x340 10:08:56 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0xc0045878, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) [ 565.406548][ T9079] tomoyo_encode2+0x262/0x580 [ 565.411258][ T9079] tomoyo_realpath_from_path+0x65c/0x6b0 [ 565.416923][ T9079] tomoyo_path_number_perm+0x18f/0x690 [ 565.422433][ T9079] ? smack_file_ioctl+0x225/0x2e0 [ 565.427486][ T9079] tomoyo_file_ioctl+0x23/0x30 [ 565.432288][ T9079] security_file_ioctl+0x68/0xd0 [ 565.432308][ T9079] __se_sys_ioctl+0x4e/0x190 [ 565.432321][ T9079] ? do_syscall_64+0x1d/0x1c0 [ 565.432338][ T9079] __x64_sys_ioctl+0x7b/0x90 [ 565.432352][ T9079] do_syscall_64+0xf7/0x1c0 [ 565.432371][ T9079] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 565.432381][ T9079] RIP: 0033:0x45c429 [ 565.432393][ T9079] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 565.432399][ T9079] RSP: 002b:00007fabd7a25c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 565.432409][ T9079] RAX: ffffffffffffffda RBX: 00007fabd7a266d4 RCX: 000000000045c429 [ 565.432416][ T9079] RDX: 0000000020000040 RSI: 0000000000004b47 RDI: 0000000000000003 [ 565.432422][ T9079] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 565.432429][ T9079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 565.432435][ T9079] R13: 0000000000000574 R14: 00000000004c7c4f R15: 0000000000000002 [ 565.468520][ T9079] ERROR: Out of memory at tomoyo_realpath_from_path. 10:08:56 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1524}, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xd, 0x0, 0x0, 0xffffffffffffff52) ioctl$KVM_NMI(r2, 0xae9a) syz_mount_image$cifs(&(0x7f0000000040)='cifs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x4100) 10:08:56 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x400454ca, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:56 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0xc0045878, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:56 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0xc0189436, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:56 executing program 0 (fault-call:1 fault-nth:3): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000040)={0x2, {0xf}}) 10:08:56 executing program 3: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001800210000000000f4e800"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 10:08:56 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0xc01064bd, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) [ 565.952400][ T9221] FAULT_INJECTION: forcing a failure. [ 565.952400][ T9221] name failslab, interval 1, probability 0, space 0, times 0 10:08:57 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x40049409, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:57 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0xc020660b, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) [ 566.017653][ T9221] CPU: 0 PID: 9221 Comm: syz-executor.0 Not tainted 5.6.0-rc2-syzkaller #0 [ 566.026286][ T9221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 566.036352][ T9221] Call Trace: [ 566.039674][ T9221] dump_stack+0x1fb/0x318 [ 566.044022][ T9221] should_fail+0x4b8/0x660 [ 566.048464][ T9221] __should_failslab+0xb9/0xe0 [ 566.053356][ T9221] should_failslab+0x9/0x20 [ 566.057889][ T9221] kmem_cache_alloc_trace+0x5d/0x2f0 [ 566.063275][ T9221] ? vt_do_kdsk_ioctl+0x4b9/0xdd0 [ 566.068315][ T9221] vt_do_kdsk_ioctl+0x4b9/0xdd0 [ 566.073191][ T9221] vt_ioctl+0xbf5/0x3a70 [ 566.077441][ T9221] ? rcu_lock_release+0x9/0x30 [ 566.082198][ T9221] ? tomoyo_path_number_perm+0x58f/0x690 [ 566.087831][ T9221] ? tty_jobctrl_ioctl+0x1ea/0xc00 [ 566.093050][ T9221] tty_ioctl+0xee6/0x15c0 [ 566.097389][ T9221] ? tomoyo_file_ioctl+0x23/0x30 [ 566.102315][ T9221] ? tty_do_resize+0x180/0x180 [ 566.107066][ T9221] __se_sys_ioctl+0x113/0x190 [ 566.111733][ T9221] __x64_sys_ioctl+0x7b/0x90 [ 566.116310][ T9221] do_syscall_64+0xf7/0x1c0 [ 566.120800][ T9221] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 566.126675][ T9221] RIP: 0033:0x45c429 [ 566.130550][ T9221] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 566.150171][ T9221] RSP: 002b:00007fabd7a25c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 566.158569][ T9221] RAX: ffffffffffffffda RBX: 00007fabd7a266d4 RCX: 000000000045c429 10:08:57 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0xc0189436, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) [ 566.166556][ T9221] RDX: 0000000020000040 RSI: 0000000000004b47 RDI: 0000000000000003 [ 566.174520][ T9221] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 566.182472][ T9221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 566.190484][ T9221] R13: 0000000000000574 R14: 00000000004c7c4f R15: 0000000000000003 10:08:57 executing program 0 (fault-call:1 fault-nth:4): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000040)={0x2, {0xf}}) 10:08:57 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4008ae89, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:57 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1524}, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xd, 0x0, 0x0, 0xffffffffffffff52) ioctl$KVM_NMI(r2, 0xae9a) syz_mount_image$cifs(&(0x7f0000000040)='cifs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x4200) 10:08:57 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x3, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:57 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0xc018aa3f, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:57 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000040)={0x2, {0xf}}) 10:08:57 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4008ae90, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:57 executing program 3: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001800210000000000f4e800"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 10:08:58 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x2, &(0x7f0000000040)={0x2, {0xf}}) 10:08:58 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0xc020660b, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:58 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x4, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:58 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4008ae93, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:58 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x40186366, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:58 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x10, &(0x7f0000000040)={0x2, {0xf}}) 10:08:58 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1524}, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xd, 0x0, 0x0, 0xffffffffffffff52) ioctl$KVM_NMI(r2, 0xae9a) syz_mount_image$cifs(&(0x7f0000000040)='cifs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x4300) 10:08:58 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0xc020aa00, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:58 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x5, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:58 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4020940d, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:58 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b2f, &(0x7f0000000040)={0x2, {0xf}}) 10:08:58 executing program 3: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001800210000000000f4e800"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 10:08:59 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x6, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:59 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b30, &(0x7f0000000040)={0x2, {0xf}}) 10:08:59 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4020ae46, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:59 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0xc020aa04, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:59 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x7, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:59 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b31, &(0x7f0000000040)={0x2, {0xf}}) 10:08:59 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b32, &(0x7f0000000040)={0x2, {0xf}}) 10:08:59 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x3, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:59 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4090ae82, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:59 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x8, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:08:59 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1524}, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xd, 0x0, 0x0, 0xffffffffffffff52) ioctl$KVM_NMI(r2, 0xae9a) syz_mount_image$cifs(&(0x7f0000000040)='cifs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x4400) 10:08:59 executing program 3: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001800210000000000f4e800001c"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 10:09:00 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b33, &(0x7f0000000040)={0x2, {0xf}}) 10:09:00 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x4, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:09:00 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4138ae84, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:09:00 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0xa, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:09:00 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4400ae8f, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:09:00 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b34, &(0x7f0000000040)={0x2, {0xf}}) 10:09:00 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0xb, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:09:00 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x5, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:09:00 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b35, &(0x7f0000000040)={0x2, {0xf}}) 10:09:00 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x80045432, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:09:01 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1524}, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xd, 0x0, 0x0, 0xffffffffffffff52) ioctl$KVM_NMI(r2, 0xae9a) syz_mount_image$cifs(&(0x7f0000000040)='cifs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x4500) 10:09:01 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0xc, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:09:01 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x6, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:09:01 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b36, &(0x7f0000000040)={0x2, {0xf}}) 10:09:01 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x80045440, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:09:01 executing program 3: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001800210000000000f4e80000"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 10:09:01 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0xd, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:09:01 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x7, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:09:01 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b37, &(0x7f0000000040)={0x2, {0xf}}) 10:09:01 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x80086301, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:09:01 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0xe, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:09:01 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x8, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:09:02 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1524}, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xd, 0x0, 0x0, 0xffffffffffffff52) ioctl$KVM_NMI(r2, 0xae9a) syz_mount_image$cifs(&(0x7f0000000040)='cifs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x4600) 10:09:02 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b3a, &(0x7f0000000040)={0x2, {0xf}}) 10:09:02 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x8138ae83, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:09:02 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0xf, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:09:02 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0xa, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:09:02 executing program 3: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001800210000000000f4e80000"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 10:09:02 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0xc0045878, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:09:02 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b3b, &(0x7f0000000040)={0x2, {0xf}}) 10:09:02 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x11, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:09:02 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0xb, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:09:02 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0xc0045878, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:09:02 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:09:03 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1524}, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xd, 0x0, 0x0, 0xffffffffffffff52) ioctl$KVM_NMI(r2, 0xae9a) syz_mount_image$cifs(&(0x7f0000000040)='cifs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x4700) 10:09:03 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b3c, &(0x7f0000000040)={0x2, {0xf}}) 10:09:03 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0xc, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:09:03 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x2, 0x0, 0x0, 0x300}}) 10:09:03 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0xc008ae05, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:09:03 executing program 3: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001800210000000000f4e80000"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 10:09:03 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0xd, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:09:03 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b3d, &(0x7f0000000040)={0x2, {0xf}}) 10:09:03 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x3, 0x0, 0x0, 0x300}}) 10:09:03 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0xc0189436, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:09:03 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x4, 0x0, 0x0, 0x300}}) 10:09:03 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b40, &(0x7f0000000040)={0x2, {0xf}}) 10:09:04 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1524}, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xd, 0x0, 0x0, 0xffffffffffffff52) ioctl$KVM_NMI(r2, 0xae9a) syz_mount_image$cifs(&(0x7f0000000040)='cifs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x4800) 10:09:04 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0xc018aa3f, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:09:04 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0xe, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:09:04 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b41, &(0x7f0000000040)={0x2, {0xf}}) 10:09:04 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x5, 0x0, 0x0, 0x300}}) 10:09:04 executing program 3: pipe(&(0x7f0000000340)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001800210000000000f4e800001c"], 0x1}}, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) splice(r0, 0x0, r1, 0x0, 0x4ffe0, 0x0) 10:09:04 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x6, 0x0, 0x0, 0x300}}) 10:09:04 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0xc020660b, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:09:04 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0xf, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:09:04 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b44, &(0x7f0000000040)={0x2, {0xf}}) 10:09:04 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b45, &(0x7f0000000040)={0x2, {0xf}}) 10:09:04 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x7, 0x0, 0x0, 0x300}}) 10:09:05 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1524}, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xd, 0x0, 0x0, 0xffffffffffffff52) ioctl$KVM_NMI(r2, 0xae9a) syz_mount_image$cifs(&(0x7f0000000040)='cifs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x4900) 10:09:05 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x11, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:09:05 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0xc020aa00, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:09:05 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b46, &(0x7f0000000040)={0x2, {0xf}}) 10:09:05 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x8, 0x0, 0x0, 0x300}}) 10:09:05 executing program 3: pipe(&(0x7f0000000340)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001800210000000000f4e800001c"], 0x1}}, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) splice(r0, 0x0, r1, 0x0, 0x4ffe0, 0x0) 10:09:05 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0xc020aa04, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:09:05 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:09:05 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x9, 0x0, 0x0, 0x300}}) 10:09:05 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b48, &(0x7f0000000040)={0x2, {0xf}}) 10:09:05 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0xc028aa03, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:09:05 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x2, 0x0, 0x0, 0x300}}) 10:09:06 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0xa, 0x0, 0x0, 0x300}}) 10:09:06 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b49, &(0x7f0000000040)={0x2, {0xf}}) 10:09:06 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0xc040564b, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:09:06 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x3, 0x0, 0x0, 0x300}}) 10:09:06 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1524}, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xd, 0x0, 0x0, 0xffffffffffffff52) ioctl$KVM_NMI(r2, 0xae9a) syz_mount_image$cifs(&(0x7f0000000040)='cifs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x4a00) 10:09:06 executing program 3: pipe(&(0x7f0000000340)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001800210000000000f4e800001c"], 0x1}}, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) splice(r0, 0x0, r1, 0x0, 0x4ffe0, 0x0) 10:09:06 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b4a, &(0x7f0000000040)={0x2, {0xf}}) 10:09:06 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x3, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:09:06 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x4, 0x0, 0x0, 0x300}}) 10:09:06 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0xb, 0x0, 0x0, 0x300}}) 10:09:06 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0xc, 0x0, 0x0, 0x300}}) 10:09:06 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b4b, &(0x7f0000000040)={0x2, {0xf}}) 10:09:06 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x4, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:09:06 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x5, 0x0, 0x0, 0x300}}) 10:09:06 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0xd, 0x0, 0x0, 0x300}}) 10:09:06 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b4c, &(0x7f0000000040)={0x2, {0xf}}) 10:09:07 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1524}, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xd, 0x0, 0x0, 0xffffffffffffff52) ioctl$KVM_NMI(r2, 0xae9a) syz_mount_image$cifs(&(0x7f0000000040)='cifs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x4b00) 10:09:07 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x6, 0x0, 0x0, 0x300}}) 10:09:07 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x5, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:09:07 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0xe, 0x0, 0x0, 0x300}}) 10:09:07 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b4d, &(0x7f0000000040)={0x2, {0xf}}) 10:09:07 executing program 3: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001800210000000000f4e800001c"], 0x1}}, 0x0) write$binfmt_misc(r1, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 10:09:07 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b4e, &(0x7f0000000040)={0x2, {0xf}}) 10:09:07 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x7, 0x0, 0x0, 0x300}}) 10:09:07 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x6, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:09:07 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x10, 0x0, 0x0, 0x300}}) 10:09:07 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b52, &(0x7f0000000040)={0x2, {0xf}}) 10:09:07 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x8, 0x0, 0x0, 0x300}}) 10:09:08 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1524}, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xd, 0x0, 0x0, 0xffffffffffffff52) ioctl$KVM_NMI(r2, 0xae9a) syz_mount_image$cifs(&(0x7f0000000040)='cifs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x4c00) 10:09:08 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x7, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:09:08 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x11, 0x0, 0x0, 0x300}}) 10:09:08 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b60, &(0x7f0000000040)={0x2, {0xf}}) 10:09:08 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x9, 0x0, 0x0, 0x300}}) 10:09:08 executing program 3: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001800210000000000f4e800001c"], 0x1}}, 0x0) write$binfmt_misc(r1, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 10:09:08 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x12, 0x0, 0x0, 0x300}}) 10:09:08 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x8, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:09:08 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b61, &(0x7f0000000040)={0x2, {0xf}}) 10:09:08 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0xa, 0x0, 0x0, 0x300}}) 10:09:08 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x25, 0x0, 0x0, 0x300}}) 10:09:08 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0xa, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:09:09 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1524}, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xd, 0x0, 0x0, 0xffffffffffffff52) ioctl$KVM_NMI(r2, 0xae9a) syz_mount_image$cifs(&(0x7f0000000040)='cifs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x4d00) 10:09:09 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0xb, 0x0, 0x0, 0x300}}) 10:09:09 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x5c, 0x0, 0x0, 0x300}}) 10:09:09 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b62, &(0x7f0000000040)={0x2, {0xf}}) 10:09:09 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0xb, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:09:09 executing program 3: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001800210000000000f4e800001c"], 0x1}}, 0x0) write$binfmt_misc(r1, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 10:09:09 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0xc, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:09:09 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b63, &(0x7f0000000040)={0x2, {0xf}}) 10:09:09 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x300, 0x0, 0x0, 0x300}}) 10:09:09 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0xc, 0x0, 0x0, 0x300}}) 10:09:09 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0xd, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:09:09 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b64, &(0x7f0000000040)={0x2, {0xf}}) 10:09:10 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1524}, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xd, 0x0, 0x0, 0xffffffffffffff52) ioctl$KVM_NMI(r2, 0xae9a) syz_mount_image$cifs(&(0x7f0000000040)='cifs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x4e00) 10:09:10 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x500, 0x0, 0x0, 0x300}}) 10:09:10 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0xd, 0x0, 0x0, 0x300}}) 10:09:10 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0xe, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:09:10 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b65, &(0x7f0000000040)={0x2, {0xf}}) 10:09:10 executing program 3: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001800210000000000f4e800001c"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(0xffffffffffffffff, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 10:09:10 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b66, &(0x7f0000000040)={0x2, {0xf}}) 10:09:10 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0xf, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:09:10 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0xe, 0x0, 0x0, 0x300}}) 10:09:10 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x600, 0x0, 0x0, 0x300}}) 10:09:10 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x11, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:09:10 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x10, 0x0, 0x0, 0x300}}) 10:09:11 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1524}, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xd, 0x0, 0x0, 0xffffffffffffff52) ioctl$KVM_NMI(r2, 0xae9a) syz_mount_image$cifs(&(0x7f0000000040)='cifs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x4f00) 10:09:11 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b67, &(0x7f0000000040)={0x2, {0xf}}) 10:09:11 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x700, 0x0, 0x0, 0x300}}) 10:09:11 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:09:11 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x11, 0x0, 0x0, 0x300}}) 10:09:11 executing program 3: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001800210000000000f4e800001c"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(0xffffffffffffffff, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 10:09:11 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x12, 0x0, 0x0, 0x300}}) 10:09:11 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x2, 0x0, 0x0, 0x300}}) 10:09:11 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x900, 0x0, 0x0, 0x300}}) 10:09:11 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b68, &(0x7f0000000040)={0x2, {0xf}}) 10:09:11 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b69, &(0x7f0000000040)={0x2, {0xf}}) 10:09:11 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0xa00, 0x0, 0x0, 0x300}}) 10:09:12 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x25, 0x0, 0x0, 0x300}}) 10:09:12 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x3, 0x0, 0x0, 0x300}}) 10:09:12 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b6a, &(0x7f0000000040)={0x2, {0xf}}) 10:09:12 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0xb00, 0x0, 0x0, 0x300}}) 10:09:12 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1524}, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xd, 0x0, 0x0, 0xffffffffffffff52) ioctl$KVM_NMI(r2, 0xae9a) syz_mount_image$cifs(&(0x7f0000000040)='cifs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x5c00) 10:09:12 executing program 3: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001800210000000000f4e800001c"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(0xffffffffffffffff, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 10:09:12 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b6b, &(0x7f0000000040)={0x2, {0xf}}) 10:09:12 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x4, 0x0, 0x0, 0x300}}) 10:09:12 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x5c, 0x0, 0x0, 0x300}}) 10:09:12 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0xc00, 0x0, 0x0, 0x300}}) 10:09:12 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b6c, &(0x7f0000000040)={0x2, {0xf}}) 10:09:12 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x300, 0x0, 0x0, 0x300}}) 10:09:12 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0xd00, 0x0, 0x0, 0x300}}) 10:09:12 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x5, 0x0, 0x0, 0x300}}) 10:09:12 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b6d, &(0x7f0000000040)={0x2, {0xf}}) 10:09:12 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x6, 0x0, 0x0, 0x300}}) 10:09:13 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1524}, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xd, 0x0, 0x0, 0xffffffffffffff52) ioctl$KVM_NMI(r2, 0xae9a) syz_mount_image$cifs(&(0x7f0000000040)='cifs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x6400) 10:09:13 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b70, &(0x7f0000000040)={0x2, {0xf}}) 10:09:13 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x500, 0x0, 0x0, 0x300}}) 10:09:13 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0xe00, 0x0, 0x0, 0x300}}) 10:09:13 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x7, 0x0, 0x0, 0x300}}) 10:09:13 executing program 3: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001800210000000000f4e800001c"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 10:09:13 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x8, 0x0, 0x0, 0x300}}) 10:09:13 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b71, &(0x7f0000000040)={0x2, {0xf}}) 10:09:13 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x1100, 0x0, 0x0, 0x300}}) 10:09:13 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x600, 0x0, 0x0, 0x300}}) 10:09:13 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x9, 0x0, 0x0, 0x300}}) 10:09:13 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x700, 0x0, 0x0, 0x300}}) 10:09:14 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1524}, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xd, 0x0, 0x0, 0xffffffffffffff52) ioctl$KVM_NMI(r2, 0xae9a) syz_mount_image$cifs(&(0x7f0000000040)='cifs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x6500) 10:09:14 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b72, &(0x7f0000000040)={0x2, {0xf}}) 10:09:14 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x1200, 0x0, 0x0, 0x300}}) 10:09:14 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0xa, 0x0, 0x0, 0x300}}) 10:09:14 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x900, 0x0, 0x0, 0x300}}) 10:09:14 executing program 3: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001800210000000000f4e800001c"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 10:09:14 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0xb, 0x0, 0x0, 0x300}}) 10:09:14 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x2500, 0x0, 0x0, 0x300}}) 10:09:14 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0xa00, 0x0, 0x0, 0x300}}) 10:09:14 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4bfa, &(0x7f0000000040)={0x2, {0xf}}) 10:09:14 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4bfb, &(0x7f0000000040)={0x2, {0xf}}) 10:09:14 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x3f00, 0x0, 0x0, 0x300}}) 10:09:15 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1524}, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xd, 0x0, 0x0, 0xffffffffffffff52) ioctl$KVM_NMI(r2, 0xae9a) syz_mount_image$cifs(&(0x7f0000000040)='cifs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x6600) 10:09:15 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0xb00, 0x0, 0x0, 0x300}}) 10:09:15 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0xc, 0x0, 0x0, 0x300}}) 10:09:15 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4c01, &(0x7f0000000040)={0x2, {0xf}}) 10:09:15 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x5c00, 0x0, 0x0, 0x300}}) 10:09:15 executing program 3: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001800210000000000f4e800001c"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 10:09:15 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0xd, 0x0, 0x0, 0x300}}) 10:09:15 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0xc00, 0x0, 0x0, 0x300}}) 10:09:15 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5409, &(0x7f0000000040)={0x2, {0xf}}) 10:09:15 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:09:15 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0xe, 0x0, 0x0, 0x300}}) 10:09:15 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x2, 0x0, 0x300}}) 10:09:16 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1524}, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xd, 0x0, 0x0, 0xffffffffffffff52) ioctl$KVM_NMI(r2, 0xae9a) syz_mount_image$cifs(&(0x7f0000000040)='cifs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x6700) 10:09:16 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x540b, &(0x7f0000000040)={0x2, {0xf}}) 10:09:16 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0xd00, 0x0, 0x0, 0x300}}) 10:09:16 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x3, 0x0, 0x300}}) 10:09:16 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x10, 0x0, 0x0, 0x300}}) 10:09:16 executing program 3: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001800210000000000f4e800001c"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 10:09:16 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x11, 0x0, 0x0, 0x300}}) 10:09:16 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0xe00, 0x0, 0x0, 0x300}}) 10:09:16 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x540c, &(0x7f0000000040)={0x2, {0xf}}) 10:09:16 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x4, 0x0, 0x300}}) 10:09:16 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x12, 0x0, 0x0, 0x300}}) 10:09:16 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x1100, 0x0, 0x0, 0x300}}) 10:09:17 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1524}, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xd, 0x0, 0x0, 0xffffffffffffff52) ioctl$KVM_NMI(r2, 0xae9a) syz_mount_image$cifs(&(0x7f0000000040)='cifs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x780f) 10:09:17 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x5, 0x0, 0x300}}) 10:09:17 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x540d, &(0x7f0000000040)={0x2, {0xf}}) 10:09:17 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x1200, 0x0, 0x0, 0x300}}) 10:09:17 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x25, 0x0, 0x0, 0x300}}) 10:09:17 executing program 3: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001800210000000000f4e800001c"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 10:09:17 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x5c, 0x0, 0x0, 0x300}}) 10:09:17 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x540e, &(0x7f0000000040)={0x2, {0xf}}) 10:09:17 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x2500, 0x0, 0x0, 0x300}}) 10:09:17 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x6, 0x0, 0x300}}) 10:09:17 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x540f, &(0x7f0000000040)={0x2, {0xf}}) 10:09:17 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x300, 0x0, 0x0, 0x300}}) 10:09:18 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1524}, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xd, 0x0, 0x0, 0xffffffffffffff52) ioctl$KVM_NMI(r2, 0xae9a) syz_mount_image$cifs(&(0x7f0000000040)='cifs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x7c0f) 10:09:18 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x5c00, 0x0, 0x0, 0x300}}) 10:09:18 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x7, 0x0, 0x300}}) 10:09:18 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5410, &(0x7f0000000040)={0x2, {0xf}}) 10:09:18 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x500, 0x0, 0x0, 0x300}}) 10:09:18 executing program 3: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001800210000000000f4e800001c"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 10:09:18 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x600, 0x0, 0x0, 0x300}}) 10:09:18 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5412, &(0x7f0000000040)={0x2, {0xf}}) 10:09:18 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x8, 0x0, 0x300}}) 10:09:18 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:09:18 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x700, 0x0, 0x0, 0x300}}) 10:09:18 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5413, &(0x7f0000000040)={0x2, {0xf}}) 10:09:19 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x9, 0x0, 0x300}}) 10:09:19 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x2, 0x0, 0x300}}) 10:09:19 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x900, 0x0, 0x0, 0x300}}) 10:09:19 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5414, &(0x7f0000000040)={0x2, {0xf}}) 10:09:19 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1524}, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xd, 0x0, 0x0, 0xffffffffffffff52) ioctl$KVM_NMI(r2, 0xae9a) syz_mount_image$cifs(&(0x7f0000000040)='cifs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x8004) 10:09:19 executing program 3: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001800210000000000f4e800001c"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 10:09:19 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x3, 0x0, 0x300}}) 10:09:19 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0xa, 0x0, 0x300}}) 10:09:19 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5415, &(0x7f0000000040)={0x2, {0xf}}) 10:09:19 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0xa00, 0x0, 0x0, 0x300}}) 10:09:19 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5416, &(0x7f0000000040)={0x2, {0xf}}) 10:09:19 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0xb00, 0x0, 0x0, 0x300}}) 10:09:19 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0xb, 0x0, 0x300}}) 10:09:20 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x4, 0x0, 0x300}}) 10:09:20 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0xc, 0x0, 0x300}}) 10:09:20 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5417, &(0x7f0000000040)={0x2, {0xf}}) 10:09:20 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1524}, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xd, 0x0, 0x0, 0xffffffffffffff52) ioctl$KVM_NMI(r2, 0xae9a) syz_mount_image$cifs(&(0x7f0000000040)='cifs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xa900) 10:09:20 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0xc00, 0x0, 0x0, 0x300}}) 10:09:20 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x5, 0x0, 0x300}}) 10:09:20 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0xd, 0x0, 0x300}}) 10:09:20 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5418, &(0x7f0000000040)={0x2, {0xf}}) 10:09:20 executing program 3: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001800210000000000f4e800001c"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 10:09:20 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x6, 0x0, 0x300}}) 10:09:20 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0xe, 0x0, 0x300}}) 10:09:20 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541b, &(0x7f0000000040)={0x2, {0xf}}) 10:09:20 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0xd00, 0x0, 0x0, 0x300}}) 10:09:20 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x10, 0x0, 0x300}}) 10:09:21 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x7, 0x0, 0x300}}) 10:09:21 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf}}) 10:09:21 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0xe00, 0x0, 0x0, 0x300}}) 10:09:21 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x8, 0x0, 0x300}}) 10:09:21 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x11, 0x0, 0x300}}) 10:09:21 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1524}, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xd, 0x0, 0x0, 0xffffffffffffff52) ioctl$KVM_NMI(r2, 0xae9a) syz_mount_image$cifs(&(0x7f0000000040)='cifs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xd800) 10:09:21 executing program 3: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001800210000000000f4e800001c"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 10:09:21 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x12, 0x0, 0x300}}) 10:09:21 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x1100, 0x0, 0x0, 0x300}}) 10:09:21 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x9, 0x0, 0x300}}) 10:09:21 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541d, &(0x7f0000000040)={0x2, {0xf}}) 10:09:22 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x25, 0x0, 0x300}}) 10:09:22 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0xa, 0x0, 0x300}}) 10:09:22 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541e, &(0x7f0000000040)={0x2, {0xf}}) 10:09:22 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x1200, 0x0, 0x0, 0x300}}) 10:09:22 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541e, &(0x7f0000000040)={0x2, {0xf}}) 10:09:22 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5421, &(0x7f0000000040)={0x2, {0xf}}) 10:09:22 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1524}, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xd, 0x0, 0x0, 0xffffffffffffff52) ioctl$KVM_NMI(r2, 0xae9a) syz_mount_image$cifs(&(0x7f0000000040)='cifs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xd810) 10:09:22 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x2500, 0x0, 0x0, 0x300}}) 10:09:22 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0xb, 0x0, 0x300}}) 10:09:22 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x5c, 0x0, 0x300}}) 10:09:22 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5422, &(0x7f0000000040)={0x2, {0xf}}) 10:09:22 executing program 3: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001800210000000000f4e800001c"], 0x1}}, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x4ffe0, 0x0) 10:09:22 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5423, &(0x7f0000000040)={0x2, {0xf}}) 10:09:22 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x5c00, 0x0, 0x0, 0x300}}) 10:09:23 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x300, 0x0, 0x300}}) 10:09:23 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0xc, 0x0, 0x300}}) 10:09:23 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:09:23 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0xd, 0x0, 0x300}}) 10:09:23 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1524}, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xd, 0x0, 0x0, 0xffffffffffffff52) ioctl$KVM_NMI(r2, 0xae9a) syz_mount_image$cifs(&(0x7f0000000040)='cifs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xe0fe) 10:09:23 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x500, 0x0, 0x300}}) 10:09:23 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5424, &(0x7f0000000040)={0x2, {0xf}}) 10:09:23 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x2, 0x0, 0x300}}) 10:09:23 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0xe, 0x0, 0x300}}) 10:09:23 executing program 3: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001800210000000000f4e800001c"], 0x1}}, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x4ffe0, 0x0) 10:09:24 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x600, 0x0, 0x300}}) 10:09:24 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5425, &(0x7f0000000040)={0x2, {0xf}}) 10:09:24 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x3, 0x0, 0x300}}) 10:09:24 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x10, 0x0, 0x300}}) 10:09:24 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x700, 0x0, 0x300}}) 10:09:24 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x4, 0x0, 0x300}}) 10:09:24 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1524}, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xd, 0x0, 0x0, 0xffffffffffffff52) ioctl$KVM_NMI(r2, 0xae9a) syz_mount_image$cifs(&(0x7f0000000040)='cifs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xe803) 10:09:24 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x11, 0x0, 0x300}}) 10:09:24 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5427, &(0x7f0000000040)={0x2, {0xf}}) 10:09:24 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x900, 0x0, 0x300}}) 10:09:24 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x5, 0x0, 0x300}}) 10:09:24 executing program 3: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001800210000000000f4e800001c"], 0x1}}, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x4ffe0, 0x0) 10:09:25 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5428, &(0x7f0000000040)={0x2, {0xf}}) 10:09:25 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x12, 0x0, 0x300}}) 10:09:25 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x6, 0x0, 0x300}}) 10:09:25 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0xa00, 0x0, 0x300}}) 10:09:25 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5429, &(0x7f0000000040)={0x2, {0xf}}) 10:09:25 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5437, &(0x7f0000000040)={0x2, {0xf}}) 10:09:26 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1524}, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xd, 0x0, 0x0, 0xffffffffffffff52) ioctl$KVM_NMI(r2, 0xae9a) syz_mount_image$cifs(&(0x7f0000000040)='cifs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xff0f) 10:09:26 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x7, 0x0, 0x300}}) 10:09:26 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x25, 0x0, 0x300}}) 10:09:26 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0xb00, 0x0, 0x300}}) 10:09:26 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5441, &(0x7f0000000040)={0x2, {0xf}}) 10:09:26 executing program 3: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001800210000000000f4e800001c"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe0, 0x0) 10:09:26 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0xc00, 0x0, 0x300}}) 10:09:26 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x8, 0x0, 0x300}}) 10:09:26 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5450, &(0x7f0000000040)={0x2, {0xf}}) 10:09:26 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x5c, 0x0, 0x300}}) 10:09:26 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x9, 0x0, 0x300}}) 10:09:26 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0xd00, 0x0, 0x300}}) 10:09:27 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1524}, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xd, 0x0, 0x0, 0xffffffffffffff52) ioctl$KVM_NMI(r2, 0xae9a) syz_mount_image$cifs(&(0x7f0000000040)='cifs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x40000) 10:09:27 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x300, 0x0, 0x300}}) 10:09:27 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5451, &(0x7f0000000040)={0x2, {0xf}}) 10:09:27 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0xe00, 0x0, 0x300}}) 10:09:27 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0xa, 0x0, 0x300}}) 10:09:27 executing program 3: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001800210000000000f4e800001c"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe0, 0x0) 10:09:27 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x500, 0x0, 0x300}}) 10:09:27 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5452, &(0x7f0000000040)={0x2, {0xf}}) 10:09:27 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x1100, 0x0, 0x300}}) 10:09:27 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0xb, 0x0, 0x300}}) 10:09:27 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x600, 0x0, 0x300}}) 10:09:27 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x545d, &(0x7f0000000040)={0x2, {0xf}}) 10:09:28 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1524}, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xd, 0x0, 0x0, 0xffffffffffffff52) ioctl$KVM_NMI(r2, 0xae9a) syz_mount_image$cifs(&(0x7f0000000040)='cifs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x47700) 10:09:28 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5460, &(0x7f0000000040)={0x2, {0xf}}) 10:09:28 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x1200, 0x0, 0x300}}) 10:09:28 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0xc, 0x0, 0x300}}) 10:09:28 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x700, 0x0, 0x300}}) 10:09:28 executing program 3: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001800210000000000f4e800001c"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe0, 0x0) 10:09:28 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0xd, 0x0, 0x300}}) 10:09:28 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x2500, 0x0, 0x300}}) 10:09:28 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x900, 0x0, 0x300}}) 10:09:28 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5600, &(0x7f0000000040)={0x2, {0xf}}) 10:09:28 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5601, &(0x7f0000000040)={0x2, {0xf}}) 10:09:28 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0xe, 0x0, 0x300}}) 10:09:29 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1524}, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xd, 0x0, 0x0, 0xffffffffffffff52) ioctl$KVM_NMI(r2, 0xae9a) syz_mount_image$cifs(&(0x7f0000000040)='cifs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xc0000) 10:09:29 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0xa00, 0x0, 0x300}}) 10:09:29 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x3f00, 0x0, 0x300}}) 10:09:29 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5602, &(0x7f0000000040)={0x2, {0xf}}) 10:09:29 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x10, 0x0, 0x300}}) 10:09:29 executing program 3: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001800210000000000f4e800001c"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x0, 0x0) 10:09:29 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5603, &(0x7f0000000040)={0x2, {0xf}}) 10:09:29 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x5c00, 0x0, 0x300}}) 10:09:29 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x11, 0x0, 0x300}}) 10:09:29 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0xb00, 0x0, 0x300}}) 10:09:29 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5605, &(0x7f0000000040)={0x2, {0xf}}) 10:09:29 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x12, 0x0, 0x300}}) 10:09:30 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1524}, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xd, 0x0, 0x0, 0xffffffffffffff52) ioctl$KVM_NMI(r2, 0xae9a) syz_mount_image$cifs(&(0x7f0000000040)='cifs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xfffff) 10:09:30 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0xc00, 0x0, 0x300}}) 10:09:30 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:09:30 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5606, &(0x7f0000000040)={0x2, {0xf}}) 10:09:30 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x25, 0x0, 0x300}}) 10:09:30 executing program 3: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001800210000000000f4e800001c"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x0, 0x0) 10:09:30 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0xd00, 0x0, 0x300}}) 10:09:30 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x5c, 0x0, 0x300}}) 10:09:30 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x2, 0x300}}) 10:09:30 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5607, &(0x7f0000000040)={0x2, {0xf}}) 10:09:30 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0xe00, 0x0, 0x300}}) 10:09:30 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x3, 0x300}}) 10:09:31 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1524}, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xd, 0x0, 0x0, 0xffffffffffffff52) ioctl$KVM_NMI(r2, 0xae9a) syz_mount_image$cifs(&(0x7f0000000040)='cifs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x100000) 10:09:31 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5608, &(0x7f0000000040)={0x2, {0xf}}) 10:09:31 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x300, 0x0, 0x300}}) 10:09:31 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x1100, 0x0, 0x300}}) 10:09:31 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x4, 0x300}}) 10:09:31 executing program 3: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001800210000000000f4e800001c"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x0, 0x0) 10:09:31 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x1200, 0x0, 0x300}}) 10:09:31 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x500, 0x0, 0x300}}) 10:09:31 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x5, 0x300}}) 10:09:31 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5609, &(0x7f0000000040)={0x2, {0xf}}) 10:09:31 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x6, 0x300}}) 10:09:31 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x560a, &(0x7f0000000040)={0x2, {0xf}}) 10:09:32 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1524}, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xd, 0x0, 0x0, 0xffffffffffffff52) ioctl$KVM_NMI(r2, 0xae9a) syz_mount_image$cifs(&(0x7f0000000040)='cifs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x100080) 10:09:32 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x2500, 0x0, 0x300}}) 10:09:32 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x600, 0x0, 0x300}}) 10:09:32 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x7, 0x300}}) 10:09:32 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x560b, &(0x7f0000000040)={0x2, {0xf}}) 10:09:32 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b52, &(0x7f0000000040)={0x2, {0xf}}) 10:09:32 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x5c00, 0x0, 0x300}}) 10:09:32 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x700, 0x0, 0x300}}) 10:09:32 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x8, 0x300}}) 10:09:32 executing program 3 (fault-call:9 fault-nth:0): pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001800210000000000f4e800001c"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 10:09:32 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x560c, &(0x7f0000000040)={0x2, {0xf}}) 10:09:32 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x9, 0x300}}) [ 601.617227][T10991] FAULT_INJECTION: forcing a failure. [ 601.617227][T10991] name failslab, interval 1, probability 0, space 0, times 0 [ 601.637268][T10991] CPU: 0 PID: 10991 Comm: syz-executor.3 Not tainted 5.6.0-rc2-syzkaller #0 [ 601.645954][T10991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 601.656010][T10991] Call Trace: [ 601.659304][T10991] dump_stack+0x1fb/0x318 [ 601.663645][T10991] should_fail+0x4b8/0x660 [ 601.668082][T10991] __should_failslab+0xb9/0xe0 [ 601.672859][T10991] should_failslab+0x9/0x20 [ 601.677358][T10991] kmem_cache_alloc_node_trace+0x6e/0x2d0 [ 601.683072][T10991] ? __get_vm_area_node+0x1b3/0x3b0 [ 601.688263][T10991] __get_vm_area_node+0x1b3/0x3b0 [ 601.693303][T10991] __vmalloc_node_range+0xe1/0x840 [ 601.698426][T10991] ? netlink_sendmsg+0x64e/0xd40 [ 601.703362][T10991] ? rht_key_hashfn+0xf0/0xf0 [ 601.708035][T10991] ? netlink_hash+0xd0/0xd0 [ 601.712521][T10991] vmalloc+0x73/0x80 [ 601.716402][T10991] ? netlink_sendmsg+0x64e/0xd40 [ 601.721324][T10991] netlink_sendmsg+0x64e/0xd40 [ 601.726079][T10991] ? netlink_getsockopt+0x9f0/0x9f0 [ 601.731290][T10991] kernel_sendmsg+0x109/0x140 [ 601.735962][T10991] sock_no_sendpage+0x100/0x140 [ 601.740816][T10991] ? sock_no_mmap+0x10/0x10 [ 601.745370][T10991] sock_sendpage+0xd3/0x120 [ 601.749897][T10991] pipe_to_sendpage+0x238/0x320 [ 601.754756][T10991] ? sock_fasync+0x100/0x100 [ 601.759373][T10991] __splice_from_pipe+0x33d/0x870 [ 601.764398][T10991] ? generic_splice_sendpage+0x180/0x180 [ 601.770025][T10991] generic_splice_sendpage+0x114/0x180 [ 601.775471][T10991] ? iter_file_splice_write+0xe40/0xe40 [ 601.781005][T10991] __se_sys_splice+0x719/0x1ac0 [ 601.785841][T10991] ? __f_unlock_pos+0x19/0x20 [ 601.790521][T10991] ? check_preemption_disabled+0xb4/0x260 [ 601.796254][T10991] ? debug_smp_processor_id+0x9/0x20 [ 601.801531][T10991] ? debug_smp_processor_id+0x1c/0x20 [ 601.806909][T10991] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 601.813013][T10991] ? trace_irq_disable_rcuidle+0x23/0x1e0 [ 601.818724][T10991] __x64_sys_splice+0xe5/0x100 [ 601.823482][T10991] do_syscall_64+0xf7/0x1c0 [ 601.827974][T10991] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 601.833841][T10991] RIP: 0033:0x45c429 [ 601.837728][T10991] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 601.857307][T10991] RSP: 002b:00007fc0bfcc9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 601.865693][T10991] RAX: ffffffffffffffda RBX: 00007fc0bfcca6d4 RCX: 000000000045c429 [ 601.873657][T10991] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 601.881606][T10991] RBP: 000000000076bfc0 R08: 000000000004ffe0 R09: 0000000000000000 [ 601.889555][T10991] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 601.897519][T10991] R13: 0000000000000b9f R14: 00000000004ce230 R15: 0000000000000000 [ 601.908339][T10991] syz-executor.3: vmalloc: allocation failure: 4416 bytes, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 601.921802][T10991] CPU: 0 PID: 10991 Comm: syz-executor.3 Not tainted 5.6.0-rc2-syzkaller #0 [ 601.930471][T10991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 601.940518][T10991] Call Trace: [ 601.943814][T10991] dump_stack+0x1fb/0x318 [ 601.948151][T10991] warn_alloc+0x17d/0x2c0 [ 601.952489][T10991] ? __get_vm_area_node+0x1c3/0x3b0 [ 601.957710][T10991] __vmalloc_node_range+0x292/0x840 [ 601.962924][T10991] ? rht_key_hashfn+0xf0/0xf0 [ 601.967599][T10991] ? netlink_hash+0xd0/0xd0 [ 601.972556][T10991] vmalloc+0x73/0x80 [ 601.972570][T10991] ? netlink_sendmsg+0x64e/0xd40 [ 601.972580][T10991] netlink_sendmsg+0x64e/0xd40 [ 601.972611][T10991] ? netlink_getsockopt+0x9f0/0x9f0 [ 601.972625][T10991] kernel_sendmsg+0x109/0x140 [ 601.972643][T10991] sock_no_sendpage+0x100/0x140 [ 601.972669][T10991] ? sock_no_mmap+0x10/0x10 [ 601.972684][T10991] sock_sendpage+0xd3/0x120 [ 601.972706][T10991] pipe_to_sendpage+0x238/0x320 [ 601.972714][T10991] ? sock_fasync+0x100/0x100 [ 601.972733][T10991] __splice_from_pipe+0x33d/0x870 [ 601.972750][T10991] ? generic_splice_sendpage+0x180/0x180 [ 601.972804][T10991] generic_splice_sendpage+0x114/0x180 [ 601.972823][T10991] ? iter_file_splice_write+0xe40/0xe40 [ 601.972837][T10991] __se_sys_splice+0x719/0x1ac0 [ 601.972849][T10991] ? __f_unlock_pos+0x19/0x20 [ 601.972869][T10991] ? check_preemption_disabled+0xb4/0x260 [ 601.972877][T10991] ? debug_smp_processor_id+0x9/0x20 [ 601.972893][T10991] ? debug_smp_processor_id+0x1c/0x20 [ 601.972907][T10991] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 601.972926][T10991] ? trace_irq_disable_rcuidle+0x23/0x1e0 [ 601.972947][T10991] __x64_sys_splice+0xe5/0x100 [ 601.972968][T10991] do_syscall_64+0xf7/0x1c0 [ 601.972986][T10991] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 601.972996][T10991] RIP: 0033:0x45c429 [ 601.973006][T10991] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 601.973013][T10991] RSP: 002b:00007fc0bfcc9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 601.973023][T10991] RAX: ffffffffffffffda RBX: 00007fc0bfcca6d4 RCX: 000000000045c429 [ 601.973029][T10991] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 601.973035][T10991] RBP: 000000000076bfc0 R08: 000000000004ffe0 R09: 0000000000000000 [ 601.973041][T10991] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 601.973048][T10991] R13: 0000000000000b9f R14: 00000000004ce230 R15: 0000000000000000 [ 602.044173][T10991] Mem-Info: [ 602.044207][T10991] active_anon:181201 inactive_anon:220 isolated_anon:0 [ 602.044207][T10991] active_file:8224 inactive_file:72517 isolated_file:0 [ 602.044207][T10991] unevictable:0 dirty:125 writeback:0 unstable:0 [ 602.044207][T10991] slab_reclaimable:14819 slab_unreclaimable:109618 [ 602.044207][T10991] mapped:61005 shmem:300 pagetables:1941 bounce:0 [ 602.044207][T10991] free:1131462 free_pcp:571 free_cma:0 [ 602.044233][T10991] Node 0 active_anon:724804kB inactive_anon:880kB active_file:32756kB inactive_file:290068kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:244020kB dirty:500kB writeback:0kB shmem:1200kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 622592kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 602.044256][T10991] Node 1 active_anon:0kB inactive_anon:0kB active_file:140kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 602.044261][T10991] Node 0 DMA free:15904kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15904kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 602.044288][T10991] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 602.044306][T10991] Node 0 DMA32 free:745280kB min:36276kB low:45344kB high:54412kB reserved_highatomic:0KB active_anon:724804kB inactive_anon:880kB active_file:32676kB inactive_file:290068kB unevictable:0kB writepending:496kB present:3129332kB managed:2621444kB mlocked:0kB kernel_stack:9448kB pagetables:7764kB bounce:0kB free_pcp:2284kB local_pcp:928kB free_cma:0kB [ 602.044335][T10991] lowmem_reserve[]: 0 0 0 0 0 [ 602.044350][T10991] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:80kB inactive_file:0kB unevictable:0kB writepending:4kB present:786432kB managed:80kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 602.044378][T10991] lowmem_reserve[]: 0 0 0 0 0 [ 602.044395][T10991] Node 1 Normal free:3764664kB min:53608kB low:67008kB high:80408kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:140kB inactive_file:0kB unevictable:0kB writepending:0kB present:3932160kB managed:3870200kB mlocked:0kB kernel_stack:16kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 602.044422][T10991] lowmem_reserve[]: 0 0 0 0 0 [ 602.044439][T10991] Node 0 DMA: 0*4kB 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15904kB [ 602.044501][T10991] Node 0 DMA32: 4948*4kB (UE) 651*8kB (UME) 2084*16kB (UME) 551*32kB (UME) 311*64kB (UM) 106*128kB (UM) 29*256kB (UM) 27*512kB (UME) 6*1024kB (UME) 3*2048kB (UM) 147*4096kB (UM) = 745096kB [ 602.044569][T10991] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 602.044614][T10991] Node 1 Normal: 16*4kB (UE) 99*8kB (UE) 182*16kB (UME) 88*32kB (UME) 44*64kB (UME) 16*128kB (UE) 7*256kB (UM) 5*512kB (UE) 3*1024kB (UME) 3*2048kB (UME) 913*4096kB (M) = 3764664kB 10:09:33 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1524}, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xd, 0x0, 0x0, 0xffffffffffffff52) ioctl$KVM_NMI(r2, 0xae9a) syz_mount_image$cifs(&(0x7f0000000040)='cifs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x231860) 10:09:33 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:09:33 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x560d, &(0x7f0000000040)={0x2, {0xf}}) 10:09:33 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x900, 0x0, 0x300}}) 10:09:33 executing program 3 (fault-call:9 fault-nth:1): pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001800210000000000f4e800001c"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 602.044688][T10991] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 602.044697][T10991] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 602.044706][T10991] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 602.044715][T10991] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 602.044721][T10991] 50044 total pagecache pages [ 602.044726][T10991] 0 pages in swap cache [ 602.044734][T10991] Swap cache stats: add 0, delete 0, find 0/0 [ 602.044739][T10991] Free swap = 0kB [ 602.044744][T10991] Total swap = 0kB [ 602.044750][T10991] 1965979 pages RAM [ 602.044754][T10991] 0 pages HighMem/MovableOnly [ 602.044759][T10991] 339072 pages reserved [ 602.044763][T10991] 0 pages cma reserved [ 602.708699][T11122] FAULT_INJECTION: forcing a failure. [ 602.708699][T11122] name failslab, interval 1, probability 0, space 0, times 0 [ 602.748725][T11122] CPU: 0 PID: 11122 Comm: syz-executor.3 Not tainted 5.6.0-rc2-syzkaller #0 [ 602.748737][T11122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 602.767469][T11122] Call Trace: [ 602.770757][T11122] dump_stack+0x1fb/0x318 [ 602.775092][T11122] should_fail+0x4b8/0x660 [ 602.779523][T11122] __should_failslab+0xb9/0xe0 [ 602.784987][T11122] should_failslab+0x9/0x20 [ 602.789505][T11122] kmem_cache_alloc_node+0x65/0x280 [ 602.794695][T11122] ? alloc_vmap_area+0x136/0x1ad0 [ 602.799774][T11122] ? __might_sleep+0x8f/0x100 [ 602.804551][T11122] alloc_vmap_area+0x136/0x1ad0 [ 602.809452][T11122] ? rcu_read_lock_sched_held+0x10b/0x170 [ 602.815172][T11122] ? trace_kmalloc_node+0xd3/0x130 [ 602.820281][T11122] ? kmem_cache_alloc_node_trace+0x268/0x2d0 [ 602.826253][T11122] ? __get_vm_area_node+0x1b3/0x3b0 [ 602.831446][T11122] __get_vm_area_node+0x204/0x3b0 [ 602.836476][T11122] __vmalloc_node_range+0xe1/0x840 [ 602.841578][T11122] ? netlink_sendmsg+0x64e/0xd40 [ 602.846515][T11122] ? rht_key_hashfn+0xf0/0xf0 [ 602.851176][T11122] ? netlink_hash+0xd0/0xd0 [ 602.855679][T11122] vmalloc+0x73/0x80 [ 602.859578][T11122] ? netlink_sendmsg+0x64e/0xd40 [ 602.864507][T11122] netlink_sendmsg+0x64e/0xd40 [ 602.869284][T11122] ? netlink_getsockopt+0x9f0/0x9f0 [ 602.874472][T11122] kernel_sendmsg+0x109/0x140 [ 602.879148][T11122] sock_no_sendpage+0x100/0x140 [ 602.884001][T11122] ? sock_no_mmap+0x10/0x10 [ 602.888498][T11122] sock_sendpage+0xd3/0x120 [ 602.892998][T11122] pipe_to_sendpage+0x238/0x320 [ 602.897839][T11122] ? sock_fasync+0x100/0x100 [ 602.902425][T11122] __splice_from_pipe+0x33d/0x870 [ 602.907442][T11122] ? generic_splice_sendpage+0x180/0x180 [ 602.913103][T11122] generic_splice_sendpage+0x114/0x180 [ 602.918567][T11122] ? iter_file_splice_write+0xe40/0xe40 [ 602.924106][T11122] __se_sys_splice+0x719/0x1ac0 [ 602.928945][T11122] ? __f_unlock_pos+0x19/0x20 [ 602.933622][T11122] ? check_preemption_disabled+0xb4/0x260 [ 602.939333][T11122] ? debug_smp_processor_id+0x9/0x20 [ 602.944610][T11122] ? debug_smp_processor_id+0x1c/0x20 [ 602.950021][T11122] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 602.956086][T11122] ? trace_irq_disable_rcuidle+0x23/0x1e0 [ 602.961815][T11122] __x64_sys_splice+0xe5/0x100 [ 602.966573][T11122] do_syscall_64+0xf7/0x1c0 [ 602.971068][T11122] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 602.976949][T11122] RIP: 0033:0x45c429 [ 602.980842][T11122] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 10:09:34 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0xa, 0x300}}) [ 603.000438][T11122] RSP: 002b:00007fc0bfcc9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 603.008852][T11122] RAX: ffffffffffffffda RBX: 00007fc0bfcca6d4 RCX: 000000000045c429 [ 603.016814][T11122] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 603.024775][T11122] RBP: 000000000076bfc0 R08: 000000000004ffe0 R09: 0000000000000000 [ 603.032735][T11122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 603.040693][T11122] R13: 0000000000000b9f R14: 00000000004ce230 R15: 0000000000000001 10:09:34 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0xa00, 0x0, 0x300}}) 10:09:34 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x2, 0x300}}) 10:09:34 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0xb, 0x300}}) 10:09:34 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x560e, &(0x7f0000000040)={0x2, {0xf}}) 10:09:34 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0xb00, 0x0, 0x300}}) 10:09:34 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x3, 0x300}}) 10:09:34 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1524}, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xd, 0x0, 0x0, 0xffffffffffffff52) ioctl$KVM_NMI(r2, 0xae9a) syz_mount_image$cifs(&(0x7f0000000040)='cifs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x770400) 10:09:34 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0xc, 0x300}}) 10:09:34 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x4, 0x300}}) 10:09:34 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x560f, &(0x7f0000000040)={0x2, {0xf}}) 10:09:34 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0xc00, 0x0, 0x300}}) 10:09:34 executing program 3 (fault-call:9 fault-nth:2): pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001800210000000000f4e800001c"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 10:09:34 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0xd, 0x300}}) 10:09:34 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x6364, &(0x7f0000000040)={0x2, {0xf}}) 10:09:34 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0xd00, 0x0, 0x300}}) 10:09:34 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x5, 0x300}}) [ 603.700680][T11171] FAULT_INJECTION: forcing a failure. [ 603.700680][T11171] name failslab, interval 1, probability 0, space 0, times 0 [ 603.776086][T11171] CPU: 1 PID: 11171 Comm: syz-executor.3 Not tainted 5.6.0-rc2-syzkaller #0 [ 603.785777][T11171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 603.795836][T11171] Call Trace: [ 603.799127][T11171] dump_stack+0x1fb/0x318 [ 603.804054][T11171] should_fail+0x4b8/0x660 [ 603.808471][T11171] __should_failslab+0xb9/0xe0 [ 603.813221][T11171] should_failslab+0x9/0x20 [ 603.817703][T11171] kmem_cache_alloc_node_trace+0x6e/0x2d0 [ 603.823401][T11171] ? __kmalloc_node+0x3c/0x60 [ 603.828060][T11171] __kmalloc_node+0x3c/0x60 [ 603.832558][T11171] __vmalloc_node_range+0x2ba/0x840 [ 603.837753][T11171] ? rht_key_hashfn+0xf0/0xf0 [ 603.842410][T11171] ? netlink_hash+0xd0/0xd0 [ 603.846903][T11171] vmalloc+0x73/0x80 [ 603.850778][T11171] ? netlink_sendmsg+0x64e/0xd40 [ 603.855701][T11171] netlink_sendmsg+0x64e/0xd40 [ 603.860473][T11171] ? netlink_getsockopt+0x9f0/0x9f0 [ 603.865655][T11171] kernel_sendmsg+0x109/0x140 [ 603.870334][T11171] sock_no_sendpage+0x100/0x140 [ 603.875219][T11171] ? sock_no_mmap+0x10/0x10 [ 603.879711][T11171] sock_sendpage+0xd3/0x120 [ 603.884214][T11171] pipe_to_sendpage+0x238/0x320 [ 603.889051][T11171] ? sock_fasync+0x100/0x100 [ 603.893625][T11171] __splice_from_pipe+0x33d/0x870 [ 603.898638][T11171] ? generic_splice_sendpage+0x180/0x180 [ 603.904313][T11171] generic_splice_sendpage+0x114/0x180 [ 603.909795][T11171] ? iter_file_splice_write+0xe40/0xe40 [ 603.915331][T11171] __se_sys_splice+0x719/0x1ac0 [ 603.920186][T11171] ? __f_unlock_pos+0x19/0x20 [ 603.924888][T11171] ? check_preemption_disabled+0xb4/0x260 [ 603.932009][T11171] ? debug_smp_processor_id+0x9/0x20 [ 603.937321][T11171] ? debug_smp_processor_id+0x1c/0x20 [ 603.942683][T11171] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 603.948747][T11171] ? trace_irq_disable_rcuidle+0x23/0x1e0 [ 603.954455][T11171] __x64_sys_splice+0xe5/0x100 [ 603.959217][T11171] do_syscall_64+0xf7/0x1c0 [ 603.963748][T11171] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 603.970249][T11171] RIP: 0033:0x45c429 [ 603.974163][T11171] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 603.993761][T11171] RSP: 002b:00007fc0bfcc9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 604.002181][T11171] RAX: ffffffffffffffda RBX: 00007fc0bfcca6d4 RCX: 000000000045c429 [ 604.010135][T11171] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 604.018084][T11171] RBP: 000000000076bfc0 R08: 000000000004ffe0 R09: 0000000000000000 [ 604.026049][T11171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 604.034014][T11171] R13: 0000000000000b9f R14: 00000000004ce230 R15: 0000000000000002 10:09:35 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x6, 0x300}}) 10:09:35 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x6609, &(0x7f0000000040)={0x2, {0xf}}) 10:09:35 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1524}, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xd, 0x0, 0x0, 0xffffffffffffff52) ioctl$KVM_NMI(r2, 0xae9a) syz_mount_image$cifs(&(0x7f0000000040)='cifs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x80ffff) 10:09:35 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0xe00, 0x0, 0x300}}) 10:09:35 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0xe, 0x300}}) 10:09:35 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x7, 0x300}}) 10:09:35 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x8933, &(0x7f0000000040)={0x2, {0xf}}) 10:09:35 executing program 3 (fault-call:9 fault-nth:3): pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001800210000000000f4e800001c"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 10:09:35 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x8983, &(0x7f0000000040)={0x2, {0xf}}) 10:09:35 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x1100, 0x0, 0x300}}) 10:09:35 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x10, 0x300}}) [ 604.798403][T11223] FAULT_INJECTION: forcing a failure. [ 604.798403][T11223] name failslab, interval 1, probability 0, space 0, times 0 [ 604.827312][T11223] CPU: 0 PID: 11223 Comm: syz-executor.3 Not tainted 5.6.0-rc2-syzkaller #0 [ 604.836026][T11223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 604.836031][T11223] Call Trace: [ 604.836053][T11223] dump_stack+0x1fb/0x318 [ 604.836078][T11223] should_fail+0x4b8/0x660 [ 604.836107][T11223] __should_failslab+0xb9/0xe0 [ 604.836126][T11223] should_failslab+0x9/0x20 [ 604.836138][T11223] kmem_cache_alloc_node_trace+0x6e/0x2d0 [ 604.836150][T11223] ? __kmalloc_node+0x3c/0x60 [ 604.836170][T11223] __kmalloc_node+0x3c/0x60 [ 604.836188][T11223] __vmalloc_node_range+0x2ba/0x840 [ 604.836209][T11223] ? rht_key_hashfn+0xf0/0xf0 [ 604.836219][T11223] ? netlink_hash+0xd0/0xd0 [ 604.836241][T11223] vmalloc+0x73/0x80 [ 604.836265][T11223] ? netlink_sendmsg+0x64e/0xd40 [ 604.836277][T11223] netlink_sendmsg+0x64e/0xd40 [ 604.836310][T11223] ? netlink_getsockopt+0x9f0/0x9f0 [ 604.836333][T11223] kernel_sendmsg+0x109/0x140 [ 604.836357][T11223] sock_no_sendpage+0x100/0x140 [ 604.836388][T11223] ? sock_no_mmap+0x10/0x10 [ 604.836404][T11223] sock_sendpage+0xd3/0x120 [ 604.836427][T11223] pipe_to_sendpage+0x238/0x320 [ 604.836438][T11223] ? sock_fasync+0x100/0x100 [ 604.836461][T11223] __splice_from_pipe+0x33d/0x870 [ 604.836479][T11223] ? generic_splice_sendpage+0x180/0x180 [ 604.836525][T11223] generic_splice_sendpage+0x114/0x180 [ 604.836550][T11223] ? iter_file_splice_write+0xe40/0xe40 [ 604.836565][T11223] __se_sys_splice+0x719/0x1ac0 [ 604.836578][T11223] ? __f_unlock_pos+0x19/0x20 [ 604.836603][T11223] ? check_preemption_disabled+0xb4/0x260 [ 604.836613][T11223] ? debug_smp_processor_id+0x9/0x20 [ 604.836633][T11223] ? debug_smp_processor_id+0x1c/0x20 [ 604.836649][T11223] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 604.836671][T11223] ? trace_irq_disable_rcuidle+0x23/0x1e0 [ 604.836697][T11223] __x64_sys_splice+0xe5/0x100 [ 604.836720][T11223] do_syscall_64+0xf7/0x1c0 [ 604.836740][T11223] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 604.836751][T11223] RIP: 0033:0x45c429 [ 604.836798][T11223] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 604.836810][T11223] RSP: 002b:00007fc0bfcc9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 604.836824][T11223] RAX: ffffffffffffffda RBX: 00007fc0bfcca6d4 RCX: 000000000045c429 [ 604.836831][T11223] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 10:09:36 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x8, 0x300}}) [ 604.836844][T11223] RBP: 000000000076bfc0 R08: 000000000004ffe0 R09: 0000000000000000 [ 604.836852][T11223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 604.836859][T11223] R13: 0000000000000b9f R14: 00000000004ce230 R15: 0000000000000003 10:09:36 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x1200, 0x0, 0x300}}) 10:09:36 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x11, 0x300}}) 10:09:36 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1524}, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xd, 0x0, 0x0, 0xffffffffffffff52) ioctl$KVM_NMI(r2, 0xae9a) syz_mount_image$cifs(&(0x7f0000000040)='cifs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x1000000) 10:09:36 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x89a1, &(0x7f0000000040)={0x2, {0xf}}) 10:09:36 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x9, 0x300}}) 10:09:36 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x12, 0x300}}) 10:09:36 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x2500, 0x0, 0x300}}) 10:09:36 executing program 3 (fault-call:9 fault-nth:4): pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001800210000000000f4e800001c"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 10:09:36 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x5c00, 0x0, 0x300}}) 10:09:36 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0xa, 0x300}}) 10:09:36 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x400454ca, &(0x7f0000000040)={0x2, {0xf}}) 10:09:36 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x25, 0x300}}) [ 605.875404][T11375] FAULT_INJECTION: forcing a failure. [ 605.875404][T11375] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 605.941979][T11375] CPU: 1 PID: 11375 Comm: syz-executor.3 Not tainted 5.6.0-rc2-syzkaller #0 [ 605.950687][T11375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 605.960749][T11375] Call Trace: [ 605.964054][T11375] dump_stack+0x1fb/0x318 [ 605.968402][T11375] should_fail+0x4b8/0x660 [ 605.972843][T11375] should_fail_alloc_page+0x4f/0x60 [ 605.978045][T11375] prepare_alloc_pages+0x283/0x460 [ 605.983168][T11375] __alloc_pages_nodemask+0xb2/0x5d0 10:09:36 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0xb, 0x300}}) [ 605.988464][T11375] ? trace_kmalloc_node+0xd3/0x130 [ 605.993601][T11375] alloc_pages_current+0x2db/0x500 [ 605.998738][T11375] __vmalloc_node_range+0x3ef/0x840 [ 606.003963][T11375] vmalloc+0x73/0x80 [ 606.007860][T11375] ? netlink_sendmsg+0x64e/0xd40 [ 606.012798][T11375] netlink_sendmsg+0x64e/0xd40 [ 606.017580][T11375] ? netlink_getsockopt+0x9f0/0x9f0 [ 606.022791][T11375] kernel_sendmsg+0x109/0x140 [ 606.027482][T11375] sock_no_sendpage+0x100/0x140 [ 606.032355][T11375] ? sock_no_mmap+0x10/0x10 [ 606.036862][T11375] sock_sendpage+0xd3/0x120 [ 606.041372][T11375] pipe_to_sendpage+0x238/0x320 [ 606.046219][T11375] ? sock_fasync+0x100/0x100 [ 606.050845][T11375] __splice_from_pipe+0x33d/0x870 [ 606.050864][T11375] ? generic_splice_sendpage+0x180/0x180 [ 606.050906][T11375] generic_splice_sendpage+0x114/0x180 [ 606.050926][T11375] ? iter_file_splice_write+0xe40/0xe40 [ 606.050942][T11375] __se_sys_splice+0x719/0x1ac0 [ 606.050954][T11375] ? __f_unlock_pos+0x19/0x20 [ 606.050977][T11375] ? check_preemption_disabled+0xb4/0x260 [ 606.050987][T11375] ? debug_smp_processor_id+0x9/0x20 [ 606.051004][T11375] ? debug_smp_processor_id+0x1c/0x20 [ 606.051018][T11375] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 606.051040][T11375] ? trace_irq_disable_rcuidle+0x23/0x1e0 [ 606.051064][T11375] __x64_sys_splice+0xe5/0x100 [ 606.051086][T11375] do_syscall_64+0xf7/0x1c0 [ 606.051106][T11375] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 606.051115][T11375] RIP: 0033:0x45c429 [ 606.051126][T11375] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 606.051132][T11375] RSP: 002b:00007fc0bfcc9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 606.051143][T11375] RAX: ffffffffffffffda RBX: 00007fc0bfcca6d4 RCX: 000000000045c429 [ 606.051149][T11375] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 606.051155][T11375] RBP: 000000000076bfc0 R08: 000000000004ffe0 R09: 0000000000000000 [ 606.051161][T11375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 606.051168][T11375] R13: 0000000000000b9f R14: 00000000004ce230 R15: 0000000000000004 10:09:37 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:09:37 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1524}, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xd, 0x0, 0x0, 0xffffffffffffff52) ioctl$KVM_NMI(r2, 0xae9a) syz_mount_image$cifs(&(0x7f0000000040)='cifs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x1000080) 10:09:37 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x5c, 0x300}}) 10:09:37 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0xc, 0x300}}) 10:09:37 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x40049409, &(0x7f0000000040)={0x2, {0xf}}) 10:09:37 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x2, 0x300}}) 10:09:37 executing program 3 (fault-call:9 fault-nth:5): pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001800210000000000f4e800001c"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 10:09:37 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0xd, 0x300}}) 10:09:37 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x300, 0x300}}) 10:09:37 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x3, 0x300}}) 10:09:37 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x40186366, &(0x7f0000000040)={0x2, {0xf}}) [ 606.864491][T11524] FAULT_INJECTION: forcing a failure. [ 606.864491][T11524] name failslab, interval 1, probability 0, space 0, times 0 [ 606.930014][T11524] CPU: 1 PID: 11524 Comm: syz-executor.3 Not tainted 5.6.0-rc2-syzkaller #0 [ 606.938708][T11524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 606.948740][T11524] Call Trace: [ 606.952037][T11524] dump_stack+0x1fb/0x318 [ 606.956358][T11524] should_fail+0x4b8/0x660 [ 606.960767][T11524] __should_failslab+0xb9/0xe0 [ 606.965519][T11524] ? __build_skb+0x2a/0x2e0 [ 606.970009][T11524] should_failslab+0x9/0x20 [ 606.974524][T11524] kmem_cache_alloc+0x56/0x2e0 [ 606.979269][T11524] __build_skb+0x2a/0x2e0 [ 606.983578][T11524] netlink_sendmsg+0x664/0xd40 [ 606.988349][T11524] ? netlink_getsockopt+0x9f0/0x9f0 [ 606.993529][T11524] kernel_sendmsg+0x109/0x140 [ 607.002620][T11524] sock_no_sendpage+0x100/0x140 [ 607.007465][T11524] ? sock_no_mmap+0x10/0x10 [ 607.011941][T11524] sock_sendpage+0xd3/0x120 [ 607.016423][T11524] pipe_to_sendpage+0x238/0x320 [ 607.021253][T11524] ? sock_fasync+0x100/0x100 [ 607.025836][T11524] __splice_from_pipe+0x33d/0x870 [ 607.030839][T11524] ? generic_splice_sendpage+0x180/0x180 [ 607.036470][T11524] generic_splice_sendpage+0x114/0x180 [ 607.041923][T11524] ? iter_file_splice_write+0xe40/0xe40 [ 607.047457][T11524] __se_sys_splice+0x719/0x1ac0 [ 607.052331][T11524] ? __f_unlock_pos+0x19/0x20 [ 607.057028][T11524] ? check_preemption_disabled+0xb4/0x260 [ 607.062728][T11524] ? debug_smp_processor_id+0x9/0x20 [ 607.068000][T11524] ? debug_smp_processor_id+0x1c/0x20 [ 607.073355][T11524] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 607.079444][T11524] ? trace_irq_disable_rcuidle+0x23/0x1e0 [ 607.085155][T11524] __x64_sys_splice+0xe5/0x100 [ 607.089952][T11524] do_syscall_64+0xf7/0x1c0 [ 607.094449][T11524] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 607.100324][T11524] RIP: 0033:0x45c429 [ 607.104201][T11524] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 607.123855][T11524] RSP: 002b:00007fc0bfcc9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 607.132253][T11524] RAX: ffffffffffffffda RBX: 00007fc0bfcca6d4 RCX: 000000000045c429 [ 607.140209][T11524] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 607.148163][T11524] RBP: 000000000076bfc0 R08: 000000000004ffe0 R09: 0000000000000000 [ 607.156116][T11524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 607.164066][T11524] R13: 0000000000000b9f R14: 00000000004ce230 R15: 0000000000000005 10:09:38 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4018aebd, &(0x7f0000000040)={0x2, {0xf}}) 10:09:38 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x500, 0x300}}) 10:09:38 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1524}, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xd, 0x0, 0x0, 0xffffffffffffff52) ioctl$KVM_NMI(r2, 0xae9a) syz_mount_image$cifs(&(0x7f0000000040)='cifs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x2000000) 10:09:38 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x4, 0x300}}) 10:09:38 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0xe, 0x300}}) 10:09:38 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x600, 0x300}}) 10:09:38 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4020940d, &(0x7f0000000040)={0x2, {0xf}}) 10:09:38 executing program 3 (fault-call:9 fault-nth:6): pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001800210000000000f4e800001c"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 10:09:38 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x5, 0x300}}) [ 607.875544][T11572] FAULT_INJECTION: forcing a failure. [ 607.875544][T11572] name failslab, interval 1, probability 0, space 0, times 0 [ 607.913001][T11572] CPU: 0 PID: 11572 Comm: syz-executor.3 Not tainted 5.6.0-rc2-syzkaller #0 [ 607.921696][T11572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 607.931747][T11572] Call Trace: [ 607.935058][T11572] dump_stack+0x1fb/0x318 [ 607.939407][T11572] should_fail+0x4b8/0x660 [ 607.943849][T11572] __should_failslab+0xb9/0xe0 [ 607.948622][T11572] should_failslab+0x9/0x20 [ 607.953126][T11572] kmem_cache_alloc_node+0x65/0x280 [ 607.958321][T11572] ? __alloc_skb+0x9f/0x500 [ 607.962836][T11572] ? lock_acquire+0x154/0x250 [ 607.967527][T11572] __alloc_skb+0x9f/0x500 10:09:38 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x700, 0x300}}) 10:09:38 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x80045432, &(0x7f0000000040)={0x2, {0xf}}) [ 607.971866][T11572] ? __kasan_check_read+0x11/0x20 [ 607.976902][T11572] netlink_deliver_tap+0x3a9/0x860 [ 607.982044][T11572] netlink_unicast+0x740/0x920 [ 607.986827][T11572] netlink_sendmsg+0xa2b/0xd40 [ 607.992292][T11572] ? netlink_getsockopt+0x9f0/0x9f0 [ 607.997504][T11572] kernel_sendmsg+0x109/0x140 [ 608.002195][T11572] sock_no_sendpage+0x100/0x140 [ 608.007062][T11572] ? sock_no_mmap+0x10/0x10 [ 608.011589][T11572] sock_sendpage+0xd3/0x120 [ 608.011613][T11572] pipe_to_sendpage+0x238/0x320 10:09:39 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x10, 0x300}}) [ 608.011623][T11572] ? sock_fasync+0x100/0x100 [ 608.011640][T11572] __splice_from_pipe+0x33d/0x870 [ 608.011654][T11572] ? generic_splice_sendpage+0x180/0x180 [ 608.011691][T11572] generic_splice_sendpage+0x114/0x180 [ 608.011710][T11572] ? iter_file_splice_write+0xe40/0xe40 [ 608.011725][T11572] __se_sys_splice+0x719/0x1ac0 [ 608.011737][T11572] ? __f_unlock_pos+0x19/0x20 [ 608.011757][T11572] ? check_preemption_disabled+0xb4/0x260 [ 608.011775][T11572] ? debug_smp_processor_id+0x9/0x20 [ 608.011791][T11572] ? debug_smp_processor_id+0x1c/0x20 [ 608.011804][T11572] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 608.011825][T11572] ? trace_irq_disable_rcuidle+0x23/0x1e0 [ 608.011846][T11572] __x64_sys_splice+0xe5/0x100 [ 608.011865][T11572] do_syscall_64+0xf7/0x1c0 [ 608.011883][T11572] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 608.011893][T11572] RIP: 0033:0x45c429 [ 608.011903][T11572] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 608.011909][T11572] RSP: 002b:00007fc0bfcc9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 608.011919][T11572] RAX: ffffffffffffffda RBX: 00007fc0bfcca6d4 RCX: 000000000045c429 [ 608.011925][T11572] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 608.011931][T11572] RBP: 000000000076bfc0 R08: 000000000004ffe0 R09: 0000000000000000 10:09:39 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x80045440, &(0x7f0000000040)={0x2, {0xf}}) [ 608.011936][T11572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 608.011943][T11572] R13: 0000000000000b9f R14: 00000000004ce230 R15: 0000000000000006 10:09:39 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x900, 0x300}}) 10:09:39 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1524}, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xd, 0x0, 0x0, 0xffffffffffffff52) ioctl$KVM_NMI(r2, 0xae9a) syz_mount_image$cifs(&(0x7f0000000040)='cifs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x3000000) 10:09:39 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x11, 0x300}}) 10:09:39 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x6, 0x300}}) 10:09:39 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x80086301, &(0x7f0000000040)={0x2, {0xf}}) 10:09:39 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0xa00, 0x300}}) 10:09:39 executing program 3 (fault-call:9 fault-nth:7): pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001800210000000000f4e800001c"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 10:09:39 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x12, 0x300}}) 10:09:39 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x7, 0x300}}) 10:09:39 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0xb00, 0x300}}) 10:09:39 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0xc0045878, &(0x7f0000000040)={0x2, {0xf}}) [ 608.965518][T11727] FAULT_INJECTION: forcing a failure. [ 608.965518][T11727] name failslab, interval 1, probability 0, space 0, times 0 [ 609.021369][T11727] CPU: 1 PID: 11727 Comm: syz-executor.3 Not tainted 5.6.0-rc2-syzkaller #0 [ 609.030112][T11727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 609.030117][T11727] Call Trace: [ 609.030139][T11727] dump_stack+0x1fb/0x318 [ 609.030168][T11727] should_fail+0x4b8/0x660 [ 609.030197][T11727] __should_failslab+0xb9/0xe0 [ 609.030216][T11727] should_failslab+0x9/0x20 [ 609.061501][T11727] kmem_cache_alloc_node+0x65/0x280 [ 609.066694][T11727] ? __alloc_skb+0x9f/0x500 [ 609.071293][T11727] ? lock_acquire+0x154/0x250 [ 609.075967][T11727] __alloc_skb+0x9f/0x500 [ 609.080304][T11727] ? __kasan_check_read+0x11/0x20 [ 609.085456][T11727] netlink_deliver_tap+0x3a9/0x860 [ 609.090588][T11727] netlink_unicast+0x740/0x920 [ 609.095362][T11727] netlink_sendmsg+0xa2b/0xd40 [ 609.100131][T11727] ? netlink_getsockopt+0x9f0/0x9f0 [ 609.105325][T11727] kernel_sendmsg+0x109/0x140 [ 609.110879][T11727] sock_no_sendpage+0x100/0x140 [ 609.115742][T11727] ? sock_no_mmap+0x10/0x10 [ 609.120243][T11727] sock_sendpage+0xd3/0x120 [ 609.124753][T11727] pipe_to_sendpage+0x238/0x320 [ 609.129594][T11727] ? sock_fasync+0x100/0x100 [ 609.134181][T11727] __splice_from_pipe+0x33d/0x870 [ 609.139199][T11727] ? generic_splice_sendpage+0x180/0x180 [ 609.144846][T11727] generic_splice_sendpage+0x114/0x180 [ 609.150302][T11727] ? iter_file_splice_write+0xe40/0xe40 [ 609.155840][T11727] __se_sys_splice+0x719/0x1ac0 [ 609.160691][T11727] ? __f_unlock_pos+0x19/0x20 [ 609.165379][T11727] ? check_preemption_disabled+0xb4/0x260 [ 609.171099][T11727] ? debug_smp_processor_id+0x9/0x20 [ 609.176387][T11727] ? debug_smp_processor_id+0x1c/0x20 [ 609.181753][T11727] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 609.187830][T11727] ? trace_irq_disable_rcuidle+0x23/0x1e0 [ 609.193559][T11727] __x64_sys_splice+0xe5/0x100 [ 609.198331][T11727] do_syscall_64+0xf7/0x1c0 [ 609.202830][T11727] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 609.208708][T11727] RIP: 0033:0x45c429 [ 609.212594][T11727] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 609.232192][T11727] RSP: 002b:00007fc0bfcc9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 609.240610][T11727] RAX: ffffffffffffffda RBX: 00007fc0bfcca6d4 RCX: 000000000045c429 [ 609.248571][T11727] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 609.256545][T11727] RBP: 000000000076bfc0 R08: 000000000004ffe0 R09: 0000000000000000 [ 609.264501][T11727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 10:09:40 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x25, 0x300}}) 10:09:40 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x8, 0x300}}) [ 609.272459][T11727] R13: 0000000000000b9f R14: 00000000004ce230 R15: 0000000000000007 10:09:40 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1524}, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xd, 0x0, 0x0, 0xffffffffffffff52) ioctl$KVM_NMI(r2, 0xae9a) syz_mount_image$cifs(&(0x7f0000000040)='cifs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x4000000) 10:09:40 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0xc00, 0x300}}) 10:09:40 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0xc0045878, &(0x7f0000000040)={0x2, {0xf}}) 10:09:40 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x9, 0x300}}) 10:09:40 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x5c, 0x300}}) 10:09:40 executing program 3 (fault-call:9 fault-nth:8): pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001800210000000000f4e800001c"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 10:09:40 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0xc0189436, &(0x7f0000000040)={0x2, {0xf}}) 10:09:40 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0xd00, 0x300}}) [ 609.920407][T11774] FAULT_INJECTION: forcing a failure. [ 609.920407][T11774] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 609.933654][T11774] CPU: 0 PID: 11774 Comm: syz-executor.3 Not tainted 5.6.0-rc2-syzkaller #0 [ 609.942327][T11774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 609.952386][T11774] Call Trace: [ 609.955683][T11774] dump_stack+0x1fb/0x318 [ 609.960030][T11774] should_fail+0x4b8/0x660 [ 609.964563][T11774] ? __kasan_kmalloc+0x183/0x1c0 10:09:40 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0xa, 0x300}}) [ 609.969517][T11774] should_fail_alloc_page+0x4f/0x60 [ 609.974967][T11774] prepare_alloc_pages+0x283/0x460 [ 609.980075][T11774] __alloc_pages_nodemask+0xb2/0x5d0 [ 609.985365][T11774] kmem_getpages+0x4c/0x930 [ 609.989880][T11774] cache_grow_begin+0x7e/0x2e0 [ 609.994663][T11774] ? cache_alloc_pfmemalloc+0x1e/0x1a0 [ 610.000131][T11774] cache_alloc_refill+0x328/0x400 [ 610.005156][T11774] ? debug_smp_processor_id+0x9/0x20 [ 610.010439][T11774] kmem_cache_alloc_node_trace+0x2a3/0x2d0 10:09:41 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x300, 0x300}}) [ 610.016226][T11774] ? __kmalloc_node_track_caller+0x3c/0x60 [ 610.022027][T11774] __kmalloc_node_track_caller+0x3c/0x60 [ 610.027655][T11774] ? netlink_deliver_tap+0x3a9/0x860 [ 610.032946][T11774] __alloc_skb+0xe8/0x500 [ 610.037277][T11774] ? __kasan_check_read+0x11/0x20 [ 610.042310][T11774] netlink_deliver_tap+0x3a9/0x860 [ 610.047444][T11774] netlink_unicast+0x740/0x920 [ 610.052232][T11774] netlink_sendmsg+0xa2b/0xd40 [ 610.056997][T11774] ? netlink_getsockopt+0x9f0/0x9f0 [ 610.062175][T11774] kernel_sendmsg+0x109/0x140 [ 610.066836][T11774] sock_no_sendpage+0x100/0x140 [ 610.071689][T11774] ? sock_no_mmap+0x10/0x10 [ 610.076170][T11774] sock_sendpage+0xd3/0x120 [ 610.080656][T11774] pipe_to_sendpage+0x238/0x320 [ 610.085488][T11774] ? sock_fasync+0x100/0x100 [ 610.090062][T11774] __splice_from_pipe+0x33d/0x870 [ 610.095067][T11774] ? generic_splice_sendpage+0x180/0x180 [ 610.100723][T11774] generic_splice_sendpage+0x114/0x180 [ 610.106200][T11774] ? iter_file_splice_write+0xe40/0xe40 [ 610.111724][T11774] __se_sys_splice+0x719/0x1ac0 [ 610.116590][T11774] ? __f_unlock_pos+0x19/0x20 [ 610.121385][T11774] ? check_preemption_disabled+0xb4/0x260 [ 610.127080][T11774] ? debug_smp_processor_id+0x9/0x20 [ 610.132356][T11774] ? debug_smp_processor_id+0x1c/0x20 [ 610.137708][T11774] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 610.143815][T11774] ? trace_irq_disable_rcuidle+0x23/0x1e0 [ 610.149527][T11774] __x64_sys_splice+0xe5/0x100 [ 610.154289][T11774] do_syscall_64+0xf7/0x1c0 [ 610.158788][T11774] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 610.164657][T11774] RIP: 0033:0x45c429 [ 610.168529][T11774] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 610.188111][T11774] RSP: 002b:00007fc0bfcc9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 610.196501][T11774] RAX: ffffffffffffffda RBX: 00007fc0bfcca6d4 RCX: 000000000045c429 [ 610.204457][T11774] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 610.212430][T11774] RBP: 000000000076bfc0 R08: 000000000004ffe0 R09: 0000000000000000 [ 610.220412][T11774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 610.228406][T11774] R13: 0000000000000b9f R14: 00000000004ce230 R15: 0000000000000008 10:09:41 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0xc020660b, &(0x7f0000000040)={0x2, {0xf}}) 10:09:41 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0xb, 0x300}}) 10:09:41 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1524}, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xd, 0x0, 0x0, 0xffffffffffffff52) ioctl$KVM_NMI(r2, 0xae9a) syz_mount_image$cifs(&(0x7f0000000040)='cifs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x5000000) 10:09:41 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x500, 0x300}}) 10:09:41 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0xe00, 0x300}}) 10:09:41 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0xc, 0x300}}) 10:09:41 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0xc0f85403, &(0x7f0000000040)={0x2, {0xf}}) 10:09:41 executing program 3 (fault-call:9 fault-nth:9): pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001800210000000000f4e800001c"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 10:09:41 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x1100, 0x300}}) 10:09:41 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0xd, 0x300}}) 10:09:41 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000040)={0x3, {0xf}}) 10:09:41 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x600, 0x300}}) [ 610.955615][T11818] FAULT_INJECTION: forcing a failure. [ 610.955615][T11818] name failslab, interval 1, probability 0, space 0, times 0 [ 611.036872][T11818] CPU: 1 PID: 11818 Comm: syz-executor.3 Not tainted 5.6.0-rc2-syzkaller #0 [ 611.045591][T11818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 611.055645][T11818] Call Trace: [ 611.058947][T11818] dump_stack+0x1fb/0x318 [ 611.063383][T11818] should_fail+0x4b8/0x660 [ 611.067827][T11818] __should_failslab+0xb9/0xe0 [ 611.072596][T11818] should_failslab+0x9/0x20 [ 611.077116][T11818] kmem_cache_alloc_trace+0x5d/0x2f0 [ 611.082443][T11818] ? mpls_rtm_newroute+0x60/0x1da0 [ 611.087547][T11818] ? __mutex_lock_common+0x53d/0x2f30 [ 611.092907][T11818] mpls_rtm_newroute+0x60/0x1da0 [ 611.097868][T11818] ? rtnetlink_rcv_msg+0x83c/0xd40 [ 611.102976][T11818] ? nla_get_labels+0x520/0x520 [ 611.107822][T11818] rtnetlink_rcv_msg+0x889/0xd40 [ 611.112776][T11818] ? lockdep_hardirqs_on+0x4a5/0x7a0 [ 611.118090][T11818] ? __local_bh_enable_ip+0x13a/0x240 [ 611.123452][T11818] ? local_bh_enable+0x9/0x30 [ 611.128122][T11818] ? trace_hardirqs_on+0x74/0x80 [ 611.133052][T11818] ? __local_bh_enable_ip+0x13a/0x240 [ 611.138461][T11818] ? local_bh_enable+0x1f/0x30 [ 611.143249][T11818] ? rcu_lock_release+0x9/0x30 [ 611.148040][T11818] netlink_rcv_skb+0x19e/0x3e0 [ 611.152786][T11818] ? rtnetlink_bind+0x80/0x80 [ 611.157463][T11818] rtnetlink_rcv+0x1c/0x20 [ 611.161884][T11818] netlink_unicast+0x766/0x920 [ 611.166637][T11818] netlink_sendmsg+0xa2b/0xd40 [ 611.171402][T11818] ? netlink_getsockopt+0x9f0/0x9f0 [ 611.176614][T11818] kernel_sendmsg+0x109/0x140 [ 611.181274][T11818] sock_no_sendpage+0x100/0x140 [ 611.186131][T11818] ? sock_no_mmap+0x10/0x10 [ 611.190636][T11818] sock_sendpage+0xd3/0x120 [ 611.195149][T11818] pipe_to_sendpage+0x238/0x320 [ 611.199999][T11818] ? sock_fasync+0x100/0x100 [ 611.204576][T11818] __splice_from_pipe+0x33d/0x870 [ 611.209846][T11818] ? generic_splice_sendpage+0x180/0x180 [ 611.215537][T11818] generic_splice_sendpage+0x114/0x180 [ 611.221000][T11818] ? iter_file_splice_write+0xe40/0xe40 [ 611.226526][T11818] __se_sys_splice+0x719/0x1ac0 [ 611.231357][T11818] ? __f_unlock_pos+0x19/0x20 [ 611.236031][T11818] ? check_preemption_disabled+0xb4/0x260 [ 611.241737][T11818] ? debug_smp_processor_id+0x9/0x20 [ 611.247020][T11818] ? debug_smp_processor_id+0x1c/0x20 [ 611.252385][T11818] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 611.258434][T11818] ? trace_irq_disable_rcuidle+0x23/0x1e0 [ 611.264136][T11818] __x64_sys_splice+0xe5/0x100 [ 611.268880][T11818] do_syscall_64+0xf7/0x1c0 [ 611.273364][T11818] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 611.279237][T11818] RIP: 0033:0x45c429 [ 611.283140][T11818] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 611.302755][T11818] RSP: 002b:00007fc0bfcc9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 611.311144][T11818] RAX: ffffffffffffffda RBX: 00007fc0bfcca6d4 RCX: 000000000045c429 [ 611.319112][T11818] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 611.327089][T11818] RBP: 000000000076bfc0 R08: 000000000004ffe0 R09: 0000000000000000 [ 611.335037][T11818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 611.342986][T11818] R13: 0000000000000b9f R14: 00000000004ce230 R15: 0000000000000009 10:09:42 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0xe, 0x300}}) 10:09:42 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x1200, 0x300}}) 10:09:42 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1524}, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xd, 0x0, 0x0, 0xffffffffffffff52) ioctl$KVM_NMI(r2, 0xae9a) syz_mount_image$cifs(&(0x7f0000000040)='cifs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x6000000) 10:09:42 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000040)={0x4, {0xf}}) 10:09:42 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x700, 0x300}}) 10:09:42 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x10, 0x300}}) 10:09:42 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x2500, 0x300}}) 10:09:42 executing program 3 (fault-call:9 fault-nth:10): pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001800210000000000f4e800001c"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 10:09:43 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x11, 0x300}}) 10:09:43 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x900, 0x300}}) 10:09:43 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x3f00, 0x300}}) 10:09:43 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000040)={0x5, {0xf}}) [ 612.032049][T11869] FAULT_INJECTION: forcing a failure. [ 612.032049][T11869] name failslab, interval 1, probability 0, space 0, times 0 [ 612.076336][T11869] CPU: 1 PID: 11869 Comm: syz-executor.3 Not tainted 5.6.0-rc2-syzkaller #0 [ 612.085050][T11869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 612.095107][T11869] Call Trace: [ 612.098412][T11869] dump_stack+0x1fb/0x318 [ 612.102764][T11869] should_fail+0x4b8/0x660 [ 612.107205][T11869] __should_failslab+0xb9/0xe0 [ 612.111968][T11869] should_failslab+0x9/0x20 [ 612.116481][T11869] kmem_cache_alloc_node+0x65/0x280 [ 612.121703][T11869] ? __alloc_skb+0x9f/0x500 [ 612.126190][T11869] __alloc_skb+0x9f/0x500 [ 612.130512][T11869] netlink_ack+0x204/0x9c0 [ 612.134903][T11869] ? rcu_lock_release+0x9/0x30 [ 612.139651][T11869] netlink_rcv_skb+0x238/0x3e0 [ 612.144392][T11869] ? rtnetlink_bind+0x80/0x80 [ 612.149068][T11869] rtnetlink_rcv+0x1c/0x20 [ 612.153478][T11869] netlink_unicast+0x766/0x920 [ 612.158311][T11869] netlink_sendmsg+0xa2b/0xd40 [ 612.163073][T11869] ? netlink_getsockopt+0x9f0/0x9f0 [ 612.168264][T11869] kernel_sendmsg+0x109/0x140 [ 612.172925][T11869] sock_no_sendpage+0x100/0x140 [ 612.177766][T11869] ? sock_no_mmap+0x10/0x10 [ 612.182248][T11869] sock_sendpage+0xd3/0x120 [ 612.186735][T11869] pipe_to_sendpage+0x238/0x320 [ 612.191575][T11869] ? sock_fasync+0x100/0x100 [ 612.196160][T11869] __splice_from_pipe+0x33d/0x870 [ 612.201165][T11869] ? generic_splice_sendpage+0x180/0x180 [ 612.206793][T11869] generic_splice_sendpage+0x114/0x180 [ 612.212237][T11869] ? iter_file_splice_write+0xe40/0xe40 [ 612.217771][T11869] __se_sys_splice+0x719/0x1ac0 [ 612.222607][T11869] ? rcu_read_lock_sched_held+0x10b/0x170 [ 612.228357][T11869] ? __kasan_check_write+0x14/0x20 [ 612.233453][T11869] ? __fpregs_load_activate+0x194/0x220 [ 612.238987][T11869] ? trace_irq_disable_rcuidle+0x23/0x1e0 [ 612.244724][T11869] __x64_sys_splice+0xe5/0x100 [ 612.249475][T11869] do_syscall_64+0xf7/0x1c0 [ 612.253963][T11869] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 612.259845][T11869] RIP: 0033:0x45c429 [ 612.263766][T11869] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 612.283359][T11869] RSP: 002b:00007fc0bfcc9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 612.291750][T11869] RAX: ffffffffffffffda RBX: 00007fc0bfcca6d4 RCX: 000000000045c429 [ 612.299712][T11869] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 612.307663][T11869] RBP: 000000000076bfc0 R08: 000000000004ffe0 R09: 0000000000000000 [ 612.315616][T11869] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 612.323574][T11869] R13: 0000000000000b9f R14: 00000000004ce230 R15: 000000000000000a 10:09:43 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0xa00, 0x300}}) 10:09:43 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x5c00, 0x300}}) 10:09:43 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1524}, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xd, 0x0, 0x0, 0xffffffffffffff52) ioctl$KVM_NMI(r2, 0xae9a) syz_mount_image$cifs(&(0x7f0000000040)='cifs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x7000000) 10:09:43 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x12, 0x300}}) 10:09:43 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000040)={0x6, {0xf}}) 10:09:43 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0xb00, 0x300}}) 10:09:43 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x302}}) 10:09:43 executing program 3 (fault-call:9 fault-nth:11): pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001800210000000000f4e800001c"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 10:09:44 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x25, 0x300}}) 10:09:44 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0xc00, 0x300}}) 10:09:44 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000040)={0x8, {0xf}}) 10:09:44 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x303}}) [ 613.089595][T11919] FAULT_INJECTION: forcing a failure. [ 613.089595][T11919] name failslab, interval 1, probability 0, space 0, times 0 [ 613.169310][T11919] CPU: 1 PID: 11919 Comm: syz-executor.3 Not tainted 5.6.0-rc2-syzkaller #0 [ 613.178037][T11919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 613.188101][T11919] Call Trace: [ 613.191428][T11919] dump_stack+0x1fb/0x318 [ 613.195799][T11919] should_fail+0x4b8/0x660 [ 613.200244][T11919] __should_failslab+0xb9/0xe0 [ 613.205049][T11919] should_failslab+0x9/0x20 [ 613.205062][T11919] kmem_cache_alloc_node_trace+0x6e/0x2d0 [ 613.205073][T11919] ? __kmalloc_node_track_caller+0x3c/0x60 [ 613.205093][T11919] __kmalloc_node_track_caller+0x3c/0x60 [ 613.205102][T11919] ? netlink_ack+0x204/0x9c0 [ 613.205118][T11919] __alloc_skb+0xe8/0x500 [ 613.205141][T11919] netlink_ack+0x204/0x9c0 [ 613.205149][T11919] ? rcu_lock_release+0x9/0x30 [ 613.205178][T11919] netlink_rcv_skb+0x238/0x3e0 [ 613.205192][T11919] ? rtnetlink_bind+0x80/0x80 [ 613.205218][T11919] rtnetlink_rcv+0x1c/0x20 [ 613.205231][T11919] netlink_unicast+0x766/0x920 [ 613.205272][T11919] netlink_sendmsg+0xa2b/0xd40 [ 613.205305][T11919] ? netlink_getsockopt+0x9f0/0x9f0 [ 613.205319][T11919] kernel_sendmsg+0x109/0x140 [ 613.205337][T11919] sock_no_sendpage+0x100/0x140 [ 613.205364][T11919] ? sock_no_mmap+0x10/0x10 [ 613.205378][T11919] sock_sendpage+0xd3/0x120 [ 613.205396][T11919] pipe_to_sendpage+0x238/0x320 [ 613.205404][T11919] ? sock_fasync+0x100/0x100 [ 613.205421][T11919] __splice_from_pipe+0x33d/0x870 [ 613.205434][T11919] ? generic_splice_sendpage+0x180/0x180 [ 613.205473][T11919] generic_splice_sendpage+0x114/0x180 [ 613.205493][T11919] ? iter_file_splice_write+0xe40/0xe40 [ 613.205507][T11919] __se_sys_splice+0x719/0x1ac0 [ 613.205518][T11919] ? __f_unlock_pos+0x19/0x20 [ 613.205538][T11919] ? check_preemption_disabled+0xb4/0x260 [ 613.205546][T11919] ? debug_smp_processor_id+0x9/0x20 [ 613.205562][T11919] ? debug_smp_processor_id+0x1c/0x20 [ 613.205577][T11919] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 613.205597][T11919] ? trace_irq_disable_rcuidle+0x23/0x1e0 [ 613.205618][T11919] __x64_sys_splice+0xe5/0x100 [ 613.205638][T11919] do_syscall_64+0xf7/0x1c0 [ 613.205657][T11919] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 613.205667][T11919] RIP: 0033:0x45c429 [ 613.205677][T11919] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 613.205684][T11919] RSP: 002b:00007fc0bfcc9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 613.205695][T11919] RAX: ffffffffffffffda RBX: 00007fc0bfcca6d4 RCX: 000000000045c429 [ 613.205701][T11919] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 613.205707][T11919] RBP: 000000000076bfc0 R08: 000000000004ffe0 R09: 0000000000000000 [ 613.205713][T11919] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 613.205719][T11919] R13: 0000000000000b9f R14: 00000000004ce230 R15: 000000000000000b 10:09:44 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0xd00, 0x300}}) 10:09:44 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x5c, 0x300}}) 10:09:45 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1524}, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xd, 0x0, 0x0, 0xffffffffffffff52) ioctl$KVM_NMI(r2, 0xae9a) syz_mount_image$cifs(&(0x7f0000000040)='cifs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x8000000) 10:09:45 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000040)={0x2, {0xf}}) 10:09:45 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x304}}) 10:09:45 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x300, 0x300}}) 10:09:45 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0xe00, 0x300}}) 10:09:45 executing program 3 (fault-call:9 fault-nth:12): pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001800210000000000f4e800001c"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 10:09:45 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000040)={0x2, {0xf, 0x2}}) 10:09:45 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x500, 0x300}}) 10:09:45 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x305}}) 10:09:45 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x1100, 0x300}}) [ 614.156135][T12072] FAULT_INJECTION: forcing a failure. [ 614.156135][T12072] name failslab, interval 1, probability 0, space 0, times 0 10:09:45 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x600, 0x300}}) [ 614.213331][T12072] CPU: 0 PID: 12072 Comm: syz-executor.3 Not tainted 5.6.0-rc2-syzkaller #0 [ 614.222042][T12072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 614.232099][T12072] Call Trace: [ 614.235396][T12072] dump_stack+0x1fb/0x318 [ 614.239746][T12072] should_fail+0x4b8/0x660 [ 614.244184][T12072] __should_failslab+0xb9/0xe0 [ 614.248957][T12072] should_failslab+0x9/0x20 [ 614.253467][T12072] kmem_cache_alloc_node_trace+0x6e/0x2d0 [ 614.259187][T12072] ? __kmalloc_node_track_caller+0x3c/0x60 [ 614.265006][T12072] __kmalloc_node_track_caller+0x3c/0x60 [ 614.270639][T12072] ? netlink_ack+0x204/0x9c0 [ 614.275262][T12072] __alloc_skb+0xe8/0x500 [ 614.275285][T12072] netlink_ack+0x204/0x9c0 [ 614.284321][T12072] ? rcu_lock_release+0x9/0x30 [ 614.289140][T12072] netlink_rcv_skb+0x238/0x3e0 10:09:45 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x306}}) [ 614.289155][T12072] ? rtnetlink_bind+0x80/0x80 [ 614.289184][T12072] rtnetlink_rcv+0x1c/0x20 [ 614.289197][T12072] netlink_unicast+0x766/0x920 [ 614.289229][T12072] netlink_sendmsg+0xa2b/0xd40 [ 614.289263][T12072] ? netlink_getsockopt+0x9f0/0x9f0 [ 614.289277][T12072] kernel_sendmsg+0x109/0x140 [ 614.289303][T12072] sock_no_sendpage+0x100/0x140 [ 614.289331][T12072] ? sock_no_mmap+0x10/0x10 [ 614.289346][T12072] sock_sendpage+0xd3/0x120 [ 614.289368][T12072] pipe_to_sendpage+0x238/0x320 [ 614.289378][T12072] ? sock_fasync+0x100/0x100 [ 614.289399][T12072] __splice_from_pipe+0x33d/0x870 [ 614.289416][T12072] ? generic_splice_sendpage+0x180/0x180 [ 614.289458][T12072] generic_splice_sendpage+0x114/0x180 [ 614.289479][T12072] ? iter_file_splice_write+0xe40/0xe40 [ 614.289494][T12072] __se_sys_splice+0x719/0x1ac0 [ 614.289505][T12072] ? __f_unlock_pos+0x19/0x20 [ 614.289527][T12072] ? check_preemption_disabled+0xb4/0x260 [ 614.289536][T12072] ? debug_smp_processor_id+0x9/0x20 [ 614.289553][T12072] ? debug_smp_processor_id+0x1c/0x20 [ 614.289567][T12072] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 614.289589][T12072] ? trace_irq_disable_rcuidle+0x23/0x1e0 [ 614.289612][T12072] __x64_sys_splice+0xe5/0x100 [ 614.289633][T12072] do_syscall_64+0xf7/0x1c0 [ 614.289652][T12072] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 614.289662][T12072] RIP: 0033:0x45c429 [ 614.289673][T12072] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 614.289679][T12072] RSP: 002b:00007fc0bfcc9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 614.289690][T12072] RAX: ffffffffffffffda RBX: 00007fc0bfcca6d4 RCX: 000000000045c429 [ 614.289697][T12072] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 614.289704][T12072] RBP: 000000000076bfc0 R08: 000000000004ffe0 R09: 0000000000000000 [ 614.289710][T12072] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 614.289717][T12072] R13: 0000000000000b9f R14: 00000000004ce230 R15: 000000000000000c 10:09:46 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1524}, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xd, 0x0, 0x0, 0xffffffffffffff52) ioctl$KVM_NMI(r2, 0xae9a) syz_mount_image$cifs(&(0x7f0000000040)='cifs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x9000000) 10:09:46 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000040)={0x2, {0xf, 0x3}}) 10:09:46 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x1200, 0x300}}) 10:09:46 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x307}}) 10:09:46 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x700, 0x300}}) 10:09:46 executing program 3 (fault-call:9 fault-nth:13): pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001800210000000000f4e800001c"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 10:09:46 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x2500, 0x300}}) 10:09:46 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x308}}) 10:09:46 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000040)={0x2, {0xf, 0x4}}) 10:09:46 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x900, 0x300}}) [ 615.136031][T12221] FAULT_INJECTION: forcing a failure. [ 615.136031][T12221] name failslab, interval 1, probability 0, space 0, times 0 [ 615.181591][T12221] CPU: 0 PID: 12221 Comm: syz-executor.3 Not tainted 5.6.0-rc2-syzkaller #0 [ 615.190306][T12221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 615.200359][T12221] Call Trace: [ 615.203650][T12221] dump_stack+0x1fb/0x318 [ 615.207988][T12221] should_fail+0x4b8/0x660 [ 615.212421][T12221] __should_failslab+0xb9/0xe0 [ 615.217210][T12221] should_failslab+0x9/0x20 [ 615.221722][T12221] kmem_cache_alloc_node_trace+0x6e/0x2d0 [ 615.227471][T12221] ? __get_vm_area_node+0x1b3/0x3b0 [ 615.232650][T12221] ? __kfree_skb+0x13e/0x1c0 [ 615.237222][T12221] __get_vm_area_node+0x1b3/0x3b0 [ 615.242226][T12221] ? kmem_cache_free+0xd8/0xf0 [ 615.246986][T12221] __vmalloc_node_range+0xe1/0x840 [ 615.252093][T12221] ? netlink_sendmsg+0x64e/0xd40 [ 615.257021][T12221] ? smack_socket_getpeersec_dgram+0x238/0x6e0 [ 615.263178][T12221] ? __kasan_check_write+0x14/0x20 [ 615.268298][T12221] ? netlink_unicast+0x7ca/0x920 [ 615.273247][T12221] vmalloc+0x73/0x80 [ 615.277144][T12221] ? netlink_sendmsg+0x64e/0xd40 [ 615.282061][T12221] netlink_sendmsg+0x64e/0xd40 [ 615.286813][T12221] ? netlink_getsockopt+0x9f0/0x9f0 [ 615.291990][T12221] kernel_sendmsg+0x109/0x140 [ 615.296650][T12221] sock_no_sendpage+0x100/0x140 [ 615.301512][T12221] ? sock_no_mmap+0x10/0x10 [ 615.306024][T12221] sock_sendpage+0xd3/0x120 [ 615.310541][T12221] pipe_to_sendpage+0x238/0x320 [ 615.315389][T12221] ? sock_fasync+0x100/0x100 [ 615.319988][T12221] __splice_from_pipe+0x33d/0x870 [ 615.325004][T12221] ? generic_splice_sendpage+0x180/0x180 [ 615.330638][T12221] generic_splice_sendpage+0x114/0x180 [ 615.336080][T12221] ? iter_file_splice_write+0xe40/0xe40 [ 615.341604][T12221] __se_sys_splice+0x719/0x1ac0 [ 615.346432][T12221] ? __f_unlock_pos+0x19/0x20 [ 615.351090][T12221] ? check_preemption_disabled+0xb4/0x260 [ 615.356786][T12221] ? debug_smp_processor_id+0x9/0x20 [ 615.362062][T12221] ? debug_smp_processor_id+0x1c/0x20 [ 615.367428][T12221] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 615.373477][T12221] ? trace_irq_disable_rcuidle+0x23/0x1e0 [ 615.379209][T12221] __x64_sys_splice+0xe5/0x100 [ 615.383987][T12221] do_syscall_64+0xf7/0x1c0 [ 615.388496][T12221] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 615.394362][T12221] RIP: 0033:0x45c429 [ 615.398240][T12221] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 615.417893][T12221] RSP: 002b:00007fc0bfcc9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 615.426289][T12221] RAX: ffffffffffffffda RBX: 00007fc0bfcca6d4 RCX: 000000000045c429 [ 615.434254][T12221] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 615.442212][T12221] RBP: 000000000076bfc0 R08: 000000000004ffe0 R09: 0000000000000000 [ 615.450179][T12221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 615.458131][T12221] R13: 0000000000000b9f R14: 00000000004ce230 R15: 000000000000000d [ 615.468659][T12221] warn_alloc: 2 callbacks suppressed [ 615.468674][T12221] syz-executor.3: vmalloc: allocation failure: 4416 bytes, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 615.487686][T12221] CPU: 0 PID: 12221 Comm: syz-executor.3 Not tainted 5.6.0-rc2-syzkaller #0 [ 615.496349][T12221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 615.506910][T12221] Call Trace: [ 615.510196][T12221] dump_stack+0x1fb/0x318 [ 615.514510][T12221] warn_alloc+0x17d/0x2c0 [ 615.518825][T12221] ? __kfree_skb+0x13e/0x1c0 [ 615.523414][T12221] ? __get_vm_area_node+0x1c3/0x3b0 [ 615.528633][T12221] __vmalloc_node_range+0x292/0x840 [ 615.533835][T12221] ? smack_socket_getpeersec_dgram+0x238/0x6e0 [ 615.539994][T12221] ? __kasan_check_write+0x14/0x20 [ 615.545094][T12221] ? netlink_unicast+0x7ca/0x920 [ 615.550040][T12221] vmalloc+0x73/0x80 [ 615.553928][T12221] ? netlink_sendmsg+0x64e/0xd40 [ 615.558870][T12221] netlink_sendmsg+0x64e/0xd40 [ 615.563640][T12221] ? netlink_getsockopt+0x9f0/0x9f0 [ 615.568836][T12221] kernel_sendmsg+0x109/0x140 [ 615.573539][T12221] sock_no_sendpage+0x100/0x140 [ 615.578400][T12221] ? sock_no_mmap+0x10/0x10 [ 615.582892][T12221] sock_sendpage+0xd3/0x120 [ 615.587396][T12221] pipe_to_sendpage+0x238/0x320 [ 615.592233][T12221] ? sock_fasync+0x100/0x100 [ 615.596810][T12221] __splice_from_pipe+0x33d/0x870 [ 615.601830][T12221] ? generic_splice_sendpage+0x180/0x180 [ 615.607479][T12221] generic_splice_sendpage+0x114/0x180 [ 615.612931][T12221] ? iter_file_splice_write+0xe40/0xe40 [ 615.618492][T12221] __se_sys_splice+0x719/0x1ac0 [ 615.623345][T12221] ? __f_unlock_pos+0x19/0x20 [ 615.628031][T12221] ? check_preemption_disabled+0xb4/0x260 [ 615.633735][T12221] ? debug_smp_processor_id+0x9/0x20 [ 615.639026][T12221] ? debug_smp_processor_id+0x1c/0x20 [ 615.644428][T12221] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 615.650510][T12221] ? trace_irq_disable_rcuidle+0x23/0x1e0 [ 615.656224][T12221] __x64_sys_splice+0xe5/0x100 [ 615.660977][T12221] do_syscall_64+0xf7/0x1c0 [ 615.665477][T12221] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 615.671359][T12221] RIP: 0033:0x45c429 [ 615.675264][T12221] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 615.694850][T12221] RSP: 002b:00007fc0bfcc9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 615.703248][T12221] RAX: ffffffffffffffda RBX: 00007fc0bfcca6d4 RCX: 000000000045c429 [ 615.711261][T12221] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 615.719210][T12221] RBP: 000000000076bfc0 R08: 000000000004ffe0 R09: 0000000000000000 [ 615.727168][T12221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 615.735164][T12221] R13: 0000000000000b9f R14: 00000000004ce230 R15: 000000000000000d [ 615.746017][T12221] Mem-Info: [ 615.749165][T12221] active_anon:180657 inactive_anon:219 isolated_anon:0 [ 615.749165][T12221] active_file:8224 inactive_file:72571 isolated_file:0 [ 615.749165][T12221] unevictable:0 dirty:92 writeback:0 unstable:0 [ 615.749165][T12221] slab_reclaimable:14837 slab_unreclaimable:110828 [ 615.749165][T12221] mapped:60981 shmem:300 pagetables:1999 bounce:0 [ 615.749165][T12221] free:1131724 free_pcp:316 free_cma:0 [ 615.806311][T12221] Node 0 active_anon:724976kB inactive_anon:876kB active_file:32756kB inactive_file:290284kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:243924kB dirty:368kB writeback:0kB shmem:1200kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 624640kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no 10:09:46 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0xa00, 0x300}}) 10:09:46 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x5c00, 0x300}}) [ 615.989220][T12221] Node 1 active_anon:0kB inactive_anon:0kB active_file:140kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 616.017009][T12221] Node 0 DMA free:15904kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15904kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 616.047460][T12221] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 616.047483][T12221] Node 0 DMA32 free:744208kB min:36276kB low:45344kB high:54412kB reserved_highatomic:0KB active_anon:723108kB inactive_anon:876kB active_file:32676kB inactive_file:290284kB unevictable:0kB writepending:364kB present:3129332kB managed:2621444kB mlocked:0kB kernel_stack:9492kB pagetables:7700kB bounce:0kB free_pcp:1804kB local_pcp:1196kB free_cma:0kB [ 616.047513][T12221] lowmem_reserve[]: 0 0 0 0 0 [ 616.047528][T12221] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:80kB inactive_file:0kB unevictable:0kB writepending:4kB present:786432kB managed:80kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 616.047555][T12221] lowmem_reserve[]: 0 0 0 0 0 [ 616.047571][T12221] Node 1 Normal free:3764664kB min:53608kB low:67008kB high:80408kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:140kB inactive_file:0kB unevictable:0kB writepending:0kB present:3932160kB managed:3870200kB mlocked:0kB kernel_stack:16kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 616.047598][T12221] lowmem_reserve[]: 0 0 0 0 0 [ 616.047612][T12221] Node 0 DMA: 0*4kB 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15904kB [ 616.047669][T12221] Node 0 DMA32: 5758*4kB (UE) 30*8kB (UE) 220*16kB (UME) 61*32kB (UME) 316*64kB (U) 19*128kB (UM) 14*256kB (UM) 30*512kB (UME) 6*1024kB (UME) 4*2048kB (UM) 161*4096kB (UM) = 744136kB [ 616.047735][T12221] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 616.047776][T12221] Node 1 Normal: 16*4kB (UE) 99*8kB (UE) 182*16kB (UME) 88*32kB (UME) 44*64kB (UME) 16*128kB (UE) 7*256kB (UM) 5*512kB (UE) 3*1024kB (UME) 3*2048kB (UME) 913*4096kB (M) = 3764664kB [ 616.047849][T12221] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 616.047858][T12221] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 616.047867][T12221] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 616.047876][T12221] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 616.047882][T12221] 50101 total pagecache pages [ 616.047888][T12221] 0 pages in swap cache [ 616.047896][T12221] Swap cache stats: add 0, delete 0, find 0/0 10:09:47 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1524}, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xd, 0x0, 0x0, 0xffffffffffffff52) ioctl$KVM_NMI(r2, 0xae9a) syz_mount_image$cifs(&(0x7f0000000040)='cifs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xa000000) 10:09:47 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x309}}) 10:09:47 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000040)={0x2, {0xf, 0x5}}) 10:09:47 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0xb00, 0x300}}) 10:09:47 executing program 3: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001800210000000000f4e800001c"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 616.047901][T12221] Free swap = 0kB [ 616.047905][T12221] Total swap = 0kB [ 616.047912][T12221] 1965979 pages RAM [ 616.047916][T12221] 0 pages HighMem/MovableOnly [ 616.047921][T12221] 339072 pages reserved [ 616.047925][T12221] 0 pages cma reserved 10:09:47 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x302}}) 10:09:47 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x30a}}) 10:09:47 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0xc00, 0x300}}) 10:09:47 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000040)={0x2, {0xf, 0x6}}) 10:09:47 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x303}}) 10:09:47 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x30b}}) 10:09:47 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000040)={0x2, {0xf, 0x7}}) 10:09:48 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x304}}) 10:09:48 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0xd00, 0x300}}) 10:09:48 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x30c}}) 10:09:48 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000040)={0x2, {0xf, 0x8}}) 10:09:48 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1524}, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xd, 0x0, 0x0, 0xffffffffffffff52) ioctl$KVM_NMI(r2, 0xae9a) syz_mount_image$cifs(&(0x7f0000000040)='cifs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xb000000) 10:09:48 executing program 3: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001800210000000000f4e800001c"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x2) 10:09:48 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000040)={0x2, {0xf, 0x9}}) 10:09:48 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x30d}}) 10:09:48 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0xe00, 0x300}}) 10:09:48 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x305}}) 10:09:48 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x306}}) 10:09:48 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x30e}}) 10:09:48 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000040)={0x2, {0xf, 0xa}}) 10:09:48 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x1100, 0x300}}) 10:09:48 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x310}}) 10:09:48 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x307}}) 10:09:49 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1524}, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xd, 0x0, 0x0, 0xffffffffffffff52) ioctl$KVM_NMI(r2, 0xae9a) syz_mount_image$cifs(&(0x7f0000000040)='cifs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xc000000) 10:09:49 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000040)={0x2, {0xf, 0xb}}) 10:09:49 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x1200, 0x300}}) 10:09:49 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x311}}) 10:09:49 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x308}}) 10:09:49 executing program 3: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001800210000000000f4e800001c"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x4) 10:09:49 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x2500, 0x300}}) 10:09:49 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000040)={0x2, {0xf, 0xc}}) 10:09:49 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x309}}) 10:09:49 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x312}}) 10:09:49 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x5c00, 0x300}}) 10:09:49 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x30a}}) [ 618.867446][ T0] NOHZ: local_softirq_pending 08 10:09:50 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x302}}) 10:09:50 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000040)={0x2, {0xf, 0xd}}) 10:09:50 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x325}}) 10:09:50 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x30b}}) 10:09:50 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1524}, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xd, 0x0, 0x0, 0xffffffffffffff52) ioctl$KVM_NMI(r2, 0xae9a) syz_mount_image$cifs(&(0x7f0000000040)='cifs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xd000000) 10:09:50 executing program 3: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001800210000000000f4e800001c"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x5) 10:09:50 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x303}}) 10:09:50 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000040)={0x2, {0xf, 0xe}}) 10:09:50 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x30c}}) 10:09:50 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x35c}}) 10:09:50 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000040)={0x2, {0xf, 0xf}}) 10:09:50 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x304}}) 10:09:50 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x30d}}) 10:09:50 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:09:50 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000040)={0x2, {0xf, 0x10}}) 10:09:50 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x30e}}) 10:09:51 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300, 0x2}}) 10:09:51 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x305}}) 10:09:51 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x310}}) 10:09:51 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000040)={0x2, {0xf, 0x11}}) 10:09:51 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1524}, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xd, 0x0, 0x0, 0xffffffffffffff52) ioctl$KVM_NMI(r2, 0xae9a) syz_mount_image$cifs(&(0x7f0000000040)='cifs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xe000000) 10:09:51 executing program 3: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001800210000000000f4e800001c"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x6) 10:09:51 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x306}}) 10:09:51 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000040)={0x2, {0xf, 0x12}}) 10:09:51 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300, 0x3}}) 10:09:51 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x311}}) 10:09:51 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x307}}) 10:09:51 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300, 0x4}}) 10:09:51 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000040)={0x2, {0xf, 0x25}}) 10:09:51 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x312}}) 10:09:51 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000040)={0x2, {0xf, 0x5c}}) 10:09:51 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x308}}) 10:09:52 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1524}, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xd, 0x0, 0x0, 0xffffffffffffff52) ioctl$KVM_NMI(r2, 0xae9a) syz_mount_image$cifs(&(0x7f0000000040)='cifs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xf000000) 10:09:52 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300, 0x5}}) 10:09:52 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x325}}) 10:09:52 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000040)={0x2, {0xf, 0x300}}) 10:09:52 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x309}}) 10:09:52 executing program 3: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001800210000000000f4e800001c"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0xa) 10:09:52 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300, 0x6}}) 10:09:52 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000040)={0x2, {0xf, 0x500}}) 10:09:52 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x30a}}) 10:09:52 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x35c}}) 10:09:52 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300, 0x7}}) 10:09:52 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x30b}}) 10:09:53 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1524}, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xd, 0x0, 0x0, 0xffffffffffffff52) ioctl$KVM_NMI(r2, 0xae9a) syz_mount_image$cifs(&(0x7f0000000040)='cifs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x10000000) 10:09:53 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000040)={0x2, {0xf, 0x600}}) 10:09:53 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:09:53 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300, 0x8}}) 10:09:53 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x30c}}) 10:09:53 executing program 3: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001800210000000000f4e800001c"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0xc) 10:09:53 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300, 0x2}}) 10:09:53 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x30d}}) 10:09:53 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000040)={0x2, {0xf, 0x700}}) 10:09:53 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300, 0x9}}) 10:09:53 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300, 0x3}}) 10:09:53 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x30e}}) 10:09:54 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1524}, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xd, 0x0, 0x0, 0xffffffffffffff52) ioctl$KVM_NMI(r2, 0xae9a) syz_mount_image$cifs(&(0x7f0000000040)='cifs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x11000000) 10:09:54 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300, 0xa}}) 10:09:54 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300, 0x4}}) 10:09:54 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000040)={0x2, {0xf, 0x900}}) 10:09:54 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x310}}) 10:09:54 executing program 3: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001800210000000000f4e800001c"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0xf) 10:09:54 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300, 0xb}}) 10:09:54 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x311}}) 10:09:54 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300, 0x5}}) 10:09:54 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000040)={0x2, {0xf, 0xa00}}) 10:09:54 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300, 0x6}}) 10:09:54 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300, 0xc}}) 10:09:55 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1524}, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xd, 0x0, 0x0, 0xffffffffffffff52) ioctl$KVM_NMI(r2, 0xae9a) syz_mount_image$cifs(&(0x7f0000000040)='cifs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x12000000) 10:09:55 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x312}}) 10:09:55 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000040)={0x2, {0xf, 0xb00}}) 10:09:55 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300, 0x7}}) 10:09:55 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300, 0xd}}) 10:09:55 executing program 3: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001800210000000000f4e800001c"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x10) 10:09:55 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x325}}) 10:09:55 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000040)={0x2, {0xf, 0xc00}}) 10:09:55 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300, 0xe}}) 10:09:55 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300, 0x8}}) 10:09:55 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300, 0x10}}) 10:09:55 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000040)={0x2, {0xf, 0xd00}}) 10:09:56 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1524}, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xd, 0x0, 0x0, 0xffffffffffffff52) ioctl$KVM_NMI(r2, 0xae9a) syz_mount_image$cifs(&(0x7f0000000040)='cifs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x13000000) 10:09:56 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x35c}}) 10:09:56 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300, 0x9}}) 10:09:56 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000040)={0x2, {0xf, 0xe00}}) 10:09:56 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300, 0x11}}) 10:09:56 executing program 3: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001800210000000000f4e800001c"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x30) 10:09:56 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:09:56 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000040)={0x2, {0xf, 0xf00}}) 10:09:56 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300, 0xa}}) 10:09:56 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300, 0x12}}) 10:09:56 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300, 0x2}}) 10:09:56 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300, 0xb}}) 10:09:57 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1524}, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xd, 0x0, 0x0, 0xffffffffffffff52) ioctl$KVM_NMI(r2, 0xae9a) syz_mount_image$cifs(&(0x7f0000000040)='cifs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x14000000) 10:09:57 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000040)={0x2, {0xf, 0x1100}}) 10:09:57 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300, 0x25}}) 10:09:57 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300, 0x3}}) 10:09:57 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300, 0xc}}) 10:09:57 executing program 3: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001800210000000000f4e800001c"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x60) 10:09:57 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300, 0xd}}) 10:09:57 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300, 0x4}}) 10:09:57 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300, 0x5c}}) 10:09:57 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000040)={0x2, {0xf, 0x1200}}) 10:09:58 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300, 0x300}}) 10:09:58 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300, 0x5}}) 10:09:58 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1524}, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xd, 0x0, 0x0, 0xffffffffffffff52) ioctl$KVM_NMI(r2, 0xae9a) syz_mount_image$cifs(&(0x7f0000000040)='cifs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x15000000) 10:09:58 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000040)={0x2, {0xf, 0x2500}}) 10:09:58 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300, 0xe}}) 10:09:58 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300, 0x6}}) 10:09:58 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300, 0x500}}) 10:09:58 executing program 3: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001800210000000000f4e800001c"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x500) 10:09:58 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300, 0x600}}) 10:09:58 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000040)={0x2, {0xf, 0x3f00}}) 10:09:58 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300, 0x7}}) 10:09:58 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300, 0x10}}) 10:09:59 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300, 0x700}}) 10:09:59 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300, 0x8}}) 10:09:59 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1524}, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xd, 0x0, 0x0, 0xffffffffffffff52) ioctl$KVM_NMI(r2, 0xae9a) syz_mount_image$cifs(&(0x7f0000000040)='cifs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x16000000) 10:09:59 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300, 0x11}}) 10:09:59 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000040)={0x2, {0xf, 0x5c00}}) 10:09:59 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300, 0x900}}) 10:09:59 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300, 0x9}}) 10:09:59 executing program 3: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001800210000000000f4e800001c"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x600) 10:09:59 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300, 0xa00}}) 10:09:59 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000040)={0x2, {0xf, 0xff00}}) 10:09:59 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300, 0x12}}) 10:09:59 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300, 0xa}}) 10:10:00 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000040)={0x2, {0xf}}) 10:10:00 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300, 0xb00}}) 10:10:00 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1524}, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xd, 0x0, 0x0, 0xffffffffffffff52) ioctl$KVM_NMI(r2, 0xae9a) syz_mount_image$cifs(&(0x7f0000000040)='cifs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x17000000) 10:10:00 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300, 0x25}}) 10:10:00 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300, 0xb}}) 10:10:00 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300, 0xc00}}) 10:10:00 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x2}}) 10:10:00 executing program 3: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001800210000000000f4e800001c"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0xa00) 10:10:00 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300, 0xc}}) 10:10:00 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x3}}) 10:10:01 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300, 0x5c}}) 10:10:01 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300, 0xd00}}) 10:10:01 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300, 0xe00}}) 10:10:01 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300, 0xd}}) 10:10:02 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1524}, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xd, 0x0, 0x0, 0xffffffffffffff52) ioctl$KVM_NMI(r2, 0xae9a) syz_mount_image$cifs(&(0x7f0000000040)='cifs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x18000000) 10:10:02 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300, 0x300}}) 10:10:02 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x4}}) 10:10:02 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300, 0xe}}) 10:10:02 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300, 0x1100}}) 10:10:02 executing program 3: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001800210000000000f4e800001c"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0xc00) 10:10:02 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300, 0x1200}}) 10:10:02 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300, 0x10}}) 10:10:02 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x5}}) 10:10:02 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300, 0x500}}) 10:10:02 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300, 0x2500}}) 10:10:02 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x6}}) 10:10:03 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1524}, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xd, 0x0, 0x0, 0xffffffffffffff52) ioctl$KVM_NMI(r2, 0xae9a) syz_mount_image$cifs(&(0x7f0000000040)='cifs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x19000000) 10:10:03 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300, 0x11}}) 10:10:03 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x7}}) 10:10:03 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300, 0x3f00}}) 10:10:03 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300, 0x600}}) 10:10:03 executing program 3: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001800210000000000f4e800001c"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0xf00) 10:10:03 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x8}}) 10:10:03 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300, 0x700}}) 10:10:03 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300, 0x5c00}}) 10:10:03 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300, 0x12}}) 10:10:03 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x9}}) 10:10:03 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300, 0x900}}) 10:10:04 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1524}, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xd, 0x0, 0x0, 0xffffffffffffff52) ioctl$KVM_NMI(r2, 0xae9a) syz_mount_image$cifs(&(0x7f0000000040)='cifs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x1a000000) 10:10:04 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) write$ppp(r1, &(0x7f0000000380)="2cacf81015c1397077fed344bc770c4b90490d371a7575b7832ba696e5a26138fa8c836e765053c0da95decb2db728469bfd55aea889", 0x36) r2 = socket(0x200000000000011, 0x2e20939d699e0519, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000000)={0x11, 0x804, r3, 0x1, 0x0, 0x6, @dev}, 0x14) bind$bt_l2cap(r2, &(0x7f0000000340)={0x1f, 0xcc, @fixed={[], 0x11}, 0x101, 0x1}, 0xe) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, &(0x7f0000000200)=""/217, &(0x7f0000000300)=0xd9) epoll_create(0x6) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/connector\x00') write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000140)={0xffffffffffffffff}, 0x106, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r4, &(0x7f00000001c0)={0xb, 0x10, 0xfa00, {&(0x7f0000000080), r5, 0x2}}, 0x18) 10:10:04 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300, 0x25}}) 10:10:04 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000040)={0x2, {0xf, 0x0, 0xa}}) 10:10:04 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300, 0xa00}}) 10:10:04 executing program 3: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001800210000000000f4e800001c"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0xfec) 10:10:04 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300, 0x5c}}) 10:10:04 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000040)={0x2, {0xf, 0x0, 0xb}}) 10:10:04 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300, 0xb00}}) 10:10:04 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000080)) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x14582, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r1, 0x117, 0x5, 0x0, 0x3) 10:10:04 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000040)={0x2, {0xf, 0x0, 0xc}}) 10:10:04 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300, 0xc00}}) 10:10:05 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1524}, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xd, 0x0, 0x0, 0xffffffffffffff52) ioctl$KVM_NMI(r2, 0xae9a) syz_mount_image$cifs(&(0x7f0000000040)='cifs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x1b000000) 10:10:05 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300, 0x300}}) 10:10:05 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000040)={0x2, {0xf, 0x0, 0xd}}) 10:10:05 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300, 0xd00}}) 10:10:05 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) r1 = open(&(0x7f0000000000)='./file0\x00', 0x200081, 0x0) ioctl$DRM_IOCTL_MODE_RMFB(r1, 0xc00464af, &(0x7f0000000080)=0x81) 10:10:05 executing program 3: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001800210000000000f4e800001c"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x2fe3) 10:10:05 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300, 0xe00}}) 10:10:05 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300, 0x500}}) 10:10:05 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000040)={0x2, {0xf, 0x0, 0xe}}) 10:10:05 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000040)={0x2, {0xf, 0x0, 0xf}}) 10:10:05 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300, 0x600}}) 10:10:05 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300, 0x1100}}) 10:10:06 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x10}}) 10:10:06 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) r1 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r1, &(0x7f0000000000)={0x11, 0x804, r2, 0x1, 0x0, 0x6, @dev}, 0x14) sendmsg$IPSET_CMD_SWAP(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x6, 0x6, 0x301, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000004}, 0x20000091) 10:10:06 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300, 0x1200}}) 10:10:06 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300, 0x700}}) 10:10:06 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1524}, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xd, 0x0, 0x0, 0xffffffffffffff52) ioctl$KVM_NMI(r2, 0xae9a) syz_mount_image$cifs(&(0x7f0000000040)='cifs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x1c000000) 10:10:06 executing program 3: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001800210000000000f4e800001c"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x3000) 10:10:06 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300, 0x900}}) 10:10:06 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x11}}) 10:10:06 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300, 0x2500}}) 10:10:06 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x12}}) 10:10:06 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300, 0x5c00}}) 10:10:06 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300, 0xa00}}) 10:10:06 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x25}}) 10:10:06 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x100, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000000080)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f00000004c0)={0x1, &(0x7f0000000480)=[{}]}) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000100)={0x2, {0xf, 0x0, 0x0, 0x0, 0xfffa}}) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x80000, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r2, 0xc008551c, &(0x7f0000000600)=ANY=[@ANYBLOB="fcf200001000007a289caf676944fb4c03591a73000900000005000000020015000011c1ac"]) r3 = gettid() r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000280)='/dev/full\x00', 0x8000, 0x0) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vsock\x00', 0x0, 0x0) readlinkat(r5, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)=""/137, 0x89) getsockopt$PNPIPE_ENCAP(r4, 0x113, 0x1, &(0x7f00000002c0), &(0x7f0000000300)=0x4) r6 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r6, &(0x7f0000000000)={0x11, 0x804, r7, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_ax25_SIOCDELRT(r6, 0x890c, &(0x7f0000000200)={@null, @null, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @bcast, @bcast]}) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x3c) ptrace$cont(0x18, r3, 0x9, 0x0) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r3, 0x0, 0x0) r8 = syz_open_procfs(r3, &(0x7f0000000040)='net/igmp6\x00') r9 = dup2(0xffffffffffffffff, r8) sysfs$2(0x2, 0x5, &(0x7f0000000500)=""/238) ioctl$CAPI_GET_SERIAL(r9, 0xc0044308, &(0x7f0000000140)=0x7) ioctl$SNDCTL_DSP_GETCAPS(r8, 0x8004500f, &(0x7f00000000c0)) 10:10:06 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x5c}}) 10:10:06 executing program 5: perf_event_open(0x0, 0x0, 0xc, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VIDIOC_S_FREQUENCY(0xffffffffffffffff, 0x402c5639, &(0x7f0000000000)={0xd5, 0x5, 0x2}) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r2 = syz_open_dev$vivid(&(0x7f0000000100)='/dev/video#\x00', 0x0, 0x2) ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000140)={0x5, @pix_mp={0xc26, 0x3, 0x20323159, 0x8, 0x1, [{0xfffffff7}, {0x100, 0x27a6}, {0xfffffffa, 0x3}, {0x44, 0x7}, {0x3, 0xe4}, {0x3ff, 0x7fffffff}, {0x2, 0x3}, {0x8, 0x7}], 0x40, 0x81, 0x2, 0x0, 0x4}}) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0x3da, 0x0) ioctl$BLKALIGNOFF(r3, 0x127a, &(0x7f0000000080)) get_robust_list(0x0, &(0x7f0000000300)=&(0x7f00000002c0)={&(0x7f0000000280)={&(0x7f0000000240)}}, &(0x7f0000000340)=0x18) preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x101) 10:10:07 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1524}, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xd, 0x0, 0x0, 0xffffffffffffff52) ioctl$KVM_NMI(r2, 0xae9a) syz_mount_image$cifs(&(0x7f0000000040)='cifs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x1d000000) 10:10:07 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300, 0xb00}}) 10:10:07 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x300}}) 10:10:07 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x3, 0x0, 0x0, 0x300}}) 10:10:07 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) recvfrom(r0, 0x0, 0x0, 0x10020, 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000000080)={0xa10000, 0xfffffffa, 0x65f, r0, 0x0, &(0x7f0000000000)={0x980909, 0x2, [], @value=0x4}}) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0x3da, 0x0) ioctl$SNDCTL_DSP_GETIPTR(r2, 0x800c5011, &(0x7f0000000300)) socketpair(0x2c, 0x6, 0xd8, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r4, 0x0) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000340)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICLIST(r4, &(0x7f00000004c0)={&(0x7f0000000280), 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="00002dbd7000fedbdf2505100000050001000000000008000400e00000020500010000000000140002000000000000000000000092aeb709ef3d"], 0x40}, 0x1, 0x0, 0x0, 0x4044194}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLIST(r3, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r5, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x88c1}, 0x2000) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x84, r5, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:policy_src_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, [], 0x30}}, @NLBL_UNLABEL_A_SECCTX={0x21, 0x7, 'system_u:object_r:ld_so_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}]}, 0x84}, 0x1, 0x0, 0x0, 0x40804}, 0x20008010) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r6, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:10:07 executing program 3: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001800210000000000f4e800001c"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x3f00) 10:10:07 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:10:07 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x500}}) 10:10:07 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300, 0xc00}}) 10:10:07 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x600}}) 10:10:07 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300, 0xd00}}) 10:10:07 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x700}}) 10:10:08 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1524}, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xd, 0x0, 0x0, 0xffffffffffffff52) ioctl$KVM_NMI(r2, 0xae9a) syz_mount_image$cifs(&(0x7f0000000040)='cifs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x1e000000) 10:10:08 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0x6, 0x335040) r1 = socket(0x10, 0x802, 0x0) connect$netlink(r1, &(0x7f0000000000)=@kern={0x10, 0x0, 0x0, 0x800010}, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r3, 0x1, 0x0, 0x0, {{}, {}, {0x10, 0x13, @udp='udp:syz1\x00'}}}, 0x2c}}, 0x0) sendmsg$TIPC_CMD_SET_LINK_TOL(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x18282804}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="080025bd7000fbdbdf2501000000000000000741000000420018000003ff62726f6164636173742d6c696e6b00"/98], 0x68}, 0x1, 0x0, 0x0, 0x50}, 0x4815) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000010}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r3, 0x800, 0x70bd2d, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x200}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20040844}, 0x20004) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) socket(0x1d, 0x7, 0x1) 10:10:08 executing program 4: ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x1000, 0x0, 0x0, 0x300, 0x3}}) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x20000, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000000c0), 0x4) r1 = fsopen(&(0x7f0000000000)='aio\x00', 0x1) fcntl$addseals(r1, 0x409, 0x0) 10:10:08 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x900}}) 10:10:08 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300, 0xe00}}) 10:10:08 executing program 3: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001800210000000000f4e800001c"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x4000) 10:10:08 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300, 0x1100}}) 10:10:08 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000040)={0x2, {0xf, 0x0, 0xa00}}) 10:10:08 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) socket$isdn_base(0x22, 0x3, 0x0) 10:10:08 executing program 4: syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f00000004c0)={0x1, &(0x7f0000000480)=[{}]}) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0xffffffff, 0xe0fc1) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0x3da, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r2, 0x80045300, &(0x7f00000000c0)) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000080)={0x69, 0x5, 0x80000001, 0x2, 0x7f, "4731729b5b228c5322febd53c53c7e4af9623d", 0x710, 0x81}) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x4, 0x0, 0x0, 0x300, 0x4}}) 10:10:08 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300, 0x1200}}) 10:10:08 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000040)={0x2, {0xf, 0x0, 0xb00}}) 10:10:09 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1524}, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xd, 0x0, 0x0, 0xffffffffffffff52) ioctl$KVM_NMI(r2, 0xae9a) syz_mount_image$cifs(&(0x7f0000000040)='cifs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x1f000000) 10:10:09 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300, 0x2500}}) 10:10:09 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000040)={0x2, {0xf, 0x0, 0xc00}}) 10:10:09 executing program 5: perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$key(0xf, 0x3, 0x2) recvfrom(r1, 0x0, 0x0, 0x10020, 0x0, 0x0) r2 = dup3(0xffffffffffffffff, r1, 0x0) ioctl$RTC_VL_READ(r2, 0x80047013, &(0x7f00000025c0)) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x2, 0x2, 0x300}}) clock_settime(0x0, &(0x7f0000000000)={0x0, 0x1c9c380}) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000002580)='/dev/hwrng\x00', 0x414a00, 0x0) r4 = socket(0x200000000000011, 0x3, 0x0) socket$kcm(0x29, 0x48690f5a24a7b023, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r4, &(0x7f0000000000)={0x11, 0x804, r5, 0x1, 0x0, 0x6, @dev}, 0x14) sendmsg$SOCK_DESTROY(r4, &(0x7f0000004a00)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0x5b, &(0x7f0000002500)={&(0x7f0000004a40)={0x23d0, 0x15, 0x400, 0x70bd27, 0x25dfdbfe, {0x5, 0xbe}, [@INET_DIAG_REQ_BYTECODE={0x102, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x9b, 0x1, "46a7b74d01665babcecee854764e951f3e2e610d6b4a4574c060a97d589feb35d1d6c6978cedc410727944f4bae655bf7c1445ade7aa82082853c924bf63dfefc9864744d7f39ad5a9912e6229bcfd9bbd305ad20a4666ca00b845733c2c82be0f060c64dd34f3678b93df77e59223505f7d8cc0609895b6f3c6bf540276cd3a74b20514d2bda6c06ae1ee3f343037b2da648ebbdaeaad"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"/4096}, @INET_DIAG_REQ_BYTECODE={0x6a, 0x1, "6490dfc9686dd2d9cf5b114f2be61e56e4a3fe0aeceb6463614d61b1d4cda7c280b8b2940a5150eea9c983eee738089a9555aa985b656ba80246128a2aa7176d1939d9a8bbd58ff3a0b615c34d9f3b85c44e20dc0da2414d1cf570720df69cbf8c49004abfd2eaf98705af6a045ceed3780027f2d02a9d905e1e692995eb1f999e6f9b3cedb371030ceac7b044a29588ccf1305a0fad1c43e5177f9a684c7011dccede7ade2ea85096fb50a2c59ab5411e306ad1fcd12d6292e4b30666b0c0411ccdc36e4d259a46c334fbb128c282fa90c56ccaab737f689cd9e39a0abd1fcf7b30998bacc1d446d88073f2b74c908789b399734b33fbdbd1e400f72dda85533e2497c758631c9ced211b1b7d010144b1e09a4f53dc6d7e112c87b8a23f2ec3b24ccb1c0cf64a20a4460dfc7b90083c9a996cdade412cf393f7"}, @INET_DIAG_REQ_BYTECODE={0x7c, 0x1, "d6422f0f4923f97a6c27a61d425a1b84543209bafbc837d6202aaf4513f80a1d738ae13d40120fff578e5e930105663b978993abaea531bb8c62c2f9627e793b1b868a77d03c00aa34beecfbd0028a0e6cc57f15e16f9e2cae3a797740e8c1dcbce72ebbc309298cc0d797907faf1bcdbd11966cae6f7a1a"}, @INET_DIAG_REQ_BYTECODE={0x25, 0x1, "3de6b60be352cc703dca43f3535984913790778ff6b926aded6b3bb09641f8e00a"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x3e, 0x1, "9fba0bf1cdb3acaab56286dabf51e32cd9bda5a7ce4b7c3a1aa5c038ef0bb03430c24d06b318c28677320fe4434241b37d1e4e4d12751429ecaa"}, @INET_DIAG_REQ_BYTECODE={0xc1, 0x1, "84a3b432d1a499cf5eabef48a93e0fe038cc104cd732465f45e6a297a160986f5e2afdec6f502b199e72935b58ab5afd1c369aba6d6173d3d18fcc025d63b40eced9930e45e6e94f9818103fcb877d6ec011a36b3d9f2869e1ffa21e1a72f4e01c3bfa7056a28f4522601c27500176140bb953ddd891a82b83a609f832859b227fc650ef529e16608ffeb99a13e80124129e540181f3937585242837369da5d3767d191e66567facf0af26bb24009805471d094e50232cfdeb4c1a4d9b"}]}, 0x23d0}, 0x1, 0x0, 0x0, 0x40}, 0x40) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r6, &(0x7f00000017c0), 0x3da, 0x0) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000080)={0x1, r6}) 10:10:09 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x20000, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0x3da, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, &(0x7f0000000240)=0x80) r3 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'syz_tun\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x200000000000011, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getsockname$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000002c0)=0x14) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', r6}) bind$packet(r5, &(0x7f0000000240)={0x11, 0x0, r8}, 0x14) getsockname$packet(r5, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x2) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=r9, @ANYBLOB="0100000000000000200016801c00018018000c8014000000000004001400"], 0x44}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) bind$packet(r3, &(0x7f0000000000)={0x11, 0xd, r9, 0x1, 0x0, 0x6, @local}, 0x14) syz_open_dev$binderN(&(0x7f0000000300)='/dev/binder#\x00', 0x0, 0x800) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0xac, &(0x7f0000000080)=[@in6={0xa, 0x4e22, 0x5, @local, 0xfffffff7}, @in6={0xa, 0x4e23, 0x4, @local, 0x7}, @in6={0xa, 0x4e22, 0xa3, @ipv4={[], [], @empty}, 0x9}, @in6={0xa, 0x4e24, 0x8001, @ipv4={[], [], @rand_addr=0x4}, 0x5}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x15}}, @in6={0xa, 0x4e21, 0xa3, @ipv4={[], [], @loopback}, 0xe6e}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2e}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f00000001c0)=ANY=[@ANYRES32=r10, @ANYBLOB="35000000d40d1e3be10ba8f2f117ffeb508831404848f3a41454889b457ee158050029d9271707075d4805611c9f6266df7e400055fa210000"], &(0x7f0000000200)=0x3d) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x81, 0x300, 0x2}}) 10:10:09 executing program 3: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001800210000000000f4e800001c"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x4788) 10:10:09 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000040)={0x2, {0xf, 0x0, 0xd00}}) 10:10:09 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300, 0x5c00}}) [ 638.421664][T14039] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 10:10:09 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000040)={0x2, {0xf, 0x0, 0xe00}}) 10:10:09 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) sched_yield() ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) r1 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r1, &(0x7f0000000000)={0x11, 0x804, r2, 0x1, 0x0, 0x6, @dev}, 0x14) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$sock_inet_SIOCRTMSG(r3, 0x890d, &(0x7f0000000140)={0x0, {0x2, 0x4e22, @multicast2}, {0x2, 0x4e22, @remote}, {0x2, 0x4e24, @local}, 0x0, 0x0, 0x0, 0x0, 0x800, &(0x7f0000000100)='vlan0\x00', 0xdfa, 0x1, 0x8001}) setsockopt$X25_QBITINCL(r1, 0x106, 0x1, &(0x7f0000000000), 0x4) 10:10:09 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:10:09 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/zero\x00', 0x206000, 0x0) read$char_usb(r1, &(0x7f0000000200)=""/165, 0xa5) r2 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_S_PARM(r2, 0xc0285629, &(0x7f00000000c0)={0x6, @capture={0x0, 0x0, {0x0, 0x7}, 0x0, 0x1}}) r3 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_S_PARM(r3, 0xc0285629, &(0x7f00000000c0)={0x3}) r4 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r4, &(0x7f0000000000)={0x11, 0x804, r5, 0x1, 0x0, 0x6, @dev}, 0x14) getsockopt$PNPIPE_ENCAP(r4, 0x113, 0x1, &(0x7f00000003c0), &(0x7f0000000400)=0x4) ioctl$VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000080)={0x80, 0x1, 0x4, 0x200000, 0xffff8001, {}, {0x0, 0x0, 0x0, 0x0, 0x4a, 0x1}, 0x6, 0x4, @fd, 0x3, 0x0, r1}) ioctl$sock_inet_SIOCRTMSG(r4, 0x890d, &(0x7f0000000440)={0x0, {0x2, 0x4e23, @local}, {0x2, 0x4e21, @multicast1}, {0x2, 0x4e20, @rand_addr=0xbf6d}, 0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x4, 0x4a0}) r6 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r6, &(0x7f0000000000)={0x11, 0x804, r7, 0x1, 0x0, 0x6, @dev}, 0x14) getpeername$llc(r6, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000100)=0x10) r8 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dlm-monitor\x00', 0x183, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r8, 0xc0905664, &(0x7f0000000300)={0x0, 0x0, [], @bt={0x20, 0x20, 0x20, 0x5, 0xffffffffffff0453, 0x100, 0x8, 0x8}}) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:10:10 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1524}, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xd, 0x0, 0x0, 0xffffffffffffff52) ioctl$KVM_NMI(r2, 0xae9a) syz_mount_image$cifs(&(0x7f0000000040)='cifs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x25000000) 10:10:10 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000040)={0x2, {0xf, 0x0, 0xf00}}) 10:10:10 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000100)) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000000)={0x2, 0x101, 0x80000000, 0x7fffffff, 0x1, 0x2f}) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0x3da, 0x0) ioctl$PPPIOCSMRU1(r2, 0x40047452, &(0x7f0000000140)=0xffff338f) ioctl$SIOCRSSCAUSE(r1, 0x89e1, &(0x7f00000000c0)=0xb549) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x4, 0x0, 0xff92, 0x300}}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r3, 0x4b67, &(0x7f00000004c0)={0x1, &(0x7f0000000480)=[{}]}) ioctl$TIOCGDEV(r3, 0x80045432, &(0x7f0000000180)) 10:10:10 executing program 5: r0 = gettid() perf_event_open(0x0, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x1, 0x0, 0x0, 0x300}}) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') preadv(r2, &(0x7f00000017c0), 0x3da, 0x0) r3 = pidfd_getfd(r2, 0xffffffffffffffff, 0x0) bind$x25(r3, &(0x7f0000000000)={0x9, @null=' \x00'}, 0x12) 10:10:10 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000000)={0x12}) 10:10:10 executing program 3: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001800210000000000f4e800001c"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x4888) 10:10:10 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/autofs\x00', 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f0000000200)={0x1, 0x1000}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x2000, 0x0) r3 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r3, &(0x7f0000000000)={0x11, 0x804, r4, 0x1, 0x0, 0x6, @dev={[], 0x2e}}, 0x14) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000000c0)={0x0, 0x9}, &(0x7f0000000100)=0x8) r6 = socket(0x200000000000011, 0x3, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r7, &(0x7f00000017c0), 0x3da, 0x0) ioctl$EVIOCGKEY(r7, 0x80404518, &(0x7f0000000240)=""/176) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r6, &(0x7f0000000000)={0x11, 0x804, r8, 0x1, 0x0, 0x6, @dev}, 0x14) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r6, 0x84, 0x13, &(0x7f00000001c0)={r5, 0x8}, &(0x7f0000000180)=0x8) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000080)={0x3f, 0x52, 0x6}) 10:10:10 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x1100}}) 10:10:10 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDGETLED(0xffffffffffffffff, 0x4b31, &(0x7f0000000000)) r1 = socket$key(0xf, 0x3, 0x2) recvfrom(r1, 0x0, 0x0, 0x10020, 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) recvfrom(r2, 0x0, 0x0, 0x10020, 0x0, 0x0) r3 = dup3(r1, r2, 0x80000) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r3, 0x80045400, &(0x7f0000000080)) r4 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r4, &(0x7f0000000000)={0x11, 0x804, r5, 0x1, 0x0, 0x6, @dev}, 0x14) r6 = socket(0x200000000000011, 0x3, 0x0) prctl$PR_SET_FPEMU(0xa, 0x1) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r6, &(0x7f0000000000)={0x11, 0x804, r7, 0x1, 0x0, 0x6, @dev}, 0x14) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) r9 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r8, 0x84, 0x70, &(0x7f0000000100)={r10}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r6, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={r10, 0x1f, 0x5}, &(0x7f0000000100)=0xc) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r4, 0x84, 0x1b, &(0x7f0000000140)={r11, 0xfc, "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"}, &(0x7f0000000280)=0x104) 10:10:10 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x1200}}) 10:10:10 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) write$P9_RLINK(r0, &(0x7f0000000080)={0x7, 0x47, 0x2}, 0x7) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) r2 = socket$key(0xf, 0x3, 0x2) recvfrom(r2, 0x0, 0x0, 0x10020, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f00000025c0)=[r2], 0x1) open$dir(&(0x7f0000000000)='./file0\x00', 0x8000, 0x24) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000140)={0x4, &(0x7f0000000100)=[{0x8, 0x3, 0x7c, 0xcc6d}, {0x1, 0x0, 0x4e, 0x3ff}, {0x4, 0x81, 0x2, 0x8}, {0x7265, 0x4, 0x7f}]}) r3 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r3, &(0x7f0000000000)={0x11, 0x804, r4, 0x1, 0x0, 0x6, @dev}, 0x14) r5 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r5, &(0x7f0000000000)={0x11, 0x804, r6, 0x1, 0x0, 0x6, @dev}, 0x14) r7 = socket$key(0xf, 0x3, 0x2) recvfrom(r7, 0x0, 0x0, 0x10020, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000003980)={r7}) sendmmsg$nfc_llcp(r8, &(0x7f0000003740)=[{&(0x7f00000001c0)={0x27, 0x0, 0x1, 0x4, 0x9, 0x81, "f8cc0323c5220eb8d8df0a7006ad300bfc4803d20974f393acd59530ffd215af8722e29e8a962aec04948c8348c71b06dc5e4e106d15b787c53a65c375b775", 0x13}, 0x60, &(0x7f0000003600)=[{&(0x7f0000000240)="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", 0x1000}, {&(0x7f0000001240)="46cc144a7d5cd1d03305a778166e736ffafe7743f92f40924c94f809356ac6d1b274c32e1a4c58", 0x27}, {&(0x7f0000003880)="78b39ef0aaeb0e0775cc8874c3a62fb272290497e284b192822972f6a3570abe3c070b660e9ba9b4841dff013c54dcfc980e95ff651d652ab1d955ff08400b789cd8acac241e5ca175dde079dc9ad9c40653f76e42cf020f20581e2dc7ab39a96b5d029b5d0939cc2f403ce0c447ed5beea4a8be8a6f4cd8d790e2f02e6f3c5d88a50bb7cfcc6aee864204858bf4d30dfeb1460ad18328a6b1af372ea2206627b3be6643055e85ef0b2013886b9db7f0dcc9cdeb5bcc5f429e2ee23bb1fda75345e4533332c8030e0949564fa7bb", 0xce}, {&(0x7f0000001300)="e0e4774625726c1ed626ac76f2b27a3033ec841de3fab882229c16fb", 0x1c}, {&(0x7f0000001340)="bfd2648ebe9bb898042f472227621b81ec2aef9813c871db68a12c3d8f011480d148585924c651deaa36d02d24024a99dc77bce8ab7973f4fd60e098af0912bc9edf5832", 0x44}, {&(0x7f00000013c0)="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", 0x103a}, {&(0x7f00000023c0)="5c8560113b7dcc25b9541da2b1d8a8e7c8d6fc60cff3d786101d7f9a28c62c98e46bcf85594b752162fef976ad08a9d6e819f07444fa40c42ac0d5288d95c57517777a3b872f549f8a035812cf0a6757347e3f19220563fc23d1b65a251caa3a341f17ad88d07614b1bd3c9da2d224044965fe56495e887f269f015f1244c06ac09b24fdcf116882666958e1e0a451abec64ed3e550aed94b59dcd4c976fda70e19aa868b00ebe7dda685826ea82fe15962ffc3548b9640aa2eb2f8e9e128aff34ce6c230da6f4358d0aa1d1c68da1c9b95a1825f52557932ce470469ed86a5255648fae44bfc8622b1fa2d1f36cb4db3005", 0xf2}, {&(0x7f00000024c0)="753142f3babf75e170383aced7efe87837d4ee749d42ffda606c3dc7096e976b7ee4665943ca5e158eb34c87b7162beae63cc688db099f04a3b6e91d4a3062ed329b3bb3be48510964369091a3b1a994c17b4c37b45eb08c694fad6c4df2ee5c988e8adb1ac6c72c16a71100e4d5d85e72a9703a8ea33bdb5bb51cb0684abdcf4e8a72f362eebd3b04be47130c0123f6151bc36dda27075f151b95cfb48ccdaa7b1326ebf62721e5f1a257db5f7e0acbca316b8dd1a3ca4ef79ec13fcbe4df267fc5786a677140513360a67587e8431b509258f77c15a8aa11f61bdee08508262bb0ac5a7a8b1943b7fbca9c", 0xec}, {&(0x7f00000025c0)}, {&(0x7f0000002600)="43ca6cc9e8b6ec463f7a48f0a4bbf7c2a906f0e68aee3f9e770b5c8f74e2b3051a967325d79ddd0ea3d14ea07aada803027ec380c70f3d08bc3445a18d8d2fb237fd14eea019bf61ed229ac68a40027df2a27dd681c70727c7a58cb1debbd1a01f536440aae602b3bdf30cab4939027bb38f0bdbe023985cab33cd5f2e6c28bd48dff9bd78a0d4fe6fe8fd45a5cc35f9ba8dba29cb0107f4998780eda3094470ec71edd89bc5e5dba7610381461e37da46834303b49d258b320c4af014fdff1a9d294308f62c4d49d6d51b79a0102fc7543c432cc8e7f932d2e057786cb09c947736a60413127637a90c74dd32a2a4cfb8f7f9dc28ec6a7cb7b602de55198eae1615b25b6bbd9562e82f899b38cb58620be098b86058905c27da23b1a1b279749d115e17d00ded5534a60891d72e46bea706c502c4e928dc43713e71ae21a2de910d1f954655b107c2174c6b97b2e4c3df1c6d5b8c788412b752b2480a4a0865a811444ecaed7ce258ccd38b9d53ed1394d913da211b1e3d8294e2f524810df0ef51d20ab6418fd523b5a164cbac518f178ba958d20653208527fe282f8b08fc819597592e6eb8f112e3b8e2dbd6a58023aaba3fe100fc756d4a12ac15089a8412fbe2f4901eedd2f780ff394dad8b8af5b7ef0b340dd35f49bbabf4d713ba9f01e3e07f07249c15e23a2b1447bb3a0f88da25633f18d1bd4ab50e97d447be673d931e013b3e07ff4c6c43d089d02cb4990c3cd4415d5fec3e48ad936702fcc3f0dc84630657f7519cf2be02d72178f2de04839f68046d94cabb8f4bac28c09fb5241c6eacd5e044bb24f74697d9d14e380b9938d8fd517ca320f90dd66607278d4be5561178bec48dff425604010cb16b98f7cf3d098cf3eeb45c486d515808a908ffea78fe29c20ed0355da2cd84106fb2d19a1af3494c0a69562ff1fa5f888c2b794a729268414320ed89693209fa9efe6c182135967f979e94969eac77c4d488eb6425e4b3ba6879f65be617834d131dd6c317287a9906c4e02da5766ad36aef7568ab090b4347460050c00d0c742dbb0cab800f18359d6328cf1e8c2c278075b2c12924f3781e4e3654b50b2104eb8096d39e61c93a0c965c57cd88ebc9dedc1433018fa636c15ac14ea396ca500033094d4aff89c932f36b2bb373b6f029850897b1de3b16a03f99c1ee51f87997af00445a165298fbbd024c5f2687e764eb6704f66d6039ab2dbb31d92ec91308260446aea1d5e69eb0b1e4087e75a9c3cab0c8dc2a5fc09af7463476b40f000e6f0ac3d4a0db6d334d42e37e45ab161e8f4817efcbfa0b6356d4eee1d5be3fa4fa8606c3f6a41f94f569f8d37297b10ce24d36069e18ee4c6a2932ea8bbf0b9de7620c7f4421354f4b6f1bdcf408729ee6288d04a6fe9e4ea829abdaf705825e1447476eff29916b466f2fdcc9098e09c4153b1a39002b19554603a5c30d50d23bb594c1269a60c330fa4b5c4f8f34ffcd7426f18b34c1bb0bd0aa045812e181cee84941d5eef0f16c4e99615d35cb33e0b21071e7156c045d08b2e6ee823eca4ee948af839c86cbaed66d08acb8350cb6b03c8362169e043e8d8b1d8bdb20f4a1c0a96256599f8259c12334d5f2b9f08d890b9da6f371d95cb38805807154ad476918cc49bf2a7c2942f35c3653c5242bddb698b4e596912b93dabd4f93e421b7c7201440479e2b5c64ab54e9fd4c8a8a50987e82bb321fd74b6df9e024034a04b28a40929107a3a8b39684429369139dd2da0ba906300684a812e8610477256f8042814ef30807a5d71aa63a7f91aed85eb9d9d7406db259cfd862e5c4a78c75dd3770b0b997c9adece4af1c88e1d8bd9fda7874e003dab98ce062df9da351d6918b4f6b243a869b3976206f2c7dd0f63694524c183636f2bd0ea66ed26287408c331f8a1cb2d02c2d263f131603b47c0f136da3fbbad401038c792ab0a4b6a3894f9d4c9c223561965b140855bafd09d5c138088c1bf944a765bafe26f2ecf9dad40b27702665448767fcbb719ad9b6df1bf708605f6915ea304454afea74246f38cdea4de0539377f2014437f8cf89bbbe8d757af3cbe78e3dda1dfc06728fd0ff3a546859e3d0bb54eb6f89e8cefacd8eb59f522bfee9dd294a9343a2d91e60a67be7163a7d49682757947722066d86700d7c5a575edc93b9f06479248b35de22b07ef6d4621b51a34bfa97d08ad9abe3d5899f0502f3e0d6706f2826c83bca1f1f9aaa304e49d469d46b523b8a796495324d0973e2af46146d25f28b91183ea4937cde847ca62299d7b0fcdb279c7ca66d20b536071630d2ea4c63e83f6910d0390803beebcf4d5fdc095eb0712bca7adad10e572e050b9ab427ead788e652169627f97e8747de09c3f0c95ad39f094bbb209474836df76e557ffa3be8c3ff8e9f948e2b0e3f82f3ddfd8abca12461f29ae389511fe11f947edc652c9990321e14e714fd4c8c0bc213ccd6ec93fc9a6ea52dc641b69659c0d55cc4372f381399d874c9cf5541dc395f9e5867cdb6d5f85b607da76511232577eb7899d9ce8e9bb1551a85b3c388e7a2eeb004aedccd5ca46bb016acae894b836ffde1d53c64ec76679042aeb58a641903d83cc39b15d6c825cab1b4f75bbdcbd9e278aa0abce5e326561118bacaec4eecb6a063f0d1177bd4e990dd4c7f847f9b58895005d4ec5726b87fe3f4fae0ef722d3ca6de4489451a0bdd7878afb03f79adb08702b619e5ff0c94f2677b2b0ae0a4bbcdbe7aa563af5d3070455584789553519b5fd328d6d8d264a1b19336826b82aeb7f8d66c329a4f622d12ccfb1d8da1405f2a73fe3f3606beb2b53d339dd49663356e526a27a0020d41f4f2c5c139bfc3e56dd0a59515532b863efd557c46f79dee0e540ba238d433e43f72218e0f89cc8c3deea2e3a841d13bdc042469afe34822958c1c102b48e66d420062059ff422937fdc07b10dc593e7670375bb0d57cbdba2cb1a8bc9938f2c8bdfd5f85ca6b15a234291bdde5f48fa1c1eb25143fce8e5317bca613e7db4eeab73bb50c71142d54112829672a94cab2fefca7e166ce263fce9a976f62cba73c4ca6a4f1898f67771fe6323f04a5a274de1841b91b43729eb98e967ef72ef44397be850fc6b35d30c630d214133dad692df2d3575707aed170640498c0eda7ad2837e82e553c218c7c9107535593b327b72a8047c3e136b2aa44ed04d8e34c3bd50f15a88ab1f498785e991201f8a541ffdb5b58a949263eeb98bc6298ad7997dad53d47681e061ed9df39f3064e37367324f1e18cb2af1ed3089866cfa60b35a718201cfdb7dd954b3a003242995737905132edb8b871f2ded8235774e7c2a4028d8d17f448603ee3ca48e5598e8d009c53f7350c374682f1c9ef13b86c4591d41969ecadcd6b774cc2c1f7cc43177769316a901cbbf1fa39eb6ee468855fb347b73397cf7411fc8e95f110739da70fe29e36e28545c928c48c688eea2ff51820aad5efd095f42e5d17c10bd018ba90e26cad5079dcf25a523dee20ad2112656175ec98dfec17fc2045d66010cf2ce75b273f0b021faa05c510e2a8013d2b3e22bb121b22cc61622438a4edce2819c3ee85ad2fe4379ddc32ce898ef5090d0aaa4764a08dc2ff236178f63998d2c882cb32fbe572539d8375acf8eee9392f53f6350ddc0592b5464ec6fbf8c2aac15f08d0f56973310ec2bbfdb4106316a89653fc64dee9f71f5efd3829788a3d4ba2896a51fc91d339558f9dedc62897c28432a534efc1d4fb157d1ff47320dc1a15d42ab458113ff6c4390dc576862317378d898b59e245e3ffbab4fc3b3d96fbcfea936809047d3e4ebe27528a49665664fd3213f15d9ae7fd41e06a5e8369c1b70355cf05ae6ef90bdaf32ba8d72ef361dc97791e64a72103827ba518b577d4116219675357062be696b7a5493bc7fb699e0018b89a7996b9fbf74ff75da3b1f95664642d5e955b1ae0cab7ac0cc26ba182739573d34168540d14e29ccc92623afd7d9ebbb83c947f977611b717308fe0cab361512193d01a147cf05e829c50d67e768cc1bd3c555f9b3bcbd4ec0ee6a66e1e79701b77c97711451fb6091868a871bf551e1810260ae7a99ac22603c51687b6a1ca1a97e20334b980f4146fce45b92486c1a270e3de1e0576c4193c01b12e0437b20feed541fe4930080fdd6ab788b07744126438c2c7de0c7123004b0e5d77bb5c5174bc1208f70cbc08d676e2b8e4771028942de9b720f412cad90ba5d06d327cc309d635de9cfaf7ebeea65ca3373785ca66916aeee1500dae052b2bc895a126d77902aa7c87d818e6d2c7ddf7c4f29dfe53926b4654863a1742cbd2a42c5444c352b3b822b1c687b4b7634e1e2fc40f40c5abba91fb358fbdef07d3a0da167ea7c038b4b56de622763427db07f9ce6370dba9a52b0725019badda73918081af8e1e9e799840199a0cf5c2c53c1b3e6da7b9440c459ad404bf061302efd65fe2d117339783ede323a4ee869059739c241da82b57b03d987a2d43b3b47ab6f09c5467b722951a0e497eea9b1a92237dbae30eb1813fb259a32eb873bea3ed9f613b21b325faf15696be7eb2c468af645d2f8ada3bbfe6cd3543db5aa997fdd438e523a9ab09bb9424eed4eeefd084b553bcb9ce1f439413811b032623e62e9119cbbe565c1feb2c9da4a9d505cf30aeb5a405b7b0c1cf02118f4d47c5101bb64038e650d44ba0b30993e909cf387331f2b3cc6e9ebb5e6aadb6a8293fe5873e38b671d92e363713fb07920069ed183d6d74c3b6cf7c6ab711ea71adb5db10a268dd079595ac6b0e82a54da720e7f5bde034e9398f445fec165c68a74538c18f11bf100d511128379097213100808e82181f6586cb0d95a4fa6424df4143bac4cdc7fdb23fd4b08c2b168e2a322af788bdc8a9b7525e60eefa485580f9391b939922ac85c2c65f6862bb8750e56df8fba771513caadf85c38c9a73953a7b1a697ee5019e0ef540dad195021113ce2ebf76a9d8f1c7b0807fad60f0961ce40836b542820bcc5873ac236e75babee46d62a38df4711e2a2c6c5f9defa8228d8a8cf03a6017c0a7de7b1af7f63000b9872beee456c017f54fb37dd2af9eda3c7afff50c9a023d2bb646568c5d04cc771d0d089f47dcb81f8634b20022cdc90f9e3f04e6776e235744839df4a25fa58addae90cc6f62dbfa229515d561205b5d4c4a8132f8a16c410ad7a0ddbfb6b5750cd0dfe75ada9f4c56b7f58f9ef4e1ea96fd29e8582a4c38f3b82b3e8c0fd74b021e35996192dd4709b227c8e101bbb2bc9706dc67235fa267faebf01b2acd0477794b4266b8cb6daa541768de9a40bbcddbdcceb4e8b098b2a9686b2113feae173e872700695e3c9dbb082558c68bcacebb03de60fb86d1cec9ee97fc0b283051b329c3f4133b7eb226cadbd2346eac73ce9dd5312a6c1f80b31ade40a400d1f1e7bc7b04abd7b76503cef6429fc7fe9db011028e01c9c39974a242c18f7f6ee1cebcbedab945d13f376159b280fafb0836c8b6f5a3fca34c13e95bd5389cf9ae53d30aae283ff2596602eb3c776fb1311de7771d43ae7cad3c390eef3068ce8f3f0e4d91875cbaaba89e58f6ff9c3cb3359741b08900c65041bf978008d1fa180461fd9f27a6a6f005929cec41eaf7ed7afb3d2f074f48458c67757011f9b1709ccbf015e667af8e8e57549750639e9389386b4fb7d9f3953aeb38a9df1acf4dd5fb42457ff6463dad0d9d4a7267a972e4f674d9404e0ec8b8c1964f8af183438c73bd95c", 0x1000}], 0xa, &(0x7f00000036c0)={0x78, 0x0, 0x1de, "9b6d98ae714d2523cc7a257a82b4fff11ebf9e1d30d5d9e737b2f2b3b70ccce091391188246a8d107666de6ae0469ea0455b24a4346d592e8de7377a5a7013ebaa701c97d6295e7146165586dbbb4cd3813ce190faba1c90407c62786ae8e33226ed00e7"}, 0x78, 0x4000}], 0x1, 0x4000010) r9 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_S_PARM(r9, 0xc0285629, &(0x7f00000000c0)={0x3, @raw_data="5b438f8415aa8f56eb344691cad1f41840e5d9a44521bdb446f3fc541c0aea638b7fbb7c315ef5a75172d008575b59d378ca6d6c6aa1cc255dea53c39de84ad59f0e3d252d5d85a916ce4e18de7d34e0a3565247f5c72bae24318ca7300a07b9b97dc7ed35237048adf0f93cb1af06b0d43b37971b0316738e3c044f969d1fe79af9dd2b65ff4c4559c16596e3303866eb0d9c6b9d857161b9cc65dcfa99de66c176a367d3cc895f468f4f725467b478e817c7216b93f8672c679ff8330d40b8e7a88dddc8a1e59e"}) r10 = syz_open_dev$tty1(0xc, 0x4, 0x1) r11 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r11, &(0x7f00000017c0), 0x3da, 0x0) ioctl$BINDER_THREAD_EXIT(r11, 0x40046208, 0x0) ioctl$PIO_UNIMAP(r10, 0x4b67, &(0x7f00000004c0)={0x1, &(0x7f0000000480)=[{}]}) ioctl$TCXONC(r10, 0x540a, 0x3) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r9, 0xc0305616, &(0x7f0000000180)={0x0, {0x6e3d6600, 0x6}}) 10:10:10 executing program 5: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, &(0x7f0000000100)={0x6, 0x7, 'syz0\x00'}, &(0x7f0000000140)=0x28) bind$packet(r0, &(0x7f0000000000)={0x11, 0x804, r1, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$SIOCPNGETOBJECT(r0, 0x89e0, &(0x7f00000000c0)=0x75) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) listxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=""/54, 0x36) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:10:11 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1524}, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xd, 0x0, 0x0, 0xffffffffffffff52) ioctl$KVM_NMI(r2, 0xae9a) syz_mount_image$cifs(&(0x7f0000000040)='cifs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x26000000) 10:10:11 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x2500}}) 10:10:11 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000040)={0xc, 0x0, '\v(+\\'}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:10:11 executing program 2: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x804, r1, 0x1, 0x0, 0x6, @dev}, 0x14) accept4$x25(r0, 0x0, &(0x7f0000000000), 0x80000) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:10:11 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x220102, 0x0) ioctl$SIOCX25SCALLUSERDATA(r2, 0x89e5, &(0x7f0000000200)={0x2a, "b643029a94941c6f8f646bdb7154026ee7169c8ef326c46a615b6ff2c88ba87744fc252130afe1bb4bb725e80fdb5789edc8f0909362175542ff59c3a5bc5a132c6f0f54d9e54c42ed420929fb1107e1a99cb6ef08419ccd04130f1deaa5c8f19b0a6593338dfadd6f8909906361db81b22a0879746e98e401cec483c7820ceb"}) ioctl$PPPIOCGDEBUG(r1, 0x80047441, &(0x7f0000000080)) r3 = socket$key(0xf, 0x3, 0x2) recvfrom(r3, 0x0, 0x0, 0x10020, 0x0, 0x0) sendto(r3, &(0x7f00000000c0)="ff87beb0c3b5d474e6c9af20e831d7aeb4b7c7bcc66477e8d058a327a9d4e0aee5248ce1463eb6395a0af9c838c5a2c8a80e8964cb3ebbc0a7c44ce334c771fea7da5263483c0f877e6db6a15573e3fbcb05d1e3261469c2afe6", 0x5a, 0x10, &(0x7f0000000140)=@sco={0x1f, @none}, 0x80) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r4, &(0x7f00000017c0), 0x3da, 0x0) write$P9_RSTAT(r4, &(0x7f00000002c0)={0x77, 0x7d, 0x1, {0x0, 0x70, 0x3, 0x0, {0x40, 0x0, 0x7}, 0x108000000, 0x8, 0x5, 0x9, 0x12, '/proc/sysvipc/msg\x00', 0xe, '!vboxnet0\xc6bdev', 0x12, '/proc/sysvipc/msg\x00', 0xb, 'wlan0(-ppp1'}}, 0x77) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:10:11 executing program 3: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001800210000000000f4e800001c"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x5865) 10:10:11 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x3f00}}) 10:10:11 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:10:11 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x5c00}}) 10:10:11 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0x8, 0x0) ioctl$ASHMEM_SET_NAME(r1, 0x41007701, &(0x7f0000000080)='\x00') ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x37e2, 0x300, 0x4}}) 10:10:11 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00'}) socket(0x3b, 0x2, 0x94) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') r3 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) r5 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r5, &(0x7f0000000000)={0x11, 0x804, r6, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_inet_tcp_SIOCOUTQ(r5, 0x5411, &(0x7f0000000180)) bind$packet(r3, &(0x7f0000000000)={0x11, 0x804, r4, 0x1, 0x0, 0x6, @dev}, 0x14) sendmsg$TIPC_CMD_GET_NODES(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x300, 0x70bd2d, 0x25dfdbff, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x4008000) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:10:11 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000040)={0x2, {0xf, 0x0, 0xff00}}) 10:10:12 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1524}, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xd, 0x0, 0x0, 0xffffffffffffff52) ioctl$KVM_NMI(r2, 0xae9a) syz_mount_image$cifs(&(0x7f0000000040)='cifs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x28000000) 10:10:12 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=0x0) ptrace$setregs(0xd, r1, 0xfffffffffffffe01, &(0x7f0000000080)="a2eba5ac606347708bca6512ae9f491b56d4c738a5d6177f9f35c5098088f90dbf2931163274d163bade5cc6373408d6ad0d9a2674e7de6cc8948af75e4b3b05fad65db2881d293ec91f0eb2c7660bbb7f42b9bc43b456421b6e8f733f2522067933d30d7349db046b354d8ad6015a5ae731ac57c33b05045f3a8e6413fd95a5a7b951bc48ff3afcc05b36d3a39b7485b261b3bd442cb41f666d7891781c1332ba32c59cd291c8066d8dbc8ad6fc4a2a2d2ebfe8ba2286c445af592ecf173762b7587c8a35ab36db4c9410794e2fc38e65ed3e7496d3ee59e4ad70") r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r2, 0x4b67, &(0x7f00000004c0)={0x1, &(0x7f0000000480)=[{}]}) r3 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r3, &(0x7f0000000000)={0x11, 0x804, r4, 0x1, 0x0, 0x6, @dev}, 0x14) sendmsg$nl_generic(r3, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x110, 0x1a, 0x1, 0x70bd2b, 0x25dfdbfc, {0x14}, [@typed={0x8, 0x71, 0x0, 0x0, @u32=0x10001}, @nested={0xf2, 0x28, 0x0, 0x1, [@generic="1cb64d8120786b768740bde516fad6911e5ac5341127f832a528d52573d1e1074f11a4002efd653ffcc5244d6ef834938dcbe83623bd2094f5c755474e6341f35ac9a5b93220fb73962d5d7388ae314b2425bd659b4fbf7038a89dcb52ce0f9a46d04d76949fc3f557d1fa85402ea3c560a539f3c7bd81e7bb367948fa614122fe718fc695bf80075d85ab35061ca939568196fe1959020ce8120b192ac06c0c36fdef6aeabef431da70dcb7c964b48e5808c24de6f784330d0f5347aab4d6d90428717355a7f97e12d0f78d3e66b7ae26b39e5607920362b3e31808982eb18e0dde607348c21fe96cdbb21eeee8"]}]}, 0x110}, 0x1, 0x0, 0x0, 0x404c801}, 0x8000) ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x541c, &(0x7f0000000180)) 10:10:12 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000040)={0x2, {0xf}}) 10:10:12 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000000000)=""/61) 10:10:12 executing program 3: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001800210000000000f4e800001c"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x6000) 10:10:12 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x2}}) 10:10:12 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getsockname$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @multicast2}, &(0x7f0000000140)=0x10) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000000c0)={r0, &(0x7f0000000000)="dc7dacb289c217035e1b72a8f6e3e104024a836f996675886650461fa73b3853c2038176ee", &(0x7f0000000080)=""/25, 0x4}, 0x20) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:10:12 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_S_PARM(r0, 0xc0285629, &(0x7f00000000c0)={0x3}) ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x800) ioctl$SCSI_IOCTL_DOORUNLOCK(r2, 0x5381) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x303, 0x2}}) 10:10:12 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDMKTONE(r0, 0x4b30, 0xd948) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0xfffe, 0x0, 0x300}}) 10:10:12 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x3}}) [ 641.956285][T14913] vivid-000: ================= START STATUS ================= [ 642.003832][T14913] v4l2-ctrls: vivid-000: Test Pattern: 75% Colorbar [ 642.025777][T14913] v4l2-ctrls: vivid-000: Fill Percentage of Frame: 100 10:10:13 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x4}}) [ 642.056518][T14913] v4l2-ctrls: vivid-000: Horizontal Movement: No Movement [ 642.083257][T14913] v4l2-ctrls: vivid-000: Vertical Movement: No Movement [ 642.090434][T14913] v4l2-ctrls: vivid-000: OSD Text Mode: All [ 642.105357][T14913] v4l2-ctrls: vivid-000: Show Border: false [ 642.122149][T14913] v4l2-ctrls: vivid-000: Show Square: false [ 642.138776][T14913] v4l2-ctrls: vivid-000: Sensor Flipped Horizontally: false 10:10:13 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket(0x200000000000011, 0x3, 0x0) timerfd_create(0x5, 0x80800) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r1, &(0x7f0000000000)={0x11, 0x804, r2, 0x1, 0x0, 0x6, @dev}, 0x14) connect$netlink(r1, &(0x7f0000000140)=@proc={0x10, 0x0, 0x25dfdbfc, 0x1}, 0xc) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r3, 0x4b67, &(0x7f00000004c0)={0x1, &(0x7f0000000480)=[{}]}) r4 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TCSETXF(r4, 0x5434, &(0x7f00000000c0)={0x4004, 0x40, [0x24, 0x8001, 0x3ff, 0x5, 0x6], 0x3f}) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = socket$key(0xf, 0x3, 0x2) recvfrom(r6, 0x0, 0x0, 0x10020, 0x0, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x10020, 0x0, 0x0) r7 = socket$key(0xf, 0x3, 0x2) recvfrom(r7, 0x0, 0x0, 0x10020, 0x0, 0x0) ppoll(&(0x7f0000000180)=[{r5, 0x105}, {r6, 0x1000}, {r3, 0x20}, {r0, 0x8016}, {r0, 0x40}, {r3, 0x20}, {r0, 0x100}, {0xffffffffffffffff, 0x4401}, {r7, 0x2686d0f5d8147f46}], 0x9, &(0x7f0000000200)={0x0, 0x989680}, &(0x7f0000000240)={[0x6]}, 0x8) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) r8 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x100001, 0x0) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r9, 0x4b67, &(0x7f00000004c0)={0x1, &(0x7f0000000480)=[{}]}) ioctl$TIOCMGET(r9, 0x5415, &(0x7f0000000080)) setsockopt$bt_BT_SNDMTU(r8, 0x112, 0xc, &(0x7f0000000100)=0x9, 0x2) [ 642.152531][T14913] v4l2-ctrls: vivid-000: Sensor Flipped Vertically: false [ 642.166924][T14913] v4l2-ctrls: vivid-000: Insert SAV Code in Image: false [ 642.175521][T14913] v4l2-ctrls: vivid-000: Insert EAV Code in Image: false [ 642.192783][T14913] v4l2-ctrls: vivid-000: Reduced Framerate: false [ 642.208079][T14913] v4l2-ctrls: vivid-000: Enable Capture Cropping: true [ 642.221137][T14913] v4l2-ctrls: vivid-000: Enable Capture Composing: true [ 642.228930][T14913] v4l2-ctrls: vivid-000: Enable Capture Scaler: true [ 642.236383][T14913] v4l2-ctrls: vivid-000: Timestamp Source: End of Frame [ 642.244083][T14913] v4l2-ctrls: vivid-000: Colorspace: sRGB [ 642.250225][T14913] v4l2-ctrls: vivid-000: Transfer Function: Default [ 642.258690][T14913] v4l2-ctrls: vivid-000: Y'CbCr Encoding: Default [ 642.265892][T14913] v4l2-ctrls: vivid-000: HSV Encoding: Hue 0-179 [ 642.272668][T14913] v4l2-ctrls: vivid-000: Quantization: Default [ 642.279569][T14913] v4l2-ctrls: vivid-000: Apply Alpha To Red Only: false [ 642.287229][T14913] v4l2-ctrls: vivid-000: Standard Aspect Ratio: 4x3 [ 642.294860][T14913] v4l2-ctrls: vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 642.304495][T14913] v4l2-ctrls: vivid-000: DV Timings: 640x480p59 inactive [ 642.311930][T14913] v4l2-ctrls: vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 642.321079][T14913] v4l2-ctrls: vivid-000: Maximum EDID Blocks: 2 [ 642.328469][T14913] v4l2-ctrls: vivid-000: Limited RGB Range (16-235): false [ 642.343717][T14913] v4l2-ctrls: vivid-000: Rx RGB Quantization Range: Automatic [ 642.343741][T14913] v4l2-ctrls: vivid-000: Power Present: 0x00000001 [ 642.343756][T14913] tpg source WxH: 640x360 (Y'CbCr) [ 642.343978][T14913] tpg field: 1 [ 642.343986][T14913] tpg crop: 640x360@0x0 [ 642.343994][T14913] tpg compose: 640x360@0x0 [ 642.343999][T14913] tpg colorspace: 8 [ 642.344005][T14913] tpg transfer function: 0/0 [ 642.344011][T14913] tpg Y'CbCr encoding: 0/0 [ 642.344016][T14913] tpg quantization: 0/0 [ 642.344022][T14913] tpg RGB range: 0/2 [ 642.344028][T14913] vivid-000: ================== END STATUS ================== 10:10:13 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1524}, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xd, 0x0, 0x0, 0xffffffffffffff52) ioctl$KVM_NMI(r2, 0xae9a) syz_mount_image$cifs(&(0x7f0000000040)='cifs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x2a000000) 10:10:13 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x5}}) 10:10:13 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000000)={0x2a, 0x8, 0x24d}, 0xc) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:10:13 executing program 3: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001800210000000000f4e800001c"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x6558) 10:10:13 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x10080, 0x0) ioctl$KVM_SET_XCRS(r1, 0x4188aea7, &(0x7f0000000080)={0x6, 0x139, [{0x401}, {0xff, 0x0, 0x1000}, {0x4, 0x0, 0x3}, {0x6}, {0x1, 0x0, 0x5}, {0x3}]}) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:10:13 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x6}}) 10:10:13 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) recvfrom(r0, 0x0, 0x0, 0x10020, 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f0000000000)={0x0, 0x20, 0x12, 0x16, 0xa, 0xec39, 0x6, 0x5, 0xffffffffffffffff}) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0x3da, 0x0) ioctl$SNDRV_PCM_IOCTL_USER_PVERSION(r3, 0x40044104, &(0x7f0000000080)=0x1) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor\x00', 0x101002, 0x0) connect$pppoe(r4, &(0x7f0000000140)={0x18, 0x0, {0x0, @multicast, 'vcan0\x00'}}, 0x1e) 10:10:13 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x460400, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x9c, 0x1, 0x1, 0x401, 0x0, 0x0, {0x5, 0x0, 0x8}, [@CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x3}, @CTA_LABELS_MASK={0x28, 0x17, [0x6, 0x5, 0x8001, 0xe5000000, 0x1bf6, 0x9, 0x6, 0x7fff, 0xa8000000]}, @CTA_SEQ_ADJ_ORIG={0x1c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xfffffffe}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xfff}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x4}, @CTA_SEQ_ADJ_ORIG={0x34, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x47}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4044}, 0x4090) 10:10:13 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x7}}) 10:10:14 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x8}}) 10:10:14 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000002240)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) accept4$alg(r3, 0x0, 0x0, 0x0) accept4$alg(r3, 0x0, 0x0, 0x80800) bind$packet(r1, &(0x7f0000000000)={0x11, 0x804, r2, 0x1, 0x0, 0x6, @dev}, 0x14) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x70, &(0x7f0000000100)={r6}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000000)={r6, 0x8}, &(0x7f0000000080)=0x8) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:10:14 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r0, 0x81785501, &(0x7f0000000080)=""/178) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r2, 0x4b67, &(0x7f00000004c0)={0x1, &(0x7f0000000480)=[{}]}) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300, 0x2}}) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f0000000000)={{r1}, 0xfffffffffffffe5d, 0xce, 0x9a6}) 10:10:14 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1524}, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xd, 0x0, 0x0, 0xffffffffffffff52) ioctl$KVM_NMI(r2, 0xae9a) syz_mount_image$cifs(&(0x7f0000000040)='cifs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x2c000000) 10:10:14 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x9}}) 10:10:14 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:10:14 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0x3da, 0x0) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r3, 0x2) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r2, 0x0, 0x0) ptrace$setregs(0xd, 0xffffffffffffffff, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) get_robust_list(r1, &(0x7f0000000180)=&(0x7f0000000140)={&(0x7f0000000080)={&(0x7f0000000000)}, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)}}, &(0x7f00000001c0)=0x18) 10:10:14 executing program 3: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001800210000000000f4e800001c"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x8100) 10:10:14 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0xa}}) 10:10:14 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f00000004c0)={0x1, &(0x7f0000000480)=[{}]}) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f0000000000)) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000140)) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000000080)={'mangle\x00'}, &(0x7f0000000100)=0x54) 10:10:15 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0xb}}) 10:10:15 executing program 2: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x400401, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000080)=0x50, 0x4) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:10:15 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x80002, 0x0) ioctl$TIOCMIWAIT(r1, 0x545c, 0x0) ioctl$RNDADDTOENTCNT(r1, 0x40045201, &(0x7f0000000080)=0x3) 10:10:15 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, &(0x7f0000000000)=0x3) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:10:15 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0xc}}) 10:10:15 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1524}, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xd, 0x0, 0x0, 0xffffffffffffff52) ioctl$KVM_NMI(r2, 0xae9a) syz_mount_image$cifs(&(0x7f0000000040)='cifs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x2e000000) 10:10:15 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b2f, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f00000004c0)={0x1, &(0x7f0000000480)=[{0x2}]}) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x200, 0x0, 0x300}}) 10:10:15 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) r2 = socket$key(0xf, 0x3, 0x2) recvfrom(r2, 0x0, 0x0, 0x10020, 0x0, 0x0) r3 = pidfd_getfd(r1, r2, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r3, 0x4010ae68, &(0x7f0000000000)={0xd000, 0x4000}) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-control\x00', 0x4140, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vsock\x00', 0x40b00, 0x0) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000280)={0x800, 0x5, 0x4, 0x1000, 0x7, {0x0, 0x2710}, {0x5, 0x8, 0x7, 0x1f, 0x3f, 0xfa, "6687ab5d"}, 0x401, 0x2, @planes=&(0x7f0000000240)={0x8, 0x7, @userptr=0xa05d, 0x4}, 0x6, 0x0, 0xffffffffffffffff}) r5 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0xe0400, 0x0) ioctl$TIOCGPKT(r5, 0x80045438, &(0x7f0000000100)) ioctl$RTC_ALM_READ(r4, 0x80247008, &(0x7f0000000300)) 10:10:15 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0xd}}) 10:10:15 executing program 3: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001800210000000000f4e800001c"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x8847) 10:10:16 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0xffff, 0x6d1, 0x0, 0x300}}) [ 645.049405][T15643] QAT: Invalid ioctl 10:10:16 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0xe}}) 10:10:16 executing program 2: ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300, 0x2}}) 10:10:16 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0xf}}) 10:10:16 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket(0x200000000000011, 0x3, 0x0) r2 = socket$key(0xf, 0x3, 0x2) recvfrom(r2, 0x0, 0x0, 0x10020, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r1, &(0x7f0000000000)={0x11, 0x804, r3, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000000)=0x1100206, 0x4) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x407, 0x0, 0x7ffd}}) 10:10:16 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x10}}) 10:10:16 executing program 2: syz_init_net_socket$nl_rdma(0xffffffffffffffff, 0x3, 0x14) r0 = socket$key(0xf, 0x3, 0x2) recvfrom(r0, 0x0, 0x0, 0x10020, 0x0, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000100), &(0x7f0000000000)=0x68) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:10:17 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1524}, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xd, 0x0, 0x0, 0xffffffffffffff52) ioctl$KVM_NMI(r2, 0xae9a) syz_mount_image$cifs(&(0x7f0000000040)='cifs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x30000000) 10:10:17 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x11}}) 10:10:17 executing program 4: ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000000)=[0x0, 0x0], 0x2}) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) write$P9_RFLUSH(r1, &(0x7f00000000c0)={0x7, 0x6d, 0x1}, 0x7) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:10:17 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$key(0xf, 0x3, 0x2) recvfrom(r1, 0x0, 0x0, 0x10020, 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) recvfrom(r2, 0x0, 0x0, 0x10020, 0x0, 0x0) r3 = dup3(r1, r2, 0x80000) r4 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r4, &(0x7f0000000000)={0x11, 0x804, r5, 0x1, 0x0, 0x6, @dev}, 0x14) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getuid() r7 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r8) syz_mount_image$afs(&(0x7f00000013c0)='afs\x00', &(0x7f0000001400)='./file0\x00', 0xc3, 0x5, &(0x7f0000001900)=[{&(0x7f0000001500)="8b86fc929d5261cc3d65ac79c454746162f7da58e5bdcc6b4918d121c71773ea010d52e8220d1c5d836b2e7d96c4f03b910a759c45f06e8b7aa1ef6273bb8285862d876625f2da1e046dcbe32a96b8a3501d0cab5713aa09b9323335ec1052427c144292321440ebb165ed4da9d3f79f5415a13b1a254731953829c1ad52017002168a8713cb3152924162a05d68bd83954c86053e348a99c7657d91ddd85a5a79d2bfb8a1f3aee4023262d72128ca2f5a3ecd95948c32bbe96a47e0b0533d942c433333fbce5c383ad96fca3c0c72934e96366ef289a4f7a83829f9743a9f97bbbf4871e9608138036eb21fce55", 0xee, 0xb4}, {&(0x7f0000001600)="01443668c427259804a16c26727a7dfb3bbc4b72fd0533db69c0d0ea3bb9a73d6156cf2e944c0922763a518aa255d9eaf758d5f84fc07696bdfa5afcfd73d7f87a59d1bf9fda773b76454087bd29e4abd289245e64b062e5edc49fe9a227bb889e6d2b1f76ece4e0b29cecf959f1ce0f68492afa782dc1c99757faccf4", 0x7d}, {&(0x7f0000001680)="4ae4c982fb5b33947732806b3d9c2de68fc832bb5c86652e5e183db42404996400dbfdda2fd02ad5bcc25327fb60811c49d3c659253c630db1f30b936678b027e436f89d8eeb27472d5a7eb5aed724d58574f994e90a13ba1be3cbcc75da70673171400bdb16ffa2190e326864b1ec9a84eaa4b5bf147e5717ae8bdaa0c3e3d22eef45102d9901a9f2f69c86014f634e3d6f295e91e4bdd68fe1f00434647a174ba87861eaf6518ad199cc6ade0e6840c9a68bdb990674b5f199af0146ecfdce3c8051afbd07c5b703c61d6e3ac78c3ce63b95bc91735dfe51a422d57d5ade56ff370151", 0xe4, 0x1}, {&(0x7f0000001780)="87c6031aa5e3cb604543a97744de16bd3a59811a4cc28fa1abcba5a9e3ef0288226c62a8487b0fd4041406d1cfd967a10be5df8b8f5a4a4bb7418a0dcc5450f25cb892d07d8f9693a02a4cddd52dcf6d5de02e94b608592608d53a7ff640c533f744cc65fed0b82d97f1a38d626152a1b04be701e582d8766996ff959acde7151e5eb73d11c49a2ec3", 0x89, 0x7}, {&(0x7f0000001840)="cb30ca2f7d775c44ff2e92d336f80b5d6fddd225baf356ba756a6c67963d7e29576f6b9643ff90adbe8ad417f1d25e3d283e0ed34454581a0baf812cbf7d5a3ec313173761b403462397594ee59f521be805b59e1d9c929638d52def10018e441eb2713051640bd49a5dfe9acf78cf9f5d92c8cddc5c32126a11415efdea2e32ebde9631aef1edeed78095341a99b801b5922f796a0c3826", 0x98, 0x2}], 0x310008, &(0x7f0000001980)={[{@flock_openafs='flock=openafs'}, {@flock_openafs='flock=openafs'}, {@flock_strict='flock=strict'}], [{@hash='hash'}, {@fowner_lt={'fowner<', r8}}, {@fsname={'fsname'}}, {@defcontext={'defcontext', 0x3d, 'root'}}, {@subj_user={'subj_user', 0x3d, 'ext4\x00'}}]}) r9 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x70, &(0x7f0000000100)={r10}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000001440)={r10, 0x80000000}, &(0x7f0000001480)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f00000014c0)={r11, 0x7fff, 0x1f, 0x3, 0x10000, 0x6}, 0x14) ioctl$TIOCL_PASTESEL(r3, 0x541c, &(0x7f0000001380)) r12 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r12, &(0x7f0000000000)={0x11, 0x804, r13, 0x1, 0x0, 0x6, @dev}, 0x14) r14 = accept$unix(r12, 0x0, &(0x7f0000001a00)) r15 = gettid() ptrace$setopts(0x4206, r15, 0x0, 0x0) tkill(r15, 0x3c) ptrace$cont(0x18, r15, 0x0, 0x0) ptrace$setregs(0xd, r15, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r15, 0x0, 0x0) ioctl$sock_SIOCSPGRP(r14, 0x8902, &(0x7f0000001a40)=r15) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) stat(&(0x7f0000001240)='./file0\x00', &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x800, 0x4, &(0x7f00000011c0)=[{&(0x7f00000000c0)="3b392e7443c6d4f36ccd1a1856f668783284038d00f45252c7adac522522315fc65797524510f4f7fac81fbe37564222163633e9f8e8878fcc8cf8f9a9bef56a78b25c47edb966aee665ccc19149b92b4c5077dc078454c3199b7dabd011381686943d", 0x63, 0x24}, {&(0x7f0000000140)="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", 0x1000, 0x8}, {&(0x7f0000001140)="fff89907e45b2cc69ea986a2d9dab41ea152dc37acb322c7382b9226334b255a39304fc46faa331ce854c0b0bb830d92", 0x30, 0x8}, {&(0x7f0000001180)="f23306ea5ce76d3bd907e7f8d2dd01dc94623667d2aeee3ac8cde390d78b114a7148a1b3eca8", 0x26, 0x80000000}], 0x800000, &(0x7f0000001300)=ANY=[@ANYBLOB='acl,nojournal_checksum,noacl,nolazytime,dioread_lock,seclabel,euid>', @ANYRESDEC=r16, @ANYBLOB=',smackfshat=vmne\t\x00\x00\x00']) 10:10:17 executing program 3: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001800210000000000f4e800001c"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x8848) 10:10:17 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x12}}) 10:10:17 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) r1 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_S_PARM(r1, 0xc0285629, &(0x7f00000000c0)={0x3}) r2 = socket$key(0xf, 0x3, 0x2) recvfrom(r2, 0x0, 0x0, 0x10020, 0x0, 0x0) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000080)={0x5b64, 0x3, 0x4, 0x0, 0x400, {0x77359400}, {0x2, 0x1, 0x75, 0x20, 0x7, 0x9, "92840ef9"}, 0x7, 0x3, @fd, 0x6, 0x0, r2}) 10:10:17 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x25}}) 10:10:17 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f00000000c0)={0x2, 0xc, 0x4, 0x2000000, 0x30000, {}, {0x4, 0x8, 0x3, 0x1, 0x7, 0x0, "7419a323"}, 0x7, 0x1, @userptr=0x7fffffff, 0xebb, 0x0, r0}) r2 = socket$kcm(0x10, 0x2, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x44, r3, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_virt_wifi\x00'}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x70, r3, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x5c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x62}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xc, 0x24}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3c}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x16}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x27, 0x9}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xbfa}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x8080}, 0x280440c4) recvfrom(r0, 0x0, 0x0, 0x10020, 0x0, 0x0) r4 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r4, &(0x7f0000000000)={0x11, 0x804, r5, 0x1, 0x0, 0x6, @dev}, 0x14) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r4, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x18, r6, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x200088c0}, 0x4000) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000000)={0x20, 0xc, 0x4, 0x800, 0x0, {0x0, 0x2710}, {0x4, 0x2, 0x0, 0x3e, 0x74, 0x1, "9ff1b8bd"}, 0x800000, 0x7, @userptr=0xdb2, 0x8000, 0x0, r0}) ioctl$ASHMEM_SET_PROT_MASK(r7, 0x40087705, &(0x7f0000000080)={0xe001, 0x4}) r8 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/sequencer\x00', 0x230200, 0x0) r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000540)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r8, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)=ANY=[@ANYBLOB="88000000", @ANYRES16=r9, @ANYBLOB="08002cbd7000fddbdf250600000014000200fe80000000000000000000000000003308000400ac1414bb08000500ffffffff14000300000000000000000000000000000000002a0007007379737465040000006f626a6563745f723a6c6f67726f746174655f657865635f743a733000000005000100010000000500010001000000"], 0x88}, 0x1, 0x0, 0x0, 0x40000}, 0x20000080) socket$kcm(0x29, 0x4, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) syz_mount_image$ntfs(&(0x7f00000006c0)='ntfs\x00', &(0x7f0000000700)='./file0\x00', 0x20, 0x3, &(0x7f00000009c0)=[{&(0x7f0000000740)="d890b24fedecff8b656e9bc502a83bfe64c759485657c09d18b79daafda1e6c1faa5e6f61ea0a1c3d15f3129824d0c72ba7f37b9b94fdf548fba797ba620c97e28ebe1c59aff02d13ae208aaa047728fe46215e8d69a04c5", 0x58, 0x6}, {&(0x7f00000007c0)="9326637681dac0bfcad09870773aedacd55fe0d74f4299d3ccda3e667fea25dda85a18c9a8d152b7ea1a76798b85593ada6b5fa255736c23d35f1153b0bdd1230e73165aa460cef95c2d7f71652d3611df9d9499a638de903c050de25081f3047be65a3c586f357d1ae49bc7297be90f6e502f5a957a69586649a8965f23fac6c7491102e4499e55dcc62de9d8fbc5288bec3e1e9691161f57eb23d3f51751b1df22c879c118c26601f0c35d508bd72cc824efe17baaa7f58a702c5cb0a59971c9956998b242a3380eb6df613af5ed4a97b8522caf2eb902e812e37f5734ef78487028", 0xe3, 0x10001}, {&(0x7f00000008c0)="521834503fd84d2a119e631cde19b70ebb7fafeceb403e70676863fb473fd4cb3b06b7a0a1168f39e617663e399d7d7333c5d81cd61e7ec3bb880595321d37c8ed1b87fc68bbb7a69f303d7cdefd493d941ee639aacd5ded3ae1bbc014f8af8c15f70df096309d989751eb1837abd23007d7d9731674bf87b15e52a1b2f4a2018b25acc650140a00e04023aca09a1caae4ca94a0ff97723a64a19e373f4b2f822bdb0f7505ef399794be60e1197d72ef0f169d6360f95ac1e3b9108567f0246e0de9d378f751ff8a1d3a5b2a90671ede64ff89f89fecc2697c95d779ef22ac74f8b7577af1994927", 0xe8, 0x101}], 0x0, &(0x7f0000000a40)={[{@errors_continue='errors=continue'}, {@dmask={'dmask', 0x3d, 0x6}}, {@errors_remount='errors=remount-ro'}, {@dmask={'dmask', 0x3d, 0x3}}, {@case_sensitive_yes='case_sensitive=yes'}, {@disable_sparse_yes='disable_sparse=yes'}], [{@smackfshat={'smackfshat', 0x3d, 'wrr\x00'}}, {@subj_role={'subj_role'}}, {@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@smackfsroot={'smackfsroot', 0x3d, 'veth0_virt_wifi\x00'}}]}) [ 646.443529][T16003] __ntfs_warning: 5 callbacks suppressed [ 646.443538][T16003] ntfs: (device loop2): is_boot_sector_ntfs(): Invalid boot sector checksum. [ 646.473644][T16003] ntfs: (device loop2): read_ntfs_boot_sector(): Primary boot sector is invalid. 10:10:17 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f0000000140)) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000100), 0x1, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000080)={{0x1, 0x0, @identifier="72f97fc1a59f2ea7e88ff94f8890e2af"}, 0x22, [], "6f67674f92dc7c1e076cf455fc3981ccb16f2be3b256382418679f21b84118d06212"}) 10:10:17 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x5c}}) [ 646.528986][T16003] ntfs: (device loop2): read_ntfs_boot_sector(): Mount option errors=recover not used. Aborting without trying to recover. [ 646.588718][T16003] ntfs: (device loop2): ntfs_fill_super(): Not an NTFS volume. 10:10:17 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x300}}) [ 646.736549][T16003] ntfs: (device loop2): is_boot_sector_ntfs(): Invalid boot sector checksum. [ 646.746439][T16003] ntfs: (device loop2): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 646.764349][T16003] ntfs: (device loop2): read_ntfs_boot_sector(): Mount option errors=recover not used. Aborting without trying to recover. [ 646.788369][T16003] ntfs: (device loop2): ntfs_fill_super(): Not an NTFS volume. 10:10:18 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1524}, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xd, 0x0, 0x0, 0xffffffffffffff52) ioctl$KVM_NMI(r2, 0xae9a) syz_mount_image$cifs(&(0x7f0000000040)='cifs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x32000000) 10:10:18 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x500}}) 10:10:18 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) ioctl$KVM_SET_ONE_REG(r1, 0x4010aeac, &(0x7f0000000000)={0x3, 0xfffffffffffffffe}) r2 = socket$key(0xf, 0x3, 0x2) recvfrom(r2, 0x0, 0x0, 0x10020, 0x0, 0x0) bind(r2, &(0x7f0000000100)=@ethernet={0x6, @remote}, 0x80) 10:10:18 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm_plock\x00', 0x8040, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r3 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r3, &(0x7f0000000000)={0x11, 0x804, r4, 0x1, 0x0, 0x6, @dev}, 0x14) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r6) ioctl$SIOCAX25ADDUID(r3, 0x89e1, &(0x7f0000000140)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r6}) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="874b00000000000000000000000008fc0200", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) r7 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r7, &(0x7f0000000000)={0x11, 0x804, r8, 0x1, 0x0, 0x6, @dev}, 0x14) r9 = accept4$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000300)=0x14, 0x800) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket(0x200000000000011, 0x3, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r15 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r15, &(0x7f0000000000)={0x11, 0x804, r16, 0x1, 0x0, 0x6, @dev}, 0x14) getsockopt$bt_BT_FLUSHABLE(r15, 0x112, 0x8, &(0x7f00000001c0)=0xffffffff, &(0x7f0000000440)=0x4) bind$packet(r12, &(0x7f0000000240)={0x11, 0x0, r14}, 0x14) getsockname$packet(r12, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="44001000000000000000000000000032bb2b3dbec46c5a00ac000000", @ANYRES32=r17, @ANYBLOB="abf0864b03173c5e7f48578f84ab0100000000000000200016801c00018018000c8014000000000004001400"], 0x44}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000180)={'macvlan1\x00', r17}) sendmsg$NL80211_CMD_GET_MPATH(r1, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00042bbd7000fddbdf25150000000c00990080000000020000000a001a00bbbbbbbbbbbb00000a000600aaaaaaaaaaaa000008000300", @ANYRES32=r10, @ANYBLOB="0a001a000000604a02fc214fffc639c1ce000000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x40c4810}, 0x44001) syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000080)) 10:10:18 executing program 3: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001800210000000000f4e800001c"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0xe32f) 10:10:18 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0x3, 0xb0240) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000080)={0x101, 0x0, 0x0, 0x5b}) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, &(0x7f00000000c0)={0xff, r2, 0x2, 0x3}) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:10:18 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x600}}) 10:10:18 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) r1 = socket$key(0xf, 0x3, 0x2) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000240)={0x1, 0x101, 0x27, 0x9, 0x4, 0x8}) recvfrom(r1, 0x0, 0x0, 0x10020, 0x0, 0x0) r2 = dup3(r0, r1, 0x80000) socket$kcm(0x10, 0x2, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xc8, r3, 0x200, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x54, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xd6b}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x548}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xd}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x67}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1e, 0x8}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x40084}, 0x4000000) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x400, 0x0) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000280)={"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"}) 10:10:18 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x700}}) 10:10:18 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x101040, 0x0) ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f00000000c0)={0x8, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}]}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x2, 0x228, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000740], 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="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"]}, 0x2a0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'bridge_slave_0\x00', 0x1}, 0x18) 10:10:18 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) recvfrom(r0, 0x0, 0x0, 0x10020, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={[{@uid={'uid', 0x3d, r2}}]}) syz_mount_image$xfs(&(0x7f0000000080)='xfs\x00', &(0x7f00000000c0)='./bus\x00', 0x3ff, 0x1, &(0x7f0000000100)=[{&(0x7f00000005c0)="bd91ca81ed068bc7f85b273b3b059233a9100da9ba92830ba82e8644602db1a8a7a4605d96250ff90b1db786c8839e799e239e472ee78277122cf2e7217b736c7f931dd41da95e9751f84cad2b", 0x4d, 0x2}], 0x30c4028, &(0x7f0000000640)={[], [{@subj_role={'subj_role'}}, {@context={'context', 0x3d, 'staff_u'}}, {@fowner_eq={'fowner', 0x3d, r2}}, {@dont_measure='dont_measure'}]}) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000006c0)={{0x1, 0x0, 0x0, r2, r3, 0x0, 0x8}, 0x100000001, 0x1000, 0x0, 0x0, 0x0, 0x0, 0xf04c}) fchown(r0, 0xee00, r3) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) ioctl$TIOCSPGRP(r4, 0x5410, &(0x7f0000000080)=r5) [ 647.548432][T16367] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge_slave_0, syncid = 1, id = 0 [ 647.584201][T16364] hfs: uid requires an argument [ 647.589736][T16364] hfs: unable to parse mount options 10:10:18 executing program 4: syz_open_dev$tty20(0xc, 0x4, 0x1) [ 647.599931][T16362] QAT: Invalid ioctl [ 647.748921][T16364] hfs: unable to parse mount options 10:10:19 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) syz_mount_image$ceph(&(0x7f0000000180)='ceph\x00', &(0x7f00000001c0)='./file0\x00', 0x2, 0x5, &(0x7f0000000540)=[{&(0x7f0000000200)="f21c14bf2d79214068a1c4217b91b6bc46cef69df141afda459c71ed8c4183a0508090d55818980630f32b6a13d1a11dca0e9889358be4374827e2176d8993339a6889a24027df8e18fea6185c0093a6bb3d5cdb403060970ae2f864da4be823ebf2050fba6c8420c9887a805efba47a877d00e116f362bbbaa86f343abe7fcad717b6b53206146672702536d50c7b2f4e45d726b5b075614ed0aff3d0d038d3c3164c9b7c162dce99d8bd4a925c880315537d6205735f58bfaa5042be50ddd41de95c3fbcc308798ffcc61486cfb86c033d48905ea16cf9aa37b2e5e58214018224c7f8721167f7e3007e88d8b8f0dda3", 0xf1}, {&(0x7f0000000300)="e4d0f4459a99d09e12f2957ed07429", 0xf, 0x1}, {&(0x7f0000000340)="ee94f7114cbbfdceada70d4b4193a801fbff8fb37ec2aac3aa8697c336b3b2cd10c8bad1ba57254f0adeb49fe1f44aa64c4894739e9faf75dc4e207c7923c82e1a60416bbede89556e67bdf97bb98a8372443346c72a33fea5682251e4c9996fd1e731f8f6950afc0ea553633ce0213f34d6b93278512f93c245c138d20442e7f720a71868312d827a838f135aafb33cf874300d7cf0e591fe0d0fab6bca39640b31abc2bfa472256882e8c01965b6400225c05f45a689e4ec393b", 0xbb, 0x100}, {&(0x7f0000000400)="ffa26761c2d5ca8f0246d442bb7aad0583748cb3f2c9ab70794527ac1cd3e3080cc3e67897b47b7b67d31cd10d09604627d4b539ad205b4c5c5a3ee024a665662814b5c1104863f3845bdd7361c5c2c5997b847c82bf6692", 0x58, 0x3}, {&(0x7f0000000480)="609c8db6a1741bb75c0927cbb70859493c58b3a65ef59efac3d5a5a1b94f14119e5ce78ec2fbd18a1fb4b014ba4a2f206fe5df1ef1f73289398b3176d05169e225877705799b1656ae926769e9ef61bc89108f9c3aef3a0f6734defdeb4dcd60efbe5c8978baa55c2ec26537dd5081c2e73f47bf4681219cec13ed566f7a544f713ddc87f074f771eaf6", 0x8a}], 0xa0010, &(0x7f00000005c0)='nl80211\x00') ptrace$cont(0x20, r2, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000427bd7000fbdbdf253100000008005200", @ANYRES32, @ANYBLOB="48000300", @ANYRES32=0x0, @ANYBLOB='\b\x00R\x00', @ANYRES32=r2, @ANYBLOB="0800010002000000"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x2, 0x228, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000740], 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff010000000900000000000000883e76657468315f746f5f7465616d000000b72d36746e6c3000000000000000000069726c616e300000000000000000000069666230000000000000000000000000aaaaaaaaaabb000000000000aaaaaaaaaa000000000000000000ac000000ac000000d400000071756f746100000000000000000000000000000000000000000000000000000018000000000000400000000001000000000000000700000000000a004155444954000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff010000001100000000000000000076657468315f746f5f7465616d00000079616d30000000000000000000000000697036677265300000000000000000007663616e3000000004000000000000000180c2000000000000000000aaaaaaaaaaaa00000000000000009c0000009c000000c400000063707500000000000000000000000000000000000000000000000000000000000800000000000000010000ed41554449540000000000000000000000000000000000000000000000000000000400000000000000"]}, 0x2a0) setsockopt$inet_group_source_req(r3, 0x0, 0x2f, &(0x7f0000000600)={0xffffffe0, {{0x2, 0x4e23, @multicast1}}, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1f}}}}, 0x108) ptrace$cont(0x1f, 0x0, 0x1, 0x100000000) sched_rr_get_interval(r2, &(0x7f0000000980)) 10:10:19 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1524}, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xd, 0x0, 0x0, 0xffffffffffffff52) ioctl$KVM_NMI(r2, 0xae9a) syz_mount_image$cifs(&(0x7f0000000040)='cifs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x34000000) 10:10:19 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x900}}) 10:10:19 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x52801, 0x60) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:10:19 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4004743b, &(0x7f0000000000)=0x5) 10:10:19 executing program 3: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001800210000000000f4e800001c"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0xec0f) 10:10:19 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0xa00}}) 10:10:19 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x1, 0xf4, 0xff, 0x3f, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x101, 0x1f}, 0x40, 0x4, 0x343, 0x0, 0x4, 0x62d, 0x9}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x1) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x13) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f00000000c0)={'TPROXY\x00'}, &(0x7f0000000100)=0x1e) 10:10:19 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f00000000c0)={0x2, {0xf, 0x476, 0x0, 0x3, 0x2fd}}) r1 = socket$kcm(0x29, 0x2, 0x0) fcntl$setlease(r1, 0x400, 0x0) 10:10:19 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0xb00}}) 10:10:19 executing program 4: syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_S_PARM(r0, 0xc0285629, &(0x7f00000000c0)={0x3}) r1 = socket$key(0xf, 0x3, 0x2) recvfrom(r1, 0x0, 0x0, 0x10020, 0x0, 0x0) recvfrom(r1, 0x0, 0x0, 0x121, 0x0, 0x36) r2 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_S_PARM(r2, 0xc0285629, &(0x7f00000000c0)={0x3}) r3 = socket$key(0xf, 0x3, 0x2) recvfrom(r3, 0x0, 0x0, 0x10020, 0x0, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000280)={0xf000000, 0x1f, 0xffffff09, r3, 0x0, &(0x7f0000000240)={0x990967, 0x400, [], @p_u16=&(0x7f0000000200)=0x78}}) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f00000002c0)={0x3b42, 0x5, 0x4, 0x22000040, 0x3ff, {}, {0x3, 0x8, 0x0, 0x81, 0x98, 0x10, "d5ea00"}, 0x3f, 0x4, @fd, 0x2000000, 0x0, 0xffffffffffffffff}) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x4, 0x0, 0x300}}) 10:10:19 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x8002, 0x0) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:10:19 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0xc00}}) 10:10:20 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1524}, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xd, 0x0, 0x0, 0xffffffffffffff52) ioctl$KVM_NMI(r2, 0xae9a) syz_mount_image$cifs(&(0x7f0000000040)='cifs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x36000000) 10:10:20 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sigaltstack(&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000000)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:10:20 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0xd00}}) 10:10:20 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x90000, 0x0) ioctl$SIOCX25CALLACCPTAPPRV(r1, 0x89e8) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:10:20 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f00000004c0)={0x1, &(0x7f0000000480)=[{}]}) ioctl$PIO_FONTX(r1, 0x4b6c, &(0x7f0000000000)={0xd9, 0x11, &(0x7f0000000080)="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"}) 10:10:20 executing program 3: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001800210000000000f4e800001c"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x18000) 10:10:20 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0xe00}}) 10:10:20 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) r1 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x6287, 0x18481) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x48040, 0x0) ioctl$TIOCSSOFTCAR(r2, 0x541a, &(0x7f00000001c0)=0x81) ioctl$VIDIOC_S_PARM(r1, 0xc0285629, &(0x7f00000000c0)={0x3}) ioctl$VIDIOC_G_AUDIO(r1, 0x80345621, &(0x7f0000000000)) 10:10:20 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) r1 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_S_PARM(r1, 0xc0285629, &(0x7f00000000c0)={0x3}) ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc0205647, &(0x7f00000000c0)={0x9d0000, 0x54e, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x990965, 0x685, [], @string=&(0x7f0000000000)=0x7}}) ioctl$KVM_GET_NR_MMU_PAGES(r2, 0xae45, 0x83d9) 10:10:20 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) r1 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r1, &(0x7f0000000000)={0x11, 0x804, r2, 0x1, 0x0, 0x6, @dev}, 0x14) recvmsg$can_j1939(r1, &(0x7f0000002100)={&(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000100)=""/4096, 0x1000}, {&(0x7f0000001100)=""/4096, 0x1000}], 0x2}, 0x1) ioctl$sock_inet_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000002140)) 10:10:20 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000080)={0x8, 0x5, 0x4, 0x800, 0xfffff001, {}, {0x6, 0x0, 0x7, 0x6, 0x4, 0x8, "e973bd2a"}, 0x7509, 0x3, @userptr=0x4, 0x2, 0x0, 0xffffffffffffffff}) sendmsg$AUDIT_GET(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x3e8, 0x8, 0x70bd29, 0x25dfdbfb, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x14}, 0x4000000) ioctl$VFIO_IOMMU_MAP_DMA(r1, 0x3b71, &(0x7f0000000280)={0x20, 0x1, 0x6a4, 0x780, 0x8000}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r2, 0x4b67, &(0x7f00000004c0)={0x1, &(0x7f0000000480)=[{}]}) ioctl$TIOCGSOFTCAR(r2, 0x5419, &(0x7f00000001c0)) 10:10:20 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0xf00}}) 10:10:21 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1524}, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xd, 0x0, 0x0, 0xffffffffffffff52) ioctl$KVM_NMI(r2, 0xae9a) syz_mount_image$cifs(&(0x7f0000000040)='cifs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x38000000) 10:10:21 executing program 5: r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) prlimit64(r0, 0xc, &(0x7f0000000080)={0x80, 0x6}, &(0x7f00000000c0)) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) r1 = perf_event_open(0x0, r0, 0x5, 0xffffffffffffffff, 0x0) r2 = socket$key(0xf, 0x3, 0x2) recvfrom(r2, 0x0, 0x0, 0x10020, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) recvfrom(r3, 0x0, 0x0, 0x10020, 0x0, 0x0) r4 = dup2(r3, r1) ioctl$KVM_S390_INTERRUPT_CPU(r4, 0x4010ae94, &(0x7f0000000000)={0x3, 0x6, 0x9}) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) r6 = socket$key(0xf, 0x3, 0x2) recvfrom(r6, 0x0, 0x0, 0x10020, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x200000000000011, 0x3, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r8, &(0x7f0000000240)={0x11, 0x0, r10}, 0x14) getsockname$packet(r8, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=r11, @ANYBLOB="0100000000000000200016801c00018018000c8014000000000004001400"], 0x44}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', r11}) ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0xfffe, 0x2, 0x2, 0x2fc, 0x4}}) 10:10:21 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETLED(r0, 0x4b32, 0x8) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:10:21 executing program 4: syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f00000004c0)={0x1, &(0x7f0000000480)=[{}]}) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x100, 0x0, 0x300, 0xf}}) 10:10:21 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x1100}}) 10:10:21 executing program 3: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001800210000000000f4e800001c"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x1b000) 10:10:21 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x5c, 0x2, 0x7, 0x201, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFACCT_FILTER={0x34, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x17}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x400}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x4}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xd88}]}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}]}, 0x5c}}, 0x2000a004) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r1, 0xc02064a4, &(0x7f00000002c0)={0x2, 0x1, &(0x7f0000000200)=[0xffff], &(0x7f0000000300)=[0x4, 0x8ea, 0x8], &(0x7f0000000280)=[0x1, 0x965, 0xa4b, 0xff00, 0xfff, 0x8001, 0x7, 0x7, 0x7, 0x100]}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r2, 0x4b67, &(0x7f00000004c0)={0x1, &(0x7f0000000480)=[{}]}) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0xfffd, 0x5, 0x0, 0x0, 0x7}}) 10:10:21 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) getsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000080), &(0x7f00000000c0)=0x8) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:10:21 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f00000004c0)={0x1, &(0x7f0000000480)=[{}]}) r1 = syz_open_pts(r0, 0x400542) ioctl$VT_RELDISP(r1, 0x5605) r2 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000000)={0x11, 0x804, r3, 0x1, 0x0, 0x6, @dev}, 0x14) sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x60, 0x0, 0xa, 0x70bd25, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRET={0x14, 0x4, [0xcb, 0x7, 0x400, 0xfffeffff]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x5}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x80000}, @SEG6_ATTR_SECRET={0x14, 0x4, [0x0, 0x1000, 0x2, 0x4]}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x1000, 0x10000]}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x4004011) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x39, 0x1, 0x4, 0x7, 0x6}}) 10:10:21 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x1200}}) 10:10:21 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f00000004c0)={0x1, &(0x7f0000000480)=[{}]}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f00000004c0)={0x1, &(0x7f0000000480)=[{}]}) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f00000000c0)={0x2, {0xf, 0x20, 0x0, 0x3, 0x3ae}}) 10:10:21 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x7, 0x109402) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000180)=0x80) r1 = shmget(0x0, 0x1000, 0x40, &(0x7f0000ffe000/0x1000)=nil) shmctl$IPC_INFO(r1, 0x3, &(0x7f0000000080)=""/232) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x8001}, {0xa, 0x0, 0x0, @remote}, r4}}, 0x48) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000200), 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r4}}, 0x10) mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 10:10:22 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1524}, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xd, 0x0, 0x0, 0xffffffffffffff52) ioctl$KVM_NMI(r2, 0xae9a) syz_mount_image$cifs(&(0x7f0000000040)='cifs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x3a000000) 10:10:22 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x2500}}) 10:10:22 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0xfff6, 0x300}}) 10:10:22 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0xa, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r1, &(0x7f0000000000)={0x11, 0x804, r2, 0x1, 0x0, 0x6, @dev}, 0x14) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000100), &(0x7f0000000140)=0x4) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0x3da, 0x0) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000180)=0x8000) perf_event_open(0x0, 0x0, 0x0, r3, 0x0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) r5 = open(&(0x7f0000000000)='./file0\x00', 0x280, 0x54) r6 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r6, &(0x7f0000000000)={0x11, 0x804, r7, 0x1, 0x0, 0x6, @dev}, 0x14) getsockopt$inet6_int(r6, 0x29, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f0000000080)={0x5, 0x80000000, 0x10000, 0x0, 0x12}) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:10:22 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$key(0xf, 0x3, 0x2) recvfrom(r1, 0x0, 0x0, 0x10020, 0x0, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000000)) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) 10:10:22 executing program 3: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x10, 0x80003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001800210000000000f4e800001c"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x1e000) 10:10:22 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x3f00}}) 10:10:22 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000040)=0x10) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r1, 0x5608, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000000)={0x2, {0xf, 0x0, 0x2004, 0x0, 0x300}}) 10:10:22 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x0, 0x300}}) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x2000, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x70, &(0x7f0000000100)={r4}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000080)={0x2, 0x1, 0x1, 0x2, r4}, &(0x7f00000000c0)=0x10) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000100)={0x401, 0x9, 0x8, 0x81, 0x9, 0x1, 0x7, 0x0, r5}, 0x20) 10:10:22 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000040)={0x2, {0xf, 0x0, 0x0, 0x5c00}}) [ 651.859812][T17256] ================================================================== [ 651.859869][T17256] BUG: KASAN: use-after-free in con_shutdown+0x65/0x80 [ 651.859879][T17256] Write of size 8 at addr ffff888094f23108 by task syz-executor.4/17256 [ 651.859883][T17256] [ 651.859895][T17256] CPU: 1 PID: 17256 Comm: syz-executor.4 Not tainted 5.6.0-rc2-syzkaller #0 [ 651.859901][T17256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 651.859905][T17256] Call Trace: [ 651.859920][T17256] dump_stack+0x1fb/0x318 [ 651.859943][T17256] print_address_description+0x74/0x5c0 [ 651.860029][T17256] ? vprintk_default+0x28/0x30 [ 651.860043][T17256] ? vprintk_func+0x158/0x170 [ 651.860058][T17256] ? printk+0x62/0x8d [ 651.860084][T17256] __kasan_report+0x149/0x1c0 [ 651.860099][T17256] ? con_shutdown+0x65/0x80 [ 651.860117][T17256] kasan_report+0x26/0x50 [ 651.860133][T17256] __asan_report_store8_noabort+0x17/0x20 [ 651.860143][T17256] con_shutdown+0x65/0x80 [ 651.860152][T17256] ? con_close+0x10/0x10 [ 651.860165][T17256] release_tty+0xc1/0x530 [ 651.860186][T17256] tty_release_struct+0xc3/0xe0 [ 651.860202][T17256] tty_release+0xceb/0xfb0 [ 651.860234][T17256] ? tty_release_struct+0xe0/0xe0 [ 651.860280][T17256] __fput+0x2e4/0x740 [ 651.860310][T17256] ____fput+0x15/0x20 [ 651.860358][T17256] task_work_run+0x176/0x1b0 [ 651.860380][T17256] do_exit+0x5f2/0x2000 [ 651.860396][T17256] ? __kasan_check_read+0x11/0x20 [ 651.860408][T17256] ? preempt_schedule+0xff/0x120 [ 651.860440][T17256] do_group_exit+0x15c/0x2b0 [ 651.860462][T17256] __do_sys_exit_group+0x17/0x20 [ 651.860473][T17256] __se_sys_exit_group+0x14/0x20 [ 651.860485][T17256] __x64_sys_exit_group+0x3b/0x40 [ 651.860497][T17256] do_syscall_64+0xf7/0x1c0 [ 651.860514][T17256] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 651.860524][T17256] RIP: 0033:0x45c429 [ 651.860534][T17256] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 651.860540][T17256] RSP: 002b:00007ffc77646b18 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 651.860550][T17256] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 000000000045c429 [ 651.860557][T17256] RDX: 0000000000415f01 RSI: 0000000000c870d0 RDI: 0000000000000000 [ 651.860563][T17256] RBP: 00000000004c1e4b R08: 000000000000000c R09: 00007ffc77646c20 [ 651.860569][T17256] R10: 00000000020e0940 R11: 0000000000000246 R12: 000000000076bfc0 [ 651.860575][T17256] R13: 0000000000000003 R14: 0000000000000001 R15: 000000000076bfcc [ 651.860603][T17256] [ 651.860610][T17256] Allocated by task 12162: [ 651.860620][T17256] __kasan_kmalloc+0x118/0x1c0 [ 651.860628][T17256] kasan_kmalloc+0x9/0x10 [ 651.860636][T17256] kmem_cache_alloc_trace+0x221/0x2f0 [ 651.860644][T17256] vc_allocate+0x161/0x5b0 [ 651.860652][T17256] con_install+0x4b/0x490 [ 651.860660][T17256] tty_init_dev+0xcd/0x500 [ 651.860668][T17256] tty_open+0x7f0/0xcd0 [ 651.860677][T17256] chrdev_open+0x509/0x590 [ 651.860685][T17256] do_dentry_open+0x85b/0x10c0 [ 651.860692][T17256] vfs_open+0x73/0x80 [ 651.860701][T17256] path_openat+0x16f1/0x4380 [ 651.860709][T17256] do_filp_open+0x192/0x3d0 [ 651.860717][T17256] do_sys_openat2+0x42b/0x6f0 [ 651.860725][T17256] __x64_sys_open+0x1bd/0x1e0 [ 651.860734][T17256] do_syscall_64+0xf7/0x1c0 [ 651.860743][T17256] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 651.860746][T17256] [ 651.860751][T17256] Freed by task 17379: [ 651.860759][T17256] __kasan_slab_free+0x12e/0x1e0 [ 651.860766][T17256] kasan_slab_free+0xe/0x10 [ 651.860773][T17256] kfree+0x10d/0x220 [ 651.860782][T17256] vt_ioctl+0x229d/0x3a70 [ 651.860790][T17256] tty_ioctl+0xee6/0x15c0 [ 651.860798][T17256] __se_sys_ioctl+0x113/0x190 [ 651.860806][T17256] __x64_sys_ioctl+0x7b/0x90 [ 651.860815][T17256] do_syscall_64+0xf7/0x1c0 [ 651.860823][T17256] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 651.860827][T17256] [ 651.860835][T17256] The buggy address belongs to the object at ffff888094f23000 [ 651.860835][T17256] which belongs to the cache kmalloc-2k of size 2048 [ 651.860844][T17256] The buggy address is located 264 bytes inside of [ 651.860844][T17256] 2048-byte region [ffff888094f23000, ffff888094f23800) [ 651.860848][T17256] The buggy address belongs to the page: [ 651.860860][T17256] page:ffffea000253c8c0 refcount:1 mapcount:0 mapping:ffff8880aa400e00 index:0x0 [ 651.860868][T17256] flags: 0xfffe0000000200(slab) [ 651.860881][T17256] raw: 00fffe0000000200 ffffea00025c8808 ffffea00023e1708 ffff8880aa400e00 [ 651.860892][T17256] raw: 0000000000000000 ffff888094f23000 0000000100000001 0000000000000000 [ 651.860896][T17256] page dumped because: kasan: bad access detected [ 651.860899][T17256] [ 651.860903][T17256] Memory state around the buggy address: [ 651.860911][T17256] ffff888094f23000: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 651.860917][T17256] ffff888094f23080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 651.860924][T17256] >ffff888094f23100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 651.860928][T17256] ^ [ 651.860935][T17256] ffff888094f23180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 651.860942][T17256] ffff888094f23200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 651.860946][T17256] ================================================================== [ 651.860950][T17256] Disabling lock debugging due to kernel taint [ 651.860996][T17256] Kernel panic - not syncing: panic_on_warn set ... [ 651.861007][T17256] CPU: 1 PID: 17256 Comm: syz-executor.4 Tainted: G B 5.6.0-rc2-syzkaller #0 [ 651.861012][T17256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 651.861015][T17256] Call Trace: [ 651.861027][T17256] dump_stack+0x1fb/0x318 [ 651.861040][T17256] panic+0x264/0x7a9 [ 651.861049][T17256] ? __kasan_report+0x193/0x1c0 [ 651.861060][T17256] ? trace_hardirqs_on+0x34/0x80 [ 651.861071][T17256] ? _raw_spin_unlock_irqrestore+0xa8/0xe0 [ 651.861084][T17256] __kasan_report+0x1b9/0x1c0 [ 651.861095][T17256] ? con_shutdown+0x65/0x80 [ 651.861108][T17256] kasan_report+0x26/0x50 [ 651.861120][T17256] __asan_report_store8_noabort+0x17/0x20 [ 651.861128][T17256] con_shutdown+0x65/0x80 [ 651.861136][T17256] ? con_close+0x10/0x10 [ 651.861146][T17256] release_tty+0xc1/0x530 [ 651.861160][T17256] tty_release_struct+0xc3/0xe0 [ 651.861172][T17256] tty_release+0xceb/0xfb0 [ 651.861191][T17256] ? tty_release_struct+0xe0/0xe0 [ 651.861203][T17256] __fput+0x2e4/0x740 [ 651.861230][T17256] ____fput+0x15/0x20 [ 651.861240][T17256] task_work_run+0x176/0x1b0 [ 651.861254][T17256] do_exit+0x5f2/0x2000 [ 651.861271][T17256] ? __kasan_check_read+0x11/0x20 [ 651.861281][T17256] ? preempt_schedule+0xff/0x120 [ 651.861300][T17256] do_group_exit+0x15c/0x2b0 [ 651.861316][T17256] __do_sys_exit_group+0x17/0x20 [ 651.861326][T17256] __se_sys_exit_group+0x14/0x20 [ 651.861336][T17256] __x64_sys_exit_group+0x3b/0x40 [ 651.861346][T17256] do_syscall_64+0xf7/0x1c0 [ 651.861358][T17256] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 651.861366][T17256] RIP: 0033:0x45c429 [ 651.861374][T17256] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 651.861380][T17256] RSP: 002b:00007ffc77646b18 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 651.861389][T17256] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 000000000045c429 [ 651.861394][T17256] RDX: 0000000000415f01 RSI: 0000000000c870d0 RDI: 0000000000000000 [ 651.861400][T17256] RBP: 00000000004c1e4b R08: 000000000000000c R09: 00007ffc77646c20 [ 651.861405][T17256] R10: 00000000020e0940 R11: 0000000000000246 R12: 000000000076bfc0 [ 651.861411][T17256] R13: 0000000000000003 R14: 0000000000000001 R15: 000000000076bfcc [ 651.862181][T17256] Kernel Offset: disabled [ 652.640096][T17256] Rebooting in 86400 seconds..