dp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x4ffe0, 0x0) getsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000180), 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') r5 = socket(0x200000000000011, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r5, &(0x7f0000000240)={0x11, 0x0, r7}, 0x14) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)={0x1c, r4, 0x31905e13403123b7, 0x0, 0x0, {0x9, 0x0, 0xf000}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r4, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1f}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x40080c0}, 0x40040) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5ff5ff1b08160700db1c00010000000000cc326d3a09ffc2c65400"}, 0x80) r9 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r9, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r9, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r9, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r9, 0x6, 0xd, &(0x7f0000000080)='illinois\x00', 0x9) sendto$inet(r9, &(0x7f00000012c0)="5e268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 00:03:24 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) dup3(r3, r2, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r4, 0x0, 0x3979, 0x0) 00:03:24 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:03:24 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x842}]}, 0x78) 00:03:24 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x7f00}]}, 0x78) 00:03:24 executing program 3: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5ff5ff1b08160700db1c00010000000000cc326d3a09ffc2c65400"}, 0x80) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) read$alg(r0, &(0x7f00000001c0)=""/113, 0x71) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r3 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000100)='rxrpc_s\x00', 0x0, &(0x7f0000000180)="d7067bd119f0ffe1", 0x8, r3) keyctl$instantiate(0xc, r2, 0x0, 0x0, r3) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='illinois\x00', 0x9) sendto$inet(r1, &(0x7f00000012c0)="5e268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 00:03:24 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x9b00}]}, 0x78) 00:03:24 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x900}]}, 0x78) 00:03:24 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0xf000}]}, 0x78) 00:03:25 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffecc) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r4, 0x0, 0x3979, 0x0) 00:03:25 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0xa00}]}, 0x78) 00:03:25 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0xf00000}]}, 0x78) 00:03:25 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) dup3(r3, r2, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r4, 0x0, 0x3979, 0x0) 00:03:25 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) socket$netlink(0x10, 0x3, 0x0) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:03:25 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0xc00}]}, 0x78) 00:03:25 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x1000000}]}, 0x78) 00:03:25 executing program 3: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5ff5ff1b08160700db1c00010000000000cc326d3a09ffc2c65400"}, 0x80) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) read$alg(r0, &(0x7f00000001c0)=""/113, 0x71) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r3 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000100)='rxrpc_s\x00', 0x0, &(0x7f0000000180)="d7067bd119f0ffe1", 0x8, r3) keyctl$instantiate(0xc, r2, 0x0, 0x0, r3) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='illinois\x00', 0x9) sendto$inet(r1, &(0x7f00000012c0)="5e268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 00:03:25 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x1800000}]}, 0x78) 00:03:25 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) socket$netlink(0x10, 0x3, 0x0) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:03:25 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0xd00}]}, 0x78) 00:03:25 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x2000000}]}, 0x78) 00:03:26 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffecc) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r4, 0x0, 0x3979, 0x0) 00:03:26 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0xe00}]}, 0x78) 00:03:26 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x7000000}]}, 0x78) 00:03:26 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) socket$netlink(0x10, 0x3, 0x0) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:03:26 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) dup3(r3, r2, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x3979, 0x0) 00:03:26 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x8000000}]}, 0x78) 00:03:26 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0xf00}]}, 0x78) 00:03:26 executing program 3: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5ff5ff1b08160700db1c00010000000000cc326d3a09ffc2c65400"}, 0x80) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) read$alg(r0, &(0x7f00000001c0)=""/113, 0x71) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r3 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000100)='rxrpc_s\x00', 0x0, &(0x7f0000000180)="d7067bd119f0ffe1", 0x8, r3) keyctl$instantiate(0xc, r2, 0x0, 0x0, r3) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='illinois\x00', 0x9) sendto$inet(r1, &(0x7f00000012c0)="5e268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 00:03:26 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x9000000}]}, 0x78) 00:03:26 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:03:26 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x1800}]}, 0x78) 00:03:26 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x1a00}]}, 0x78) 00:03:27 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffecc) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r4, 0x0, 0x3979, 0x0) 00:03:27 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0xa000000}]}, 0x78) 00:03:27 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x1b00}]}, 0x78) 00:03:27 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:03:27 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) dup3(r3, r2, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x3979, 0x0) 00:03:27 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0xc000000}]}, 0x78) 00:03:27 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x1e00}]}, 0x78) 00:03:27 executing program 3: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5ff5ff1b08160700db1c00010000000000cc326d3a09ffc2c65400"}, 0x80) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) read$alg(r0, &(0x7f00000001c0)=""/113, 0x71) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r3 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000100)='rxrpc_s\x00', 0x0, &(0x7f0000000180)="d7067bd119f0ffe1", 0x8, r3) keyctl$instantiate(0xc, r2, 0x0, 0x0, r3) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='illinois\x00', 0x9) sendto$inet(r1, &(0x7f00000012c0)="5e268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 00:03:27 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0xd000000}]}, 0x78) 00:03:27 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x3f00}]}, 0x78) 00:03:27 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:03:27 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x4208}]}, 0x78) 00:03:28 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, 0x0, 0x0) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r5, 0x0, 0x3979, 0x0) 00:03:28 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0xe000000}]}, 0x78) 00:03:28 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x7800}]}, 0x78) 00:03:28 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:03:28 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) dup3(r3, r2, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x3979, 0x0) 00:03:28 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x7f00}]}, 0x78) 00:03:28 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0xf000000}]}, 0x78) 00:03:28 executing program 3: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5ff5ff1b08160700db1c00010000000000cc326d3a09ffc2c65400"}, 0x80) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) io_setup(0x4, &(0x7f0000000500)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r2) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x1003, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/zoneinfo\x00', 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendto(r4, &(0x7f0000000080)="120000001200e7ef007b0a00f4afd7030a7c", 0x12, 0x0, 0x0, 0xffffffffffffffbc) recvmmsg(r4, &(0x7f0000005780), 0x54, 0x0, 0x0) r5 = socket(0x10, 0x803, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) splice(r6, 0x0, r7, 0x0, 0x4ffe0, 0x0) ioctl$sock_SIOCGPGRP(r6, 0x8904, &(0x7f0000000300)=0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x7e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3ff}, r8, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDSETKEYCODE(0xffffffffffffffff, 0x4b4d, &(0x7f0000000000)) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r9, 0x5437, 0x0) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) sendto(r5, &(0x7f0000000080)="120000001200e7ef007b0a00f4afd7030a7c", 0x12, 0x0, 0x0, 0xffffffffffffffbc) recvmmsg(r5, &(0x7f0000005780)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000280)=0x8000000000000000, 0x4) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="00000400"/16], 0x28}}, 0x0) lsetxattr$security_ima(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='security.ima\x00', &(0x7f0000000400)=ANY=[@ANYBLOB="02b1215c00314502693599fd61200840a02a7b975448026c00b275b48d5cfd39e9ff5c67abb467c22d8e1fb09c12e9357d134903e910a9640000000000000000"], 0x1, 0x70fb2a8b6c70ed1e) 00:03:28 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:03:28 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x9b00}]}, 0x78) 00:03:28 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x18000000}]}, 0x78) 00:03:28 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0xf000}]}, 0x78) [ 592.877181][T24502] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 00:03:28 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, 0x0, 0x0) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r5, 0x0, 0x3979, 0x0) 00:03:28 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x1a000000}]}, 0x78) 00:03:28 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:03:28 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0xf00000}]}, 0x78) 00:03:28 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) dup3(r2, r1, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r3, 0x0, 0x3979, 0x0) 00:03:29 executing program 3: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5ff5ff1b08160700db1c00010000000000cc326d3a09ffc2c65400"}, 0x80) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) io_setup(0x4, &(0x7f0000000500)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r2) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x1003, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/zoneinfo\x00', 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendto(r4, &(0x7f0000000080)="120000001200e7ef007b0a00f4afd7030a7c", 0x12, 0x0, 0x0, 0xffffffffffffffbc) recvmmsg(r4, &(0x7f0000005780), 0x54, 0x0, 0x0) r5 = socket(0x10, 0x803, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) splice(r6, 0x0, r7, 0x0, 0x4ffe0, 0x0) ioctl$sock_SIOCGPGRP(r6, 0x8904, &(0x7f0000000300)=0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x7e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3ff}, r8, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDSETKEYCODE(0xffffffffffffffff, 0x4b4d, &(0x7f0000000000)) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r9, 0x5437, 0x0) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) sendto(r5, &(0x7f0000000080)="120000001200e7ef007b0a00f4afd7030a7c", 0x12, 0x0, 0x0, 0xffffffffffffffbc) recvmmsg(r5, &(0x7f0000005780)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000280)=0x8000000000000000, 0x4) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="00000400"/16], 0x28}}, 0x0) lsetxattr$security_ima(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='security.ima\x00', &(0x7f0000000400)=ANY=[@ANYBLOB="02b1215c00314502693599fd61200840a02a7b975448026c00b275b48d5cfd39e9ff5c67abb467c22d8e1fb09c12e9357d134903e910a9640000000000000000"], 0x1, 0x70fb2a8b6c70ed1e) 00:03:29 executing program 2: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000000)={@val={0x0, 0xf5}, @val, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:03:29 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x1000000}]}, 0x78) 00:03:29 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x1b000000}]}, 0x78) 00:03:29 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x1c000000}]}, 0x78) 00:03:29 executing program 2: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000000)={@val={0x0, 0xf5}, @val, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:03:29 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x1800000}]}, 0x78) [ 593.552758][T24541] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 00:03:29 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, 0x0, 0x0) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r5, 0x0, 0x3979, 0x0) 00:03:29 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x3f000000}]}, 0x78) 00:03:29 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x2000000}]}, 0x78) 00:03:29 executing program 2: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000000)={@val={0x0, 0xf5}, @val, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:03:29 executing program 3: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5ff5ff1b08160700db1c00010000000000cc326d3a09ffc2c65400"}, 0x80) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000000c0)={{{@in6=@local, @in=@dev}}, {{@in6=@dev}, 0x0, @in6=@mcast1}}, &(0x7f0000000000)=0xe8) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='illinois\x00', 0x9) sendto$inet(r1, &(0x7f00000012c0)="5e268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) r2 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f00000001c0)={@empty, @dev={0xac, 0x14, 0x14, 0x2a}, 0x1, 0x9, [@loopback, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @local, @loopback, @local, @remote, @remote]}, 0x34) 00:03:29 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) dup3(r2, r1, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r3, 0x0, 0x3979, 0x0) 00:03:29 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x5000000}]}, 0x78) 00:03:30 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x4d000000}]}, 0x78) 00:03:30 executing program 3: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5ff5ff1b08160700db1c00010000000000cc326d3a09ffc2c65400"}, 0x80) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f0000000100)={0x980000, 0x8, 0x8, r4, 0x0, &(0x7f00000000c0)={0x9909e4, 0x8000, [], @p_u8=&(0x7f0000000000)=0x3}}) ioctl$sock_inet_SIOCDELRT(r5, 0x890c, &(0x7f0000000140)={0x0, {0x2, 0x4e23, @local}, {0x2, 0x4e23, @multicast2}, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x19, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x65b, 0x5, 0x4}) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='illinois\x00', 0x9) sendto$inet(r1, &(0x7f00000012c0)="5e268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) splice(r6, 0x0, r7, 0x0, 0x4ffe0, 0x0) setsockopt$SO_RDS_TRANSPORT(r6, 0x114, 0x8, &(0x7f00000001c0), 0x4) 00:03:30 executing program 2: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:03:30 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x7000000}]}, 0x78) 00:03:30 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x69080000}]}, 0x78) 00:03:30 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(0xffffffffffffffff, 0x0, r4, 0x0, 0x3979, 0x0) 00:03:30 executing program 2: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:03:30 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x8000000}]}, 0x78) 00:03:30 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x78000000}]}, 0x78) 00:03:30 executing program 3: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5ff5ff1b08160700db1c00010000000000cc326d3a09ffc2c65400"}, 0x80) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f0000000100)={0x980000, 0x8, 0x8, r4, 0x0, &(0x7f00000000c0)={0x9909e4, 0x8000, [], @p_u8=&(0x7f0000000000)=0x3}}) ioctl$sock_inet_SIOCDELRT(r5, 0x890c, &(0x7f0000000140)={0x0, {0x2, 0x4e23, @local}, {0x2, 0x4e23, @multicast2}, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x19, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x65b, 0x5, 0x4}) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='illinois\x00', 0x9) sendto$inet(r1, &(0x7f00000012c0)="5e268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) splice(r6, 0x0, r7, 0x0, 0x4ffe0, 0x0) setsockopt$SO_RDS_TRANSPORT(r6, 0x114, 0x8, &(0x7f00000001c0), 0x4) 00:03:30 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) dup3(r2, r1, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r3, 0x0, 0x3979, 0x0) 00:03:30 executing program 2: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:03:30 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x9000000}]}, 0x78) 00:03:30 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x7f000000}]}, 0x78) 00:03:31 executing program 3: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5ff5ff1b08160700db1c00010000000000cc326d3a09ffc2c65400"}, 0x80) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f0000000100)={0x980000, 0x8, 0x8, r4, 0x0, &(0x7f00000000c0)={0x9909e4, 0x8000, [], @p_u8=&(0x7f0000000000)=0x3}}) ioctl$sock_inet_SIOCDELRT(r5, 0x890c, &(0x7f0000000140)={0x0, {0x2, 0x4e23, @local}, {0x2, 0x4e23, @multicast2}, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x19, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x65b, 0x5, 0x4}) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='illinois\x00', 0x9) sendto$inet(r1, &(0x7f00000012c0)="5e268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) splice(r6, 0x0, r7, 0x0, 0x4ffe0, 0x0) setsockopt$SO_RDS_TRANSPORT(r6, 0x114, 0x8, &(0x7f00000001c0), 0x4) 00:03:31 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0xa000000}]}, 0x78) 00:03:31 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:03:31 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(0xffffffffffffffff, 0x0, r4, 0x0, 0x3979, 0x0) 00:03:31 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x80ffffff}]}, 0x78) 00:03:31 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0xc000000}]}, 0x78) 00:03:31 executing program 3: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="44000000090679df00000000000000000000000005000100070000000900020073797a32000000001c00078018"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 00:03:31 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) dup3(r3, r2, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r4, 0x0, 0x3979, 0x0) 00:03:31 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:03:31 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0xd000000}]}, 0x78) 00:03:31 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x9b000000}]}, 0x78) 00:03:32 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0xffffff80}]}, 0x78) 00:03:32 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0xe000000}]}, 0x78) 00:03:32 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 00:03:32 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0xf000000}]}, 0x78) 00:03:32 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(0xffffffffffffffff, 0x0, r4, 0x0, 0x3979, 0x0) 00:03:32 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x2}]}, 0x78) 00:03:32 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x18000000}]}, 0x78) 00:03:32 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) dup3(r3, r2, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r4, 0x0, 0x3979, 0x0) 00:03:32 executing program 3: r0 = socket(0x11, 0x800000003, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r6, 0xc0bc5310, &(0x7f0000000800)) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f00000005c0)={{{@in=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f00000006c0)=0xe8) sendmsg$nl_route(r3, &(0x7f00000007c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)=ANY=[@ANYBLOB="4c0000004300080029bd7000050000001c0000002000068008000900080000000c000d00070000000000000008000100", @ANYRES32=r7, @ANYBLOB="0c0008009f000000000000000c0008000600000000000000"], 0x4c}}, 0x4000800) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5ff5ff1b08160700db1c00010000000000cc326d3a09ffc2c65400"}, 0x80) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) r9 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x1, 0x0) ioctl$TIOCSSERIAL(r9, 0x541e, &(0x7f0000000100)={0x1ff, 0xffff, 0x7, 0x1, 0x8000, 0x4, 0x5, 0x5, 0x1d10, 0x8, 0x5, 0x8001, 0x2cbe, 0x4, &(0x7f00000000c0)=""/26, 0x1, 0x8, 0x80000001}) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000004c0)={{{@in6, @in=@loopback}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8) bind$inet(r8, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) r11 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$RTC_ALM_SET(r11, 0x40247007, &(0x7f0000000300)={0x25, 0x39, 0x9, 0xd, 0x5, 0x3, 0x3, 0xf0, 0x1}) r12 = socket$inet_udp(0x2, 0x2, 0x0) close(r12) splice(r10, 0x0, r12, 0x0, 0x4ffe0, 0x0) write$FUSE_IOCTL(r10, &(0x7f0000000180)={0x20, 0xffffffffffffffda, 0x3, {0x1, 0x0, 0x3f, 0xfffffffb}}, 0x20) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r13, &(0x7f0000000140)=ANY=[], 0xffc1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r15, 0x0, r14) ioctl$VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000340)={0x2, 0xa, 0x4, 0x8070bb6334330360, 0x81, {0x77359400}, {0x3, 0xc, 0x4, 0x4, 0xa1, 0x32, "08300c95"}, 0xd0, 0x1, @fd=r13, 0x8, 0x0, r14}) sendto$inet(r8, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000080)='illinois\x00', 0x9) sendto$inet(r8, &(0x7f00000012c0)="5e268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 00:03:32 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:03:32 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x1a000000}]}, 0x78) 00:03:32 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x7}]}, 0x78) 00:03:32 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x8}]}, 0x78) 00:03:33 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x1b000000}]}, 0x78) 00:03:33 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x9}]}, 0x78) 00:03:33 executing program 3: r0 = socket(0x11, 0x800000003, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r6, 0xc0bc5310, &(0x7f0000000800)) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f00000005c0)={{{@in=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f00000006c0)=0xe8) sendmsg$nl_route(r3, &(0x7f00000007c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)=ANY=[@ANYBLOB="4c0000004300080029bd7000050000001c0000002000068008000900080000000c000d00070000000000000008000100", @ANYRES32=r7, @ANYBLOB="0c0008009f000000000000000c0008000600000000000000"], 0x4c}}, 0x4000800) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5ff5ff1b08160700db1c00010000000000cc326d3a09ffc2c65400"}, 0x80) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) r9 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x1, 0x0) ioctl$TIOCSSERIAL(r9, 0x541e, &(0x7f0000000100)={0x1ff, 0xffff, 0x7, 0x1, 0x8000, 0x4, 0x5, 0x5, 0x1d10, 0x8, 0x5, 0x8001, 0x2cbe, 0x4, &(0x7f00000000c0)=""/26, 0x1, 0x8, 0x80000001}) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000004c0)={{{@in6, @in=@loopback}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8) bind$inet(r8, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) r11 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$RTC_ALM_SET(r11, 0x40247007, &(0x7f0000000300)={0x25, 0x39, 0x9, 0xd, 0x5, 0x3, 0x3, 0xf0, 0x1}) r12 = socket$inet_udp(0x2, 0x2, 0x0) close(r12) splice(r10, 0x0, r12, 0x0, 0x4ffe0, 0x0) write$FUSE_IOCTL(r10, &(0x7f0000000180)={0x20, 0xffffffffffffffda, 0x3, {0x1, 0x0, 0x3f, 0xfffffffb}}, 0x20) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r13, &(0x7f0000000140)=ANY=[], 0xffc1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r15, 0x0, r14) ioctl$VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000340)={0x2, 0xa, 0x4, 0x8070bb6334330360, 0x81, {0x77359400}, {0x3, 0xc, 0x4, 0x4, 0xa1, 0x32, "08300c95"}, 0xd0, 0x1, @fd=r13, 0x8, 0x0, r14}) sendto$inet(r8, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000080)='illinois\x00', 0x9) sendto$inet(r8, &(0x7f00000012c0)="5e268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 00:03:33 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x3979, 0x0) 00:03:33 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x1e000000}]}, 0x78) 00:03:33 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0xa}]}, 0x78) 00:03:33 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) dup3(r3, r2, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r4, 0x0, 0x3979, 0x0) 00:03:33 executing program 3: r0 = socket(0x11, 0x800000003, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r6, 0xc0bc5310, &(0x7f0000000800)) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f00000005c0)={{{@in=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f00000006c0)=0xe8) sendmsg$nl_route(r3, &(0x7f00000007c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)=ANY=[@ANYBLOB="4c0000004300080029bd7000050000001c0000002000068008000900080000000c000d00070000000000000008000100", @ANYRES32=r7, @ANYBLOB="0c0008009f000000000000000c0008000600000000000000"], 0x4c}}, 0x4000800) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5ff5ff1b08160700db1c00010000000000cc326d3a09ffc2c65400"}, 0x80) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) r9 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x1, 0x0) ioctl$TIOCSSERIAL(r9, 0x541e, &(0x7f0000000100)={0x1ff, 0xffff, 0x7, 0x1, 0x8000, 0x4, 0x5, 0x5, 0x1d10, 0x8, 0x5, 0x8001, 0x2cbe, 0x4, &(0x7f00000000c0)=""/26, 0x1, 0x8, 0x80000001}) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000004c0)={{{@in6, @in=@loopback}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8) bind$inet(r8, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) r11 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$RTC_ALM_SET(r11, 0x40247007, &(0x7f0000000300)={0x25, 0x39, 0x9, 0xd, 0x5, 0x3, 0x3, 0xf0, 0x1}) r12 = socket$inet_udp(0x2, 0x2, 0x0) close(r12) splice(r10, 0x0, r12, 0x0, 0x4ffe0, 0x0) write$FUSE_IOCTL(r10, &(0x7f0000000180)={0x20, 0xffffffffffffffda, 0x3, {0x1, 0x0, 0x3f, 0xfffffffb}}, 0x20) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r13, &(0x7f0000000140)=ANY=[], 0xffc1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r15, 0x0, r14) ioctl$VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000340)={0x2, 0xa, 0x4, 0x8070bb6334330360, 0x81, {0x77359400}, {0x3, 0xc, 0x4, 0x4, 0xa1, 0x32, "08300c95"}, 0xd0, 0x1, @fd=r13, 0x8, 0x0, r14}) sendto$inet(r8, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000080)='illinois\x00', 0x9) sendto$inet(r8, &(0x7f00000012c0)="5e268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 00:03:33 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:03:33 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:03:33 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0xc}]}, 0x78) 00:03:33 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x3f000000}]}, 0x78) 00:03:33 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x42080000}]}, 0x78) 00:03:34 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0xd}]}, 0x78) 00:03:34 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:03:34 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x3979, 0x0) 00:03:34 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x7f00}, [{}]}, 0x78) 00:03:34 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x78000000}]}, 0x78) 00:03:34 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0xe}]}, 0x78) 00:03:34 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:03:34 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6(0xa, 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r2, 0x0, 0x3979, 0x0) 00:03:34 executing program 3: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5ff5ff1b08160700db1c00010000000000cc326d3a09ffc2c65400"}, 0x80) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='illinois\x00', 0x9) sendto$inet(r1, &(0x7f00000012c0)="5e268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf46a834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 00:03:34 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x7f000000}]}, 0x78) 00:03:34 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0xf}]}, 0x78) 00:03:34 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:03:34 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x80ffffff}]}, 0x78) 00:03:34 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x18}]}, 0x78) 00:03:35 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x3979, 0x0) 00:03:35 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:03:35 executing program 3: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5ff5ff1b08160700db1c00010000000000cc326d3a09ffc2c65400"}, 0x80) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='illinois\x00', 0x9) sendto$inet(r1, &(0x7f00000012c0)="5e268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaacb4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 00:03:35 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x9b000000}]}, 0x78) 00:03:35 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x1a}]}, 0x78) 00:03:35 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_tcp(0xa, 0x1, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r2, 0x0, 0x3979, 0x0) 00:03:35 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x1b}]}, 0x78) 00:03:35 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0xffffff80}]}, 0x78) 00:03:35 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:03:35 executing program 3: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5ff5ff1b08160700db1c00010000000000cc326d3a09ffc2c65400"}, 0x80) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='illinois\x00', 0x9) sendto$inet(r1, &(0x7f00000012c0)="5e268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaacb4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 00:03:35 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x1c}]}, 0x78) 00:03:35 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0xf0000000000000}]}, 0x78) 00:03:36 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r5, 0x0, 0x0, 0x0) 00:03:36 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:03:36 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x4d}]}, 0x78) 00:03:36 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x100000000000000}]}, 0x78) 00:03:36 executing program 3: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5ff5ff1b08160700db1c00010000000000cc326d3a09ffc2c65400"}, 0x80) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='illinois\x00', 0x9) sendto$inet(r1, &(0x7f00000012c0)="5e268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaacb4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 00:03:36 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r2, 0x0, 0x3979, 0x0) 00:03:36 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x78}]}, 0x78) 00:03:36 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x180000000000000}]}, 0x78) 00:03:36 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 00:03:36 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:03:36 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x200000000000000}]}, 0x78) 00:03:36 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x9b}]}, 0x78) 00:03:37 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x500000000000000}]}, 0x78) 00:03:37 executing program 3: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5ff5ff1b08160700db1c00010000000000cc326d3a09ffc2c65400"}, 0x80) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='illinois\x00', 0x9) sendto$inet(r1, &(0x7f00000012c0)="5e268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa0305952ecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 00:03:37 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0xf0}]}, 0x78) 00:03:37 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:03:37 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r5, 0x0, 0x0, 0x0) 00:03:37 executing program 1: write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffecc) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x3979, 0x0) 00:03:37 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x180}]}, 0x78) 00:03:37 executing program 1: write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffecc) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x3979, 0x0) 00:03:37 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x700000000000000}]}, 0x78) 00:03:37 executing program 3: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5ff5ff1b08160700db1c00010000000000cc326d3a09ffc2c65400"}, 0x80) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='illinois\x00', 0x9) sendto$inet(r1, &(0x7f00000012c0)="5e268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa0305952ecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 00:03:37 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x700}]}, 0x78) 00:03:37 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:03:37 executing program 1: write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffecc) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x3979, 0x0) 00:03:37 executing program 3: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5ff5ff1b08160700db1c00010000000000cc326d3a09ffc2c65400"}, 0x80) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='illinois\x00', 0x9) sendto$inet(r1, &(0x7f00000012c0)="5e268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa0305952ecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 00:03:37 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x800000000000000}]}, 0x78) 00:03:37 executing program 1: pipe(0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffecc) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x3979, 0x0) 00:03:38 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r5, 0x0, 0x0, 0x0) 00:03:38 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x869}]}, 0x78) 00:03:38 executing program 1: pipe(0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffecc) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x3979, 0x0) 00:03:38 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x900000000000000}]}, 0x78) 00:03:38 executing program 3: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5ff5ff1b08160700db1c00010000000000cc326d3a09ffc2c65400"}, 0x80) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='illinois\x00', 0x9) sendto$inet(r1, &(0x7f00000012c0)="5e268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa06a59bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 00:03:38 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:03:38 executing program 1: pipe(0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffecc) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x3979, 0x0) 00:03:38 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0xa00000000000000}]}, 0x78) 00:03:38 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x900}]}, 0x78) 00:03:38 executing program 3: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5ff5ff1b08160700db1c00010000000000cc326d3a09ffc2c65400"}, 0x80) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='illinois\x00', 0x9) sendto$inet(r1, &(0x7f00000012c0)="5e268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa06a59bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 00:03:38 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r2, 0x0, 0x3979, 0x0) 00:03:38 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0xc00000000000000}]}, 0x78) 00:03:39 executing program 3: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5ff5ff1b08160700db1c00010000000000cc326d3a09ffc2c65400"}, 0x80) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='illinois\x00', 0x9) sendto$inet(r1, &(0x7f00000012c0)="5e268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa06a59bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 00:03:39 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0xa00}]}, 0x78) 00:03:39 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, 0x0) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:03:39 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0xd00000000000000}]}, 0x78) 00:03:39 executing program 0: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5ff5ff1b08160700db1c00010000000000cc326d3a09ffc2c65400"}, 0x80) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='illinois\x00', 0x9) sendto$inet(r1, &(0x7f00000012c0)="c8268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 00:03:39 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0xc00}]}, 0x78) 00:03:39 executing program 3 (fault-call:8 fault-nth:0): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r5, 0x0, 0x3979, 0x0) 00:03:39 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0xe00000000000000}]}, 0x78) 00:03:39 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r2, 0x0, 0x3979, 0x0) 00:03:39 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0xd00}]}, 0x78) 00:03:39 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, 0x0) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast}}}, 0x2c) [ 603.791898][T25047] FAULT_INJECTION: forcing a failure. [ 603.791898][T25047] name failslab, interval 1, probability 0, space 0, times 0 [ 603.861109][T25047] CPU: 0 PID: 25047 Comm: syz-executor.3 Not tainted 5.6.0-rc1-next-20200212-syzkaller #0 [ 603.871295][T25047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 603.881380][T25047] Call Trace: [ 603.884707][T25047] dump_stack+0x197/0x210 [ 603.889069][T25047] should_fail.cold+0x5/0xf [ 603.893606][T25047] ? setup_fault_attr+0x1f0/0x1f0 [ 603.898648][T25047] ? ___might_sleep+0x163/0x2c0 [ 603.903534][T25047] __should_failslab+0xb7/0x100 [ 603.908408][T25047] should_failslab+0x9/0x14 [ 603.912930][T25047] __kmalloc+0x2e0/0x770 [ 603.917188][T25047] ? mutex_trylock+0x252/0x2d0 [ 603.921979][T25047] ? tty_write_lock+0x23/0x90 [ 603.926673][T25047] ? tty_write+0x58e/0x7f0 [ 603.931105][T25047] tty_write+0x58e/0x7f0 [ 603.935365][T25047] ? n_tty_read+0x1bf0/0x1bf0 [ 603.940081][T25047] __vfs_write+0x8a/0x110 [ 603.944421][T25047] ? hung_up_tty_compat_ioctl+0x40/0x40 [ 603.950011][T25047] __kernel_write+0x11b/0x3b0 [ 603.950119][T25047] write_pipe_buf+0x15d/0x1f0 [ 603.950144][T25047] ? do_splice_direct+0x2a0/0x2a0 [ 603.950167][T25047] ? splice_from_pipe_next.part.0+0x296/0x350 [ 603.950203][T25047] __splice_from_pipe+0x3ee/0x7d0 [ 603.950226][T25047] ? do_splice_direct+0x2a0/0x2a0 [ 603.950260][T25047] ? do_splice_direct+0x2a0/0x2a0 [ 603.950302][T25047] splice_from_pipe+0x108/0x170 [ 603.950328][T25047] ? splice_shrink_spd+0xd0/0xd0 [ 603.950379][T25047] ? apparmor_file_permission+0x27/0x30 [ 603.950405][T25047] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 00:03:39 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0xf00000000000000}]}, 0x78) [ 603.950440][T25047] ? security_file_permission+0x8f/0x380 [ 604.013279][T25047] ? rcu_read_lock_held+0x9c/0xb0 [ 604.013310][T25047] default_file_splice_write+0x3c/0x90 [ 604.013329][T25047] ? generic_splice_sendpage+0x50/0x50 [ 604.013351][T25047] do_splice+0xbc6/0x1690 [ 604.013447][T25047] ? do_dup2+0x4f0/0x4f0 [ 604.013477][T25047] ? opipe_prep.part.0+0x310/0x310 [ 604.013503][T25047] ? __fget_light+0x1ad/0x270 [ 604.013530][T25047] __x64_sys_splice+0x2c6/0x330 [ 604.013566][T25047] do_syscall_64+0xfa/0x790 [ 604.013594][T25047] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 604.013607][T25047] RIP: 0033:0x45b3b9 [ 604.013624][T25047] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 604.013633][T25047] RSP: 002b:00007f9191165c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 604.013649][T25047] RAX: ffffffffffffffda RBX: 00007f91911666d4 RCX: 000000000045b3b9 [ 604.013658][T25047] RDX: 0000000000000007 RSI: 0000000000000000 RDI: 0000000000000003 [ 604.013667][T25047] RBP: 000000000075bfc8 R08: 0000000000003979 R09: 0000000000000000 00:03:40 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x1800000000000000}]}, 0x78) [ 604.013676][T25047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 604.013686][T25047] R13: 0000000000000b6e R14: 00000000004ccf0b R15: 0000000000000000 00:03:40 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0xe00}]}, 0x78) 00:03:40 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x1a00000000000000}]}, 0x78) 00:03:40 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, 0x0) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:03:40 executing program 0: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5ff5ff1b08160700db1c00010000000000cc326d3a09ffc2c65400"}, 0x80) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='illinois\x00', 0x9) sendto$inet(r1, &(0x7f00000012c0)="c8268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 00:03:40 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0xf00}]}, 0x78) 00:03:40 executing program 3 (fault-call:8 fault-nth:1): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r5, 0x0, 0x3979, 0x0) 00:03:40 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x1b00000000000000}]}, 0x78) 00:03:40 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r2, 0x0, 0x3979, 0x0) 00:03:40 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x1800}]}, 0x78) 00:03:40 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x1e00000000000000}]}, 0x78) 00:03:40 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000000)={@val={0x0, 0xf5}, @val, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:03:40 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x1a00}]}, 0x78) 00:03:40 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x3f00000000000000}]}, 0x78) 00:03:41 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x1b00}]}, 0x78) 00:03:41 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x4208000000000000}]}, 0x78) 00:03:41 executing program 0 (fault-call:4 fault-nth:0): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val={0x0, 0x0, 0x0, 0x8}, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:03:41 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x1c00}]}, 0x78) 00:03:41 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r5, 0x0, 0x3979, 0x0) 00:03:41 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x7800000000000000}]}, 0x78) [ 605.540584][T25125] FAULT_INJECTION: forcing a failure. [ 605.540584][T25125] name failslab, interval 1, probability 0, space 0, times 0 [ 605.584784][T25125] CPU: 1 PID: 25125 Comm: syz-executor.0 Not tainted 5.6.0-rc1-next-20200212-syzkaller #0 [ 605.594716][T25125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 605.604777][T25125] Call Trace: [ 605.608075][T25125] dump_stack+0x197/0x210 [ 605.612414][T25125] should_fail.cold+0x5/0xf [ 605.616974][T25125] ? up_write+0x150/0x490 [ 605.621308][T25125] ? setup_fault_attr+0x1f0/0x1f0 [ 605.626340][T25125] ? ___might_sleep+0x163/0x2c0 [ 605.631211][T25125] __should_failslab+0xb7/0x100 [ 605.636073][T25125] should_failslab+0x9/0x14 [ 605.640574][T25125] kmem_cache_alloc_node+0x268/0x740 [ 605.645864][T25125] ? __kasan_check_read+0x11/0x20 [ 605.650888][T25125] ? mark_lock+0xc2/0x1220 [ 605.655320][T25125] __alloc_skb+0xd5/0x5e0 [ 605.659666][T25125] ? __kmalloc_reserve.isra.0+0xf0/0xf0 [ 605.665230][T25125] ? lock_downgrade+0x920/0x920 [ 605.670107][T25125] alloc_skb_with_frags+0x93/0x590 [ 605.675225][T25125] ? find_held_lock+0x35/0x130 [ 605.680069][T25125] ? __might_fault+0x12b/0x1e0 [ 605.684850][T25125] sock_alloc_send_pskb+0x7ad/0x920 [ 605.690124][T25125] ? iov_iter_advance+0x29a/0xe20 [ 605.695168][T25125] ? sock_wmalloc+0x120/0x120 [ 605.699862][T25125] ? _copy_from_iter_full+0x255/0x870 [ 605.705256][T25125] ? __kasan_check_read+0x11/0x20 [ 605.710295][T25125] ? mark_lock+0xc2/0x1220 [ 605.714734][T25125] ? aa_file_perm+0x601/0x1600 [ 605.719606][T25125] tun_get_user+0xb07/0x4020 [ 605.724218][T25125] ? lock_downgrade+0x920/0x920 [ 605.729105][T25125] ? tun_build_skb.isra.0+0x1480/0x1480 [ 605.734672][T25125] ? lock_downgrade+0x920/0x920 [ 605.739521][T25125] ? rcu_read_lock_held+0x9c/0xb0 [ 605.744547][T25125] ? __kasan_check_read+0x11/0x20 [ 605.749589][T25125] tun_chr_write_iter+0xbd/0x156 [ 605.754529][T25125] new_sync_write+0x4d3/0x770 [ 605.759230][T25125] ? new_sync_read+0x800/0x800 [ 605.764022][T25125] ? __fget_files+0x359/0x520 [ 605.768705][T25125] ? apparmor_file_permission+0x27/0x30 [ 605.774235][T25125] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 605.780458][T25125] ? security_file_permission+0x8f/0x380 [ 605.786087][T25125] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 605.791412][T25125] __vfs_write+0xe1/0x110 [ 605.795738][T25125] vfs_write+0x268/0x5d0 [ 605.799986][T25125] ksys_write+0x14f/0x290 [ 605.804300][T25125] ? __ia32_sys_read+0xb0/0xb0 [ 605.809088][T25125] ? do_syscall_64+0x26/0x790 [ 605.813812][T25125] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 605.813836][T25125] ? do_syscall_64+0x26/0x790 [ 605.824581][T25125] __x64_sys_write+0x73/0xb0 [ 605.824605][T25125] do_syscall_64+0xfa/0x790 [ 605.824630][T25125] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 605.824643][T25125] RIP: 0033:0x45b3b9 [ 605.824659][T25125] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 605.824667][T25125] RSP: 002b:00007f9570f9ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 605.824684][T25125] RAX: ffffffffffffffda RBX: 00007f9570f9b6d4 RCX: 000000000045b3b9 [ 605.824693][T25125] RDX: 000000000000002c RSI: 0000000020000000 RDI: 0000000000000003 00:03:41 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50"], 0x3) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r2, 0x0, 0x3979, 0x0) 00:03:41 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x3f00}]}, 0x78) 00:03:41 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x7f00000000000000}]}, 0x78) [ 605.824703][T25125] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 605.824712][T25125] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 605.824722][T25125] R13: 0000000000000cd9 R14: 00000000004cdbfa R15: 0000000000000000 00:03:42 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000000)={@val={0x0, 0xf5}, @val, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:03:42 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x80ffffff00000000}]}, 0x78) 00:03:42 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x4d00}]}, 0x78) 00:03:42 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x9b00000000000000}]}, 0x78) 00:03:42 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x6908}]}, 0x78) 00:03:42 executing program 0 (fault-call:4 fault-nth:1): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val={0x0, 0x0, 0x0, 0x8}, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:03:42 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x7800}]}, 0x78) 00:03:42 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r5, 0x0, 0x3979, 0x2) 00:03:42 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0xffffffff00000000}]}, 0x78) [ 606.753029][T25174] FAULT_INJECTION: forcing a failure. [ 606.753029][T25174] name failslab, interval 1, probability 0, space 0, times 0 [ 606.792144][T25174] CPU: 1 PID: 25174 Comm: syz-executor.0 Not tainted 5.6.0-rc1-next-20200212-syzkaller #0 [ 606.792155][T25174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 606.792162][T25174] Call Trace: [ 606.792189][T25174] dump_stack+0x197/0x210 [ 606.792217][T25174] should_fail.cold+0x5/0xf [ 606.792239][T25174] ? setup_fault_attr+0x1f0/0x1f0 [ 606.792264][T25174] ? ___might_sleep+0x163/0x2c0 [ 606.792297][T25174] __should_failslab+0xb7/0x100 [ 606.792318][T25174] should_failslab+0x9/0x14 [ 606.792336][T25174] kmem_cache_alloc_node_trace+0x274/0x750 [ 606.792354][T25174] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 606.792372][T25174] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 606.792401][T25174] __kmalloc_node_track_caller+0x3d/0x70 [ 606.792424][T25174] __kmalloc_reserve.isra.0+0x40/0xf0 [ 606.792447][T25174] __alloc_skb+0x10b/0x5e0 [ 606.792473][T25174] ? __kmalloc_reserve.isra.0+0xf0/0xf0 [ 606.792492][T25174] ? lock_downgrade+0x920/0x920 [ 606.792521][T25174] alloc_skb_with_frags+0x93/0x590 [ 606.792535][T25174] ? find_held_lock+0x35/0x130 [ 606.792554][T25174] ? __might_fault+0x12b/0x1e0 [ 606.792580][T25174] sock_alloc_send_pskb+0x7ad/0x920 [ 606.792606][T25174] ? iov_iter_advance+0x29a/0xe20 [ 606.792630][T25174] ? sock_wmalloc+0x120/0x120 [ 606.792654][T25174] ? _copy_from_iter_full+0x255/0x870 [ 606.792672][T25174] ? __kasan_check_read+0x11/0x20 [ 606.792685][T25174] ? mark_lock+0xc2/0x1220 [ 606.792698][T25174] ? aa_file_perm+0x601/0x1600 [ 606.792721][T25174] tun_get_user+0xb07/0x4020 [ 606.792737][T25174] ? lock_downgrade+0x920/0x920 [ 606.792782][T25174] ? tun_build_skb.isra.0+0x1480/0x1480 [ 606.792813][T25174] ? lock_downgrade+0x920/0x920 [ 606.792834][T25174] ? rcu_read_lock_held+0x9c/0xb0 [ 606.792858][T25174] ? __kasan_check_read+0x11/0x20 [ 606.792890][T25174] tun_chr_write_iter+0xbd/0x156 [ 606.792915][T25174] new_sync_write+0x4d3/0x770 [ 606.792940][T25174] ? new_sync_read+0x800/0x800 [ 606.792977][T25174] ? __fget_files+0x359/0x520 [ 606.793000][T25174] ? apparmor_file_permission+0x27/0x30 [ 606.793019][T25174] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 606.793036][T25174] ? security_file_permission+0x8f/0x380 [ 606.793050][T25174] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 606.793076][T25174] __vfs_write+0xe1/0x110 [ 606.793097][T25174] vfs_write+0x268/0x5d0 [ 606.793123][T25174] ksys_write+0x14f/0x290 [ 606.793142][T25174] ? __ia32_sys_read+0xb0/0xb0 [ 606.793162][T25174] ? do_syscall_64+0x26/0x790 [ 606.793179][T25174] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 606.793196][T25174] ? do_syscall_64+0x26/0x790 [ 606.793219][T25174] __x64_sys_write+0x73/0xb0 [ 606.793241][T25174] do_syscall_64+0xfa/0x790 [ 606.793265][T25174] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 606.793287][T25174] RIP: 0033:0x45b3b9 [ 606.793305][T25174] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 606.793314][T25174] RSP: 002b:00007f9570f9ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 00:03:43 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50"], 0x3) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r2, 0x0, 0x3979, 0x0) 00:03:43 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x2}]}, 0x78) 00:03:43 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x7f00}]}, 0x78) 00:03:43 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000000)={@val={0x0, 0xf5}, @val, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast}}}, 0x2c) [ 606.793330][T25174] RAX: ffffffffffffffda RBX: 00007f9570f9b6d4 RCX: 000000000045b3b9 [ 606.793339][T25174] RDX: 000000000000002c RSI: 0000000020000000 RDI: 0000000000000003 [ 606.793347][T25174] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 606.793356][T25174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 606.793364][T25174] R13: 0000000000000cd9 R14: 00000000004cdbfa R15: 0000000000000001 00:03:43 executing program 0 (fault-call:4 fault-nth:2): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val={0x0, 0x0, 0x0, 0x8}, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:03:43 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x5}]}, 0x78) 00:03:43 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x9b00}]}, 0x78) 00:03:43 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r5, 0x0, 0x3979, 0x3) 00:03:43 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x7}]}, 0x78) 00:03:43 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0xf000}]}, 0x78) 00:03:43 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x8}]}, 0x78) 00:03:43 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0xf00000}]}, 0x78) 00:03:44 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50"], 0x3) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r2, 0x0, 0x3979, 0x0) 00:03:44 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x9}]}, 0x78) 00:03:44 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x1000000}]}, 0x78) 00:03:44 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, 0x0, 0x0) 00:03:44 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val={0x0, 0x0, 0x0, 0x8}, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:03:44 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x1800000}]}, 0x78) 00:03:44 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0xa}]}, 0x78) 00:03:44 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r5, 0x0, 0x3979, 0x5) 00:03:44 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x2000000}]}, 0x78) 00:03:44 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0xc}]}, 0x78) 00:03:44 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x7000000}]}, 0x78) 00:03:44 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0xd}]}, 0x78) 00:03:45 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYRESOCT], 0x17) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r2, 0x0, 0x3979, 0x0) 00:03:45 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0xe}]}, 0x78) 00:03:45 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x8000000}]}, 0x78) 00:03:45 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, 0x0, 0x0) 00:03:45 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val={0x0, 0x0, 0x0, 0x8}, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:03:45 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x9000000}]}, 0x78) 00:03:45 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0xf}]}, 0x78) 00:03:45 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r5, 0x0, 0x3979, 0x6) 00:03:45 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x18}]}, 0x78) 00:03:45 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0xa000000}]}, 0x78) 00:03:45 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x1a}]}, 0x78) 00:03:45 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x1b}]}, 0x78) 00:03:46 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYRESOCT], 0x17) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r2, 0x0, 0x3979, 0x0) 00:03:46 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0xc000000}]}, 0x78) 00:03:46 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x1e}]}, 0x78) 00:03:46 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, 0x0, 0x0) 00:03:46 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x2, 0xf5}, @val={0x0, 0x0, 0x0, 0x8}, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:03:46 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0xd000000}]}, 0x78) 00:03:46 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x78}]}, 0x78) 00:03:46 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r5, 0x0, 0x3979, 0x7) 00:03:46 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val, @val, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:03:46 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x9b}]}, 0x78) 00:03:46 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0xe000000}]}, 0x78) 00:03:46 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYRESOCT], 0x17) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r2, 0x0, 0x3979, 0x0) 00:03:47 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0xf000000}]}, 0x78) 00:03:47 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0xf0}]}, 0x78) 00:03:47 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x18000000}]}, 0x78) 00:03:47 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x180}]}, 0x78) 00:03:47 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x5, 0xf5}, @val={0x0, 0x0, 0x0, 0x8}, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:03:47 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x500}]}, 0x78) 00:03:47 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x1a000000}]}, 0x78) 00:03:47 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r5, 0x0, 0x3979, 0x8) 00:03:47 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val, @val, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:03:47 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRESOCT], 0x17) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r2, 0x0, 0x3979, 0x0) 00:03:48 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x700}]}, 0x78) 00:03:48 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x1b000000}]}, 0x78) 00:03:48 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x842}]}, 0x78) 00:03:48 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x1c000000}]}, 0x78) 00:03:48 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x900}]}, 0x78) 00:03:48 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x3f000000}]}, 0x78) 00:03:49 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x11, 0xf5}, @val={0x0, 0x0, 0x0, 0x8}, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:03:49 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0xa00}]}, 0x78) 00:03:49 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x4d000000}]}, 0x78) 00:03:49 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r5, 0x0, 0x3979, 0x9) 00:03:49 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRESOCT], 0x17) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r2, 0x0, 0x3979, 0x0) 00:03:49 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val, @val, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:03:49 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x69080000}]}, 0x78) 00:03:49 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0xc00}]}, 0x78) 00:03:49 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0xd00}]}, 0x78) 00:03:49 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x78000000}]}, 0x78) 00:03:49 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0xe00}]}, 0x78) 00:03:49 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x7f000000}]}, 0x78) 00:03:50 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x500, 0xf5}, @val={0x0, 0x0, 0x0, 0x8}, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:03:50 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0xf00}]}, 0x78) 00:03:50 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x80ffffff}]}, 0x78) 00:03:50 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x900}]}, 0x78) 00:03:50 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRESOCT], 0x17) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r2, 0x0, 0x3979, 0x0) 00:03:50 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r5, 0x0, 0x3979, 0xa) 00:03:50 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x1800}]}, 0x78) 00:03:50 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x9b000000}]}, 0x78) 00:03:50 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0xf0}]}, 0x78) 00:03:50 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0xffffff80}]}, 0x78) 00:03:50 executing program 2 (fault-call:4 fault-nth:0): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:03:50 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x1a00}]}, 0x78) 00:03:51 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0xe80, 0xf5}, @val={0x0, 0x0, 0x0, 0x8}, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:03:51 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x2}]}, 0x78) 00:03:51 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x1b00}]}, 0x78) 00:03:51 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r5, 0x0, 0x3979, 0xb) 00:03:51 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d", @ANYRESOCT], 0x19) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r2, 0x0, 0x3979, 0x0) 00:03:51 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:03:51 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x7}]}, 0x78) 00:03:51 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x1e00}]}, 0x78) 00:03:51 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x8}]}, 0x78) 00:03:51 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x3f00}]}, 0x78) 00:03:51 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x9}]}, 0x78) 00:03:51 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x4208}]}, 0x78) 00:03:52 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x1100, 0xf5}, @val={0x0, 0x0, 0x0, 0x8}, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:03:52 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0xa}]}, 0x78) 00:03:52 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x7800}]}, 0x78) 00:03:52 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:03:52 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r5, 0x0, 0x3979, 0xc) 00:03:52 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d", @ANYRESOCT], 0x19) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r2, 0x0, 0x3979, 0x0) 00:03:52 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x7f00}]}, 0x78) 00:03:52 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0xc}]}, 0x78) 00:03:53 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x9b00}]}, 0x78) 00:03:53 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0xd}]}, 0x78) 00:03:53 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0xf000}]}, 0x78) 00:03:53 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0xe}]}, 0x78) 00:03:54 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x800e, 0xf5}, @val={0x0, 0x0, 0x0, 0x8}, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:03:54 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0xf00000}]}, 0x78) 00:03:54 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0xf}]}, 0x78) 00:03:54 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r5, 0x0, 0x3979, 0xd) 00:03:54 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d", @ANYRESOCT], 0x19) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r2, 0x0, 0x3979, 0x0) 00:03:54 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x2, 0xf5}, @val, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:03:54 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x18}]}, 0x78) 00:03:54 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x1000000}]}, 0x78) 00:03:54 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x1a}]}, 0x78) 00:03:54 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x1800000}]}, 0x78) 00:03:54 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x1b}]}, 0x78) 00:03:54 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x2000000}]}, 0x78) 00:03:55 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val={0x0, 0x0, 0x0, 0x8}, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:03:55 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x1c}]}, 0x78) 00:03:55 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x5000000}]}, 0x78) 00:03:55 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffecc) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r1, 0x0, 0x3979, 0x0) 00:03:55 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r5, 0x0, 0x3979, 0xe) 00:03:55 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x11, 0xf5}, @val, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:03:55 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x7000000}]}, 0x78) 00:03:55 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x4d}]}, 0x78) 00:03:55 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x8000000}]}, 0x78) 00:03:55 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x78}]}, 0x78) 00:03:56 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x9000000}]}, 0x78) 00:03:56 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x9b}]}, 0x78) 00:03:56 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val={0x2, 0x0, 0x0, 0x8}, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:03:56 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0xa000000}]}, 0x78) 00:03:56 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0xf0}]}, 0x78) 00:03:56 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r5, 0x0, 0x3979, 0xf) 00:03:56 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffecc) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r1, 0x0, 0x3979, 0x0) 00:03:56 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0xe80, 0xf5}, @val, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:03:56 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0xc000000}]}, 0x78) 00:03:56 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x180}]}, 0x78) 00:03:57 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0xd000000}]}, 0x78) 00:03:57 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x700}]}, 0x78) 00:03:57 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0xe000000}]}, 0x78) 00:03:57 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x869}]}, 0x78) 00:03:57 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val={0x5, 0x0, 0x0, 0x8}, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:03:57 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0xf000000}]}, 0x78) 00:03:57 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x900}]}, 0x78) 00:03:57 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r5, 0x0, 0x3979, 0x10) 00:03:57 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffecc) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r1, 0x0, 0x3979, 0x0) 00:03:58 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x1100, 0xf5}, @val, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:03:58 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x18000000}]}, 0x78) 00:03:58 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0xa00}]}, 0x78) 00:03:58 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0xc00}]}, 0x78) 00:03:58 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x1a000000}]}, 0x78) 00:03:58 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0xd00}]}, 0x78) 00:03:58 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x1b000000}]}, 0x78) 00:03:59 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val={0x11, 0x0, 0x0, 0x8}, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:03:59 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0xe00}]}, 0x78) 00:03:59 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x1e000000}]}, 0x78) 00:03:59 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, 0x0, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r2, 0x0, 0x3979, 0x0) 00:03:59 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r5, 0x0, 0x3979, 0x18) 00:03:59 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x3f00, 0xf5}, @val, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:03:59 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0xf00}]}, 0x78) 00:03:59 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x3f000000}]}, 0x78) 00:03:59 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x42080000}]}, 0x78) 00:03:59 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x1800}]}, 0x78) 00:03:59 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x1a00}]}, 0x78) 00:03:59 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x78000000}]}, 0x78) 00:04:00 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val={0x0, 0x0, 0x0, 0x8}, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:04:00 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x1b00}]}, 0x78) 00:04:00 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x7f000000}]}, 0x78) 00:04:00 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r5, 0x0, 0x3979, 0x19) 00:04:00 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, 0x0, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r2, 0x0, 0x3979, 0x0) 00:04:00 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x1c00}]}, 0x78) 00:04:00 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x800e, 0xf5}, @val, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:04:00 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x80ffffff}]}, 0x78) 00:04:00 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x9b000000}]}, 0x78) 00:04:00 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x3f00}]}, 0x78) 00:04:00 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0xffffff80}]}, 0x78) 00:04:01 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x4d00}]}, 0x78) 00:04:01 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val={0x0, 0x2, 0x0, 0x8}, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:04:01 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0xf0000000000000}]}, 0x78) 00:04:01 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x6908}]}, 0x78) 00:04:01 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, 0x0, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r2, 0x0, 0x3979, 0x0) 00:04:01 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r5, 0x0, 0x3979, 0x1a) 00:04:01 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x100000000000000}]}, 0x78) 00:04:01 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:04:01 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x7800}]}, 0x78) 00:04:01 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x7f00}]}, 0x78) 00:04:01 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x180000000000000}]}, 0x78) 00:04:01 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x9b00}]}, 0x78) 00:04:02 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0xf000}]}, 0x78) 00:04:02 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val={0x0, 0x5, 0x0, 0x8}, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:04:02 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x200000000000000}]}, 0x78) 00:04:02 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0xf00000}]}, 0x78) 00:04:02 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x3979, 0x0) 00:04:02 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r5, 0x0, 0x3979, 0x1b) 00:04:02 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x500000000000000}]}, 0x78) 00:04:03 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val={0x2}, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:04:03 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x1000000}]}, 0x78) 00:04:03 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x700000000000000}]}, 0x78) 00:04:03 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x1800000}]}, 0x78) 00:04:03 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x800000000000000}]}, 0x78) 00:04:03 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x2000000}]}, 0x78) 00:04:04 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val={0x0, 0x11, 0x0, 0x8}, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:04:04 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x900000000000000}]}, 0x78) 00:04:04 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x7000000}]}, 0x78) 00:04:04 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x3979, 0x0) 00:04:04 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r5, 0x0, 0x3979, 0x9b) 00:04:04 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val={0x11}, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:04:04 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0xa00000000000000}]}, 0x78) 00:04:04 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x8000000}]}, 0x78) 00:04:04 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x9000000}]}, 0x78) 00:04:04 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0xc00000000000000}]}, 0x78) 00:04:04 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0xd00000000000000}]}, 0x78) 00:04:04 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0xa000000}]}, 0x78) 00:04:05 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val={0x0, 0x0, 0x0, 0x8}, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:04:05 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0xc000000}]}, 0x78) 00:04:05 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0xe00000000000000}]}, 0x78) 00:04:05 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r5, 0x0, 0x3979, 0xf0) 00:04:05 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x3979, 0x0) 00:04:05 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:04:05 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0xf00000000000000}]}, 0x78) 00:04:05 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0xd000000}]}, 0x78) 00:04:05 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0xe000000}]}, 0x78) 00:04:05 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x1800000000000000}]}, 0x78) 00:04:05 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x1a00000000000000}]}, 0x78) 00:04:05 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0xf000000}]}, 0x78) 00:04:06 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val={0x0, 0x0, 0x2, 0x8}, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:04:06 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x18000000}]}, 0x78) 00:04:06 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x1b00000000000000}]}, 0x78) 00:04:06 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r5, 0x0, 0x3979, 0x180) 00:04:06 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x3979, 0x0) 00:04:06 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val={0x0, 0x2}, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:04:06 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x1a000000}]}, 0x78) 00:04:06 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x1e00000000000000}]}, 0x78) 00:04:06 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x3f00000000000000}]}, 0x78) 00:04:06 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x1b000000}]}, 0x78) 00:04:07 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x4208000000000000}]}, 0x78) 00:04:07 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x1c000000}]}, 0x78) 00:04:07 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x3f000000}]}, 0x78) 00:04:07 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x7800000000000000}]}, 0x78) 00:04:07 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r5, 0x0, 0x3979, 0x300) 00:04:07 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val={0x0, 0x0, 0x5, 0x8}, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:04:07 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x3979, 0x0) 00:04:08 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val={0x0, 0x11}, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:04:08 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x4d000000}]}, 0x78) 00:04:08 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x7f00000000000000}]}, 0x78) 00:04:08 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x69080000}]}, 0x78) 00:04:08 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x80ffffff00000000}]}, 0x78) 00:04:08 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x78000000}]}, 0x78) 00:04:08 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x9b00000000000000}]}, 0x78) 00:04:08 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x7f000000}]}, 0x78) 00:04:08 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0xffffffff00000000}]}, 0x78) 00:04:08 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r5, 0x0, 0x3979, 0x500) 00:04:09 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val={0x0, 0x0, 0x11, 0x8}, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:04:09 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x80ffffff}]}, 0x78) 00:04:09 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:04:09 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x3979, 0x0) 00:04:09 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x2}]}, 0x78) 00:04:09 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x9b000000}]}, 0x78) 00:04:09 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x5}]}, 0x78) 00:04:09 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0xffffff80}]}, 0x78) 00:04:09 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r5, 0x0, 0x3979, 0x600) 00:04:09 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0xf0000000000000}]}, 0x78) 00:04:09 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x7}]}, 0x78) 00:04:09 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x100000000000000}]}, 0x78) 00:04:10 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val={0x0, 0x0, 0x500, 0x8}, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:04:10 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x8}]}, 0x78) 00:04:10 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val={0x0, 0x0, 0x2}, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:04:10 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x180000000000000}]}, 0x78) 00:04:10 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r2, 0x0, 0x0, 0x0) 00:04:10 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x9}]}, 0x78) 00:04:10 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r5, 0x0, 0x3979, 0x700) 00:04:10 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x200000000000000}]}, 0x78) 00:04:10 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0xa}]}, 0x78) 00:04:11 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x700000000000000}]}, 0x78) 00:04:11 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0xc}]}, 0x78) 00:04:11 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x800000000000000}]}, 0x78) 00:04:11 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val={0x0, 0x0, 0xe80, 0x8}, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:04:11 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0xd}]}, 0x78) 00:04:11 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val={0x0, 0x0, 0x11}, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:04:11 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x900000000000000}]}, 0x78) 00:04:11 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r2, 0x0, 0x0, 0x0) 00:04:11 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r5, 0x0, 0x3979, 0x900) 00:04:11 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0xe}]}, 0x78) 00:04:11 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0xa00000000000000}]}, 0x78) 00:04:11 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0xf}]}, 0x78) 00:04:12 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0xc00000000000000}]}, 0x78) 00:04:12 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x18}]}, 0x78) 00:04:12 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0xd00000000000000}]}, 0x78) 00:04:12 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val={0x0, 0x0, 0x1100, 0x8}, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:04:12 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x1a}]}, 0x78) 00:04:13 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val={0x0, 0x0, 0xe80}, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:04:13 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0xe00000000000000}]}, 0x78) 00:04:13 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r2, 0x0, 0x0, 0x0) 00:04:13 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r5, 0x0, 0x3979, 0xa00) 00:04:13 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x1b}]}, 0x78) 00:04:13 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0xf00000000000000}]}, 0x78) 00:04:13 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x1e}]}, 0x78) 00:04:13 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x1800000000000000}]}, 0x78) 00:04:13 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x1a00000000000000}]}, 0x78) 00:04:13 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x78}]}, 0x78) 00:04:14 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val={0x0, 0x0, 0x800e, 0x8}, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:04:14 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x9b}]}, 0x78) 00:04:14 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val={0x0, 0x0, 0x1100}, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:04:14 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x1b00000000000000}]}, 0x78) 00:04:14 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r5, 0x0, 0x3979, 0xb00) 00:04:14 executing program 1 (fault-call:4 fault-nth:0): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r2, 0x0, 0x3979, 0x0) 00:04:14 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0xf0}]}, 0x78) [ 638.573214][T26376] FAULT_INJECTION: forcing a failure. [ 638.573214][T26376] name failslab, interval 1, probability 0, space 0, times 0 [ 638.591996][T26376] CPU: 0 PID: 26376 Comm: syz-executor.1 Not tainted 5.6.0-rc1-next-20200212-syzkaller #0 [ 638.601917][T26376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 638.611983][T26376] Call Trace: [ 638.615294][T26376] dump_stack+0x197/0x210 [ 638.619654][T26376] should_fail.cold+0x5/0xf [ 638.624177][T26376] ? setup_fault_attr+0x1f0/0x1f0 [ 638.629220][T26376] ? ___might_sleep+0x163/0x2c0 [ 638.634091][T26376] __should_failslab+0xb7/0x100 [ 638.638971][T26376] should_failslab+0x9/0x14 [ 638.643493][T26376] __kmalloc+0x2e0/0x770 [ 638.647754][T26376] ? mutex_trylock+0x252/0x2d0 [ 638.652534][T26376] ? tty_write_lock+0x23/0x90 [ 638.657234][T26376] ? tty_write+0x58e/0x7f0 [ 638.661668][T26376] tty_write+0x58e/0x7f0 [ 638.665928][T26376] ? n_tty_read+0x1bf0/0x1bf0 [ 638.670641][T26376] __vfs_write+0x8a/0x110 [ 638.674988][T26376] ? hung_up_tty_compat_ioctl+0x40/0x40 [ 638.680556][T26376] __kernel_write+0x11b/0x3b0 [ 638.685255][T26376] write_pipe_buf+0x15d/0x1f0 [ 638.689950][T26376] ? do_splice_direct+0x2a0/0x2a0 [ 638.694990][T26376] ? splice_from_pipe_next.part.0+0x296/0x350 [ 638.701081][T26376] __splice_from_pipe+0x3ee/0x7d0 [ 638.706115][T26376] ? do_splice_direct+0x2a0/0x2a0 [ 638.711161][T26376] ? do_splice_direct+0x2a0/0x2a0 [ 638.716190][T26376] splice_from_pipe+0x108/0x170 [ 638.721053][T26376] ? splice_shrink_spd+0xd0/0xd0 [ 638.726008][T26376] ? apparmor_file_permission+0x27/0x30 [ 638.731568][T26376] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 638.737812][T26376] ? security_file_permission+0x8f/0x380 [ 638.743450][T26376] ? rcu_read_lock_held+0x9c/0xb0 [ 638.748492][T26376] default_file_splice_write+0x3c/0x90 [ 638.753957][T26376] ? generic_splice_sendpage+0x50/0x50 [ 638.759428][T26376] do_splice+0xbc6/0x1690 [ 638.763787][T26376] ? do_dup2+0x4f0/0x4f0 [ 638.768054][T26376] ? opipe_prep.part.0+0x310/0x310 [ 638.773184][T26376] ? __fget_light+0x1ad/0x270 [ 638.777885][T26376] __x64_sys_splice+0x2c6/0x330 [ 638.782763][T26376] do_syscall_64+0xfa/0x790 [ 638.787280][T26376] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 638.793208][T26376] RIP: 0033:0x45b3b9 [ 638.797109][T26376] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00:04:14 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x1c00000000000000}]}, 0x78) 00:04:14 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x180}]}, 0x78) [ 638.816719][T26376] RSP: 002b:00007f755b7c0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 638.825151][T26376] RAX: ffffffffffffffda RBX: 00007f755b7c16d4 RCX: 000000000045b3b9 [ 638.833138][T26376] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 638.841121][T26376] RBP: 000000000075bfc8 R08: 0000000000003979 R09: 0000000000000000 [ 638.849110][T26376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 638.857099][T26376] R13: 0000000000000b6e R14: 00000000004ccf0b R15: 0000000000000000 00:04:14 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x3f00000000000000}]}, 0x78) 00:04:14 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x500}]}, 0x78) 00:04:14 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x700}]}, 0x78) 00:04:15 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val={0x0, 0x0, 0x0, 0x8}, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:04:15 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x4d00000000000000}]}, 0x78) 00:04:16 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val={0x0, 0x0, 0x3f00}, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:04:16 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x842}]}, 0x78) 00:04:16 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r5, 0x0, 0x3979, 0xc00) 00:04:16 executing program 1 (fault-call:4 fault-nth:1): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r2, 0x0, 0x3979, 0x0) 00:04:16 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x6908000000000000}]}, 0x78) 00:04:16 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x900}]}, 0x78) 00:04:16 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x7800000000000000}]}, 0x78) 00:04:16 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x7f00000000000000}]}, 0x78) 00:04:16 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0xa00}]}, 0x78) 00:04:16 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x80ffffff00000000}]}, 0x78) 00:04:17 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val={0x0, 0x0, 0x0, 0x8, 0x2}, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:04:17 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0xc00}]}, 0x78) 00:04:17 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val={0x0, 0x0, 0x800e}, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:04:17 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x9b00000000000000}]}, 0x78) 00:04:17 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r2, 0x0, 0x3979, 0x0) 00:04:17 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r5, 0x0, 0x3979, 0xd00) 00:04:17 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0xd00}]}, 0x78) 00:04:17 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x2}]}, 0x78) 00:04:17 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0xe00}]}, 0x78) 00:04:17 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x7}]}, 0x78) 00:04:17 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0xf00}]}, 0x78) 00:04:17 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x1800}]}, 0x78) 00:04:18 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val={0x0, 0x0, 0x0, 0x8, 0x5}, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:04:18 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x8}]}, 0x78) 00:04:18 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:04:18 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x1a00}]}, 0x78) 00:04:18 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r5, 0x0, 0x3979, 0xe00) 00:04:18 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r2, 0x0, 0x3979, 0x2) 00:04:18 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x9}]}, 0x78) 00:04:18 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x1b00}]}, 0x78) 00:04:18 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0xa}]}, 0x78) 00:04:18 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x1e00}]}, 0x78) 00:04:18 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x3f00}]}, 0x78) 00:04:18 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0xc}]}, 0x78) 00:04:19 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val={0x0, 0x0, 0x0, 0x8, 0x11}, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:04:19 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x4208}]}, 0x78) 00:04:19 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val={0x0, 0x0, 0x0, 0x2}, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:04:19 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0xd}]}, 0x78) 00:04:19 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r5, 0x0, 0x3979, 0xf00) 00:04:19 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r2, 0x0, 0x3979, 0x3) 00:04:19 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x7800}]}, 0x78) 00:04:19 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0xe}]}, 0x78) 00:04:19 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x7f00}]}, 0x78) 00:04:20 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x9b00}]}, 0x78) 00:04:20 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0xf}]}, 0x78) 00:04:20 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0xf000}]}, 0x78) 00:04:20 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val={0x0, 0x0, 0x0, 0x8, 0x500}, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:04:20 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0xf00000}]}, 0x78) 00:04:21 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val={0x0, 0x0, 0x0, 0x11}, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:04:21 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x18}]}, 0x78) 00:04:21 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r2, 0x0, 0x3979, 0x5) 00:04:21 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r5, 0x0, 0x3979, 0x1800) 00:04:21 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x1000000}]}, 0x78) 00:04:21 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x1800000}]}, 0x78) 00:04:21 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x1a}]}, 0x78) 00:04:21 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x2000000}]}, 0x78) 00:04:21 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x5000000}]}, 0x78) 00:04:21 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x1b}]}, 0x78) 00:04:21 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val={0x0, 0x0, 0x0, 0x8, 0xe80}, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:04:21 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x1c}]}, 0x78) 00:04:22 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val={0x0, 0x0, 0x0, 0xe80}, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:04:22 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x7000000}]}, 0x78) 00:04:22 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x4d}]}, 0x78) 00:04:22 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r5, 0x0, 0x3979, 0x1900) 00:04:22 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r2, 0x0, 0x3979, 0x6) 00:04:22 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x8000000}]}, 0x78) 00:04:22 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x78}]}, 0x78) 00:04:22 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val={0x0, 0x0, 0x0, 0x8, 0x1100}, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:04:22 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x9000000}]}, 0x78) 00:04:22 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x9b}]}, 0x78) 00:04:23 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0xf0}]}, 0x78) 00:04:23 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0xa000000}]}, 0x78) 00:04:23 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val={0x0, 0x0, 0x0, 0x1100}, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:04:23 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x180}]}, 0x78) 00:04:23 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0xc000000}]}, 0x78) 00:04:23 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r2, 0x0, 0x3979, 0x7) 00:04:23 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r5, 0x0, 0x3979, 0x1a00) 00:04:23 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x700}]}, 0x78) 00:04:23 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0xd000000}]}, 0x78) 00:04:24 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val={0x0, 0x0, 0x0, 0x8, 0x800e}, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:04:24 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x869}]}, 0x78) 00:04:24 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0xe000000}]}, 0x78) 00:04:24 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x900}]}, 0x78) 00:04:24 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0xf000000}]}, 0x78) 00:04:25 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val={0x0, 0x0, 0x0, 0x3f00}, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:04:25 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x18000000}]}, 0x78) 00:04:25 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0xa00}]}, 0x78) 00:04:25 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r5, 0x0, 0x3979, 0x1b00) 00:04:25 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r2, 0x0, 0x3979, 0x8) 00:04:25 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0xc00}]}, 0x78) 00:04:25 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x1a000000}]}, 0x78) 00:04:25 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val={0x0, 0x0, 0x0, 0x8}, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:04:25 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0xd00}]}, 0x78) 00:04:25 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x1b000000}]}, 0x78) 00:04:25 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x1e000000}]}, 0x78) 00:04:25 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0xe00}]}, 0x78) 00:04:26 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val={0x0, 0x0, 0x0, 0x800e}, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:04:26 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x3f000000}]}, 0x78) 00:04:26 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0xf00}]}, 0x78) 00:04:26 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r5, 0x0, 0x3979, 0x4000) 00:04:26 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r2, 0x0, 0x3979, 0x9) 00:04:26 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x42080000}]}, 0x78) 00:04:26 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val={0x0, 0x0, 0x0, 0x8, 0x0, 0x2}, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:04:26 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x1800}]}, 0x78) 00:04:26 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x78000000}]}, 0x78) 00:04:26 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x1a00}]}, 0x78) 00:04:26 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x7f000000}]}, 0x78) 00:04:26 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x80ffffff}]}, 0x78) 00:04:27 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:04:27 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x1b00}]}, 0x78) 00:04:27 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x9b000000}]}, 0x78) 00:04:27 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r2, 0x0, 0x3979, 0xa) 00:04:27 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r5, 0x0, 0x3979, 0x7f00) 00:04:27 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0xffffff80}]}, 0x78) 00:04:27 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val={0x0, 0x0, 0x0, 0x8, 0x0, 0x5}, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:04:27 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x1c00}]}, 0x78) 00:04:27 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0xf0000000000000}]}, 0x78) 00:04:28 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x3f00}]}, 0x78) 00:04:28 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x100000000000000}]}, 0x78) 00:04:28 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x4d00}]}, 0x78) 00:04:28 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val={0x0, 0x0, 0x0, 0x0, 0x2}, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:04:28 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x180000000000000}]}, 0x78) 00:04:28 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x6908}]}, 0x78) 00:04:28 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r5, 0x0, 0x3979, 0x9b00) 00:04:28 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r2, 0x0, 0x3979, 0xb) 00:04:28 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x200000000000000}]}, 0x78) 00:04:28 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val={0x0, 0x0, 0x0, 0x8, 0x0, 0x11}, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:04:28 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x7800}]}, 0x78) 00:04:28 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x500000000000000}]}, 0x78) 00:04:29 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x7f00}]}, 0x78) 00:04:29 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x700000000000000}]}, 0x78) 00:04:29 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x9b00}]}, 0x78) 00:04:30 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val={0x0, 0x0, 0x0, 0x0, 0x11}, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:04:30 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x800000000000000}]}, 0x78) 00:04:30 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0xf000}]}, 0x78) 00:04:30 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r5, 0x0, 0x3979, 0xf000) 00:04:30 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r2, 0x0, 0x3979, 0xc) 00:04:30 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x900000000000000}]}, 0x78) 00:04:30 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val={0x0, 0x0, 0x0, 0x8, 0x0, 0x500}, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:04:30 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0xf00000}]}, 0x78) 00:04:30 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0xa00000000000000}]}, 0x78) 00:04:30 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x1000000}]}, 0x78) 00:04:30 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0xc00000000000000}]}, 0x78) 00:04:30 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x1800000}]}, 0x78) 00:04:31 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val={0x0, 0x0, 0x0, 0x0, 0xe80}, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:04:31 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0xd00000000000000}]}, 0x78) 00:04:31 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x2000000}]}, 0x78) 00:04:31 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r5, 0x0, 0x3979, 0x80000) 00:04:31 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r2, 0x0, 0x3979, 0xd) 00:04:31 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val={0x0, 0x0, 0x0, 0x8, 0x0, 0xe80}, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:04:31 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0xe00000000000000}]}, 0x78) 00:04:31 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x7000000}]}, 0x78) 00:04:31 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0xf00000000000000}]}, 0x78) 00:04:31 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x8000000}]}, 0x78) 00:04:31 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x1800000000000000}]}, 0x78) 00:04:31 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x9000000}]}, 0x78) 00:04:32 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val={0x0, 0x0, 0x0, 0x0, 0x1100}, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:04:32 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x1a00000000000000}]}, 0x78) 00:04:32 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0xa000000}]}, 0x78) 00:04:32 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r5, 0x0, 0x3979, 0xf00000) 00:04:32 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r2, 0x0, 0x3979, 0xe) 00:04:32 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val={0x0, 0x0, 0x0, 0x8, 0x0, 0x1100}, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:04:32 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0xc000000}]}, 0x78) 00:04:32 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x1b00000000000000}]}, 0x78) 00:04:32 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0xd000000}]}, 0x78) 00:04:32 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x1e00000000000000}]}, 0x78) 00:04:33 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x3f00000000000000}]}, 0x78) 00:04:33 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0xe000000}]}, 0x78) 00:04:33 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val={0x0, 0x0, 0x0, 0x0, 0x3f00}, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:04:33 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x4208000000000000}]}, 0x78) 00:04:33 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0xf000000}]}, 0x78) 00:04:33 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r2, 0x0, 0x3979, 0xf) 00:04:33 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r5, 0x0, 0x3979, 0x1000000) 00:04:34 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val={0x0, 0x0, 0x0, 0x8, 0x0, 0x800e}, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:04:34 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x18000000}]}, 0x78) 00:04:34 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x7800000000000000}]}, 0x78) 00:04:34 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x1a000000}]}, 0x78) 00:04:34 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x7f00000000000000}]}, 0x78) 00:04:34 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x80ffffff00000000}]}, 0x78) 00:04:34 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x1b000000}]}, 0x78) 00:04:35 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val={0x0, 0x0, 0x0, 0x0, 0x800e}, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:04:35 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x9b00000000000000}]}, 0x78) 00:04:35 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x1c000000}]}, 0x78) 00:04:35 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r2, 0x0, 0x3979, 0x10) 00:04:35 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r5, 0x0, 0x3979, 0x1800000) 00:04:35 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val={0x0, 0x0, 0x0, 0x8}, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:04:35 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0xffffffff00000000}]}, 0x78) 00:04:35 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x3f000000}]}, 0x78) 00:04:35 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]}, 0x78) 00:04:35 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x4d000000}]}, 0x78) 00:04:35 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x5}]}, 0x78) 00:04:35 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x69080000}]}, 0x78) 00:04:36 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:04:36 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x7}]}, 0x78) 00:04:36 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x78000000}]}, 0x78) 00:04:36 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r5, 0x0, 0x3979, 0x2000000) 00:04:36 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r2, 0x0, 0x3979, 0x15) 00:04:36 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val={0x0, 0x0, 0x0, 0x8}, @ipx={0xffff, 0x1e, 0x2, 0x0, {@current, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:04:36 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x7f000000}]}, 0x78) 00:04:36 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x8}]}, 0x78) 00:04:36 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x80ffffff}]}, 0x78) 00:04:36 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x9}]}, 0x78) 00:04:36 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x9b000000}]}, 0x78) 00:04:37 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0xa}]}, 0x78) 00:04:37 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val={0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:04:37 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0xffffff80}]}, 0x78) 00:04:37 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0xc}]}, 0x78) 00:04:37 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r5, 0x0, 0x3979, 0x3000000) 00:04:37 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r2, 0x0, 0x3979, 0x18) 00:04:37 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val={0x0, 0x0, 0x0, 0x8}, @ipx={0xffff, 0x1e, 0x5, 0x0, {@current, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:04:37 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0xd}]}, 0x78) 00:04:38 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0xf0000000000000}]}, 0x78) 00:04:38 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0xe}]}, 0x78) 00:04:38 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x100000000000000}]}, 0x78) 00:04:38 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0xf}]}, 0x78) 00:04:38 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x180000000000000}]}, 0x78) 00:04:39 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val={0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:04:39 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x18}]}, 0x78) 00:04:39 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x200000000000000}]}, 0x78) 00:04:39 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r2, 0x0, 0x3979, 0x1a) 00:04:39 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r5, 0x0, 0x3979, 0x5000000) 00:04:39 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val={0x0, 0x0, 0x0, 0x8}, @ipx={0xffff, 0x1e, 0x11, 0x0, {@current, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:04:39 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x1a}]}, 0x78) 00:04:39 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x700000000000000}]}, 0x78) 00:04:39 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x800000000000000}]}, 0x78) 00:04:39 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x1b}]}, 0x78) 00:04:39 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x1e}]}, 0x78) 00:04:39 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x900000000000000}]}, 0x78) 00:04:40 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val={0x0, 0x0, 0x0, 0x0, 0x0, 0xe80}, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:04:40 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0xa00000000000000}]}, 0x78) 00:04:40 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x78}]}, 0x78) 00:04:40 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r2, 0x0, 0x3979, 0x1b) 00:04:40 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r5, 0x0, 0x3979, 0x6000000) 00:04:40 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val={0x0, 0x0, 0x0, 0x8}, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:04:40 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0xc00000000000000}]}, 0x78) 00:04:40 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x9b}]}, 0x78) 00:04:40 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0xd00000000000000}]}, 0x78) 00:04:40 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0xf0}]}, 0x78) 00:04:40 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0xe00000000000000}]}, 0x78) 00:04:40 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x180}]}, 0x78) 00:04:41 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val={0x0, 0x0, 0x0, 0x0, 0x0, 0x1100}, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:04:41 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0xf00000000000000}]}, 0x78) 00:04:41 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x500}]}, 0x78) 00:04:41 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r2, 0x0, 0x3979, 0x9b) 00:04:41 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r5, 0x0, 0x3979, 0x7000000) 00:04:41 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val={0x0, 0x0, 0x0, 0x8}, @ipx={0xffff, 0x1e, 0x0, 0x2, {@current, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:04:41 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x1800000000000000}]}, 0x78) 00:04:41 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x700}]}, 0x78) 00:04:41 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x842}]}, 0x78) 00:04:41 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x1a00000000000000}]}, 0x78) 00:04:41 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x900}]}, 0x78) 00:04:41 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x1b00000000000000}]}, 0x78) 00:04:42 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val={0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:04:42 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0xa00}]}, 0x78) 00:04:42 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x1c00000000000000}]}, 0x78) 00:04:42 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r2, 0x0, 0x3979, 0xf0) 00:04:42 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r5, 0x0, 0x3979, 0x8000000) 00:04:43 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val={0x0, 0x0, 0x0, 0x8}, @ipx={0xffff, 0x1e, 0x0, 0x5, {@current, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:04:43 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0xc00}]}, 0x78) 00:04:43 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x3f00000000000000}]}, 0x78) 00:04:43 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0xd00}]}, 0x78) 00:04:43 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x4d00000000000000}]}, 0x78) 00:04:43 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0xe00}]}, 0x78) 00:04:43 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x6908000000000000}]}, 0x78) 00:04:43 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val={0x0, 0x0, 0x0, 0x0, 0x0, 0x800e}, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:04:43 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0xf00}]}, 0x78) 00:04:43 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x7800000000000000}]}, 0x78) 00:04:43 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r5, 0x0, 0x3979, 0x9000000) 00:04:43 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r2, 0x0, 0x3979, 0x180) 00:04:44 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val={0x0, 0x0, 0x0, 0x8}, @ipx={0xffff, 0x1e, 0x0, 0x11, {@current, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:04:44 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x1800}]}, 0x78) 00:04:44 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x1a00}]}, 0x78) 00:04:44 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x7f00000000000000}]}, 0x78) 00:04:44 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x80ffffff00000000}]}, 0x78) 00:04:44 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x1b00}]}, 0x78) 00:04:44 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x9b00000000000000}]}, 0x78) 00:04:45 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:04:45 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x1e00}]}, 0x78) 00:04:45 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x2}]}, 0x78) 00:04:45 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r5, 0x0, 0x3979, 0xa000000) 00:04:45 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r2, 0x0, 0x3979, 0x300) 00:04:45 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val={0x0, 0x0, 0x0, 0x8}, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:04:45 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}]}, 0x78) 00:04:45 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x7}]}, 0x78) 00:04:45 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x8}]}, 0x78) 00:04:45 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x4208}]}, 0x78) 00:04:45 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x9}]}, 0x78) 00:04:45 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x7800}]}, 0x78) 00:04:46 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val, @ipx={0xffff, 0x1e, 0x2, 0x0, {@current, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:04:46 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x7f00}]}, 0x78) 00:04:46 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0xa}]}, 0x78) 00:04:46 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r5, 0x0, 0x3979, 0xb000000) 00:04:46 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r2, 0x0, 0x3979, 0x500) 00:04:46 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val={0x0, 0x0, 0x0, 0x8}, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current=0x2, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:04:46 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0xc}]}, 0x78) 00:04:46 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x9b00}]}, 0x78) 00:04:47 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0xd}]}, 0x78) 00:04:47 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0xf000}]}, 0x78) 00:04:47 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0xe}]}, 0x78) 00:04:47 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0xf00000}]}, 0x78) 00:04:48 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val, @ipx={0xffff, 0x1e, 0x11, 0x0, {@current, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:04:48 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0xf}]}, 0x78) 00:04:48 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r2, 0x0, 0x3979, 0x600) 00:04:48 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r5, 0x0, 0x3979, 0xc000000) 00:04:48 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}]}, 0x78) 00:04:48 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val={0x0, 0x0, 0x0, 0x8}, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current=0x5, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:04:48 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x1800000}]}, 0x78) 00:04:48 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x18}]}, 0x78) 00:04:48 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}]}, 0x78) 00:04:48 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x1a}]}, 0x78) 00:04:48 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000}]}, 0x78) 00:04:49 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x1b}]}, 0x78) 00:04:49 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:04:49 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000}]}, 0x78) 00:04:49 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x1c}]}, 0x78) 00:04:49 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r2, 0x0, 0x3979, 0x700) 00:04:49 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r5, 0x0, 0x3979, 0xd000000) 00:04:49 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val={0x0, 0x0, 0x0, 0x8}, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current=0x11, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:04:50 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x4d}]}, 0x78) 00:04:50 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}]}, 0x78) 00:04:50 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x9000000}]}, 0x78) 00:04:50 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x78}]}, 0x78) 00:04:50 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x9b}]}, 0x78) 00:04:50 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}]}, 0x78) 00:04:51 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val, @ipx={0xffff, 0x1e, 0x0, 0x2, {@current, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:04:51 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0xf0}]}, 0x78) 00:04:51 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0xc000000}]}, 0x78) 00:04:51 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r5, 0x0, 0x3979, 0xe000000) 00:04:51 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r2, 0x0, 0x3979, 0x900) 00:04:51 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val={0x0, 0x0, 0x0, 0x8}, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current=0x500, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:04:51 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0xd000000}]}, 0x78) 00:04:51 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x180}]}, 0x78) 00:04:51 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0xe000000}]}, 0x78) 00:04:51 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x700}]}, 0x78) 00:04:51 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000}]}, 0x78) 00:04:51 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x869}]}, 0x78) 00:04:52 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val, @ipx={0xffff, 0x1e, 0x0, 0x11, {@current, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:04:52 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x18000000}]}, 0x78) 00:04:52 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x900}]}, 0x78) 00:04:52 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r5, 0x0, 0x3979, 0xf000000) 00:04:52 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r2, 0x0, 0x3979, 0xa00) 00:04:52 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val={0x0, 0x0, 0x0, 0x8}, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current=0xe80, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:04:52 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x1a000000}]}, 0x78) 00:04:52 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0xa00}]}, 0x78) 00:04:52 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x1b000000}]}, 0x78) 00:04:52 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x1e000000}]}, 0x78) 00:04:52 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0xc00}]}, 0x78) 00:04:53 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000}]}, 0x78) 00:04:54 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:04:54 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0xd00}]}, 0x78) 00:04:54 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x42080000}]}, 0x78) 00:04:54 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r5, 0x0, 0x3979, 0x10000000) 00:04:54 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r2, 0x0, 0x3979, 0xb00) 00:04:54 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val={0x0, 0x0, 0x0, 0x8}, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current=0x1100, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:04:54 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0xe00}]}, 0x78) 00:04:54 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x78000000}]}, 0x78) 00:04:54 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0xf00}]}, 0x78) 00:04:54 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x7f000000}]}, 0x78) 00:04:54 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffffff}]}, 0x78) 00:04:54 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x1800}]}, 0x78) 00:04:55 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current=0x2, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:04:55 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x9b000000}]}, 0x78) 00:04:55 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x1a00}]}, 0x78) 00:04:55 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r5, 0x0, 0x3979, 0x18000000) 00:04:55 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r2, 0x0, 0x3979, 0xc00) 00:04:55 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val={0x0, 0x0, 0x0, 0x8}, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current=0x800e, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:04:55 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x1b00}]}, 0x78) 00:04:55 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff80}]}, 0x78) 00:04:55 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0xf0000000000000}]}, 0x78) 00:04:55 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x1c00}]}, 0x78) 00:04:55 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}]}, 0x78) 00:04:55 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x3f00}]}, 0x78) 00:04:56 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current=0x11, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:04:56 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x180000000000000}]}, 0x78) 00:04:56 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x4d00}]}, 0x78) 00:04:56 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r2, 0x0, 0x3979, 0xd00) 00:04:56 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r5, 0x0, 0x3979, 0x19000000) 00:04:56 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val={0x0, 0x0, 0x0, 0x8}, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current=0x1000000, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:04:56 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}]}, 0x78) 00:04:56 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x6908}]}, 0x78) 00:04:56 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000}]}, 0x78) 00:04:56 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x7800}]}, 0x78) 00:04:57 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000}]}, 0x78) 00:04:57 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x7f00}]}, 0x78) 00:04:57 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current=0xe80, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:04:57 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x9b00}]}, 0x78) 00:04:57 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000}]}, 0x78) 00:04:57 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r5, 0x0, 0x3979, 0x1a000000) 00:04:57 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r2, 0x0, 0x3979, 0xe00) 00:04:57 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val={0x0, 0x0, 0x0, 0x8}, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current=0x2000000, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:04:57 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0xf000}]}, 0x78) 00:04:57 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x900000000000000}]}, 0x78) 00:04:58 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0xf00000}]}, 0x78) 00:04:58 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0xa00000000000000}]}, 0x78) 00:04:58 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x1000000}]}, 0x78) 00:04:58 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0xc00000000000000}]}, 0x78) 00:04:59 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current=0x1100, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:04:59 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0xd00000000000000}]}, 0x78) 00:04:59 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x1800000}]}, 0x78) 00:04:59 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r2, 0x0, 0x3979, 0xf00) 00:04:59 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r5, 0x0, 0x3979, 0x1b000000) 00:04:59 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val={0x0, 0x0, 0x0, 0x8}, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current=0x5000000, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:04:59 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0xe00000000000000}]}, 0x78) 00:04:59 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x2000000}]}, 0x78) 00:04:59 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x7000000}]}, 0x78) 00:04:59 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0xf00000000000000}]}, 0x78) 00:04:59 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x8000000}]}, 0x78) 00:04:59 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x1800000000000000}]}, 0x78) 00:05:00 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current=0x3f00, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:05:00 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x1a00000000000000}]}, 0x78) 00:05:00 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x9000000}]}, 0x78) 00:05:00 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r5, 0x0, 0x3979, 0x40000000) 00:05:00 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r2, 0x0, 0x3979, 0x1500) 00:05:00 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val={0x0, 0x0, 0x0, 0x8}, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current=0x11000000, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:05:00 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x1b00000000000000}]}, 0x78) 00:05:00 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0xa000000}]}, 0x78) 00:05:00 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x1e00000000000000}]}, 0x78) 00:05:00 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0xc000000}]}, 0x78) 00:05:00 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00000000000000}]}, 0x78) 00:05:01 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0xd000000}]}, 0x78) 00:05:01 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current=0x800e, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:05:01 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x4208000000000000}]}, 0x78) 00:05:01 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0xe000000}]}, 0x78) 00:05:01 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r5, 0x0, 0x3979, 0x7f000000) 00:05:01 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r2, 0x0, 0x3979, 0x1800) 00:05:01 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val={0x0, 0x0, 0x0, 0x8}, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current=0x800e0000, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:05:02 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x7800000000000000}]}, 0x78) 00:05:02 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0xf000000}]}, 0x78) 00:05:02 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x7f00000000000000}]}, 0x78) 00:05:02 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffffff00000000}]}, 0x78) 00:05:02 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x18000000}]}, 0x78) 00:05:02 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x9b00000000000000}]}, 0x78) 00:05:03 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current=0x1000000, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:05:03 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000}]}, 0x78) 00:05:03 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x1a000000}]}, 0x78) 00:05:03 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r5, 0x0, 0x3979, 0x80ffffff) 00:05:03 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r2, 0x0, 0x3979, 0x1a00) 00:05:03 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val={0x0, 0x0, 0x0, 0x8}, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current=0xfcffffff, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:05:03 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x1b000000}]}, 0x78) 00:05:03 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]}, 0x78) 00:05:03 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x1c000000}]}, 0x78) 00:05:03 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}]}, 0x78) 00:05:03 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x3f000000}]}, 0x78) 00:05:03 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}]}, 0x78) 00:05:04 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current=0x2000000, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:05:04 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}]}, 0x78) 00:05:04 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x4d000000}]}, 0x78) 00:05:04 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r2, 0x0, 0x3979, 0x1b00) 00:05:04 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r5, 0x0, 0x3979, 0x9b000000) 00:05:04 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val={0x0, 0x0, 0x0, 0x8}, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current=0xffffff7f, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:05:04 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}]}, 0x78) 00:05:04 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x69080000}]}, 0x78) 00:05:04 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}]}, 0x78) 00:05:04 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x78000000}]}, 0x78) 00:05:05 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}]}, 0x78) 00:05:05 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x7f000000}]}, 0x78) 00:05:06 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current=0x11000000, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:05:06 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}]}, 0x78) 00:05:06 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x80ffffff}]}, 0x78) 00:05:06 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r5, 0x0, 0x3979, 0xffff0000) 00:05:06 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r2, 0x0, 0x3979, 0x7f00) 00:05:06 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val={0x0, 0x0, 0x0, 0x8}, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current=0xfffffffc, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:05:06 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x9b000000}]}, 0x78) 00:05:06 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}]}, 0x78) 00:05:06 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}]}, 0x78) 00:05:06 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0xffffff80}]}, 0x78) 00:05:06 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0xf0000000000000}]}, 0x78) 00:05:06 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18}]}, 0x78) 00:05:07 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current=0x3f000000, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:05:07 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a}]}, 0x78) 00:05:07 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x100000000000000}]}, 0x78) 00:05:07 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r2, 0x0, 0x3979, 0x9b00) 00:05:07 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r5, 0x0, 0x3979, 0xffffff80) 00:05:07 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val={0x0, 0x0, 0x0, 0x8}, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:05:07 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b}]}, 0x78) 00:05:07 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x180000000000000}]}, 0x78) 00:05:07 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e}]}, 0x78) 00:05:07 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x200000000000000}]}, 0x78) 00:05:07 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x700000000000000}]}, 0x78) 00:05:07 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78}]}, 0x78) 00:05:08 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current=0x800e0000, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:05:08 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9b}]}, 0x78) 00:05:08 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x800000000000000}]}, 0x78) 00:05:08 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r5, 0x0, 0x3979, 0x8000000000000) 00:05:08 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r2, 0x0, 0x3979, 0xf000) 00:05:08 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val={0x0, 0x0, 0x0, 0x8}, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast, 0x2}, {@current, @broadcast}}}, 0x2c) 00:05:08 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0}]}, 0x78) 00:05:08 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x900000000000000}]}, 0x78) 00:05:08 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180}]}, 0x78) 00:05:08 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0xa00000000000000}]}, 0x78) 00:05:09 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500}]}, 0x78) 00:05:09 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0xc00000000000000}]}, 0x78) 00:05:10 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current=0xffffff7f, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:05:10 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700}]}, 0x78) 00:05:10 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0xd00000000000000}]}, 0x78) 00:05:10 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r2, 0x0, 0x3979, 0x80000) 00:05:10 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r5, 0x0, 0x3979, 0xf0000000000000) 00:05:10 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val={0x0, 0x0, 0x0, 0x8}, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast, 0x5}, {@current, @broadcast}}}, 0x2c) 00:05:10 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0xe00000000000000}]}, 0x78) 00:05:10 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x842}]}, 0x78) 00:05:10 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900}]}, 0x78) 00:05:10 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0xf00000000000000}]}, 0x78) 00:05:10 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00}]}, 0x78) 00:05:10 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x1800000000000000}]}, 0x78) 00:05:11 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:05:11 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00}]}, 0x78) 00:05:11 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x1a00000000000000}]}, 0x78) 00:05:11 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r2, 0x0, 0x3979, 0xf00000) 00:05:11 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r5, 0x0, 0x3979, 0x100000000000000) 00:05:11 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val={0x0, 0x0, 0x0, 0x8}, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast, 0x11}, {@current, @broadcast}}}, 0x2c) 00:05:11 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd00}]}, 0x78) 00:05:11 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x1b00000000000000}]}, 0x78) 00:05:11 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00}]}, 0x78) 00:05:11 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x1c00000000000000}]}, 0x78) 00:05:11 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf00}]}, 0x78) 00:05:12 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1800}]}, 0x78) 00:05:12 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast, 0x2}, {@current, @broadcast}}}, 0x2c) 00:05:12 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x3f00000000000000}]}, 0x78) 00:05:12 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a00}]}, 0x78) 00:05:12 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r5, 0x0, 0x3979, 0x180000000000000) 00:05:12 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r2, 0x0, 0x3979, 0x1000000) 00:05:12 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val={0x0, 0x0, 0x0, 0x8}, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast, 0x500}, {@current, @broadcast}}}, 0x2c) 00:05:12 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b00}]}, 0x78) 00:05:12 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x4d00000000000000}]}, 0x78) 00:05:13 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x6908000000000000}]}, 0x78) 00:05:13 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e00}]}, 0x78) 00:05:13 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x7800000000000000}]}, 0x78) 00:05:13 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}]}, 0x78) 00:05:14 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast, 0x11}, {@current, @broadcast}}}, 0x2c) 00:05:14 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x7f00000000000000}]}, 0x78) 00:05:14 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4208}]}, 0x78) 00:05:14 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r2, 0x0, 0x3979, 0x1800000) 00:05:14 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r5, 0x0, 0x3979, 0x200000000000000) 00:05:14 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val={0x0, 0x0, 0x0, 0x8}, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast, 0xe80}, {@current, @broadcast}}}, 0x2c) 00:05:14 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7800}]}, 0x78) 00:05:14 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x80ffffff00000000}]}, 0x78) 00:05:14 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x9b00000000000000}]}, 0x78) 00:05:14 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f00}]}, 0x78) 00:05:14 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]}, 0x78) 00:05:14 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9b00}]}, 0x78) 00:05:15 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast, 0xe80}, {@current, @broadcast}}}, 0x2c) 00:05:15 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x7}]}, 0x78) 00:05:15 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf000}]}, 0x78) 00:05:15 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r2, 0x0, 0x3979, 0x2000000) 00:05:15 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r5, 0x0, 0x3979, 0x300000000000000) 00:05:15 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val={0x0, 0x0, 0x0, 0x8}, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast, 0x1100}, {@current, @broadcast}}}, 0x2c) 00:05:16 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x8}]}, 0x78) 00:05:16 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf00000}]}, 0x78) 00:05:16 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x9}]}, 0x78) 00:05:16 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}]}, 0x78) 00:05:16 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1800000}]}, 0x78) 00:05:16 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0xa}]}, 0x78) 00:05:17 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast, 0x1100}, {@current, @broadcast}}}, 0x2c) 00:05:17 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}]}, 0x78) 00:05:17 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0xc}]}, 0x78) 00:05:17 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r5, 0x0, 0x3979, 0x500000000000000) 00:05:17 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r2, 0x0, 0x3979, 0x3000000) 00:05:17 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val={0x0, 0x0, 0x0, 0x8}, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast, 0x800e}, {@current, @broadcast}}}, 0x2c) 00:05:17 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0xd}]}, 0x78) 00:05:17 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000}]}, 0x78) 00:05:17 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000}]}, 0x78) 00:05:17 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0xe}]}, 0x78) 00:05:18 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}]}, 0x78) 00:05:18 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0xf}]}, 0x78) 00:05:18 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast, 0x3f00}, {@current, @broadcast}}}, 0x2c) 00:05:18 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9000000}]}, 0x78) 00:05:18 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x18}]}, 0x78) 00:05:18 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r5, 0x0, 0x3979, 0x600000000000000) 00:05:18 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r2, 0x0, 0x3979, 0x5000000) 00:05:18 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val={0x0, 0x0, 0x0, 0x8}, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:05:19 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}]}, 0x78) 00:05:19 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x1a}]}, 0x78) 00:05:19 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc000000}]}, 0x78) 00:05:19 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x1b}]}, 0x78) 00:05:19 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd000000}]}, 0x78) 00:05:19 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x1c}]}, 0x78) 00:05:20 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast, 0x800e}, {@current, @broadcast}}}, 0x2c) 00:05:20 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe000000}]}, 0x78) 00:05:20 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x4d}]}, 0x78) 00:05:20 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r5, 0x0, 0x3979, 0x700000000000000) 00:05:20 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r2, 0x0, 0x3979, 0x6000000) 00:05:20 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val={0x0, 0x0, 0x0, 0x8}, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current=0x2, @broadcast}}}, 0x2c) 00:05:20 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x78}]}, 0x78) 00:05:20 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000}]}, 0x78) 00:05:20 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x9b}]}, 0x78) 00:05:20 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000000}]}, 0x78) 00:05:20 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0xf0}]}, 0x78) 00:05:21 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x180}]}, 0x78) [ 705.499494][ T0] NOHZ: local_softirq_pending 08 00:05:21 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:05:21 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a000000}]}, 0x78) 00:05:21 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x700}]}, 0x78) 00:05:21 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r2, 0x0, 0x3979, 0x7000000) 00:05:21 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r5, 0x0, 0x3979, 0x800000000000000) 00:05:21 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val={0x0, 0x0, 0x0, 0x8}, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current=0x5, @broadcast}}}, 0x2c) 00:05:22 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x869}]}, 0x78) 00:05:22 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b000000}]}, 0x78) 00:05:22 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e000000}]}, 0x78) 00:05:22 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x900}]}, 0x78) 00:05:22 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000}]}, 0x78) 00:05:22 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0xa00}]}, 0x78) 00:05:23 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current=0x2, @broadcast}}}, 0x2c) 00:05:23 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0xc00}]}, 0x78) 00:05:23 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42080000}]}, 0x78) 00:05:23 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r2, 0x0, 0x3979, 0x8000000) 00:05:23 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r5, 0x0, 0x3979, 0x900000000000000) 00:05:23 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val={0x0, 0x0, 0x0, 0x8}, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current=0x11, @broadcast}}}, 0x2c) 00:05:23 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78000000}]}, 0x78) 00:05:23 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0xd00}]}, 0x78) 00:05:23 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0xe00}]}, 0x78) 00:05:23 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f000000}]}, 0x78) 00:05:23 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0xf00}]}, 0x78) 00:05:23 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffffff}]}, 0x78) 00:05:24 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current=0x11, @broadcast}}}, 0x2c) 00:05:24 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x1800}]}, 0x78) 00:05:24 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val={0x0, 0x0, 0x0, 0x8}, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current=0x500, @broadcast}}}, 0x2c) 00:05:24 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9b000000}]}, 0x78) 00:05:24 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r2, 0x0, 0x3979, 0x9000000) 00:05:24 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r5, 0x0, 0x3979, 0xa00000000000000) 00:05:24 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff80}]}, 0x78) 00:05:24 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x1a00}]}, 0x78) 00:05:24 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0000000000000}]}, 0x78) 00:05:24 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x1b00}]}, 0x78) 00:05:24 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}]}, 0x78) 00:05:24 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x1c00}]}, 0x78) 00:05:25 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current=0xe80, @broadcast}}}, 0x2c) 00:05:25 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180000000000000}]}, 0x78) 00:05:25 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}]}, 0x78) 00:05:25 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r2, 0x0, 0x3979, 0xa000000) 00:05:25 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r5, 0x0, 0x3979, 0xb00000000000000) 00:05:25 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val={0x0, 0x0, 0x0, 0x8}, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current=0xe80, @broadcast}}}, 0x2c) 00:05:25 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}]}, 0x78) 00:05:25 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x4d00}]}, 0x78) 00:05:26 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000}]}, 0x78) 00:05:26 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x6908}]}, 0x78) 00:05:26 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000}]}, 0x78) 00:05:26 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x7800}]}, 0x78) 00:05:27 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current=0x1100, @broadcast}}}, 0x2c) 00:05:27 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000}]}, 0x78) 00:05:27 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x7f00}]}, 0x78) 00:05:27 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r5, 0x0, 0x3979, 0xc00000000000000) 00:05:27 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r2, 0x0, 0x3979, 0xb000000) 00:05:27 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val={0x0, 0x0, 0x0, 0x8}, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current=0x1100, @broadcast}}}, 0x2c) 00:05:27 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x9b00}]}, 0x78) 00:05:27 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900000000000000}]}, 0x78) 00:05:27 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00000000000000}]}, 0x78) 00:05:27 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0xf000}]}, 0x78) 00:05:27 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0xf00000}]}, 0x78) 00:05:27 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00000000000000}]}, 0x78) 00:05:28 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current=0x3f00, @broadcast}}}, 0x2c) 00:05:28 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd00000000000000}]}, 0x78) 00:05:28 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}]}, 0x78) 00:05:28 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r2, 0x0, 0x3979, 0xc000000) 00:05:28 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r5, 0x0, 0x3979, 0xd00000000000000) 00:05:28 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val={0x0, 0x0, 0x0, 0x8}, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current=0x800e, @broadcast}}}, 0x2c) 00:05:28 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00000000000000}]}, 0x78) 00:05:28 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x1800000}]}, 0x78) 00:05:28 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}]}, 0x78) 00:05:28 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf00000000000000}]}, 0x78) 00:05:28 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1800000000000000}]}, 0x78) 00:05:28 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000}]}, 0x78) 00:05:29 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current=0x800e, @broadcast}}}, 0x2c) 00:05:29 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a00000000000000}]}, 0x78) 00:05:29 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}]}, 0x78) 00:05:29 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r5, 0x0, 0x3979, 0xe00000000000000) 00:05:29 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r2, 0x0, 0x3979, 0xd000000) 00:05:29 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val={0x0, 0x0, 0x0, 0x8}, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current=0x1000000, @broadcast}}}, 0x2c) 00:05:29 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b00000000000000}]}, 0x78) 00:05:29 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x9000000}]}, 0x78) 00:05:30 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e00000000000000}]}, 0x78) 00:05:30 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}]}, 0x78) 00:05:30 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0xc000000}]}, 0x78) 00:05:30 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00000000000000}]}, 0x78) 00:05:31 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current=0x1000000, @broadcast}}}, 0x2c) 00:05:31 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0xd000000}]}, 0x78) 00:05:31 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4208000000000000}]}, 0x78) 00:05:31 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r2, 0x0, 0x3979, 0xe000000) 00:05:31 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r5, 0x0, 0x3979, 0xf00000000000000) 00:05:31 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val={0x0, 0x0, 0x0, 0x8}, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current=0x2000000, @broadcast}}}, 0x2c) 00:05:31 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7800000000000000}]}, 0x78) 00:05:31 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0xe000000}]}, 0x78) 00:05:31 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000}]}, 0x78) 00:05:31 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f00000000000000}]}, 0x78) 00:05:31 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x18000000}]}, 0x78) 00:05:31 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffffff00000000}]}, 0x78) 00:05:32 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current=0x2000000, @broadcast}}}, 0x2c) 00:05:32 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x1a000000}]}, 0x78) 00:05:32 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9b00000000000000}]}, 0x78) 00:05:32 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r5, 0x0, 0x3979, 0x1000000000000000) 00:05:32 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r2, 0x0, 0x3979, 0xf000000) 00:05:32 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val={0x0, 0x0, 0x0, 0x8}, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current=0x5000000, @broadcast}}}, 0x2c) 00:05:32 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x1b000000}]}, 0x78) 00:05:32 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000}]}, 0x78) 00:05:32 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x1c000000}]}, 0x78) 00:05:32 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]}, 0x78) 00:05:32 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000}]}, 0x78) 00:05:32 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}]}, 0x78) 00:05:33 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current=0x11000000, @broadcast}}}, 0x2c) 00:05:33 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}]}, 0x78) 00:05:33 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x4d000000}]}, 0x78) 00:05:33 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r5, 0x0, 0x3979, 0x1800000000000000) 00:05:33 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r2, 0x0, 0x3979, 0x10000000) 00:05:33 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val={0x0, 0x0, 0x0, 0x8}, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current=0x11000000, @broadcast}}}, 0x2c) 00:05:33 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x69080000}]}, 0x78) 00:05:33 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}]}, 0x78) 00:05:33 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}]}, 0x78) 00:05:34 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x78000000}]}, 0x78) 00:05:34 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}]}, 0x78) 00:05:34 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x7f000000}]}, 0x78) 00:05:34 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current=0x3f000000, @broadcast}}}, 0x2c) 00:05:34 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}]}, 0x78) 00:05:34 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffffff}]}, 0x78) 00:05:34 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r5, 0x0, 0x3979, 0x1900000000000000) 00:05:34 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r2, 0x0, 0x3979, 0x15000000) 00:05:34 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val={0x0, 0x0, 0x0, 0x8}, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current=0x800e0000, @broadcast}}}, 0x2c) 00:05:35 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}]}, 0x78) 00:05:35 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x9b000000}]}, 0x78) 00:05:35 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}]}, 0x78) 00:05:35 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff80}]}, 0x78) 00:05:35 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}]}, 0x78) 00:05:35 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0xf0000000000000}]}, 0x78) 00:05:36 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current=0x800e0000, @broadcast}}}, 0x2c) 00:05:36 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18}]}, 0x78) 00:05:36 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}]}, 0x78) 00:05:36 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r5, 0x0, 0x3979, 0x1a00000000000000) 00:05:36 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r2, 0x0, 0x3979, 0x18000000) 00:05:36 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val={0x0, 0x0, 0x0, 0x8}, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current=0xfcffffff, @broadcast}}}, 0x2c) 00:05:36 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x180000000000000}]}, 0x78) 00:05:36 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a}]}, 0x78) 00:05:36 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}]}, 0x78) 00:05:36 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b}]}, 0x78) 00:05:36 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000}]}, 0x78) 00:05:36 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e}]}, 0x78) 00:05:37 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current=0xffffff7f, @broadcast}}}, 0x2c) 00:05:37 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000}]}, 0x78) 00:05:37 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78}]}, 0x78) 00:05:37 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r5, 0x0, 0x3979, 0x1b00000000000000) 00:05:37 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r2, 0x0, 0x3979, 0x1a000000) 00:05:37 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val={0x0, 0x0, 0x0, 0x8}, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current=0xffffff7f, @broadcast}}}, 0x2c) 00:05:37 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9b}]}, 0x78) 00:05:37 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x900000000000000}]}, 0x78) 00:05:38 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0xa00000000000000}]}, 0x78) 00:05:38 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0}]}, 0x78) 00:05:38 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180}]}, 0x78) 00:05:38 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0xc00000000000000}]}, 0x78) 00:05:39 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:05:39 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500}]}, 0x78) 00:05:39 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0xd00000000000000}]}, 0x78) 00:05:39 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r2, 0x0, 0x3979, 0x1b000000) 00:05:39 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r5, 0x0, 0x3979, 0x4000000000000000) 00:05:39 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val={0x0, 0x0, 0x0, 0x8}, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current=0xfffffffc, @broadcast}}}, 0x2c) 00:05:39 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0xe00000000000000}]}, 0x78) 00:05:39 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700}]}, 0x78) 00:05:39 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x842}]}, 0x78) 00:05:39 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0xf00000000000000}]}, 0x78) 00:05:39 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900}]}, 0x78) 00:05:39 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x1800000000000000}]}, 0x78) 00:05:40 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast, 0x2}}}, 0x2c) 00:05:40 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x1a00000000000000}]}, 0x78) 00:05:40 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00}]}, 0x78) 00:05:40 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r5, 0x0, 0x3979, 0x7f00000000000000) 00:05:40 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r2, 0x0, 0x3979, 0x7f000000) 00:05:40 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val={0x0, 0x0, 0x0, 0x8}, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:05:40 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x1b00000000000000}]}, 0x78) 00:05:40 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00}]}, 0x78) 00:05:40 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x1c00000000000000}]}, 0x78) 00:05:40 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd00}]}, 0x78) 00:05:40 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00000000000000}]}, 0x78) 00:05:40 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00}]}, 0x78) 00:05:41 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast, 0x11}}}, 0x2c) 00:05:41 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x4d00000000000000}]}, 0x78) 00:05:41 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf00}]}, 0x78) 00:05:41 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r2, 0x0, 0x3979, 0x80ffffff) 00:05:41 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r5, 0x0, 0x3979, 0x80ffffff00000000) 00:05:41 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val={0x0, 0x0, 0x0, 0x8}, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast, 0x2}}}, 0x2c) 00:05:41 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x6908000000000000}]}, 0x78) 00:05:41 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1800}]}, 0x78) 00:05:41 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a00}]}, 0x78) 00:05:41 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x7800000000000000}]}, 0x78) 00:05:42 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x7f00000000000000}]}, 0x78) 00:05:42 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b00}]}, 0x78) 00:05:43 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast, 0xe80}}}, 0x2c) 00:05:43 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e00}]}, 0x78) 00:05:43 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffffff00000000}]}, 0x78) 00:05:43 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r2, 0x0, 0x3979, 0x9b000000) 00:05:43 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r5, 0x0, 0x3979, 0x9b00000000000000) 00:05:43 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val={0x0, 0x0, 0x0, 0x8}, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast, 0x5}}}, 0x2c) 00:05:43 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x9b00000000000000}]}, 0x78) 00:05:43 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}]}, 0x78) 00:05:43 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]}, 0x78) 00:05:43 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4208}]}, 0x78) 00:05:43 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}]}, 0x78) 00:05:43 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}]}, 0x78) 00:05:44 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast, 0x1100}}}, 0x2c) 00:05:44 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7800}]}, 0x78) 00:05:44 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}]}, 0x78) 00:05:44 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r2, 0x0, 0x3979, 0xffff0000) 00:05:44 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r5, 0x0, 0x3979, 0xffff000000000000) 00:05:44 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val={0x0, 0x0, 0x0, 0x8}, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast, 0x11}}}, 0x2c) 00:05:44 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f00}]}, 0x78) 00:05:44 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}]}, 0x78) 00:05:44 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9b00}]}, 0x78) 00:05:44 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}]}, 0x78) 00:05:44 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf000}]}, 0x78) 00:05:44 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}]}, 0x78) 00:05:45 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast, 0x3f00}}}, 0x2c) 00:05:45 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf00000}]}, 0x78) 00:05:45 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}]}, 0x78) 00:05:45 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) r6 = getpid() sched_setscheduler(r6, 0x5, &(0x7f0000000380)) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) r8 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0xffffffff00000001, 0x8082) fcntl$dupfd(0xffffffffffffffff, 0x406, r8) r9 = socket$inet_udp(0x2, 0x2, 0x0) close(r9) splice(0xffffffffffffffff, 0x0, r9, 0x0, 0x4ffe0, 0x6) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r6, r7, 0x0, 0x9, &(0x7f0000000000)='vboxnet0\x00', 0xffffffffffffffff}, 0x30) ioctl$FS_IOC_MEASURE_VERITY(r10, 0xc0046686, &(0x7f00000000c0)={0x2, 0x9, "9e7385e0917fe27cce"}) splice(r0, 0x0, r5, 0x0, 0x3979, 0x0) 00:05:45 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r2, 0x0, 0x3979, 0xffffff80) 00:05:45 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val={0x0, 0x0, 0x0, 0x8}, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast, 0x500}}}, 0x2c) 00:05:45 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}]}, 0x78) 00:05:46 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}]}, 0x78) 00:05:46 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1800000}]}, 0x78) 00:05:46 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18}]}, 0x78) 00:05:46 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}]}, 0x78) 00:05:46 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a}]}, 0x78) 00:05:47 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast, 0x800e}}}, 0x2c) 00:05:47 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000}]}, 0x78) 00:05:47 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b}]}, 0x78) 00:05:47 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r2, 0x0, 0x3979, 0x8000000000000) 00:05:47 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FS_IOC_MEASURE_VERITY(r1, 0xc0046686, &(0x7f0000000300)={0x3, 0xa2, "b4f07c6883967db17f1376ba0e40128889ab7faa423f6e31348517e87d3e8fbe7252a93378ed9f1bd73df904f9b72c814f0d2a25e50909a3a729a90b5e1293a6dc744e42e6d2a5ec1cfe215616001880eb2ee94655d9ab2fb72682cd050544ba82880bed433a194a9f089830125036ae2f277c4a9f31b73b1ab4ba1d40d4e229d4f69551c3a6c8ec25f1f5629ca48fadaf53b5d39fc1fca6b09d9e156e2e228eabf4"}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/autofs\x00', 0x0, 0x0) ioctl$BLKREPORTZONE(r5, 0xc0101282, &(0x7f0000000400)=ANY=[@ANYBLOB="0300000000000000020000000000000012c90a2f00000000ddf5c15e0000000008000000000001038804000000000000000000000000000000000000000000000000000000000000000000000000058d005d00000000000000010000000000000001ffffffffffffff3f807f01000000000000000000000000000000000000000000000000723a94669dd315654f9e0602b2cb8abc11cb5fb0e75a06e04d6fd3c02e66e3838d0c0300"/182]) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r6, &(0x7f0000000140)=ANY=[], 0xffc1) getsockopt$inet_sctp6_SCTP_NODELAY(r6, 0x84, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20020}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, 0x3, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4004044) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$EVIOCREVOKE(r7, 0x40044591, &(0x7f0000000280)) r8 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(r0, 0x0, r8, 0x0, 0x3979, 0x0) 00:05:47 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val={0x0, 0x0, 0x0, 0x8}, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast, 0xe80}}}, 0x2c) 00:05:47 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000}]}, 0x78) 00:05:47 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c}]}, 0x78) 00:05:47 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}]}, 0x78) 00:05:47 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9000000}]}, 0x78) 00:05:47 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d}]}, 0x78) 00:05:47 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78}]}, 0x78) 00:05:48 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast}}}, 0x3) 00:05:48 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}]}, 0x78) 00:05:48 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9b}]}, 0x78) 00:05:48 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$inet_sctp(0x2, 0x1, 0x84) r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r6, 0x84, 0x18, &(0x7f00000000c0)={r8}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x18, &(0x7f0000000040)={r8, 0x5}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000100)={r9, 0x40}, &(0x7f0000000140)=0x8) r10 = socket$inet6(0xa, 0x2, 0x0) r11 = dup3(r10, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = fcntl$dupfd(r13, 0x0, r12) ioctl$PERF_EVENT_IOC_ENABLE(r14, 0x8912, 0x400200) write$binfmt_elf64(r14, &(0x7f00000001c0)=ANY=[@ANYBLOB="183e22d30000d0bf9816e98e00000000100000000000003ed238000d3856cc324ce28a0e6be60e1aa01e35fe9a18e65558bac607c98c8eca09864db4278d4550aec9e2b36ac7f3fc482d44e1d6861abd49fcb0ec8c507829233400a96378d30fd631a1cd6c14bd0000008064651584df28be8dd7c81f0974975d836db0459a9eea644aedd3d5812a762aea0fde529601430f508c1542486cf219db342c46f7", @ANYRESOCT], 0xb6) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) getsockname$l2tp6(r14, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000180)=0x20) r15 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r15, 0x0, 0x3979, 0x0) 00:05:48 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r2, 0x0, 0x3979, 0xf0000000000000) 00:05:48 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val={0x0, 0x0, 0x0, 0x8}, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast, 0x1100}}}, 0x2c) 00:05:48 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc000000}]}, 0x78) 00:05:48 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0}]}, 0x78) 00:05:48 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180}]}, 0x78) 00:05:48 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd000000}]}, 0x78) 00:05:48 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700}]}, 0x78) 00:05:49 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe000000}]}, 0x78) 00:05:49 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast}}}, 0x4) 00:05:49 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x869}]}, 0x78) 00:05:49 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000}]}, 0x78) 00:05:49 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0xffc1) ioctl$BLKDISCARD(r4, 0x1277, &(0x7f0000000280)=0xfffffffffffffffb) r5 = syz_open_dev$vcsu(&(0x7f0000000240)='/dev/vcsu#\x00', 0x2, 0x0) ioctl$KVM_SET_XCRS(r5, 0x4188aea7, &(0x7f00000001c0)={0x6, 0x0, [{0x7, 0x0, 0xffffffff}, {0x28000, 0x0, 0x4}, {0x7, 0x0, 0x82}, {0x8, 0x0, 0xe42e}, {0x9, 0x0, 0x7}, {0x1, 0x0, 0x4}]}) dup3(r3, r2, 0x0) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x628000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x80400202) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r7 = syz_open_dev$tty20(0xc, 0x4, 0x0) r8 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ocfs2_control\x00', 0x12d000, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r8, 0x11, 0x2, &(0x7f00000000c0)=""/99, &(0x7f0000000180)=0x63) splice(r0, 0x0, r7, 0x0, 0x3979, 0x0) 00:05:49 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r2, 0x0, 0x3979, 0x100000000000000) 00:05:49 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val={0x0, 0x0, 0x0, 0x8}, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast, 0x800e}}}, 0x2c) 00:05:50 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900}]}, 0x78) 00:05:50 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000000}]}, 0x78) 00:05:50 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00}]}, 0x78) 00:05:50 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a000000}]}, 0x78) 00:05:50 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00}]}, 0x78) 00:05:50 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b000000}]}, 0x78) 00:05:51 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast}}}, 0xfdef) 00:05:51 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e000000}]}, 0x78) 00:05:51 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd00}]}, 0x78) 00:05:51 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) splice(r4, 0x0, r5, 0x0, 0x4ffe0, 0x0) setsockopt$inet6_buf(r4, 0x29, 0x2c, &(0x7f0000000180)="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", 0x1000) r6 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r7 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r7, 0x0, 0x3979, 0x0) 00:05:51 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r2, 0x0, 0x3979, 0x180000000000000) 00:05:51 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val={0x0, 0x0, 0x0, 0x8}, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast}}}, 0x3) 00:05:51 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000}]}, 0x78) 00:05:51 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00}]}, 0x78) 00:05:51 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42080000}]}, 0x78) 00:05:51 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78000000}]}, 0x78) 00:05:51 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf00}]}, 0x78) 00:05:51 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f000000}]}, 0x78) 00:05:52 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffffff}]}, 0x78) 00:05:52 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1800}]}, 0x78) 00:05:52 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r2, 0x0, 0x3979, 0x200000000000000) 00:05:52 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r6, &(0x7f0000000140)=ANY=[], 0xffc1) r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsu\x00', 0x1a1440, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r7, 0xc008551b, &(0x7f0000000100)={0x7, 0x1c, [0x2, 0xfffffeff, 0x6, 0x6, 0x9, 0x1, 0xfffffffc]}) getsockopt$PNPIPE_INITSTATE(r6, 0x113, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) splice(r0, 0x0, r5, 0x0, 0x3979, 0x0) 00:05:52 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast}}}, 0x2000002c) 00:05:52 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val={0x0, 0x0, 0x0, 0x8}, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast}}}, 0x4) 00:05:52 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9b000000}]}, 0x78) 00:05:52 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a00}]}, 0x78) 00:05:52 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff80}]}, 0x78) 00:05:53 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b00}]}, 0x78) 00:05:53 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0000000000000}]}, 0x78) 00:05:53 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}]}, 0x78) 00:05:53 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c00}]}, 0x78) 00:05:53 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}]}, 0x78) 00:05:53 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r2, 0x0, 0x3979, 0x300000000000000) 00:05:53 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180000000000000}]}, 0x78) 00:05:54 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast}}}, 0xfffffdef) 00:05:54 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d00}]}, 0x78) 00:05:54 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5c50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r5, 0x0, 0x3979, 0x0) 00:05:54 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}]}, 0x78) 00:05:54 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val={0x0, 0x0, 0x0, 0x8}, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast}}}, 0xfdef) 00:05:54 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6908}]}, 0x78) 00:05:54 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000}]}, 0x78) 00:05:54 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7800}]}, 0x78) 00:05:54 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r2, 0x0, 0x3979, 0x500000000000000) 00:05:54 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000}]}, 0x78) 00:05:54 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f00}]}, 0x78) 00:05:54 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000}]}, 0x78) 00:05:55 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast}}}, 0xfffffffffffffdef) 00:05:55 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900000000000000}]}, 0x78) 00:05:55 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9b00}]}, 0x78) 00:05:55 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r2, 0x0, 0x3979, 0x600000000000000) 00:05:55 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x800, 0x80) r4 = dup3(r3, r2, 0x0) getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f00000001c0), &(0x7f0000000200)=0x4) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT=0x0], 0x1a) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000240)=""/61) socket$unix(0x1, 0x1, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r5, 0x0, 0x3979, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/raw6\x00') connect$inet6(r9, &(0x7f0000000180)={0xa, 0x4e20, 0x80, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xad8}, 0x1c) getsockname$packet(r8, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc}]}]}]}, 0x34}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000040)={'wg2\x00', r10}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = fcntl$dupfd(r12, 0x0, r11) ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200) r14 = open(0x0, 0x40002, 0x0) r15 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000540)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r14, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, r15, 0x0, 0x70bd27}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r13, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r15, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040881}, 0x4) ioctl$KDGETKEYCODE(r5, 0x4b4c, &(0x7f0000000000)={0x8, 0xfffffffc}) 00:05:55 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val={0x0, 0x0, 0x0, 0x8}, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast}}}, 0x2000002c) 00:05:55 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00000000000000}]}, 0x78) 00:05:55 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf000}]}, 0x78) 00:05:56 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf00000}]}, 0x78) 00:05:56 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00000000000000}]}, 0x78) 00:05:56 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}]}, 0x78) 00:05:56 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd00000000000000}]}, 0x78) 00:05:57 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@broadcast, @broadcast}}}, 0x2c) 00:05:57 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1800000}]}, 0x78) 00:05:57 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00000000000000}]}, 0x78) 00:05:57 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r2, 0x0, 0x3979, 0x700000000000000) 00:05:57 executing program 3: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x401, 0x0) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x2) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = dup3(r4, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) ioctl$SNDRV_PCM_IOCTL_STATUS64(0xffffffffffffffff, 0x80984120, &(0x7f0000000180)) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r1, 0x0, r6, 0x0, 0x3979, 0x0) 00:05:57 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val={0x0, 0x0, 0x0, 0x8}, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast}}}, 0xfffffdef) 00:05:57 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf00000000000000}]}, 0x78) 00:05:57 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}]}, 0x78) 00:05:57 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1800000000000000}]}, 0x78) 00:05:57 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000}]}, 0x78) 00:05:57 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a00000000000000}]}, 0x78) 00:05:57 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b00000000000000}]}, 0x78) 00:05:58 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, r1) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f0000000040)={'erspan0\x00', {0x7, 0x4e23, @multicast1}}) write$tun(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="00ef00f500000000000000000000ffff001e000022fa350b7c46783effff000000000000ffffffffffff0000"], 0x2c) 00:05:58 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e00000000000000}]}, 0x78) 00:05:58 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}]}, 0x78) 00:05:58 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) splice(r5, 0x0, r6, 0x0, 0x4ffe0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) r8 = socket$inet_udp(0x2, 0x2, 0x0) close(r8) splice(r7, 0x0, r8, 0x0, 0x4ffe0, 0x0) syncfs(r7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = fcntl$dupfd(r10, 0x0, r9) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[@ANYRESHEX=r2, @ANYRESOCT=r11], 0x29) r12 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r12, 0x0, 0x3979, 0x0) 00:05:58 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val={0x0, 0x0, 0x0, 0x8}, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast}}}, 0xfffffffffffffdef) 00:05:58 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r2, 0x0, 0x3979, 0x800000000000000) 00:05:58 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9000000}]}, 0x78) 00:05:58 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00000000000000}]}, 0x78) 00:05:58 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) splice(r4, 0x0, r5, 0x0, 0x4ffe0, 0x0) r6 = accept(r4, &(0x7f0000000000)=@alg, &(0x7f00000000c0)=0x80) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180)='nl80211\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r6, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x8c, r7, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x1}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x8}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_BSSID={0xa, 0xf5, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x2, 0x3}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_SCAN_SSIDS={0x38, 0x2d, 0x0, 0x1, [{0xa, 0x0, [0x0, 0x18, 0x0, 0x3, 0xe, 0xe]}, {0x8, 0x0, [0xd, 0x3, 0xc, 0x7]}, {0xa, 0x0, [0x3, 0x1f, 0xf, 0x13, 0x17, 0x3]}, {0x5, 0x0, [0x1a]}, {0xa, 0x0, [0x10, 0xa, 0x6, 0x13, 0x14, 0x18]}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0xc, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x1f}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4004080}, 0x4014) r8 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r10, &(0x7f0000001b00)=[{&(0x7f0000000640)="87", 0x1}, {&(0x7f00000006c0)="76c48519bb7998a2233d2a342b712dec", 0x10}], 0x2, 0x0) r11 = socket$alg(0x26, 0x5, 0x0) bind$alg(r11, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crct10dif\x00'}, 0x58) r12 = accept4(r11, 0x0, 0x0, 0x0) r13 = accept4(r12, 0x0, 0x0, 0x0) splice(r9, 0x0, r13, 0x0, 0x80000001, 0x0) r14 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r14, 0x0, 0x3979, 0x0) 00:05:58 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4208000000000000}]}, 0x78) 00:05:58 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}]}, 0x78) 00:05:59 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc000000}]}, 0x78) 00:05:59 executing program 2: openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/adsp1\x00', 0x280000, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:05:59 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7800000000000000}]}, 0x78) 00:05:59 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd000000}]}, 0x78) 00:05:59 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r2, 0x0, 0x3979, 0x900000000000000) 00:05:59 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r4, 0xc034564b, &(0x7f0000000040)={0x9, 0x30314742, 0x7, 0x100, 0x1, @stepwise={{0x2, 0x400}, {0x6, 0x6}, {0x4, 0x7}}}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$VHOST_SET_VRING_NUM(r4, 0x4008af10, &(0x7f0000000000)={0x0, 0x4}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r5, 0x0, 0x3979, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r6, &(0x7f0000000140)=ANY=[], 0xffc1) accept4$packet(r6, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x14, 0x800) 00:05:59 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r2 = syz_open_dev$media(0x0, 0x8, 0x4002) setsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f0000000100)=0x60, 0x2) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, r4, 0x0, 0x4ffe0, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0xc) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="000000102d6dd1a63ff1cc90b9445134190000ffff001e000000000000ff0024000000000000ff8f09d96e9984ca0000"], 0x2c) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f0000000000)={0x1, 0xd020, 0x4, 0x3}, 0x10) 00:05:59 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe000000}]}, 0x78) 00:05:59 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f00000000000000}]}, 0x78) 00:06:00 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000}]}, 0x78) 00:06:00 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffffff00000000}]}, 0x78) 00:06:00 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000000}]}, 0x78) 00:06:00 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9b00000000000000}]}, 0x78) 00:06:01 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast}}}, 0x2c) getpid() 00:06:01 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a000000}]}, 0x78) 00:06:01 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000}]}, 0x78) 00:06:01 executing program 3: r0 = semget$private(0x0, 0x0, 0x205) semctl$SEM_STAT_ANY(r0, 0x2, 0x14, &(0x7f0000000000)=""/221) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = dup3(r4, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x5) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="1b5d5087959cc3dda726d48e7e489c7ab02a1cb2c0fed2ddd9e708e30d0c446a396366576fc993343fb50b113c41a4ac9140ea8fab8a8921d372c85caa0c936c716699723f89d21cdad9890d0de8b3177fc55b407b56f7e0b17efa14d9a60a3d46c6d43e4a150940be29cb90f4d4d16218f9ec916abc6262db52bae679a9", @ANYRESOCT], 0x1a) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r1, 0x0, r6, 0x0, 0x3979, 0x0) 00:06:01 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r2, 0x0, 0x3979, 0xa00000000000000) 00:06:01 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f0000000040), &(0x7f0000000100)=0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) ioctl$VIDIOC_S_MODULATOR(r4, 0x40445637, &(0x7f0000000180)={0x6, "24d6ab12501b79715be219a1096e545ae822577243d73d3be299ce39f20beddf", 0x20, 0x3ff, 0x2, 0x4, 0x5}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val={0x0, 0x0, 0x0, 0x8}, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:06:01 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x2) 00:06:01 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b000000}]}, 0x78) 00:06:01 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c000000}]}, 0x78) 00:06:01 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x3) 00:06:01 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000}]}, 0x78) 00:06:01 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x4) [ 746.455669][ T0] NOHZ: local_softirq_pending 08 00:06:02 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast}}}, 0x2c) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000180)={0xfff, 0x6, 0x4, 0x8, 0x1, {0x77359400}, {0x1, 0xc, 0x1, 0x0, 0xf7, 0x6a, "423595fd"}, 0x52ae3ab8, 0x4, @fd, 0x100, 0x0, r1}) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040)=0x0) syz_open_procfs(r3, &(0x7f0000000100)='sched\x00') 00:06:02 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d000000}]}, 0x78) 00:06:02 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x5) 00:06:02 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r2, 0x0, 0x3979, 0xb00000000000000) 00:06:02 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r5, 0x0, 0x3979, 0x0) 00:06:02 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xffc1) ioctl$RNDZAPENTCNT(r3, 0x5204, &(0x7f0000000040)=0x80000001) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val={0x0, 0x0, 0x0, 0x8}, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast}}}, 0x2c) r4 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x0, 0x101002) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f0000000140)=ANY=[], 0xffc1) r6 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) getsockname$packet(r8, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r9}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc}]}]}]}, 0x34}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000180)={'wg1\x00', r9}) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f00000001c0)={{{@in=@broadcast, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@initdev}}, &(0x7f00000002c0)=0xe8) setsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@rand_addr="0dfaf0555f7ec816d67781eaac0027a4", @in6=@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x32}}, 0x4e20, 0x0, 0x4e24, 0x0, 0xa, 0x80, 0x60, 0x84, r10, r11}, {0xd86a, 0x5, 0xf6, 0x5, 0x4, 0x0, 0xfffffffffffffffa, 0x796917f}, {0xfffffffffffff0f9, 0xffffffffffffffff, 0x7fff, 0x8}, 0x20, 0x6e6bba, 0x1, 0x0, 0x0, 0x2}, {{@in=@dev={0xac, 0x14, 0x14, 0xe}, 0x4d3, 0x3c}, 0x5, @in6=@local, 0x3500, 0x0, 0x2, 0x3, 0x7a, 0x2, 0x7fffffff}}, 0xe8) 00:06:02 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x6) 00:06:02 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x69080000}]}, 0x78) 00:06:02 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x7) 00:06:02 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78000000}]}, 0x78) 00:06:02 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x8) 00:06:02 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f000000}]}, 0x78) 00:06:03 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:06:03 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x9) 00:06:03 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffffff}]}, 0x78) 00:06:03 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f0000000140)=ANY=[], 0xffc1) getsockname$netrom(r5, &(0x7f0000000000)={{0x3, @null}, [@remote, @netrom, @default, @bcast, @bcast, @remote, @null, @rose]}, &(0x7f00000000c0)=0x48) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r6, 0x0, 0x3979, 0x0) 00:06:03 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r2, 0x0, 0x3979, 0xc00000000000000) 00:06:03 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r1, 0xc080661a, &(0x7f0000000000)={{0x1, 0x0, @identifier="d387bf5944272076d035b81dfe503246"}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r5, 0x0, r4) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f0000000180)={@val={0x0, 0xf5}, @val={0x0, 0x0, 0x0, 0x8}, @x25={0x0, 0x6, 0x23, "be6a4863dbcc2550cc72f77cea228050855bbdbe16778d2163f7895506f8c27378dc21b0cefcd1c4563080a1fd6ab02f5c07530477078121ed2c597c67de93c72c697d661e0919d54b2a0d60c4a6903fde923ebd87c91714cf5be52d34f80e2be052c1bd733e37235013c66971427699450dce04c4496ca7d7a6a5927cfcc09ef3d7386065270078936be6d90af8530dd07754cabd41d54e4d5ff00acbe0f1a0f5baa7d80ed25a2d4fa79d857952ac5882dfcacdcc410d5f7f1259000f2d5676c0f69cf6afae815a"}}, 0xd9) r6 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) shmctl$SHM_LOCK(r6, 0xb) shmctl$IPC_INFO(r6, 0x3, &(0x7f0000000100)) 00:06:04 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0xa) 00:06:04 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9b000000}]}, 0x78) 00:06:04 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0xb) 00:06:04 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff80}]}, 0x78) 00:06:04 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0000000000000}]}, 0x78) 00:06:04 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0xc) 00:06:05 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) r4 = accept$nfc_llcp(r3, &(0x7f0000000180), &(0x7f0000000100)=0x60) ioctl$FS_IOC_GETFSLABEL(r4, 0x81009431, &(0x7f0000000200)) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r3, 0xc01864ba, &(0x7f0000000040)={0xe7f, 0x4e72, 0xfff}) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="82508b7b27ad8af9ac000000f500000000000000000000ffff001e000000000000ffffffffffff0000000000"], 0x2c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/sequencer\x00', 0xc0000, 0x0) setsockopt$PNPIPE_INITSTATE(r8, 0x113, 0x4, &(0x7f0000000600), 0x4) fcntl$dupfd(r7, 0x0, r6) ioctl$FIBMAP(r6, 0x1, &(0x7f0000000340)=0x1) connect$x25(r3, &(0x7f0000000300)={0x9, @null=' \x00'}, 0x12) 00:06:05 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0xd) 00:06:05 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}]}, 0x78) 00:06:05 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r6, 0x0, r5) r7 = accept$unix(r6, &(0x7f0000000000), &(0x7f00000000c0)=0x6e) write$binfmt_misc(r7, &(0x7f0000000100)={'syz1', "de4b2716a982ccdde24854c4cc3acf027054b9625192256fb3ae6ab9cccfec47a7d2ae41a29f19c6ef42ed74a968ae4d1b3226eaf5112b49cd"}, 0x3d) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) r9 = socket$inet_udp(0x2, 0x2, 0x0) close(r9) splice(r8, 0x0, r9, 0x0, 0x4ffe0, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r8, 0x84, 0x8, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r10 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r10, 0x0, 0x3979, 0x0) 00:06:05 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r2, 0x0, 0x3979, 0xd00000000000000) 00:06:05 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="0000003af784c400080000000000ffff001b060000007c00ffffffffffff0000f51844f75deccd97930bb890"], 0x2c) 00:06:05 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180000000000000}]}, 0x78) 00:06:05 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0xe) 00:06:05 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0xf) 00:06:05 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}]}, 0x78) 00:06:05 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x10) 00:06:05 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000}]}, 0x78) 00:06:06 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000}]}, 0x78) 00:06:06 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x11) 00:06:06 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) r6 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCCONS(r6, 0x541d) splice(r0, 0x0, r5, 0x0, 0x3979, 0x0) 00:06:06 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r2, 0x0, 0x3979, 0xe00000000000000) 00:06:06 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000100)=@usbdevfs_driver={0x6, 0xf2, &(0x7f0000000040)="ef7f459d8cb2d7680810f0d8eb2580016ccb7e7b2494ca4901d58eb466df4b7830d824d483bd73c70534eca381ec4090a1f9d002d5191b24ca6da836de12"}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:06:06 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r2 = dup2(r1, r1) r3 = accept4$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @initdev}, &(0x7f0000000100)=0x10, 0x80000) ioctl$sock_bt_cmtp_CMTPCONNADD(r2, 0x400443c8, &(0x7f0000000180)={r3, 0x5}) write$tun(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000f500000000080000000000ffff001e000050487f450300000000ffe8ffffffff000000000000ffffff"], 0x2c) getsockopt$IP_SET_OP_VERSION(r1, 0x1, 0x53, &(0x7f00000001c0), &(0x7f0000000200)=0x8) 00:06:06 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x12) 00:06:06 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900000000000000}]}, 0x78) 00:06:07 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x13) 00:06:07 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00000000000000}]}, 0x78) 00:06:07 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00000000000000}]}, 0x78) 00:06:07 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x14) 00:06:07 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x15) 00:06:07 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd00000000000000}]}, 0x78) 00:06:07 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="548a4f3955424ced1b5d50", @ANYRESOCT], 0x1a) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f0000000140)=ANY=[], 0xffc1) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r5, 0x84, 0x15, &(0x7f0000000000)={0x71}, 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r6, 0x0, 0x3979, 0x0) 00:06:07 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r2, 0x0, 0x3979, 0xf00000000000000) 00:06:08 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_triestat\x00') ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r1, 0x40505330, &(0x7f0000000180)={{0x2, 0xe0}, {0x6, 0x7}, 0x4, 0x4, 0x8}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000100)={0x0, @dev={0xac, 0x14, 0x14, 0x22}, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xc) write$tun(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000f500000000000000000000000000000000ffffffffffff000000000000ff2200000000010000000000"], 0x2c) 00:06:08 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00000000000000}]}, 0x78) 00:06:08 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x16) 00:06:08 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000040)={@val={0x0, 0xf5}, @val={0x0, 0x57a17137cc9be640, 0x7ff, 0x8000, 0xff80, 0x7f}, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast, 0x2}, {@current, @random="a3c70ed932c3"}}}, 0x2c) 00:06:08 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf00000000000000}]}, 0x78) 00:06:08 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x17) 00:06:08 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x18) 00:06:08 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1800000000000000}]}, 0x78) 00:06:08 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r2, 0x0, 0x3979, 0x1000000000000000) 00:06:08 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup3(r3, r2, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f0000000140)=ANY=[], 0xffc1) syz_kvm_setup_cpu$x86(r1, r5, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="baf80c66b87400578966efbafc0cb80000ef0fb7a00000df8700000f01d10f01cb0fc7b94761baf80c66b88106398166efbafc0cb000ee0f320f30f741a35d5d", 0x40}], 0x1, 0x62, &(0x7f0000000100)=[@cstype3={0x5, 0xd}, @dstype0={0x6, 0xa}], 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000180)={'filter\x00', 0x7, 0x4, 0x3c8, 0x110, 0x1f8, 0x1f8, 0x2e0, 0x2e0, 0x2e0, 0x4, &(0x7f0000000000), {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @empty, @empty, @multicast1, 0xf, 0x1}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x418) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r6, 0x0, 0x3979, 0x0) 00:06:08 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x19) 00:06:08 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a00000000000000}]}, 0x78) 00:06:09 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="000000f500000000000000000000ffff001e000000000000ffffffffffff000000000000ffffffffffff0000b52b96cce8b5726b48975146460f1be8a272c62594b7608cc70ba6ebb455767b7f34279d36b9ac231c4541b8ddb7acdee91b6344f2092ac31efaa7d46439693c772cb7dcccf0795967e55bc27c978f52ae1e6d075596a9681cf7ddc74b8f6819f63dcc69c169b1a85b66a57e33a37b39db205b2c24a33db850c6dcab27f2ca50a48fb52ada6a96131f0c1faaa3884f2b38f2dd65d94e11d85d376192dc911e573d2226b089e619a7227102428c9b477fb8cf67f0"], 0x2c) io_setup(0x1f, &(0x7f0000000040)) r2 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x3f, 0x20500) ioctl$KDSETLED(r2, 0x4b32, 0x57) r3 = eventfd(0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000100)={0x1, r3}) 00:06:09 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x1a) 00:06:09 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b00000000000000}]}, 0x78) 00:06:09 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="000000f500000000080000000000ffff001e000000000000ffffffffffff000000000000ffffffffffff00007f7851e552efa1e2d3bf69cba21ddf3ae70ce321ad27599f373e9ac9"], 0x2c) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000000, 0x100010, r1, 0xf7038000) 00:06:09 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r2, 0x0, 0x3979, 0x1500000000000000) 00:06:09 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r6) openat$zero(0xffffffffffffff9c, &(0x7f0000000200)='/dev/zero\x00', 0x400, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r7, &(0x7f0000000140)=ANY=[], 0xffc1) syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x100, 0x20200) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r8, &(0x7f0000000140)=ANY=[], 0xffc1) getsockname$packet(r8, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000280)=0xb) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = fcntl$dupfd(r11, 0x0, r10) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) getpeername$packet(r12, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newneigh={0x94, 0x1c, 0x300, 0x70bd2d, 0x25dfdbfd, {0x7, 0x0, 0x0, r13, 0x20, 0x4, 0xa}, [@NDA_LINK_NETNSID={0x8, 0xa, 0x415f}, @NDA_SRC_VNI={0x8, 0xb, 0x71c}, @NDA_VNI={0x8, 0x7, 0xfffffffd}, @NDA_DST_IPV6={0x14, 0x1, @rand_addr="b53d403f2ed74887ccb3673777fec986"}, @NDA_CACHEINFO={0x14, 0x3, {0x80000001, 0x101, 0x344, 0x40}}, @NDA_PORT={0x6, 0x6, 0x4e21}, @NDA_CACHEINFO={0x14, 0x3, {0x7f, 0x0, 0x9, 0x3f}}, @NDA_CACHEINFO={0x14, 0x3, {0xd3, 0x1ff, 0x9}}, @NDA_MASTER={0x8, 0x9, 0x70b}]}, 0x94}}, 0x200408c0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@gettfilter={0x3c, 0x2e, 0x8, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, {0x11, 0x7}, {0xb, 0xfff2}, {0xf, 0xfff1}}, [{0x8}, {0x8, 0xb, 0x3f}, {0x8, 0xb, 0x20}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000004}, 0x8001) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r14 = syz_open_dev$tty20(0xc, 0x4, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r16, 0x0, r15) r17 = getpgid(0xffffffffffffffff) fcntl$setownex(r15, 0xf, &(0x7f0000000000)={0x1, r17}) splice(r0, 0x0, r14, 0x0, 0x3979, 0x0) 00:06:09 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c00000000000000}]}, 0x78) 00:06:09 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) accept$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000000c0)=0x1c) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r5, 0x0, 0x3979, 0x0) memfd_create(&(0x7f0000000000)='GPLselfnodevsystem$securityeth1nodev\x00', 0x8) 00:06:09 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x1b) 00:06:10 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00000000000000}]}, 0x78) 00:06:10 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x1c) 00:06:10 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x1d) 00:06:11 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$PPPIOCSCOMPRESS(r3, 0x4010744d) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) splice(r5, 0x0, r6, 0x0, 0x4ffe0, 0x0) ioctl$sock_x25_SIOCDELRT(r5, 0x890c, &(0x7f00000002c0)={@null=' \x00', 0x6, 'veth1_to_batadv\x00'}) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r7, &(0x7f0000000140)=ANY=[], 0xffc1) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r7, 0xc1205531, &(0x7f0000000180)={0x8, 0x4, 0x33, 0x7fffffff, [], [], [], 0x2880, 0x4, 0x1f, 0xffffffff, "92182ca41a3c396958dcd929a68ec4e3"}) r8 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x7fff, 0x180800) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r8, 0xc0505510, &(0x7f0000000480)={0x1f, 0x2, 0x7fff, 0x1, &(0x7f0000000400)=[{}, {}]}) write$tun(r0, &(0x7f0000000100)={@val={0x0, 0xf5}, @val={0x0, 0x0, 0x0, 0x3}, @x25={0x0, 0xf0, 0xf7, "414a8dab7ae6db13110faddc4187c7131bf25ed02081ba3c2f22bfcde34dfdf91d2dbb"}}, 0x34) 00:06:11 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d00000000000000}]}, 0x78) 00:06:11 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r2, 0x0, 0x3979, 0x1800000000000000) 00:06:11 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x1e) 00:06:11 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="1b5d544f72f2f1580f198190184d8db69322aa4aaeee035b653b86b94c89e64272755648e73998c8c089c7030c37e79ed7f1d46c7d4c5331994a3b0c572ce82b78f0ce124e8f8c66c98032caf85a42729106ed00000100bca57e77f8d744a48750", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r5 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x202800, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r5, 0x65, 0x4, &(0x7f0000000040), &(0x7f00000000c0)=0x4) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r6, 0x0, 0x3979, 0x0) 00:06:11 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvme-fabrics\x00', 0x511080, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'veth1_macvtap\x00', 0x8000}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val={0x0, 0x0, 0x0, 0x8}, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:06:11 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x21) 00:06:11 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6908000000000000}]}, 0x78) 00:06:11 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x22) 00:06:11 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7800000000000000}]}, 0x78) 00:06:11 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x23) 00:06:11 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f00000000000000}]}, 0x78) 00:06:12 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="000000f5270e3b725e8a00000000000000000000ffff001e000000000000ffffffffffff000000000000ffffffffffff0000"], 0x2c) 00:06:12 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x24) 00:06:12 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffffff00000000}]}, 0x78) 00:06:12 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r2, 0x0, 0x3979, 0x1a00000000000000) 00:06:12 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) splice(r5, 0x0, r6, 0x0, 0x4ffe0, 0x0) ioctl$TCSETAW(r5, 0x5407, &(0x7f0000000000)={0x4ad1, 0x6f73, 0x6b, 0xe2, 0x16, "ac840b0953a6c3d3"}) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) r8 = socket$inet_udp(0x2, 0x2, 0x0) close(r8) splice(r7, 0x0, r8, 0x0, 0x4ffe0, 0x0) write$binfmt_elf64(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT=r8], 0x28) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r9 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r9, 0x0, 0x3979, 0x0) 00:06:12 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0xffc1) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f0000000140)={'macsec0\x00', {0x7, 0x0, @dev={0xac, 0x14, 0x14, 0x2f}}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val={0x0, 0x0, 0x0, 0x8}, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @random="f4402ae0681b"}, {@broadcast, @broadcast}}}, 0x2c) 00:06:12 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9b00000000000000}]}, 0x78) 00:06:12 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x25) 00:06:12 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x26) 00:06:12 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]}, 0x78) 00:06:12 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x27) 00:06:12 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}]}, 0x78) 00:06:13 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, r1) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @current}, {@current, @random="3cbc5dd9b870"}}}, 0x2c) 00:06:13 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}]}, 0x78) 00:06:13 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x28) 00:06:13 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r2, 0x0, 0x3979, 0x1b00000000000000) 00:06:13 executing program 3: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x1) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d59", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r5, 0x0, 0x3979, 0x0) 00:06:13 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="01082725f51caf4134c93371288d6a57cdb8a1ff2fb2c5db3b2b97e854b355847cd98c8dc5af16e8251f0bdfcec2171820ebbccf0ed2261292e608f953df360cbb9afeff09052388e7a57a8cb10a656cb636fe558b83f74300"], 0x61) 00:06:13 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}]}, 0x78) 00:06:13 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x29) 00:06:14 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x2a) 00:06:14 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}]}, 0x78) 00:06:14 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x2b) 00:06:14 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}]}, 0x78) 00:06:14 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}]}, 0x78) 00:06:14 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x2c) 00:06:14 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r2, 0x0, 0x3979, 0x7f00000000000000) 00:06:14 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000000180)={0x3, 0x1, "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"}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f0000000140)=ANY=[], 0xffc1) ioctl$USBDEVFS_DISCSIGNAL(r5, 0x8010550e, &(0x7f0000000040)={0x84, &(0x7f0000000000)="61b46c8e74eff0e2f1a300304493a956381c5a26cbb9cccc47abdfbaaf05fc4bf41101869bcea80d657116d449"}) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r6, 0x0, 0x3979, 0x0) 00:06:14 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x2d) 00:06:15 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x2e) 00:06:15 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}]}, 0x78) 00:06:15 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) r4 = accept(r2, &(0x7f0000000180)=@xdp, &(0x7f0000000040)=0x80) r5 = open$dir(&(0x7f00000001c0)='./file0\x00', 0x40042, 0x0) fstat(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r6) r7 = open$dir(&(0x7f00000001c0)='./file0\x00', 0x40042, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) write$binfmt_aout(r3, &(0x7f0000001380)={{0xcc, 0x7, 0x4, 0x340, 0x36f, 0x81, 0x86, 0x7}, "042798e4f262dc70f4b8b0cdd85375309a084f26f5236ecb53419f11bed489339d3ddf63ee3cb783a01c7b2d8940b410423e97c29e148f1c03ff054841ef0cea05a4d6f51c3c98a47b77cf006a8957ad7b164abc146a236daa8360496329080b6f5f368e01b1e90d139456271f6f0de3a28c59be8e5e4c89bd09a26e259f22d95b283b93957183f946afbb32dd7449e23dd490becaced381b671968fe578a33a887e41d5ad90ad2e27b4b8d3ee7a57e5a1ef9754508dcfdb5b073897864d5f89df61d823", [[], [], [], [], [], [], [], [], []]}, 0x9e4) r9 = socket$inet_udp(0x2, 0x2, 0x0) close(r9) splice(r8, 0x0, r9, 0x0, 0x4ffe0, 0x0) bind$inet6(r8, &(0x7f0000001300)={0xa, 0x4e24, 0x2, @empty, 0x3}, 0x1c) fstat(r7, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r10) sendmsg$nl_generic(r4, &(0x7f00000012c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001280)={&(0x7f0000000200)={0x1060, 0x26, 0x2, 0x70bd2c, 0x25dfdbfd, {0x1}, [@typed={0x8, 0x2d, 0x0, 0x0, @uid=r6}, @typed={0xc, 0x1f, 0x0, 0x0, @u64=0x3}, @nested={0x1036, 0x36, 0x0, 0x1, [@typed={0x8, 0x7e, 0x0, 0x0, @u32=0x9}, @generic="d0ee", @generic="a3cbb7fd1d9523e826326ace38ba4043a3b71068373fda9f006a3842fe9b4dc8d149d001598e5c84aaf889ad868a4f9ec61c2dbfd8edd3024f8da5f4ef1d144cf0a12629314b2035dd5abf50af0e20a47ac8348752114e784d443689657691496a583fcd3498e644847ff33bf20601217e13dc32c7a3732d1f3957517af57dd14477ef9e728c6a551eb5670b9daea583f72a4d5e3dba6447807bc8beaed0211b7f6b8973bb60416132b414a4d68c5a0d0aebd65317b64d04567de47b61c15a0f8b97cdf0de14304d09819fb9478828e7eeac15435fd1b74abfbc14f82c49a08f7a25dfcdec93be91fdd16963c8642a3d2c478e52f0127951a3b94ba87b1b00c46b14796b093712e15e6e05cbabd74809cd3d294af13b5a36654a804c099d2895209fb877088bd1a6d1e543f3b6f150605348a92e3cc53905ed8a11af7162a67f5f714fc858553f463815366d22b775e83acc1a5767415e6e1a92335d7cde629f5b5862c485cd43de53dadf30b186a8d45f2a9fcba45564b1e6cf952def3662d385a5fb3b18dd4cd1ba223f5d537c1ced3063acc89cb216b71475e99dc5ddeb51c71e46572271bc33aa96da5cbc95f4370fa26ef56e76cf61005415d5dcba67d0e88a0b9e3f4f48120172015664c0e82ba64d8c46a213ccd9a4827a89000484f8b2b61c9bf76fa9890950670a8aa67bc544cecb5529f3d17c4aee22afcfbac2297fafbbbd8d3e035cba136fb5ef27c2ecdc93e5355ddec9fcdbc1ac73db53ed2f7bed43aeb04f61ecd94e9e368f04765f33a4c7a2b9a4c233e8d486988bcb0ddc7a9f4ffb4af04627db5ef7377f5f7c5c3a1dccd88d532179613ae624bb580719b3f2c937ed8b2984a185616c18bc2206576cc099035f6d43498c1ddeccff4f7a1e2f2bf85900d90fa9707c1cb83fd428efb265d329ecdf9c5f5f162f7b67c90d8f578cdd13bce7f412d3c698abe582651afca5986970e90a77e11f3fd34ede5e8f4f6fa28e55ba53e0f49008dbdddce5e3c5bcd241b37d674c58c47c4be1912ca395ecffd20d69ea8e0b8d1737a6877b2300145a555bb62905d20f15daabc1fa31cd4286b66a5404315e93f83c29c7cc145603d374db425ad99e8fd0764a364d84a983c34a8d2cd37d7a7af4fc043bdbdb9131a37f679920a9ed47cb802f94f0841271b3357735bf0552374efdb5093a2309f23f0ec342eae1260673528024e771b488d50fa0357fe8660691fc0461d557dd3cbb7347c18ecf22d16b09415242a50fe4c925d4063e298d80d3cf1c60a2c3c75d67be9305c799bb1fee7f5fbf339a3f7abe29683218b195cd38e6f04f04d9a9aef31e712a0287453142760e84debd7cc02b65ad4f3ce45712d1c67c233e892e1b13f8f307a12276217f3e3eb1618bde00d5af8e85378a8bb617f968cfc290505d88b1e9c57d6077a852f523f84f9a695737cc128f61bfdf2eccaacfe3d19c9fc3b1fc86cb5558463370b2a3f9b0571ff44323bced43ccdbf5f3915f76dc9b10f026d71666d055f7047bf880fdee92f82c291229f1a27110f8d171fcf4d8bf4f689aa706f47fae27010608bfde88eadfc67f7e1120fcfd50dbf69a156c007b56e9e6b3d99c104095dae2e5e933ddc39a8bec0ad4349bdd6d5960707fa186e76db29d6de708ee13af260b9fddf8da4212c3a85805bbe02591f29f4dfbbbf951661708124ae1945297ba8991ee0a03f7a3e19b7f48f6cc87e8b24aff9915db4a7e16c38ad2f198c90235ded115f6416db4277514d202b1119f93dabf1266a014f0b229c18f2ae597a0bb317fc3755e1a1c2e714499ddd751260f54377788124b3f02c1a8b51c0643df1f021a892e72210c425106b7d9ac49e84f0e4e8f88dd7514f136f7a024399c905740d5228b1a72870fc3344100f4dbe20f3c217ffc21eea7538184c952f6748025d37d33f726a601d61e05fc0a26dd411f3d30cf8cf3dfeeb33a5ac06bfa9b8d215241d063f1aaff1a3473dfac1a8bbb8ad6e621c50f6ef43d0b54a3f4de882438da8f047025995821e715a2a70d404bfd23c1a8181ce33452d26b9aef9c072c04451f72e32cadd93c27a847cacafb5829b68df3c461e0345e54e341d7c5ef5853bb8c52dbbbeb2e483b9890111a2549d505fa31b7b909cb1be50819999c6c318e12397e4601e08eafdc91f3a7dc7b64d9a122cfc84e08c8104de26f9b641d83698663bc55468f0b6b686ff7f2015e55b1e57e3dc7b7a03d1f3b440e59fc236b688d4cfff113bb76e9a1c57cd8aec552a851a9a4e51b6acf10c1acf9bf606c8435045f19ce968b46de1f94132b12d6a34dd0a2600593c569b2d2a4d152626c10b1d2e12980e312d431d6f7480438d59080b2b1b7adfe019b25f14adab002118f368257e40f57089a1d5034454665ee80f5aad684dd307501f3c9ee09225534425106e3a03102fbaab3d0e48c96edece2239f5a8c735e8297c0ef0144580a60d53b0e9fc1d087fc6b21682817dcb43348b8c33b2dd8c2289dccb523a07f25c94b5475e3f30cf9cccd7474ebc3fabf2d5fd0dc0df5789767f797c1277388fa7435ee6b8f2cd2bff2e9648f95d83c224dcfce681f7898a0c5a5cff53b6090bb03943382fa757f356bc8b2330d46bf6a9cb64527a0b3a005046ea0aa30f0616f4f808427141e03ff389840545a89d010877bd96d7be82c19d68d0786d4b01a6ef2f6a56759d0d326a008bbb98a7e7d9b4abc1fff626906f5f7040a28761b81a0c92dd156d53dd11f86115e5a324bcf8be421cc58025306fdfe5b1ca219863cbae6145373ddcdaa84324b20f9c5f8300097548082d6709310f0aee50e905086317a0d356570bd7d1d5e9dcc33cfad5ee3c5eaac222f64d03e7b3a76750c1df664d86c2248c8ac53711b4a85e158caaec070c76f161dfb0ff02e1ea0e00eda5f02ec32a4f04ef1212671a31f3f08f13e84539dec7b5e538eb2f4503e48d16c9e2b7ba08b5bbafb3483ce0de168864c7bb504d99a2eb4b22e880187adbb4da7e32c9c2ac87ea6e7b48094b34a329ed8ccdcd42922a7f7dc6d0bc849e523c4f5eeee94f0023c29d12fbb2541f5767ec7b178c3a3db24a520887363bf4300c7e37ba106b34a6cff537dc26ce0a5d0a54fca47f3727f7afbba593cef96d20a53f2ac3b101a252c72d0e99144dc7ab0b64499135e33e5f6d4e26170eee51dc4ca175b9c11492761ab5653a6e42285dc5695895cc2fbc0e61c1dbc7fb8838e170e7fb07073fc6c03063fbcd9d9998aaaba5282e4e5ce16f8cda5dcc8730f1373eb7b20e302c2cd53b74ffe0b9ae1ee846ca5c74ce510d2ff7dc150a4be3193208461fc9e5a8eac8b3d2eda8a1e15b86760ad21d1733364c68893be5c219ac3040905714401594e7d21c0acfa5675fb987e4867118b6d06d6731f7e1c782b7571a626d24012c294b1d3c99c5ff52dd97bfc00183bbd635922b5c171f461f53730d70e82b50df726d6992456f33b16f35147874e18574bdaea1f9f5881300d8ad6c007bf19c8789a9498feba92d530eb2d93240334b7e987a1149eeac01f4b634f61d0b28b09039b3ec6a7090179a99ea84348b3a65930498acbb24c4baaef4bfcf8d835528a93519524ee3d429116ddc163dd0b94923f556e570c3dba34f63ba331f70d69f93842f3c6782a0e139308d96b1b7bb8378344a3c34b5fefba80f07fd4f3d7425a1a7542bdfbdeae418a6563cee344c28806b0dcf00e6d56c4948ac5845611f93d957c2d73db05daa7a67c1bcfb7c5e20c71706b7930b0db18f6550a73de4a54432f5e54c89545f0c0976b7d63e4aa26defe3ef205627c90af3475aae89a2b93dc49be141de9454002425dbd7d52c4878ea725da89c8ad577be9d141f82ab3ea4220ca81d1d31fec357b3f28ae8ce49343ea1f9170060a83dbbb53af2382129724ba25b173435a100114c2e2161249762fe528415f4e1b6dc1bda9668cbfeab959a39c48dd4975b82b4fbff14bc21f29c50a0d4c4f7d2b2cd9642131b40f191bafb86bc73f409e8197afa7f2e8cb0a6b9dde2e16d627e818f33158d3f0c7b88c015fe5eff916f144123f5c46145e50993d1a019260797b9732d0a174e37e54b8bff50ab71bace747f04e3f4517073bf6c8538e49d34fa478e9ba1a6797f09ac8a4d9c427bb783c4bbc077ac2b03a2b2f64162fdb15183a032253b8efdf5f8304b48a8a7b21e0ec9aa5689bd557096b9ec7411047a7dc4667dbc54666c3ef97c5e0dc25479b36c203cc77825089603b3e5849f73ea050f09718aaede54f81cdf656d79cf35a0d6600b0b5374faf3bbdd0fb7edcda73e438bb06394599f199c7566d56bbc165b5425783b40ef1eddbd74105348dbce736cba6c5b6267ff80adce8a15f9ea64b0a10015cc491b556b744d104365a80662a01bdcdfbfe08c29b56136f381df5bedf2962c292d99c1ca36d11bc4be9b0a245629b335e3b541e49b1da2d8eaf25809dbc0cae10920451ee13e6f7146461c358671b3e2cf2713c2471342f0a4655c1fd5db70cf294858212a8d24be87d87731a67f6cbac864fb5877c864ada58ecd7f4c67c8e88b786d323220c0b65667b898e37b12f302e202c6902a834446e8323adb6ed0e57e1161d89d1a33651489f784c11dbfa2281f52ed4b47f6eb69ebfd3e641b02f832850cafaa8acf595caa255d79d1635265f1fe9dbcf991ab992fac3b9243bfe63f6c3ecb52055fe93314589130cbd4054f6071ba1c61a62d0b55f900723002105dfd50cdc9e1fd2c1f10fad568debbcb073b537694e698b2ae8cdc4c13a03d190dd151a0c1186f897797c44da4cea1f6cf9665b065dc7b45993c7fa17fe8eebf34f87173d7376e43bdbffa3acca9570cf4146146b0ac29e63dba4a262dafecae51eda3c47900e135e211d7caa1551e864c5844d3a9eaa3131d8769e645f7a3628f39aae0521baa04b6cb965528cf94d30fc9a0527dbe102151c822770d527006f7645286760cbfbc38d42d2c726a0a828be7806b851757dfb780317b497cee375e432305a0419959d91b4d70de96304e77307b04dfe5c367f10eb824172437fd1fcb728557a97db2a013ad70a20ff0045cabab2837a013124dacc7b4c17d935c3a47f6856df1e63590e56af809f3bab0feb2f57dad3f5f76fb44c1c13573ea1f30023f0f4394ae768055bb1fd7c403c172aceaee2637fddb459df318631cf9f2e5de742324863fb42157bfdc5bec44411734892f32615d583e12709b3ad2759028498fd593c0ff9f8e442cea31fa7f9c9ede176935bff463054dffca50dd7e4c200e128ba4b5bf51be27abc000093d8717c11e45fe04f485070ed57225e3a09e0354e88180dd3f56676e0da8f8c1454f2e0b36a999c90d542184f3f307e32923cae408baf8a9d5dfa82eb1e7fab637b69c599baade04ef3ee8968a89e8a78ecbb6e462bd35a09c29dfa9a79baf3a174adf128202bfdaedb49ad24e78df72f56e25be8438427b15279c353188c2811fbb7b8d3541cd64ed40118e23cf030cebfd460b529ff86c88ac1110923ba298c640013eafec08e53037962c914d6387ba433da1684cf3861130ef9e2f33e44722495367888084daa34b1a1a58221c6e0ca24e77f243013f8d6c7928f7d979f6ad7cdb7bb014cc2c739e1c5a80309a6f137d7de08ed871a5396c0ad98ba48902c44dd295ce8868100b589e2dc92bb8eec8627f9944f57d5c58a2450149921b7cf094b264ab993dbab37d10b1842b58d57f972cd1cfafba7afeef75f95fa5582679758c1fb7b2a5abcce357021507df9e1", @typed={0x8, 0x62, 0x0, 0x0, @u32=0xfffffff8}, @typed={0x4, 0x2d}, @typed={0x8, 0x3d, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x57, 0x0, 0x0, @uid=r10}, @typed={0xc, 0x8a, 0x0, 0x0, @u64=0x96}]}]}, 0x1060}, 0x1, 0x0, 0x0, 0x800}, 0x20000090) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r11 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = fcntl$dupfd(r13, 0x0, r12) ioctl$PERF_EVENT_IOC_ENABLE(r14, 0x8912, 0x400200) ioctl$TIOCGPGRP(r14, 0x540f, &(0x7f0000001d80)=0x0) timer_create(0x1, &(0x7f0000001dc0)={0x0, 0x31, 0x2, @tid=r15}, &(0x7f0000001e00)) ioctl$sock_inet_SIOCSIFADDR(r11, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000f500000000080000000000ffffffffffff000000000000ffffffffffff00"/44], 0x2c) syz_open_dev$mice(&(0x7f0000001340)='/dev/input/mice\x00', 0x0, 0x40) 00:06:15 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val={0x0, 0x0, 0x0, 0x8, 0x0, 0x800}, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast, 0x5}, {@current, @broadcast}}}, 0x2c) 00:06:15 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}]}, 0x78) 00:06:15 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x2f) 00:06:15 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18}]}, 0x78) 00:06:15 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x30) 00:06:15 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$SNDRV_PCM_IOCTL_PAUSE(0xffffffffffffffff, 0x40044145, &(0x7f0000000000)=0x6) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040)='NLBL_CIPSOv4\x00') r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r5, 0x0, 0x3979, 0x0) 00:06:15 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r2, 0x0, 0x3979, 0x80ffffff00000000) 00:06:15 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a}]}, 0x78) 00:06:15 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x31) 00:06:15 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b}]}, 0x78) 00:06:15 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x32) 00:06:16 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c}]}, 0x78) 00:06:16 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) r1 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) r2 = dup(r1) execveat(r2, &(0x7f0000000000)='\x00', 0xfffffffffffffffd, 0x0, 0x1000) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="000000f5000000fe0816000000b10f660900ffff001e00000000000000ffffffff0b726193fa80ea58a7cbabba66bf6024956aec3221b78db61b756c578cfd139b1308ba9d2e7391f11037ffbfbb9286afdadc2429af571d0fb008b9492910509226aee9c5057808770f8abb9779b2450075c194fa8dff03a0218d426b4b776d8365dc0f563f3ebe18b64b409680c9d677fb0d9f"], 0x2c) 00:06:16 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x26440, 0x0) setsockopt$RXRPC_SECURITY_KEY(r2, 0x110, 0x1, &(0x7f0000000100)='syzkaller1\x00', 0xb) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180)='NLBL_MGMT\x00') pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0xffc1) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000300)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICLIST(r4, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r5, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}]}, 0x1c}}, 0x8c0) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)={0x5c, r3, 0x5104c8a583a8f120, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @loopback}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000800) sendmsg$NLBL_MGMT_C_LISTDEF(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x74, r3, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @remote}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, [], 0x25}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast1}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000001}, 0x41) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:06:16 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x33) 00:06:16 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d}]}, 0x78) 00:06:16 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = fcntl$dupfd(r6, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) getsockname$ax25(r7, &(0x7f0000000000)={{0x3, @bcast}, [@default, @rose, @default, @netrom, @rose, @rose, @null, @rose]}, &(0x7f00000000c0)=0x48) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r8 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r8, 0x0, 0x3979, 0x0) 00:06:16 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r2, 0x0, 0x3979, 0x9b00000000000000) 00:06:16 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x34) 00:06:16 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78}]}, 0x78) 00:06:16 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x35) 00:06:16 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9b}]}, 0x78) 00:06:17 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x36) 00:06:17 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x37) 00:06:17 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x38) 00:06:17 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0}]}, 0x78) 00:06:17 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, r4, 0x0, 0x4ffe0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) getsockname$packet(r7, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc}]}]}]}, 0x34}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)={'batadv0\x00', r8}) r9 = socket$inet6(0xa, 0x2, 0x0) r10 = dup3(r9, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r11 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r11, 0x0, 0x3979, 0x0) 00:06:17 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r2, 0x0, 0x3979, 0xffff000000000000) 00:06:17 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000f5000000001e000000000000ffffffffffff000000000000ffffffffffff0000"], 0x2c) 00:06:17 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0xffc1) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:06:18 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x39) 00:06:18 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180}]}, 0x78) 00:06:18 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x3a) 00:06:18 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700}]}, 0x78) 00:06:18 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x869}]}, 0x78) 00:06:18 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x3b) 00:06:18 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900}]}, 0x78) 00:06:18 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x3c) 00:06:18 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x400080, 0x0) ioctl$TIOCOUTQ(r2, 0x5411, &(0x7f0000000040)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = dup3(r4, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r6, 0x0, 0x3979, 0x0) 00:06:18 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) syz_open_dev$tty20(0xc, 0x4, 0x0) 00:06:19 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00}]}, 0x78) 00:06:19 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x60}, 0x1, 0x0, 0x0, 0x40010}, 0x4000000) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val={0x1}, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:06:19 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val={0x0, 0x0, 0x0, 0x8, 0x0, 0x1}, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:06:19 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x3d) 00:06:19 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00}]}, 0x78) 00:06:19 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x3e) 00:06:19 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd00}]}, 0x78) 00:06:19 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup3(r3, r2, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e21, 0x3, @ipv4={[], [], @multicast2}, 0x891}}, 0x9, 0xfffc}, &(0x7f0000000000)=0x90) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x8, 0x20000) ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f00000000c0)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="81daf2fd6fff4f8ea39f351b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) splice(r0, 0x0, r6, 0x0, 0x3979, 0x0) 00:06:19 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="1bde01db701a5cb9c9263695f0af023b7d55b7f277e94e54fb7c9d801e1445b3ce937d757bce949a8fe25efd2b848c665fead1f5305b2082751e4e42f7dfeca5487f402060d55763db7c3a64000000000000000000000000000000000000000000000000000000e718faa81700000000", @ANYRESOCT], 0x1a) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000180)=0x0) getpgrp(r2) r3 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x6, 0x0) readv(r3, &(0x7f00000029c0)=[{&(0x7f0000000040)=""/221, 0xdd}, {&(0x7f0000001680)=""/4111, 0x100f}], 0x2) getsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f00000001c0)={@ipv4={[], [], @dev}, 0x0}, &(0x7f0000000200)=0x14) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000240)={r4, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x10) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r5, 0x0, 0x3979, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) splice(r6, 0x0, r7, 0x0, 0x4ffe0, 0x0) ioctl$SNDRV_PCM_IOCTL_RESUME(r6, 0x4147, 0x0) 00:06:19 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x41) 00:06:19 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00}]}, 0x78) 00:06:20 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x42) 00:06:20 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf00}]}, 0x78) 00:06:21 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val={0x0, 0x4, 0x0, 0x0, 0x0, 0x7fff}, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:06:21 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x43) 00:06:21 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1800}]}, 0x78) 00:06:21 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0xffc1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, r2, 0x0, 0x2, &(0x7f0000000040)='\x17\x00'}, 0x30) ioctl$PERF_EVENT_IOC_RESET(r3, 0x2403, 0x1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = dup3(r5, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r7 = syz_open_dev$tty20(0xc, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) r9 = socket$inet_udp(0x2, 0x2, 0x0) close(r9) splice(r8, 0x0, r9, 0x0, 0x4ffe0, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) ioctl$KVM_GET_ONE_REG(r10, 0x4010aeab, &(0x7f0000000000)={0x8000, 0x4}) splice(r0, 0x0, r7, 0x0, 0x3979, 0x0) 00:06:21 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240)='nl80211\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="340400002a0627325777600e077386b773b6fab023214016084a52b01769559bea4c286dcf1093d30a987ff8c69a535022050c4ec09ed9a7b1b68ff470be1055bb5086bbc12753d1d6e0249dbba6ed4248b2029e8e04f188d560334979354096afe852599629f465f1304ff0fe3d804431ebb304c7ffe4e414aeb61adaffaab090363ac0ffe2f92086e4ac", @ANYRES16=r5, @ANYBLOB="00042bbd70e7fefdffffff0000000600f70001e000000600f7000507000008007700070000000400ec000400ec00"], 0x3}, 0x1, 0x0, 0x0, 0x4000}, 0x8800) r6 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) r8 = socket$inet_udp(0x2, 0x2, 0x0) close(r8) splice(r7, 0x0, r8, 0x0, 0x4ffe0, 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r7, 0x84, 0x16, &(0x7f0000000280)={0xa, [0x8000, 0xfff9, 0x2, 0x2, 0x5, 0x7fff, 0x101, 0x5, 0x482, 0x6]}, 0x18) r9 = syz_open_dev$radio(&(0x7f0000000400)='/dev/radio#\x00', 0x3, 0x2) ioctl$VIDIOC_ENUMAUDOUT(r9, 0xc0345642, &(0x7f0000000440)={0xffff, "3096d27e61dd39f645edd2a129e936204a39f85affc4a671cd43e4e926bd8bca", 0x0, 0x1}) ioctl$CAPI_SET_FLAGS(r6, 0x80044324, &(0x7f0000000000)=0x1) splice(r0, 0x0, r2, 0x0, 0x3979, 0x0) ioctl$DRM_IOCTL_MODE_SETGAMMA(r0, 0xc02064a5, &(0x7f0000000540)={0x8, 0x3, &(0x7f0000000480)=[0xf073, 0x2, 0x508], &(0x7f00000004c0)=[0x6, 0x1], &(0x7f0000000500)=[0x19e2, 0x3ff, 0x3f, 0x6bab]}) ioctl$TIOCGSERIAL(r0, 0x541e, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/182}) 00:06:21 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$IPSET_CMD_GET_BYNAME(r4, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="380000000e060500000000000000000003000b0505000100070000000900020073797a3200000000050001000700000005000100070000008483aac2cbea20f62c4bf98a41bdf619d65efe91e06a4c22420e18f6779bda2399e8"], 0x38}, 0x1, 0x0, 0x0, 0x4004}, 0x4000) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x800, 0x0) ioctl$SIOCNRDECOBS(r5, 0x89e2) 00:06:21 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x44) 00:06:21 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a00}]}, 0x78) 00:06:21 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x45) 00:06:21 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b00}]}, 0x78) 00:06:21 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c00}]}, 0x78) 00:06:21 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x46) 00:06:23 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000f500000000000000000000ffff001e000000000000ffffffffefff000000000000fffffffffdff0000"], 0x2c) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0xffc1) syz_extract_tcp_res$synack(&(0x7f0000000040)={0x41424344}, 0x1, 0x0) syz_extract_tcp_res(&(0x7f0000000100)={0x41424344, 0x41424344}, 0x0, 0x4) write$tun(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="0280ba060100010005004902006d00680000010690780000a3177f0000018810a46d68d4e2c6266471c595caccb74e204e20", @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="01200000907807ff2207215c2679c34ff58fd900220a0e2bc66c1ba2a87e013306e2d4c3d943500631edd925"], 0x77) 00:06:23 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x47) 00:06:23 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}]}, 0x78) 00:06:23 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) getsockopt$inet_opts(r1, 0x0, 0x0, &(0x7f0000000280)=""/175, &(0x7f0000000100)=0xaf) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r2 = socket$netlink(0x10, 0x3, 0xa) syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x2) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r3, 0x800455d1, &(0x7f0000000040)) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, r4, 0x0, 0x4ffe0, 0x0) ioctl$USBDEVFS_GET_SPEED(r3, 0x551f) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="000000f500000000080000004000ffff001e000000000000ffffffffffff000000000000ffffffffffff000041cabbb38e87b32521f2491d7aa522c0dfd5151ced7814455e5f1aa6856d83d53a9f665c77fdf345631577ed18bc011e3409f4d608c2b1ef127a40456170ecbc6ead8ea59afb4507a1677cd0a7d284dbff20693532e19aacb70bd012e7f854b7e418480f8c6018b11337da5ac2e1aa285e2fb8e89538ae00f14923beb35ec62b2d38804610b96ee693fdbe2d7eeef8f97d534ab2fa7845c455dd5c765a6ce857de291ad828cde6bd0a5a725cfd4c9a55"], 0x2c) 00:06:23 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x48) 00:06:23 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x4ffe0, 0x0) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/capi/capi20ncci\x00', 0x200002, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340)='nl80211\x00') sendmsg$NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x38, r5, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0x9}, @NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0x9}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x3, 0x3}}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0xb5c}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000014}, 0x20040840) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, r5, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x85e9, 0xffffffffffffffff}}]}, 0x28}, 0x1, 0x0, 0x0, 0x80080}, 0x40011) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) r8 = dup3(r7, r6, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r9 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r9, 0x0, 0x3979, 0x0) 00:06:23 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d00}]}, 0x78) 00:06:23 executing program 1: pipe(&(0x7f0000000140)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(r0, 0x0, r1, 0x0, 0x4ffe0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xffc1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vxcan1\x00'}) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0xffc1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000200)={{{@in=@dev, @in=@loopback}}, {{@in=@broadcast}, 0x0, @in=@multicast1}}, &(0x7f0000000300)=0xe8) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) splice(r5, 0x0, r2, 0x0, 0x4ffe0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000380)={{{@in=@initdev, @in=@loopback}}, {{@in6=@dev}}}, &(0x7f0000000100)=0xfffffffffffffe26) r7 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) getsockname$packet(r9, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc}]}]}]}, 0x34}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = fcntl$dupfd(r12, 0x0, r11) ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200) getsockopt$inet6_mreq(r13, 0x29, 0x15, &(0x7f0000000580)={@dev}, &(0x7f00000005c0)=0x14) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r15 = dup(r14) getsockname$packet(r15, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) 00:06:23 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x49) 00:06:23 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6908}]}, 0x78) 00:06:23 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x4a) 00:06:23 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7800}]}, 0x78) 00:06:24 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x4ffe0, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r2, 0x891a, &(0x7f0000000040)={'dummy0\x00', {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:06:24 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x4b) 00:06:24 executing program 1: write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="1b5d505c66f3443574d675907ddefd109a94ee100f3e29efa696d25a25824d03000dab1d01944d94013176848c791f3cd572a516174c5e326236960740754106ab0419c583b0552ff259caf54971d3b1e49427c9d35cdbc7b298882651f53e25", @ANYRESOCT], 0x1a) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffecc) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x3979, 0x0) 00:06:24 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'bridge0\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="ff0000f50000000008000000008ceb0000000000ffffffffffff0000"], 0x2c) 00:06:24 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f00}]}, 0x78) 00:06:24 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup3(r3, r2, 0x0) r5 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x6d49bfe, 0x200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r7, 0x0, r6) r8 = getpgid(0xffffffffffffffff) sendmsg$nl_generic(r5, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x107c, 0x16, 0x0, 0x70bd2d, 0x25dfdbfd, {0x18}, [@typed={0x8, 0x26, 0x0, 0x0, @u32=0x3}, @nested={0x105f, 0x7, 0x0, 0x1, [@generic="84b34b8f94a3c813f3783edfab9c6000a39935db63902ef425b3bd77ce7ba11cd334accfd6677942bd1b6aee3224c03180aae5e1ff95c69f64b950493d7940bfe256d17377b496cb5790510e53ab02e1c3bf33905626dddbd46267dca75e6dc7706b5ec625a8fc71dec80936649227607da39bd0bd6ae0a30b3411956509819373394fd4146a236111132d11ad312ca1ad3573fee368d74764bda2f9f305fcec8184e71546b9bc3357699bed111e564c140eb58a88083fd68c97be8f0dbe1da0a5c34f6c6d0c707cbe19f98f2a4255f0265863b8993c6b7002b84e7a816a2971ec21175f45a75bdc8581eb25202ed30cd7dd88d558cca68a382c2e5c28f1c42ba84725553fa5e51e5b443ead4ddd8393253c843b1d17088fac8ae4d8f0d122c369b00d341e6e226f4b5bd25047c238246023b76f6ecc9bcb6d4de90b69a32c06dcf887c251c3559484127bbc7dc63ccc73e42d7accda930e0a4c8e7dec568547664e399bcbc3d82213f0ef50e84d5c1f8780890131bbc9d4770351ab2f977101bdeee10e3141c32d8d31cf0d16aa967cbbcfb74c4412423b98f4432530ab0fa5596a6fba63cd50dd534bb5b4ce86f5a13f9ad99a060df8791e31200e3d1099a0fb1c03acc3d974151ff2f57280ef718a3dfc58c706eebc10fddadb83f7f3a2224c7b879b47ed8825e0178ba9f2f42ff7b8f1c60d3c3b5e78ea1fb02a44a6c2c72f6a1a095d1e276317b8dd581e3b1534658aefb0e7de86f5d827273e6c327debd2033aabf8b8a0eeff3645489d93c84448281d75aa6e7d97a9977280f9e751aa887863ad2540431d3655129f40d885e1992279d8bf8a0312d2893f0daea174c080be74c11d95ee8687482c3a1a4c5728e09c299d2cf9b7fdd5d167becb8969305433505f68aafe87efe2f184cfefc9f1aca3d0e1a4f7e127e7dd7a0d86576a79d28d422e01dbdd9acbe90396d1338cd2648dfac5e140a92440bb275c133b4e650d9d60ff43027fd741286885a06570164397edc016a37d804a30885a7b0183e4c38dd06c312950cd242aec89b423945057bf7a6b041e34ede382117faeefe0b07ca0070cc7f96eb6e2860dc1489af2d7d6e4f5a2129cf4b4fbd548ea163bdbbaf8b5f65cbd575a440fd2b65180c122a34336bbd4e86329a3a64db0c6b2c604b4666088621c064a021995bc92afcdf42988104dbb79cccb7b4965b13a9104032d29be77b87da4a85e5711378ceb323599fd05fa91d926249a116c211d0b3c10c0d9edd0470c4e690359a821af8004aeca530ca2bf2b04766bd4d9ed5b27fbf6a5ea336521a4f98c653a6299f8d3c323dd5d00070f0994e9e7e75a67efed567af3209e28c688b962bc152f0b10aa6f5bd5e6979f91bb0cd7f7da93d3981c11662d0524a51e02dad00ab11a3e9f05117d3eb47ad9157e7464e8c167501c34c3c9edbac67add3854fb88389836df06a3901f4a563b0e19bf728ce803954bd1e13aeef4d991b87c86b213a7f148c8d987c519b7507cfc4b7968571fea55ad4523e36e1fcbd202c171890abb32f7a3bae1bebda52c6dc49d7b7e3522c9bf003971952493a21aaad9a130e23426becf76a73969b7186e5e97049a81867f4fa3bf681d079c38b1f34a7a1424d056b4bfb0d38158e9f7627bb689e6139acb281b97d2af3743b6bac8ff6f22adc0e7792d33addd8fc8630c25aca70c5eef7a7048994784a39bd2c124a4f71b71301494813c457f5b8f4a3b54c040b7388d7dedd699149faf0836f6083cb993c7d9cc17a287e60312d1d6054916e302b8e72c28c4f66f8b50ccf6a9daf05c0f30d1c5fe2150c1962d7bb58c5b1ee2793c435ff4491b54089ebdab557e119896b4b4508835b042f87d85e19aa85cf906fd44304cc3ca5c6c89a688bcad269c468c820c7409d1d9743a2e9a36d621f65f6d8cccb1a5929b923b5eac3834be0c3161bc2f8b089b2b496b0889452d47cd562bb87c11d40b5162321eae752cb6f149a9533cd0d064e10c603e570c9a57741dba72811d6686b587e7b8715a7f81008cffa8565dd8e88bfc374890713394caea6b1272220a3237da064d3f1c8ac95406646f27065b7acfe081a896649a4ac9912cdd5231a0be4c065849609248a3294310e0af2c6edb48def2bcabf6220db32568a0c6283f9e7e8bed4636f8aa43a2493d1a8124fb88194ce850d405b26fda43f68a39b4ec78cbb4b7cba37b1515819e8e6b4e6f9fb9762aee355c3d118be890714887e9a5471670fea22b009c832d03b81782cf51d5489b2003809d3b228b8408f4d329a8cd9ac72f01a8786f2b1d7e9805c3acb84823bbdd919abb52f430981a64517a5dead51a3d449a42c1b3fae0fd1d0045ea5cd16b19829aaac0a51e496994a8ea16f447502c2b105ace0be17fd8ec6924d84845732d142636f8fb0036aec8685797497daf90d9623b4bd5c4ad1f92d14298b16ba0921fbc9eb38e64d58ce3bfcac6c497d77cb95989af145fed62839111e2733fa4ef4fabdb48d2893cdedb09cac4418a7f21a87673f5912f60e64f19f35cec7b0d5451525ca4514f0039b78acabe430cbde8bb12f9aaaa8b4b740a1fbaf031f726430107f83c56ccb92c0b582509b3582633252c647aca1fb0693e602a708b4a2941d4a875168085e5ebe53f47c5c060986817ad5b8e9731bc56cdf3f4796a63c742e48e049652a459c2f7fa0dc70d51c17888e618cceb8be54c6bed872a9fe253a01edf429ebabaf7252d69c40f47c85a12a13f48d15decabcc7509b1bcef69827fc662e67bc46b4e0ca49e0eb773db80d1da4d5bf4042c61f2de5471f2c392e8b8191f8f83182bf0659ba3a64eea139dbe4094e854a5d80e29c9b4902fa8d1f815d4c6f3e02332195fe3a1f89797fb275d61a92b5d495f89e53439e1b2503dc1c7b21aaa07c07c9a735871242693c7825b936edc25f858b36f60bee6458d248d657e1fad43733bb829c63cbf783d384f6fa4934f9c659adc9adb38c60052914ae2de1b4e712df087502f669fc8ef17386f78cc53b9b8c9c3006d093bcfdf0c49e93c1c5fcb68db28478f82df6d441e1b93e660a31917f032c4116799c63d3740f6d5c6f7a4b57bfc2ed45492ce4110e0f6cc1e7cc5ccbe730fa7fdba9957e3e95e933f7a6a5de1f5a09f9eb27f56b79884283ed21199430353cf505657da2fb8116b959f4f259c47c54458b25bc8ddd02d535ce0437df9290e65e18d021f552d2058eb558e73ee41a3d1b4ca8477f8fd24252e94ffc1a30a05c8087941dd0b283b8497a1265d7f0d514d8cd02b30ffcd9b2aee657fcc6d9b2c449b09d6923359a21732226b8acee5972f2b84abdd65a147bf07cec2a2609e3bbbd81e33b8e2279f1b80dc2126a278b8a3a6fd088bd1b3f3595111e0a08ed6d66a23c28c44fc6b8ac2d470a509b8037a8a37c87fdb9cf404fc35c70956b44f3366497311646b621d9ade9cfae6d01d3e1d36714c1f636a66223a41c2c365e53a8efec51e186b51b59f4134fc4bb1aa584eeec27afaf04b000beecd129c1938c39394181ce31ef97c122cd524b6f205fb4edd1863a99ba841f784618bdb0be9b2b3cb83523d1c7dee0c95fb9bfe741e57772af0d5cb7a68cf5fa0bdb27a1fbbb7ac8370baedfa78c4870caa586b0fafaea4d7bfed1c5ddc0388df8ca553bf72eca6be7f94be18b8e6bbba717eaabdd337d0eae9f3ea2ff29a370087c74398f8af4bbf5a2c7cd57a750db3e8f2f4bcc082dcb470b62fdf3f894947dd2580af87adf285594d454d99660e0359d25c3b022f488e4a5653c757fff89efa69fdbc286338717c56a368027224a9793a450edd166f26c2b049b4da06b1e97b0194c36af977e437c3de6a46488171ab6eb24bb614a12ec7b43551daca81f2faedc60eb117628abea28744da871d6bb936edc460c84573015c3bfeb1e0dcb646ec15e8b71763e7a4569be9927d07ef281707d739bd064699c5621e12490d895bc75a7183c65431c348b8b5d8fb0eda0b1a9470c05a565e03c771867ea003591e449c6e637efffb2e9a1cd56e4898282fb2429a85b644581a48718e460b439bfeee77d4cb39195eed094917504a868d8efab6853bca631544d1257afaa0a4a2b2a995fec2898a56f54dc1581bc421ea6d3ba58e01d539c3b0894c12e8c45474832540f86846cb5265dc8aad696f311a098437e253578ebd1c59bb44b0c17af26c1c9be34999ef8d5a7a927154f6868d0ba1a30c7b0e9f74ecc395925ea09a93514cfd8922203864ba0bb0a1db9d9ff29804a5c9893c4f2a09993e7c49d6bde4750fea3df7c612b98566c79d1c4bbe79b02cbd3227d54ed434c3ba054fb5b749b2ec7cec12c7bccb64b230b4d4b28b4285a77904cad2b517acbe3904b5e4e9dceca833cc3354ee6e7be6e56b0291ccd87dd437a26ab15c185ed836c41666ccfab40abd2b4c3881c7aa5864ef7d53a13e37fc63962b42630933b984b1e7afeb4340091a713ce84dd4cf32cb9d3e81ad4ffa1db944ad66604a4312ab9e5ba3a3ad90c1fa177aa794b9576ea105f9a37ec5f22de213303831b4454f0b7c48a070b8e24d1d2f919f17e9e9992f36babe7462e560d85c65264d5f44895ad2fa9d3d64b38b502bba6e93f9c131102ff86ca3f365ae88ffb96aaf82ba0ed208a1d33b995b95c0ce2dc2aecb80ac0241ee6d80361fba1ec85467edd469ce1aa2a4cd353a7a45ef282c9eb98698122d004ed12663b865383201b4f6837f9a030b7f55a5862f4cb62b1b2c5c73b93403138bd34fa312da6c939579c7efcbb6e4974bdf4713c592bdeeb9cd99006efac2c8421e56f511bbe2f6e9537e1b8d0d7777398adcfd05916ee65d7f742752ec6e5dacf58af75ed47adacc9246509b41b84a3d42dacc93978c1cc3ad618fe560e819e6f4ccd35fd35b7fcebf00ae01c9fde8113c3f7cb46a02ae4c49961fbe8f675cc6ce2effb399d259faf5b45bba0e1329d65f60270b7b5f9be5f07c43ad05e275961b88aaa0581a5100f33244820e44f9f34ce02618a5a7f14684bc145e44bc3c77d2ee451e93781426bc7fcb253bf1b3036960ec52bb9e676143f4474ffc3f6e982b5a40db1e516b37cc12a5492ea48ba0e86478b0b5ef5a523a18b18f2f3bdea81e473d8ad5163f676a57650df8b04cea48b8c5b3fd18645aa7324c55935300e30a58f83f83c5e4c307a2cdc428ff127dfa6709e28ea8f5bea61ee2cdbdc14b29c4cd62a47f9539b9129621e68bf0234196d2779f91a1ad2fba00c13781acbadb0a1a57a0ca39f6ce20c5c0671b24fe80b2ee80dd1dffa8b85087ab0665b87a3bb27a777917012df0b053cad842404e0cb2126e08cd0b0e4147c9848d86ac52ab84af5b45c5bf0c01453bc05658a33d193ac9196c9a7095f994ad89b324133d9d7212d254fbb9d82a783902636ac004dde88bd1933cc30ab33da669645471ac7178cb464d2b17048eaea339d1a9ce3a0cd5900ecb2c490cdacbc5d4d7595e9df844dbca2739b5a8c501bcd2bf6238ddb2e4b8a3d34ba444011636d7110f399eba6a7fd780d1c66ccb487b9c1b7035f8ce1844d33d2facf1837d8d3bdff1294ee3a45e1f6e1ac0a9a9b52a9d7dd0c840a1cf4bfcae5aaab16615855055e99f7cf7913ae5520c253627f6aacc781b18f89a221de0ea5eb9f2c4672033bb29e3671cd6a7ff3bc014e8fb366b14b87dddf10517b08009e8fd5eac65d7a5b6469fed4496a9714283a8d7a1889865c545d0e994855043f2d1e183ba63d520203e728931e50d29ecc81a3f54f942ae52b00c257adc", @generic="56a90521c097f791cac687d30be73e6a6595bdff68996078787e480bd19fd7c1acc6fdf50bf2513fb31f655694803066e67e4aff0c0f47e21b5251ead8", @typed={0x8, 0x95, 0x0, 0x0, @fd=r6}, @typed={0x8, 0x66, 0x0, 0x0, @pid=r8}, @generic="ae30731af55a9f754efcba96f4a7"]}]}, 0x107c}, 0x1, 0x0, 0x0, 0x14}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r9 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r9, 0x0, 0x3979, 0x0) 00:06:24 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x4c) 00:06:24 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r2, 0x0, 0x3979, 0x0) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f0000000040)={0x1ff, 0x3, 0x1f, 0x3, &(0x7f0000000000)=[{0x97, 0x0, 0x4, 0x9}, {0x1, 0x4, 0x3, 0x8bc}, {0x30, 0x2, 0xbe0, 0x9c}]}) 00:06:24 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x4d) 00:06:24 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9b00}]}, 0x78) 00:06:24 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val={0x0, 0x0, 0x2, 0x8}, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:06:24 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x4e) 00:06:25 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x4f) 00:06:25 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf000}]}, 0x78) 00:06:25 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x40, 0x0) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000040)={0xeb, 0x100}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r1, 0x0, r3, 0x0, 0x8000, 0x1) 00:06:25 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) syz_open_dev$tty20(0xc, 0x4, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r8, 0x0, r7) getsockopt$PNPIPE_HANDLE(r6, 0x113, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r10, 0x0, r9) splice(r7, 0x0, r10, 0x0, 0x2, 0x0) 00:06:25 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf00000}]}, 0x78) 00:06:25 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x50) 00:06:25 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}]}, 0x78) 00:06:25 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x51) 00:06:25 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r1, 0x0, r3, 0x0, 0x4ffe0, 0x0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000040)={0x0, 0x13, 0x99, 0x3, 0xbe, 0x5, &(0x7f0000000180)="f5b3913014925b1dda0bd94de645893218f0139b30684f42321cdf0433f349140e9e15f7999ec6f876dc89ce9a7d900c8e28ab4c97abb96a9eb2b0d1d8558bd49f7a39367ce4894a6b87d1a56a70d4da9a050cb72b4faf8781f66e733f56ddba89c24e922c2de9a83c71399919933a4715bc6e2a270b08cacb147f99019633fe0756545c1e17ee1a22ace91ac025ef762cfe3cff57b1b3b59b6d7ea221eca639df823f3c588cbe41457107bd874061dd5f52643d297bfc9240e1e3b0102a"}) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/capi/capi20ncci\x00', 0x200002, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340)='nl80211\x00') sendmsg$NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x38, r5, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0x9}, @NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0x9}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x3, 0x3}}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0xb5c}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000014}, 0x20040840) sendmsg$NL80211_CMD_SET_MPATH(r2, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r5, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [@NL80211_ATTR_MAC={0xa}]}, 0x20}}, 0x40) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r1, 0x4008ae48, &(0x7f0000000300)=0x100000) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000f500000000000042d3cfabc9ecd2a6dc422fb9d7a4961186ce8a97ff001f000000000000ffffffffffff00deae377e"], 0x2c) 00:06:25 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x52) 00:06:26 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'team_slave_0\x00', 0x4000}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x0, 0x0) ioctl$KVM_INTERRUPT(r2, 0x4004ae86, &(0x7f0000000100)=0x6) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val={0x0, 0x0, 0x0, 0x8}, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:06:26 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1800000}]}, 0x78) 00:06:26 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x53) 00:06:26 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x54) 00:06:26 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x8, 0x0, 0x9, 0x9, 0xf0000000}, 0x14) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRESOCT, @ANYRES64], 0x1f) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) syz_open_dev$tty20(0xc, 0x4, 0x0) 00:06:26 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x800, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r5, 0x0, 0x3979, 0x0) 00:06:26 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}]}, 0x78) 00:06:26 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x55) 00:06:26 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000}]}, 0x78) 00:06:27 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="000000f500000000000000000000ffff001e000000000000ffffffffffff000000000000fffeffffffff00003719b3985f7f4f2121abba209b9879a347c72679f6998c8fdb9b45a2aff353d0c26a22f8c0db00999c9582088c508bca3db932605a8c567a79c1bf64cd2bd8b3428cd70c1df625492aceadd3f23c0e4ece9686de63b88dd545801043cd7ed7aaa939c1798858e1a225d1f248968fad91350ac9f7a3ab42a496c827b046b03ac8c53682941f741412a65660b57df62adcc0ed3b2b9c2c854d45a6"], 0x2c) 00:06:27 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}]}, 0x78) 00:06:27 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x56) 00:06:27 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0xa) ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f0000000000)={0x3, 0x1, 0x1c, 0x6, 0x129, &(0x7f0000000340)}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x4e21, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000180)={@val={0x0, 0x883e}, @val={0x3, 0x0, 0x0, 0x1}, @ipx={0xffff, 0x184, 0x0, 0x0, {@broadcast, @random="c28ba4c250d2"}, {@current, @broadcast, 0xffff}, "b1f796ebcdcdd94416726418ee7a1c984faed8f824cd0b57ece79c1564981700d8f742a015258d8d713baef70d6c7b457798c5a3f03aac1ea477d9542336df46391d0c891ca33b29bd7ead333478e9b030872bcd6f4c27f8b2a6f2b9a46cfb5110eacd06a2dfefb6de6990f2ebc1dfa9dea5dbba7c62f383babff3de2167a9861cb883e2df5ee83d8fdac9d8ce61b6d0a33e3703e129ccff4802351dd18fa46d375da1d9d470e6f0e8da69d13cda26c68639ad98aae5c3765b39c3c4931bf3b5be98240818aeccfe564af1e8ebfd527a3d2e721ef871cdb3e3e10782af25ea54cda297bf9b95bc937823ea25a610ab0b31ee26b722087ec827a1f0b1c008ed7d8d023546baff78e7ea132c86e39b3ab551b5f1b16e7bb770fd0adeda8145bce3c8dc98b24d218d740fa9bc60bf1737130f9be0314e9aeba1d712274ebb99d8a6394367989ad4964323206ac891a12043c61f384f3b9b33abf88e3d96a19dd6ea000000000000"}}, 0x192) 00:06:27 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9000000}]}, 0x78) 00:06:27 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x57) 00:06:27 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}]}, 0x78) 00:06:27 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_dccp_int(r1, 0x21, 0xa, &(0x7f0000000000)=0x100, 0x4) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b0650", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r2, 0x0, 0x3979, 0x0) 00:06:27 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) splice(r5, 0x0, r6, 0x0, 0x4ffe0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) r8 = socket$inet_udp(0x2, 0x2, 0x0) close(r8) splice(r7, 0x0, r8, 0x0, 0x4ffe0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = fcntl$dupfd(r10, 0x0, r9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x2, 0x6, 0x7}}, 0x30) r14 = fcntl$dupfd(r13, 0x0, r12) ioctl$PERF_EVENT_IOC_ENABLE(r14, 0x8912, 0x400200) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) r16 = socket$inet_udp(0x2, 0x2, 0x0) close(r16) splice(r15, 0x0, r16, 0x0, 0x4ffe0, 0x0) write$binfmt_elf64(r8, &(0x7f00000001c0)=ANY=[@ANYRESOCT=r1, @ANYRESDEC, @ANYRES64=r9, @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYRES32=r11], @ANYRESDEC=r3, @ANYRESDEC=r11, @ANYRES32=r0, @ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES32=r14], @ANYRES16=r15, @ANYPTR=&(0x7f0000000180)=ANY=[@ANYRES64]], 0x79) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r17 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r17, 0x0, 0x3979, 0x0) 00:06:27 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x58) 00:06:27 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x59) 00:06:27 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc000000}]}, 0x78) 00:06:28 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'veth1\x00', 0x1000}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:06:28 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x5a) 00:06:28 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="afc65e48020f026ac01f7f8960faed06e0aaddaf5086e5964411163c2bd7f5d3850380afce1f2e92a1bc7b6426378e0fce8f80bd48de38ff77fa559c05ab5d383ad628f47619aa3bcc30bf2c368a6e8fa34b1e2ae86012dd4a52585004cd3f76dd6024f4f155591d6b57ccb8794679441479a79d0bf342e1b4219fc9a05a2e32af05d6cddecbc5418f4ff381432de8fd88f49b69d3b57e5cbbe398d5c1b914424e417910da6f98140ff09acd651985d96c031d3035687f895357522bb41b2a016363aec0a8b285fcfff2b314c4abdf00ec50aaa5", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDRV_PCM_IOCTL_STATUS32(r4, 0x806c4120, &(0x7f0000000000)) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r5, 0x0, 0x3979, 0x0) 00:06:28 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd000000}]}, 0x78) 00:06:28 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="000000f500000000080000000000ffff001e000000000000ffffffffffff000000000000ffffffffffff0014204fc33fce1fbbb7b6594093b55028cb23dc81549cf2e41e3fc97f3251f314e4c395a793660e8544cb26468b975cb5f3da3faef2a9a81c785f7c4977d409878ed1c017e4d51800b45e6ffa87dd929d682a165043483d358fc66be241e198cf9a9f3eafcb5d7c113ce29c67e294728d3d7e9538ed7aaf8ffd61cb7b03d19dc663b20ea51548832d38247f5ed90b3e2bc537429ca86a0d6c3f3bef37f33ac33314084c4b6dd196da4217c22dec8248"], 0x2c) 00:06:28 executing program 3: r0 = open$dir(&(0x7f00000001c0)='./file0\x00', 0x40042, 0x0) fstat(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r1) r2 = open$dir(&(0x7f00000001c0)='./file0\x00', 0x40042, 0x0) fstat(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r3) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000380)={{{@in6=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@loopback}}, &(0x7f00000004c0)=0xe8) setresuid(r1, r3, r4) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) r9 = dup3(r8, r7, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r6, &(0x7f0000000000)=ANY=[], 0xfffffecc) r10 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r5, 0x0, r10, 0x0, 0x3979, 0x0) 00:06:28 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x5b) 00:06:28 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe000000}]}, 0x78) 00:06:28 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x5c) 00:06:28 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000}]}, 0x78) 00:06:29 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x5d) 00:06:29 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000000}]}, 0x78) 00:06:29 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) r1 = fsopen(&(0x7f00000000c0)='9p\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000040)='md5sumcpuse\x98\x02odpp1\x00', &(0x7f00000002c0)=':u\xf92=\xdf\xee\xb1n\xcc\x9f\xb2\x80\xcd\xc5\xe1T~\x86\xa2\a\xe4\x0f\xfe!E\xa7\x8c\xaal\xe4\xb1d\xb58\x0e\xda\x02g\xec\xf6\xf1\xdd\x95\x82\xa1\xa0\xd7\xef\xb5_/iZ\xfd\xa7\x1a\x86\xff\xecTx\xfcZf\xd0\x862\xeb\xe0\xa1\xb1\x9cC.8\x97\xb7Z\x91/\x11=\xc8n%P\x98\x8b\x14\xc4\xba\x82q\xf5y\x803\t>\x94\xe8\"[x#G1B\x81V\x01\xa4\x13\xfb\x85\xd4o\x03\\\x97S\x92\x1fe\x81\xcfd\xb3\xa8O\xb2\x9cE\xc65\xee!\xc0Py:Z\x94]\xdc\x8cp\xf9u\xef\xe2\x93P\xd2\x81\xc1\xf8\xb1w$@e\x94y~f)N\xd2\x05\xc3\xfe\x12b\x05\xf2\xe6\v\x8f\x19\xce2cu5?\x17\xf98\xdbL\x1c\xa3\xe5\xcbQ\xca<\xc3N\x97\xc3\n\x1f\x03\xd0D\xfd\xd1\xf8\xe3\xdasj\xe6O\x8a\x97\xf4\xdb\x8a\xc98\xad\fa\xa7)\xcdZ\x84\xe5\xff\xb3\xf8\xcf\xfe\xf5F\x02\xf4\x1a,\xca\xdc\xb3\xe7\x16O\xb4\xca\xbdO\x9e%\xc6\xd7n\xec6\'\xea\x10\x96\xa9\xb20\xfaC\x8c\x96;]\r`\xa3\xab\x93\xd2\xb3\xaa6Q\xc0q\x8d\x9dVT\xb7\xccUI\xfd\xc9\xf4\x94L\xcdq\xd1\xc5', 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) lsetxattr$trusted_overlay_opaque(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.opaque\x00', &(0x7f0000000200)='y\x00', 0x2, 0x2) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0406618, &(0x7f0000000000)={{0x1, 0x0, @descriptor="52bed680fe7ec02b"}}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x4, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000000)="66530700081637db00053c07bc3376003639405cb4aed1e68f7d368b3fb62f000000726539ed0100", 0x28}], 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f0000000140)=ANY=[], 0xffc1) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r5, 0x81785501, &(0x7f0000000400)=""/115) ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x3c) ptrace$cont(0x18, r4, 0x0, 0x0) ioctl$FS_IOC_SETVERSION(r3, 0x40087602, &(0x7f0000000140)) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r4, 0x0, 0x0) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f0000000240)={'vlan0\x00', {0x7, 0x4e23, @empty}}) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000100)=0x4000, 0x4) write$binfmt_misc(r6, &(0x7f0000000140)=ANY=[], 0xffc1) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e24, 0xc26, @loopback, 0x7f}, 0x1c) 00:06:29 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a000000}]}, 0x78) 00:06:29 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x5e) 00:06:29 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x6, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r5, 0x0, 0x3979, 0x0) 00:06:29 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000000)=[{{0x4, 0x1, 0x1}, {0x2, 0x1, 0x1}}, {{0x4}, {0x2, 0x1, 0x1}}, {{0x3, 0x0, 0x1, 0x1}, {0x3, 0x1, 0x1}}, {{0x4}, {0x4, 0x1, 0x1, 0x1}}], 0x20) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="000050f250e4e4a1c394331a6a6316bff1f29d603f984e0869a6fae751f729d5192d3b03a9073fcb08e63578e3f3a991fa48e9a04620862f12f3f37990ad8cb92270c1307c0d76e4ed72250ae4937d8c2f29bf804bdb6016ebefca4820be046167d85a6425861fb0ba66af08ebc64d8fb5287b88b035564e00c2b681bef9a38df045167663e46a44da7d9e944574ae62c2ec35dd7da1bfc3db8365b84b35b774137786974a3e27aa6e925da821c6e5f2e56ccc544685afec076b88166e9d6b47435a28fb3f5551497cfdbfc83589f1c3a53bc6", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r2, 0x0, 0x3979, 0x0) 00:06:29 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000040)={'veth1_to_batadv\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val={0x0, 0x0, 0x5, 0x8}, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @random="7dcb66aa76b2"}}}, 0x2c) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000100)=0x0) setfsuid(r2) 00:06:29 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x5f) 00:06:29 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b000000}]}, 0x78) 00:06:30 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x60) 00:06:30 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c000000}]}, 0x78) 00:06:30 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x61) 00:06:30 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000}]}, 0x78) 00:06:33 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast}}}, 0x2c) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 00:06:33 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x62) 00:06:33 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x200000, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000240)={&(0x7f0000000100)=""/21, 0xa000, 0x1800, 0x1, 0x1}, 0x20) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r5, 0x84, 0x5, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e24, @empty}}}, 0x84) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0xf5}, @val={0x0, 0x0, 0x0, 0x8}, @ipx={0xffff, 0xffffffffffffff7c, 0x0, 0x0, {@current, @broadcast}, {@random=0xffffffc4, @broadcast}, "3e7c55e522"}}, 0x31) 00:06:33 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d000000}]}, 0x78) 00:06:33 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="0000003d5f562fce0dfd0f6d62383c7e7e175187f2a457", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r5, 0x0, 0x3979, 0x0) ioctl$SOUND_MIXER_READ_STEREODEVS(r1, 0x80044dfb, &(0x7f0000000000)) ioctl$SOUND_OLD_MIXER_INFO(r1, 0x80304d65, &(0x7f0000000080)) 00:06:33 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="50000085c8c29387985ba4c044e66e9fc7e206e2d717aedb8b3483cc8d87bb0a61e9c9eb52ccfb1a45507ad5f6551701096f5d94a04375581b2726bcc23a7c664139835fb21c6cb6440e06b9032266a550a96254ffcdb3887b0045ff37b06c5f5a5746899e86f22905f7b9b397862ce4ce76a1d2ac00289185646fac28b9fd724456ef1594fe83ecef876ea4f8234104d5a1dfd523d2dda12ddf09387a008b350c4b2cb4cd02423209e8afb54482dfb96ef1ce87d8e7606b06ef4a3f0f85848a485d3561aa51a78139f4364a19cbce3664093487c0c8470b5e80c83a6a3d80d0f3fd8cbc3e80e0015c9ab1a8ab7a01665b72bfab5b0fc79dfaee5bf0f3ddc0b111ac5fb1506107f8cf8173872a7a96ab1c911a2e8228", @ANYRES16=r0], 0x118) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) splice(r5, 0x0, r2, 0x0, 0x3979, 0x5) 00:06:33 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x63) 00:06:33 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x69080000}]}, 0x78) 00:06:33 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x64) 00:06:33 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78000000}]}, 0x78) 00:06:33 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x65) 00:06:33 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f000000}]}, 0x78) 00:06:34 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000f500000000000000000000ffff001e400000000000ffffffffffff00"/44], 0x2c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) r5 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$IP_VS_SO_SET_DEL(r4, 0x0, 0x484, &(0x7f0000000040)={0x89, @remote, 0x4e22, 0x0, 'rr\x00', 0x22, 0x3, 0x59}, 0x2c) sendto(r3, &(0x7f0000000180)="5b609b83ac10aaba1b5a3b2e2fd64df50938a91ae0e3e65464d3c8cc45e59eb0a9014d0fc67f3c3b77383d7c09b7a76cf5303091533e20d84c7e21fc6d26ce25ff5d02a62361a143a3433e8f997e8f3e36640b37af742162a1e3178ece2fe8f6f7c3c4731df8a8aa1b7d68cd66687be5c795894cfdc54b6ad657c3fa8a0ec43f3ab8dafbe1cc59104a4f7037f84dfd563e", 0x91, 0x0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x0, 0x2, 0x3, 0x3, {0xa, 0x4e22, 0x30000, @empty, 0x9}}}, 0x80) 00:06:34 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffffff}]}, 0x78) 00:06:34 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x66) 00:06:34 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r5, 0x0, 0x3979, 0x0) 00:06:34 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) syz_open_dev$tty20(0xc, 0x4, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r5, 0x0, r4) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r6, &(0x7f0000000140)=ANY=[], 0xffc1) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000180)={[0xffffffff, 0x1, 0x1, 0x4, 0x8000, 0x4378, 0x7, 0x4, 0x9, 0x9, 0xff, 0x3ff, 0xffff, 0x3f, 0x1000000000, 0x6], 0x1, 0x80002}) splice(r0, 0x0, r6, 0x0, 0x4, 0x5) 00:06:34 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x4000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) socket$netlink(0x10, 0x3, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000f500000000080000000000ffff001e008b9b3a5b3ea462cfffff000000000000ffffffffffff0000"], 0x2c) 00:06:34 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9b000000}]}, 0x78) 00:06:34 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x67) 00:06:34 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x68) 00:06:34 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff80}]}, 0x78) 00:06:35 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x69) 00:06:35 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0000000000000}]}, 0x78) 00:06:35 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) r1 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000100)='rxrpc_s\x00', 0x0, &(0x7f0000000180)="d7067bd119f0ffe1", 0x8, r1) keyctl$assume_authority(0x10, r1) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$tun(r5, &(0x7f0000000000)={@val={0x0, 0x88f7}, @val={0x2}, @ipx={0xffff, 0x1e, 0x0, 0x0, {@broadcast, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:06:35 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}]}, 0x78) 00:06:35 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x6a) 00:06:35 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = fcntl$dupfd(r7, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r8, 0xc08c5336, &(0x7f0000000180)={0x9, 0x86, 0x0, 'queue0\x00', 0x10000}) splice(r0, 0x0, r5, 0x0, 0x3979, 0x0) 00:06:35 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) ioctl$FBIOPUTCMAP(r2, 0x4605, &(0x7f0000000240)={0x7ff, 0x1, &(0x7f0000000200)=[0x4643], &(0x7f00000000c0)=[0x80], &(0x7f0000000100)=[0x9, 0x7, 0x80, 0x5], &(0x7f0000000180)}) splice(r2, 0x0, r3, 0x0, 0x4ffe0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r6 = fcntl$dupfd(r5, 0x0, r4) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES32=r4, @ANYRES64=r2], 0xc) ioctl$EVIOCGABS3F(r6, 0x8018457f, &(0x7f0000000040)=""/19) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) r8 = socket$inet_udp(0x2, 0x2, 0x0) close(r8) splice(r7, 0x0, r8, 0x0, 0x4ffe0, 0x0) ioctl$TIOCGSID(r7, 0x5429, &(0x7f0000000180)=0x0) ptrace$setregset(0x4205, r9, 0x2, 0xfffffffffffffffe) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r10 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r10, 0x0, 0x3979, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = fcntl$dupfd(r12, 0x0, r11) ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200) ioctl$IOC_PR_PREEMPT_ABORT(r13, 0x401870cc, &(0x7f0000000080)={0x8, 0x3, 0x3, 0x5e1}) 00:06:35 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0xe) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x4ffe0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f0000000140)=ANY=[], 0xffc1) r6 = epoll_create(0xfff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = fcntl$dupfd(r8, 0x0, r7) ioctl$VIDIOC_QUERYBUF(r9, 0xc0585609, &(0x7f00000017c0)={0x0, 0x7, 0x4, 0x70000, 0x9, {}, {0x1, 0xc, 0x2, 0x5, 0x65, 0x2, "5978affc"}, 0x10000, 0x4, @planes=&(0x7f0000001780)={0x8, 0x81, @fd=r9, 0x5}, 0x9, 0x0, r4}) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000001840)={{{@in6=@dev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@loopback}}, &(0x7f0000001940)=0xe8) fchown(r10, r11, 0xffffffffffffffff) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r7, &(0x7f0000000300)={0x80000004}) ioctl$FS_IOC_ENABLE_VERITY(r5, 0x40806685, &(0x7f0000000240)={0x1, 0x1, 0x1000, 0x31, &(0x7f0000000100)="2a180d8c0b076bc54463a0743370890e5884ee015114d6da1f8c1c292e82bc1179553550a71bbf45ef927c6d52c3a6e1cd", 0xb8, 0x0, &(0x7f0000000180)="b34ca6389890bb77474bcccaab0c2e13a8281103768162c8e04783e4a8d55710ee04cbbb85cba0b217f44d1101c6f9ca5363e9e56f3070024ddccbdaef034a26acdc9655596f4469869497911f0fab2a6262f845fdd392d2b67a2b8a2cc451377b2d64394f0dc4c864cda2a371ba99f601d1bc11c0ab29230f62851c5968b11d878380f32d1d06c51d0efd621a780ec6d573523a54fe3633fa96dcbaa1711b64166c9d746690a7796c05c47fd361d401c529cdcbd8b77c3c"}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000040)={0x100, @tick=0x7fffffff, 0x6, {0x6, 0x81}, 0x7f, 0x1, 0x8}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r12 = openat$vimc0(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/video0\x00', 0x2, 0x0) sendmsg$nfc_llcp(r5, &(0x7f0000001740)={&(0x7f0000000340)={0x27, 0x1, 0x1, 0x2, 0x1, 0xfb, "51046b30d3c6a3c959c9f5609be33365f1f54f3be1bff308799667b5666f938d79239df315ea6c4b3522ed4c89c3da92124dd6358dbc1141a0c962232b08b7", 0x4}, 0x60, &(0x7f0000001700)=[{&(0x7f0000000500)="0cc5695cc9a3d26b4b818c1fcb34170b92be0ef90fe988abdfea95344a92a0abc40b369f5ff8cae8792f9c7d", 0x2c}, {&(0x7f0000000540)="51cd7cd6cf45e615cede7d53d7e5e6723fc4de4ef8d9d49570499320e51db603a97ac1b1991cc288713fb4322aa790452ab648baa074ab68649cc9c8e24abce81ae99a7e9fa685694687a259492f409676b3c892f9b052a0b91d775137ab1b13528d4e494b69e39b009a57bc5d1b6a86cd1d5bba0e6fd8cec5b25b966b8c1cb5a2eeeaf1f13cecd1c59263223aa87ce5aa859f3f1e526000d1214dcc8375d4b9efdec3b57f485071dc13c80fd5c1e82a26584f72397ce14171da894157f494f9be66765fb5854dfebe74aed7756c3a808226fbb1b5bdab2ce152b03e7be0b53f3d63be6762ab69c90b86a84a84b3484f36ef17", 0xf3}, {&(0x7f0000000640)="d4f282c5ace6eac58129353462cc64e4defdf1a1e805c42088652bff2287b6c9a468e19c1b2a368309c97cde179fb62a38a5cf914be53939aeb1388143cf1ccf8149e92cb06a41f003b6f331de90342ccd45b86adc1f36a6c91079f2a16496fe1edfdc22b739aca532912448e28974026e215dee064273d65a0f7d8c6af39aac31aa148034092749114e9a790dc48f084250cce5f0a088791491ee4f55bd8119d95af4732eea7475", 0xa8}, {&(0x7f0000000700)="8ff379799ea86f1fced362075a56006ef189167663c9655c353e80d25c44ed98e1d34460d44dc2bab48e0d2e0494abbf706fdf081969221796df589f0aa5c76b24036a02ba29db00a8f5799844d616da2197245958fba5abcb79b1c41b1afdb5a683a5853e45c7086c32f71b0cb3ceb2f80ff4dfb2ba148aadb32aa68d82ab9133b6e17b5c0b2c1cab4b06fa712036d64247736859fda4f1511d6ab06e50ba44f6903cdf06572c28d4c2e5b5d491af7aff687def2cf7b6bee707593c489a1adef5c870aa7d13ecbd5a768e1f931771560397da624898df6bf10feb5f2ad9038a3e3e03105c34a2e9c9b35eb1b88e3c05e333ae383a71a6ed96add3eb45612f7b89cdf463068220e297cd781ab40b13419b21ed2acb3e628c961f0b0e236ea88dbd3bd57f5affc900b3f19c9b3ce3120af39be1b439a21275154bfa9a4ab93799a962601cf5eb2fb57bb919001cf0504c0b6421bd63bafafd4e7479ef6dfec5f49dd6166ca9c9d7b873db4f72ac4541560418bc226680b7a191ae89ebaf0672352958c57a2db0788939852896e00d05d28de56b9e2788ec7fcce9c7e7b0b05d9a95aaaa1fd223082a999ca21ef9bd87a95c02abe5b4f9daf2d5baadab37fec6e4dccbcc61ce29e857a7edcb79c4aec519017d7f3a4fe5f588d985ac12295c944f6da24d049aee6870b7d648250edb1185ce0e5ad391a61ecf9a34f54fb56e826de47367db06802911c9b5e47ab556da211cee64f281e55f4399d17a1d4d46305b232496f099ed9c5193d993e16833eb35f8b0d582b004144a34bd19e5ad8b7d8b18b72beaf68a6ff766b6d373afdca786ee67e379f64fe0a3e3662d8f9daac3e03f84ddc065d2d9c8d1b17cd4456d6cb67eb34d7a350f260cf7f4aeacb799dd22294979906f293a6b309fdc8d805ac5e2a40960dfe34fc80f689125333ca7792ad5f7e725c70389947446820bbdc68b7f31b903021a78ced4a44a60bd38f7722e2d0287ea2a7b014624ccd5b95e05b0bef4d1ab7e1be2b4960bd19359fc6f3ff9d0e2f9db457c01a0d4e07f1d336032d697e10ba7013fdfba8e2287b776c81f08160bed612bbecff29280e9c9e064e981d5616394d2bd3f101823f12d14cf34d0ea8d98e1056ea3b9b927f00d35be9c33f3fe86df8878588d607f38bdba6cbe2973fcc132b753eedefd936ed174e99161bfc7f0655b9c7705a539a219d4de573054e2cbe9fc173177715b81e29bb0ec5e012daea9ffc85f70e8dcbfa042eefb29f25433a77aff0fdafe9390eb8fc9a4d1be0bfdb333829e50b72a3a2746b8f46f44042656ca130543c8819242238cf3848ef7b44bdfc200d809ee36ef0a82bb29554726adccf23042aff3bd0c03794d7747e924ee6ae11d93f4aeb885bfd03ada16b94bd82f946bed1b336873670241ccde3c81206432fbce8a9bc72fce91fac8804101ddca0a69785631408074fd717b0bc1f0a25a05b1a4ad3f2b21c7a648c64da2c331beba15e6fee49db6dbdae9354d69c8e8c7fbf77c3e653a1a69c90e0ad6400321cdf1e91063a9a44699ccf28c37cecf53d9d5238812f2e3233ff65675d427a2f7e584ad41bb89b4576faf00741eb8d54dcf5c5aca48eb79ce29cb0c1082981d47979b19f3497bbd27d32e23f4dac8d6e4ac8e4a449717793d760d55bc88e9f5f43da27a04078b9dea03ee3ee3d6277e1ca5aab6e9aaf6102fece66c33096cb71a1db98bd28986c27c5d76393adda3c25bbdf2ff28365d9f74a6e19c77c1c17a9318a54d4e33d13b39df85b3dee377982f28f7a4d37e4167a41be12c17c4c6614923eec770140ca784f659102b8184441c5599df0ec3b6ee7977e72c9e7d93ac1a1e5c4bd67082f88a2678653d97f821df14725120b8913e99261ad3b91847450e64c89bcc5cbe836d7a9c9fa5ebe1e80460adab7732ea601a0eb8d50897252ffa11a8c8b508fcbcc48828782cd738bb74b42595c664adb7c927a480eb02b799dbbb721613f239f8ae8cc5ffff0f0878a6c0f029797282397894915797f09cfa8d379a6c47d806e8ed27086e1583794f5190b5a81f3eaaa472c95b1f93c6a1117b34d72227442bd8abe0d9446e61b815b7e27d2a74af4826056a59a02b8e104a3c5bcccdfdbcc6482e3e4ab25b82bf74ad16b6f504786ef882f1d4f4f8e309cd63432d3b6c5511838a310e66bb0e7811410b24c6d05e4bfcb107b1836672a731100e86dc8e0180c3f1f3c55e7488a28217fc3bf040842907b85a61537cf6e3d050737f5f6d542005a69c67e7b1f69967a9405f97256823ed52fe746420e6edbeb20fca2502a8726bd4188034e1ca88c88affc34c76f5331d846bd1eec5ce9a6a7a2fca0b94ab016392a310d9cd54ca9f61d6b2ef54792c5462779bd0d540122a4698a9008c2317c9d245861e8f66bfefd3635b227f3abb2a28e37e7d433c267135d53ef664a9f2011322c9cf3d4b9beee0d78ea26b12befa0177eceac7077e00ac52fb7073f06d70f9338e4d7bf364f4f6cba51165143504bf3b93073b4578b3b25090bbfd8f1658fc7030b7cb206226730ef916e562664170719d426f27c6932efb97f74f5621c75a2840ec60093503ef030daf12eca1f46ad38f3d203502359abc49892312c063e73e0e3f36f38f13f8481753deaebbc52087c87eab7757e28b9708cfac320fa8e4ab0e9fe6a52a09144ceed8e9b997ebe2bb451fb27476a2e6e64b99bdf8eebe44fdd00e86bef0797eec80eac425ea9b89ad76caf1159ad90429717f4b12fd9aceff1740bbb628168bf3432132778332d78b1b8eb5b596ba017c2c102b7bf77fb3515caa547bf89a255a6b055b1160bb29b8a2b4d1f5e576aa53eda295a50b6c86c776ecf9d07f25c19d7b75e3f629e5048b8b263d17eef22c9138ede96bfd222bc7aaa88bb494c94367f8affaa7348921578fc47d6d32dd5a4a31215b113b12214ab60ca3283d7d75ac250ca6987d2632b3c96c7a7053715fbbd00b6bd935cf32b485ebbfdfaab04b51b24e02910b4254bb32072340c1f356268384a8f03246f62fed848d248899eeb05ed82ef72fc1af962e74128dd73b179b287dda697d89dea81ab9a854f78d9f21d68c1de700a718a5504d05698f40edfd4ced3fe52b9037f19428c08b7c431963c196e76f004f9943643827a975db26551846caa5e2584b58c0fc583d7d20b9c4c8a2065f997beb84402279efe672caf066ffb15c75f25f399170099c95464c5d42421bc2f96de422974c2c0bfac5bd6b9d0898fabffc2b8aa91a8cfd06c25687b3b728a4962606a945ede5b125ca9f825e5c59eca948aceb26cd0f195c12b5e9ed9c33190b3c890e347d132229eacf711c99fc13087659c1014460df654a3c05cc3520a0ddf40bc6bcc03038925d00dc0cafde19ea07b38573fe27856735014f3c69e70e31a2b894725dab53b7b79586a7ae2f4fbe89eaf0828f7e4791c63e254a3b697b5ee75c6ee53aeeaa8a914ae8abfa9ede4ae8e527e58741957d888905512b9cfbaa4b1700703f9f186d08db22336dc9f718e5fba8e34add52b28a27152e01ff6291c51390787270cfe06307055d869bf41ddd79bc93c6e06968645f4bda2a259bf7ffa0d6048385a3759970bedc8d55185cc86cfc625303542285b8018dd07f1b2d978746195fd022b7083e8298de332024497863549a69dd4c4b240a87b96eb9a8d2004e9ff8c3f58f0665a38b82413e85920400fa2d4d9347ea874be7ff9026f90d01e4e73e5c4ed291db75f2b5a11ec309bcb56f4775c501d5c5f98c065612a30b5e4349f06b5963c27f3270977b222152ec6ea01585e8d02d63bb924d46ac76f13cb35dfcffd1b9f0810f30b5149e4a919be25aa519995bd6e3fc37ae8ca9209fa4172e08c70288d3ae0d8af91bce41a07b0484fd6328b25cb839fb6264f8b8c77b291cf5d8b58dc9255092086b7ceb706d2e4920c7685c7f85dd927b6d9c9b3682c90998306faa5662ac381a10502b2ff135fec50f02e78ffd3155c4fd5667f50bd13589fc782f48dbd1475775627378f04742719c4e4371cc07249e3dcd9b0fceb885cd894f50163b8a0a3916e4ac070c91bfa995583cdc64a7e6a7443aab6ab49b4c26394859055524547ffa4f222497abff743c631128188f2c1b5a3844cab201a354f99b8fa0582355e5f3005a4ff685115909c76c19ab6dcfa4b0865faa6021ecb438aed3a09f80558e614f23d0b23df8bddc641cf6f54e455056f293565757a38addabf65bb3f0ab15c876b0d4241716568e2f378a23ea7671084c71fa35ed612f501be047e260e72ab12381a2b8fdb99b3d697bccef708bfc83c96348de526938cb52faa66831d83059b784805d68504a2dadf7345bb3d7d515ba9c422f61749edd7c0bc2b1309e1ebb153b629dee1b12dbae03575e09d347ba0627870868bab3407db14a772a8dbf925baa15cb617f6537f1b4b06116b530d40ee34ddd1015454c0bf1ad9a40353cc0a103186616ef507b5bce1206e2f5d49b27e7a96ab00ad096f46b4faab06d603b7f81bc2d069b0c3245e7b3abe0ddc49f9cd25b9e967ed44f99ced2bd37ef11e3361963ab5b4e394880995aeb867fe5b55a5c25b4997c540caef6f76be804e66e1afb4f0cc69f1950de81bc543ff602286b820f176e0781b0f1f2b7bd9381f194299f5e68d503e7182048440375ae2ed72814be5615fab86cf659fddb2026a09ace5aff2a39f783d22629dda39fe065da7a5628988c70184cb581a641e6adf3a4575b1747b35fd8c790d9c3fcac92031673ddb78cbae3f4c8697829a7f0113fc3a67694b65288821b9dfd372809a5fa5b2d912dded4f9b0d5e248165d9a30c580ff3dd582dcd62448349aeedfef04339227960ee99ba0ecc9aba4a9e34e3a6a360f9fd7f0ac22a71eda663856cf4fab2dd78f4f75b2d4245b825c233eb619f4a84ca4deed5e3f132c8c75327aa3de344c8ea1cdfff8818882a185ee7f40067935d77ef3d0b40eb9b81dd70e8698035f1fb3e4ae51af1b98b5df7fdadfaa25ea0283bb789428c711481c0b9d248c383278f4d4007f548a3c96ecc0e7c458040f7dfbf8c7fc4ed3d71d89ec4f4c20717c922e24b257cec3d42ec882dccd4fb5a8db8b4e7b40aee2ff47843fa490b857b53f15519005a9e3aff4a7d8bc24e4d74426981696b44555215d4335689933ec940827ee55e71f8a54d415446569013affb1e0aeef952f1f265ecd16a4ca347046801d426d36f67ab4a153f64c1f7e0dc048ce8a34fc05ae7c9bcc0202b2b795f4715e97a83fab606324d024dd62e38fe107d8ec5ab0f5180b161033be3af4e6ed028c9982ef02a38c1f1e390f72afdf9ed54fa708e4ef48fde350b48cd17414a2a11c80e8a4da84a4ad236c81bff4f93fdea07012b4edbc4dde9c932bbabd6fc487d5de590f12fc17aa16eec8d5149d1b6991577f5bce8ed2bc2f46ac6e443db969da20ad6178a3df85138058375007e0968e7d3179f7e714b3b084d61bc452dd145d9a66e9482f93f0393cfd3812a9ecdede74b9660891fcd03cecdb31d213af6c3b566cacaffec217b7411088bfd387626326198fdea25c7afef3e705496614790809467b06476bdcdf73578a7827149ddc348a2096cf41447b17f3f9b1812433268517eee0f977e514f6aaf3c4f6589ae8f24efac82d7b0021074de608ddeb0f9806cb2faaa5eeed5f2790586bb967ed40611b5ec527ebc0ba0d19ff77e272c66b5d91a385db11a888f998da0bdf4ab240f37195c782a37f135bc3510ea027176df0e6c5881218d0", 0x1000}], 0x4, 0x0, 0x0, 0x40}, 0x0) ioctl$VIDIOC_TRY_FMT(r12, 0xc0d05640, &(0x7f0000000400)={0x8, @pix={0x2, 0x1, 0x47504a4d, 0x1, 0x0, 0x0, 0x0, 0x800, 0x0, 0x7, 0x0, 0x3}}) write$tun(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000f500000000080000000000fffb001e000000000000ffffffffffff000000000000ffffffffffff0000"], 0x2c) 00:06:35 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x6b) 00:06:35 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180000000000000}]}, 0x78) 00:06:35 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x6c) 00:06:35 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}]}, 0x78) 00:06:36 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x6d) 00:06:36 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000}]}, 0x78) 00:06:36 executing program 2: r0 = request_key(&(0x7f0000000040)='syzkaller\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000180)='syzkaller1\x00', 0xfffffffffffffff8) r1 = request_key(&(0x7f0000000300)='pkcs7_test\x00', &(0x7f0000000340)={'syz', 0x1}, &(0x7f0000000380)='\x00', 0xfffffffffffffff9) keyctl$instantiate_iov(0x14, r0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="84750b5bb3b3ae5a453d88fe1cf6d9e914a0725f5bc8199931d308250a5e16824e622f15e4197b62fed6259103c9f7bf40787615c1576a140fb96e7d5917c0b01781d0b66bbd5016e84fcd16dcc9b39be268ca4a0e6cb4c762ea6748419a4d9937c60e267daca18190d546a3b5bf82c78d65c34fdd08fa1b899ae083615760b17ac339fb930b5366908e9e1f0ab3c3e735186aaf096349549465f32070109f01d4b35e203e32aa03ddf98fcac4ee", 0xae}, {&(0x7f0000000280)="3f13027ea58cdd5d59358e19ff4889456103eae4c3d89da1a7e09f35", 0x1c}], 0x2, r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r2, &(0x7f0000000000)={@val={0x0, 0xf5}, @val, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast}}}, 0x2c) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000400)=0x1, 0x4) 00:06:36 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x6e) 00:06:36 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000}]}, 0x78) 00:06:36 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f0000000140)=ANY=[], 0xffc1) sendmsg$can_raw(r5, &(0x7f0000000180)={&(0x7f0000000040), 0x10, &(0x7f0000000100)={&(0x7f00000000c0)=@can={{0x0, 0x0, 0x1, 0x1}, 0x4, 0x1, 0x0, 0x0, "990f2d12a92f433d"}, 0x10}, 0x1, 0x0, 0x0, 0x4000004}, 0x810) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video37\x00', 0x2, 0x0) splice(r0, 0x0, r6, 0x0, 0x3979, 0x0) 00:06:36 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, r4, 0x0, 0x4ffe0, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) r9 = socket$inet_udp(0x2, 0x2, 0x0) close(r9) splice(r8, 0x0, r9, 0x0, 0x4ffe0, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r8, 0xae03, 0x100000001) r10 = socket$inet_sctp(0x2, 0x1, 0x84) r11 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r11, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r10, 0x84, 0x18, &(0x7f00000000c0)={r12}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r5, 0x84, 0x18, &(0x7f00000000c0)={r12}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000180)={r7, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x4e22, 0x1, @local, 0x5}]}, &(0x7f00000001c0)=0x10) r13 = socket$inet_udp(0x2, 0x2, 0x0) close(r13) splice(r2, 0x0, r13, 0x0, 0x4ffe0, 0x0) fsetxattr$security_evm(r13, &(0x7f0000000000)='security.evm\x00', &(0x7f00000000c0)=@v2={0x5, 0x0, 0x7, 0xffffffff, 0x5d, "79104ea328e0be5ea64a0e489270ae93d086314e63a0ab7168394ae1702bbdc12072b31761eb1936227868b6fc9e4d1f97293110fe0ca0f913b2e5119dbcc684afb14d6ff67776df406b162220e2bf678b39ceb456979f63cc79d2c4c1"}, 0x66, 0x3) r14 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r14, 0x0, 0x3979, 0x0) 00:06:37 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffa) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="000000f50000000f080000000000da6d851c029145879cfa4ed103bb03fff1c5c987704effff001e000000000000ffffffffffff00000000"], 0x2c) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000180)) 00:06:37 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900000000000000}]}, 0x78) 00:06:37 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x6f) 00:06:37 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00000000000000}]}, 0x78) 00:06:37 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x70) 00:06:37 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00000000000000}]}, 0x78) 00:06:37 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x71) 00:06:38 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="0000005af500150000000003000000ffff001e003720000000ffffffffffff000000000000ffffffffffff00"], 0x2c) 00:06:38 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd00000000000000}]}, 0x78) 00:06:38 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x72) 00:06:38 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) waitid$P_PIDFD(0x3, r4, 0x0, 0x8, &(0x7f0000001180)) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) splice(r6, 0x0, r7, 0x0, 0x4ffe0, 0x0) ioctl$TCXONC(r6, 0x540a, 0x1) ioctl$KVM_SET_XSAVE(0xffffffffffffffff, 0x5000aea5, &(0x7f0000000180)={[0x0, 0x1, 0x401, 0xffff, 0x1, 0x4, 0x5, 0x1, 0x36, 0x8000, 0x8, 0x6, 0x1, 0xfe000000, 0x5, 0x0, 0x4, 0x8, 0x400, 0xe8b9, 0x2, 0x100, 0x5, 0x80, 0x3, 0x1d10789b, 0x1, 0x6, 0x1ff, 0xfffffff8, 0x1ff, 0x80000001, 0x1, 0x8, 0x7ff, 0x9, 0x5, 0xff, 0xf07f, 0xa7b, 0x7, 0x77d, 0x800, 0x2, 0x3, 0x0, 0x5, 0x7ff, 0x860, 0x0, 0x953, 0x7fff, 0x0, 0x8, 0x5, 0x3, 0x1, 0x7, 0x5, 0x460, 0x5, 0x33b6, 0x1000, 0x6, 0x9, 0xffffffff, 0xebfd, 0x40f, 0x15c, 0xa5da, 0x20, 0x9, 0x1, 0x100, 0xfffffffe, 0x8aa, 0x9, 0x6, 0x8, 0xcd9b, 0x7f, 0x5, 0x6, 0x5, 0x1, 0x2, 0x7fe, 0xc0, 0x3, 0x9, 0x9, 0x9514, 0x6, 0x7, 0x3, 0x5, 0xacf, 0x8, 0x1f, 0x9, 0x0, 0x800000, 0x8, 0x7, 0x4, 0xce6, 0x0, 0x400, 0x5, 0x6, 0x101, 0x77b, 0x200, 0x2ec9, 0xfffffffa, 0x8, 0x6, 0x4, 0x340c3e10, 0xe7f, 0x0, 0x7, 0xfffffff8, 0x5, 0x48d, 0x8001, 0x0, 0x0, 0x4f0, 0x1e, 0x1000, 0xffff, 0x7, 0xffffffae, 0x101, 0x3, 0x4729, 0x0, 0x8, 0x6, 0x100, 0xffffffff, 0x0, 0x200, 0x6, 0x0, 0x6, 0x2, 0x9, 0x1, 0x101, 0x9, 0x91f, 0x40, 0x8, 0x6, 0x6, 0x1, 0x4000, 0x8, 0x5, 0x9, 0xf5c, 0x1f, 0xb4b, 0x9, 0x7adf2b05, 0x1, 0x3f, 0x4, 0xff, 0x6, 0x49d, 0x9, 0x5, 0x2, 0x2f, 0x4dc0, 0x65, 0x400, 0x0, 0x9, 0xfffffff8, 0x9, 0xa4b, 0x20, 0x0, 0xe974, 0x2, 0x4e1e, 0x401, 0x1, 0xff, 0x5, 0x4, 0xa807, 0xffffff97, 0x3, 0x9, 0x6, 0x8, 0x2a7, 0x3, 0x5, 0x9, 0x8, 0x200, 0x9, 0x7, 0x3fa2, 0x4, 0x3f, 0xffffffff, 0x9, 0xe5df, 0x2, 0x100, 0x1, 0x80000000, 0x3f, 0x0, 0x6, 0x1, 0x3, 0x3, 0x0, 0x20, 0x4, 0x0, 0xffffffff, 0x5, 0x7, 0x1, 0x81, 0xdb3, 0x8, 0x4128129d, 0x1, 0xfffffffa, 0x3, 0x17c, 0x8, 0x6, 0x0, 0xfffff001, 0x3, 0x7, 0x9, 0x20, 0x7, 0xea, 0x0, 0x0, 0x88, 0x680, 0x0, 0x3ff, 0x40, 0x3, 0x40, 0xca42, 0x1, 0x5, 0x8, 0x7, 0x5, 0xb0ed, 0x7f, 0x1d6c14b3, 0x0, 0x6, 0x899, 0x7, 0x6, 0x6, 0x7, 0x4, 0x100000, 0xdba0, 0xbdf, 0x7, 0xff, 0x9, 0x1, 0x4e, 0xa7, 0x2, 0x6, 0x0, 0x7, 0x7, 0xfffffffb, 0x7, 0xa9a6, 0x7d, 0x5, 0x9, 0x211f, 0xf6d, 0x9, 0x299, 0x9, 0xfffff907, 0x7, 0x1, 0x3f, 0x7, 0xff, 0x6, 0x5, 0x100, 0x2, 0x9, 0x8001, 0x9, 0x2, 0x1, 0x8, 0x7, 0x4, 0xfffffff9, 0x81, 0xb728, 0x6, 0x101, 0x2c0b, 0x5, 0x3, 0x1ff, 0x80, 0x9, 0x5, 0xfffffa3d, 0xac4, 0x5, 0x1, 0x0, 0x3, 0x73, 0x1, 0x80000001, 0x0, 0xfffeffff, 0xba25, 0x1, 0xce, 0x80000001, 0x10001, 0xa1, 0x10000, 0xfbaf, 0x2, 0x4f, 0x9, 0x8, 0x5, 0x9, 0x9, 0x2, 0x81, 0xc60f, 0x3, 0x1, 0x1000, 0x1, 0x5, 0x4, 0x9, 0x8, 0x9, 0x81, 0x1, 0x6, 0x80000001, 0x2, 0x9, 0x1, 0x8, 0x3, 0x1, 0xbcc6, 0x4000000, 0x0, 0x4, 0x8001, 0x9, 0x78, 0x1, 0x4, 0x10000, 0xffff, 0xe1, 0x1f, 0x4, 0x1, 0x9, 0x2, 0x6, 0x9, 0x7fff, 0x6, 0x401, 0x7, 0xfffffffb, 0x100, 0x8000, 0xfffffffa, 0x2, 0x9, 0x1, 0x3, 0x52ee8745, 0x2, 0x7fff, 0xfffffffb, 0x7, 0x8, 0x4, 0x3, 0x4, 0x6, 0x5, 0x4, 0x861e, 0x2, 0xfffffe00, 0x101, 0x6, 0xffffffff, 0x7f, 0x9, 0x2, 0x6, 0x1, 0x9, 0x40, 0xffffffff, 0x4, 0x2, 0x7, 0x1f, 0x7, 0xffff0000, 0x1, 0x4, 0x2, 0x11, 0x5fec, 0x7, 0x5cd1, 0x3, 0x3, 0x9, 0x80, 0x2, 0x5, 0x0, 0x3a, 0x1, 0x81, 0xb2, 0x0, 0x0, 0x401, 0x5, 0x0, 0xffffffe1, 0x0, 0xbb2, 0x0, 0xfffffffd, 0x5, 0x9, 0xfffff396, 0x1, 0x2, 0x7, 0x5, 0x2, 0x80, 0x9, 0x7, 0x4, 0x1f479d06, 0x5, 0x1, 0x80, 0x6, 0xfffffffa, 0x5, 0x6, 0x6, 0x3, 0x5, 0xe81, 0x80000000, 0x80, 0x5, 0x4da, 0xd4, 0x20, 0x1, 0x1f, 0x1, 0xffffffff, 0x7fff, 0x9, 0x1, 0x10001, 0x7f, 0x8, 0x7fff, 0x6, 0x10000, 0x7, 0x6d, 0x1, 0x2907, 0x6, 0x200, 0x7, 0x6, 0xfffffffb, 0x7ff, 0x0, 0x4, 0xfffffff9, 0x7, 0x6, 0x0, 0x4, 0xfff, 0x200, 0x6, 0x6, 0x1, 0x40, 0x0, 0x1f, 0x3, 0x8000, 0x4, 0x5, 0x2, 0x9, 0x1, 0x81, 0x2, 0xf00, 0x6, 0x4, 0x85, 0x2, 0x3, 0xffffffff, 0x1, 0x80000001, 0xffffffff, 0xfffffffa, 0x1, 0xc877c09, 0x5, 0x80000001, 0x7, 0x40, 0x80, 0xc43, 0x1, 0x401, 0x7, 0x1, 0x1, 0x400, 0x6, 0x4, 0x1, 0x7, 0x3, 0x401, 0x1fc00000, 0x401, 0xfffffffc, 0x5bd4, 0x100, 0x8, 0x1f, 0x5, 0x0, 0x4, 0x100, 0x200, 0x6, 0x2, 0x4, 0xfffffff7, 0x5, 0x4, 0x6, 0x7f, 0x2, 0x99ca, 0x5, 0x9, 0x0, 0x80000000, 0xad, 0x2, 0x20, 0x3f, 0x6, 0x4, 0x7, 0xfff, 0x9, 0xfff, 0x5, 0x10000000, 0x79e, 0x101, 0x20, 0x4, 0x3, 0x2, 0x9, 0x6, 0x9, 0x3, 0x8, 0xba, 0x80, 0x2, 0x10001, 0x5e, 0x5, 0x6, 0xcfb, 0x0, 0x8, 0x80000001, 0x0, 0x6, 0x3, 0x9, 0x7, 0x0, 0x9, 0x0, 0x40, 0x3, 0x8, 0x2880, 0x1, 0x4, 0xc27d, 0x1ff, 0x0, 0xffff8001, 0x8, 0x0, 0x1, 0x9, 0x47dc, 0x0, 0x8b09d98, 0x3, 0x100, 0x6, 0xcd76, 0xa146, 0x6, 0x2, 0xffffffff, 0x8, 0x81, 0x65, 0xffffffff, 0x7fff, 0x3, 0x100, 0xffffffff, 0xe0e, 0x6, 0x80, 0x7e87, 0x1000, 0x0, 0x79, 0x2, 0x3f, 0x80000001, 0x6, 0x8, 0x3, 0x100, 0x5, 0x800, 0xca9d, 0x4, 0x400, 0x3, 0x38, 0x5, 0x5, 0x9, 0x1f, 0x10000, 0xff, 0x6, 0x5, 0x3, 0x8001, 0xfffffffd, 0xfff, 0x8, 0x5, 0xffffffba, 0x8000000, 0x0, 0x6, 0xfffff001, 0x9, 0x9, 0x3, 0x259c, 0x7, 0x6, 0x0, 0x80000001, 0x8, 0x3, 0x5, 0x0, 0x3, 0x0, 0xffffffff, 0x1f, 0x4, 0x10000, 0x0, 0x3, 0x80, 0xfffffe00, 0x3, 0xc0, 0x10000, 0x100, 0x3, 0x6, 0x0, 0xfffff835, 0x1, 0x100, 0x6, 0x9, 0xc5, 0x81, 0x0, 0x81, 0x7ff, 0x6, 0x40, 0x6f, 0x1, 0x287, 0x8, 0x7ff, 0x3, 0x1, 0x1, 0x2, 0x5, 0x400, 0xffffff77, 0x6, 0x269, 0x6, 0x10001, 0x7fff, 0x401, 0x3f, 0x9, 0x80000001, 0x0, 0x7, 0xef7, 0x47, 0x9, 0x1, 0x1, 0x5, 0x400, 0x100, 0x6, 0x80000001, 0x2, 0x0, 0x6, 0xfff, 0x4, 0x8000, 0x5, 0x40, 0x0, 0xfffffff8, 0x4, 0x4, 0x9, 0x3, 0x0, 0x1000, 0x2, 0x1, 0x6, 0x80, 0x6, 0xf16, 0x40, 0x2, 0x9c, 0xdd, 0x1, 0x6, 0x800, 0x1, 0x8, 0x0, 0xfffffc00, 0xfffffff8, 0x0, 0x3, 0x100, 0x2, 0x80000001, 0x7ff, 0x1, 0x0, 0x80000001, 0x8, 0x20, 0x7, 0x8, 0x80000001, 0x5, 0xffff, 0x1, 0x6, 0xfff, 0xffffff3a, 0x6, 0x1ff, 0x2, 0xffffffff, 0xf2, 0x8, 0x7fff, 0x1ff, 0x3abd3566, 0xf159, 0x2f, 0x7fff, 0xffffff80, 0x10000, 0x5, 0x7fffffff, 0x800, 0x2e, 0x8b8, 0x10000, 0x44, 0x20, 0x9, 0x1, 0x20, 0x8000, 0x2, 0x4, 0x4, 0xdd, 0x400, 0x5, 0xffffffff, 0x74, 0x200, 0x5, 0x3, 0xe9, 0x1000, 0x4, 0xb6, 0x7ff, 0x80000000, 0x4, 0x0, 0x7, 0x200, 0x1, 0x8001, 0x9, 0x2, 0x6, 0x7, 0x0, 0xffffffff, 0xfffffffa, 0x1c, 0xff, 0x20, 0x4, 0x6d5, 0xffffffff, 0x7, 0x8, 0x3a, 0x0, 0x8, 0x1f, 0x0, 0xffffffff, 0x4, 0x2, 0x8, 0x9, 0x8, 0x2, 0x4, 0x5, 0x40, 0x5b, 0x3, 0x7fff, 0x7f, 0x1, 0x7, 0x800, 0xffffff41, 0xff, 0x1eb7a853, 0x800, 0x60, 0x9, 0x1000, 0x7, 0x5ced, 0x3, 0x2, 0x1ff, 0x0, 0x400, 0x35, 0x40, 0xfff, 0x92, 0x2, 0x3, 0x7, 0x1, 0x8, 0x0, 0x1ff, 0x8, 0x319e, 0x10000, 0x1, 0x5a, 0x8, 0xf26e, 0x0, 0x5, 0x0, 0x2, 0x401, 0xfffffffa, 0x4, 0x7fff, 0x5, 0x9, 0x80, 0x9b9, 0x9, 0x9, 0x8, 0x1, 0x387, 0x7fffffff, 0x9, 0x9, 0x3, 0x1, 0x3, 0xffff, 0x100, 0x7f, 0x80000000, 0x38f2, 0x3, 0xff, 0x1ff, 0x0, 0x401, 0x2cf, 0xfe, 0xfffffff9, 0x401, 0xfffffff9, 0x5, 0x2, 0xf0000000, 0xee, 0x80, 0x8000, 0x3ff, 0x7f, 0x5, 0x8, 0x2, 0x6, 0x8, 0x6, 0x0, 0x1000, 0x5, 0x9, 0x8, 0x5]}) splice(r0, 0x0, r5, 0x0, 0x3979, 0x0) 00:06:38 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6(0xa, 0x1, 0x1e) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) accept4$ax25(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @rose}, [@default, @null, @null, @netrom, @netrom, @bcast, @rose, @bcast]}, &(0x7f00000000c0)=0x48, 0x100800) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x4000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = fcntl$dupfd(r7, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = dup3(r8, r5, 0x80000) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r10 = syz_open_dev$tty20(0xc, 0x4, 0x0) r11 = getpid() sched_setscheduler(r11, 0x5, &(0x7f0000000380)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x4, 0x1000d, 0xff, 0x6}, &(0x7f0000000280), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r15 = fcntl$dupfd(r14, 0x0, r13) ioctl$PERF_EVENT_IOC_ENABLE(r15, 0x8912, 0x400200) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x212, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0xb, 0x2, 0xffff}, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0xfffffffffffffff5) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r16}, 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r16}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000080)='/dev/autofs\x00', r16}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000000)='\'-/-\x00', r16}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000500)={0x0, r15, 0x0, 0x1d, &(0x7f00000004c0)='/)\\\'^{ppp0cgroupcgroup+(bdev\x00', r16}, 0x30) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a80)={r1, 0xc0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880), 0x0, 0x0, 0x0, &(0x7f00000008c0)={0x8, 0x1}, 0x0, 0x0, &(0x7f0000000900)={0x1, 0x8, 0x20, 0x1}, &(0x7f0000000940)=0x6, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=0x7fff}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000b40)={r11, 0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000b00)='/dev/rtc0\x00', 0xffffffffffffffff}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000bc0)={r17}, 0xfffffffffffffe1c) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x212, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0xb, 0x2, 0xffff}, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0xfffffffffffffff5) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r18}, 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r18}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000080)='/dev/autofs\x00', r18}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000000)='\'-/-\x00', r18}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000700)={r18}, 0xc) r19 = getpid() sched_setscheduler(r19, 0x5, &(0x7f0000000380)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={r19, 0xffffffffffffffff, 0x0, 0xe9, &(0x7f0000000600)='/Z\xd4v/_X2\n\x91\x8c$*p\xb6\xb0\xcc\x90\'\x8f5\xc3\xb9\xea~CT[<\xbf\xf7\x14\x8f\xf4c\x8d\xfcx\xdc\rl\xb4f_%6\xfcI\xffu\xd4\xe1\xc7\x19H\xb0{+H\xe8\xa3$\x91\x124\xc2\xed\x82m\xba\xb2i\xf5\xbc\xaee\xc8B\x0e\xd5\xd7\x14\xb7\xe5A/\x1a\x16z\xf1\xba0\x04\x80]:\xebd\x8c\xb4Me\xc5\x89\x18\x13U\xec\xb4&\x7f\xce\x8f\xa5\xba\xb6R2\xd7\xe4.\x03\r\x8e\x88\x0e\xd1\xd87\x80\rw\xf7\x10%\x8fj\xa0gF\xee\xb3\xcf\xe54s\x8f\a\xff\xec\xd6\\\xa0\xc83.\xc6m\xe7Q\xdfv]b\xca\xebN7\xf8\xbe\x8b\xc3\xc9\b\xecN\x87\x16\x17\x13\xe5C\xd4A#\xa3\x8e\xd9j\"si%\xc0\'\x8f\xd3\x88\x9b\xb2\xc42T\xc0 \n\xe5\bK\x82I\xc0\x99\xfe\xc2G\x88C\xa3//[\x84\x9e\x91dl\xaaG,\x97\x1c\xfd'}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000000)='\'-/-\x00', r12}, 0x30) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) r21 = socket$inet_udp(0x2, 0x2, 0x0) close(r21) splice(r20, 0x0, r21, 0x0, 0x4ffe0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r22, &(0x7f0000000140)=ANY=[], 0xffc1) r23 = socket$inet_sctp(0x2, 0x1, 0x84) r24 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r24, 0x84, 0x1d, &(0x7f000095dff8), &(0x7f000095dffc)=0x4) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r23, 0x84, 0x18, &(0x7f0000000300)=ANY=[@ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00@'], &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r22, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x4}, &(0x7f0000000240)=0x8) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) r27 = socket$inet_udp(0x2, 0x2, 0x0) close(r27) splice(r26, 0x0, r27, 0x0, 0x4ffe0, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r26, 0x84, 0x1b, &(0x7f0000000740)={r25, 0xfb, "87f642118c86d2f0e4f7f495a6bd6f82d4be391d9bac3d700fe3462d67dce0ce4fc8e10a9a69f796efce10da8d813ba0ec5875d38207c133678441bae0d9102e2b714e1da064096bc81a85d752ceaec08eb787a3ea59df4bedd774bddbae30a4ad7f8a85a51b93b5b4df64460e72dca62cfc03004199a3b801bf3da6d924444b224cf12fd6b8085646cb416ba916ad22084f0a0774dddba0634fde9748be57b41c5bf114edf664e12c63827418e1e73fa2bc6e9ff8051c52be3a6bba129865c9c3dc00fb92a70070fe28b99cd2892fda8183e4648417fa9d6569379d39141f8ea63455ada1a01337465a6efe9fd261b280f81eedfb458051ea8c73"}, &(0x7f0000000340)=0x103) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r11, r1, 0x0, 0x18, &(0x7f0000000180)='eth1\x1cvboxnet1^vboxnet1@\x00', r12}, 0x30) splice(r0, 0x0, r10, 0x0, 0x3979, 0x0) 00:06:38 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val={0x0, 0x0, 0x0, 0x8}, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast}}}, 0x2c) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040), 0xc) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000180)={0x20, 0x2, 0x4, 0x400, 0x7, {0x77359400}, {0x2, 0x8, 0xf7, 0x2, 0x20, 0x3, "ad74278c"}, 0x2, 0x1, @userptr=0x5, 0x1000, 0x0, r2}) 00:06:38 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x73) 00:06:38 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00000000000000}]}, 0x78) 00:06:38 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x74) 00:06:38 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf00000000000000}]}, 0x78) 00:06:38 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1800000000000000}]}, 0x78) 00:06:38 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x75) 00:06:39 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a00000000000000}]}, 0x78) 00:06:39 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x76) 00:06:39 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRES64=r1], 0xb) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0xfff, 0x6, 0x1f, 0x1f}]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r4, 0x0, r3) splice(r3, 0x0, r2, 0x0, 0x3979, 0x0) 00:06:39 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:06:39 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r5, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffb}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000850) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r6, 0x0, 0x3979, 0x0) [ 783.743204][ T27] audit: type=1326 audit(1581552399.666:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=31597 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45e1fa code=0x0 00:06:39 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="60b400f5000000000800a2cdb91000000000f7ff001e000000000000ffffffffffff000000000000ffffffffffff000074ce677c82aad3f6848998079f3a2e6c9125f2f6c92c19bc05b9ce0c469ea8d342c5001600d5f8680dea8062dbaebf2591b6c487ece8a725862ce412b768e95c06190ffb2a054fb12d39bc73d2fdba5b6953d34e798e5f6d8cbab4358197d50403a341baaee32e5a8e69eddd4e16b8bace2e0200be4355aa00de19316b52c6698f3a90c9e68bd4557e7046c79b389b98e3e76572e86f79521e16895bfb4a882bc87a71d7c684cbff4006cff84b80cb91754f945266802faff406c50c68f5479bff54f62f33fbbe188996e3b6c923d182c25ac0a8fb1a4bc99f8283663a4e8993f2db2c2ff19d"], 0x2c) 00:06:39 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b00000000000000}]}, 0x78) 00:06:39 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x77) 00:06:40 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c00000000000000}]}, 0x78) 00:06:40 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x200001b8) 00:06:40 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00000000000000}]}, 0x78) 00:06:40 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="cffb435adb1b00800516e9df0b5d5020dd5fe7604aeeda8d3fbafd58d7d5c7aa8741201595ac4ab338e0d8ff77278c0cb13cb2220948ab46b19018ee91ef7855698a2b3f5c", @ANYRESOCT], 0x1a) splice(0xffffffffffffffff, &(0x7f0000000040)=0x5, 0xffffffffffffffff, &(0x7f00000000c0)=0x8000, 0x2, 0x1) r2 = msgget$private(0x0, 0x210) msgrcv(r2, &(0x7f0000000180)={0x0, ""/222}, 0xe6, 0x3, 0x2000) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x4e6402, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r3, 0x0, 0x3979, 0x0) 00:06:40 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6(0xa, 0x2, 0x0) r3 = dup3(0xffffffffffffffff, r2, 0x80000) ioctl$KDGETMODE(r1, 0x4b3b, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="34e65659551b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r4 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r4, 0xae44, 0x800) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r5, 0x0, 0x3979, 0x0) 00:06:40 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d00000000000000}]}, 0x78) 00:06:40 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6908000000000000}]}, 0x78) 00:06:41 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100)='/dev/udmabuf\x00', 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0xffc1) ioctl$BLKGETSIZE64(r2, 0x80081272, &(0x7f0000000040)) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast}}}, 0x2c) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xffc1) getresuid(&(0x7f0000000180), &(0x7f00000001c0)=0x0, &(0x7f0000000200)) write$FUSE_ATTR(r3, &(0x7f0000000240)={0x78, 0x0, 0x8, {0x2, 0x6, 0x0, {0x4, 0x9, 0xb7f, 0x8c65, 0x7ff, 0x80000000, 0x3, 0x7, 0x4, 0x6, 0x1f, r4, 0xee00, 0x0, 0xa6df}}}, 0x78) 00:06:41 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7800000000000000}]}, 0x78) 00:06:41 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000000)={@val={0x0, 0xf5}, @void, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@random=0x5, @current}}}, 0x22) 00:06:41 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x8140, 0x0) write$binfmt_elf64(r0, &(0x7f0000000040)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x40, 0x2000000}, [{0x3, 0x5, 0x8, 0x3f, 0x7f, 0x93b, 0x6f, 0x7fff}, {0x6, 0x3f, 0x81, 0x4, 0xe825c1c, 0x7, 0x7, 0x80000001}]}, 0xb0) 00:06:41 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f00000000000000}]}, 0x78) 00:06:41 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffffff00000000}]}, 0x78) 00:06:41 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) r3 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000100)='rxrpc_s\x00', 0x0, &(0x7f0000000180)="d7067bd119f0ffe1", 0x8, r3) r4 = request_key(&(0x7f0000000000)='rxrpc\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)='trusted\x00', r3) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000100)='rxrpc\x00', &(0x7f0000000180)=@secondary='builtin_and_secondary_trusted\x00') r5 = syz_open_dev$mouse(&(0x7f00000001c0)='/dev/input/mouse#\x00', 0xc913db8, 0x20002) ioctl$USBDEVFS_BULK(r5, 0xc0185502, &(0x7f0000001200)={{{0x2, 0x1}}, 0x1000, 0xffffff00, &(0x7f0000000200)="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"}) splice(r0, 0x0, r2, 0x0, 0x3979, 0x0) 00:06:41 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x80, 0x0) setsockopt$inet_sctp6_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f00000000c0)=0x9, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000000000)={0x1f, 0xc7, 0xf087}) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = dup3(r4, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r6 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff9) add_key(&(0x7f0000000100)='rxrpc_s\x00', 0x0, &(0x7f0000000180)="d7067bd119f0ffe1", 0x8, r6) keyctl$link(0x8, r6, 0xfffffffffffffffe) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setstatus(r7, 0x4, 0x2c00) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="d51d94", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r8 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r8, 0x0, 0x3979, 0x0) 00:06:41 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x400000, 0x0) sendmsg$inet_sctp(r1, &(0x7f0000001500)={&(0x7f0000000040)=@in6={0xa, 0x4e22, 0x49, @empty, 0x401}, 0x1c, &(0x7f0000001440)=[{&(0x7f0000000080)="fb302e211269dd4503f88d430f52ad7c8887196a38a70735a5b72e9741330be60c194f04546485435bc1fa34e59c94b1682ea1bb0b0e6d07511239f2c78a739f08a20b575d96720903e0ad5884fc67f9d12b84f9faf254b39f24897b77b1ae", 0x5f}, {&(0x7f0000001540)="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", 0x1000}, {&(0x7f00000011c0)="91f489a36d77da8590134a48de08af6b4dd4497c1344dd526723b02064472ec46d3463c45f835e96e5a2cb162ba140a91c8027bd9da6697489962cf231f76e103d81f7133cf693ba9e1f3bd0d11aeef29f8f00dbd70ef2da48b42bc7765124e301c8e60cc4822bd1b4c3cd4965a2337923ecd73289e25c458bfa511f3dca1ec3c146deb4e397ecf6daba317b25d5524b77af1461f46ae008f4b9244dfdd4ff8caab1f2deb1bafdb3672e311303cbae8a6c620b3abbc588252cefa802cdc75c9de086cf7473d70582259705aff69b6e6b856180259ab0650f", 0xd8}, {&(0x7f00000012c0)="fbb5456775c74ab13b14e1c6d05c98b93bbc0d12e9c84cc45e90f251f2c3a37ef1725fa5b8df84b3368fe03da1ee0502ba6d4c89a16d0da3d5f455f0bac80801fbaf38d5e70a0685fe34760153cc6bd07c1dd6d157e80f90958442df0b72d889ffa7810e1b7eff26b69a9412d3115fb6302da06c54ee41e9445324460a", 0x7d}, {&(0x7f0000000100)}, {&(0x7f0000001340)="d01a6350f8e362c88bc4ef455c52ef172515c39509d7fdb1d54c48e37f9c75", 0xfffffe83}, {&(0x7f0000001380)="f5326c30b85b1ac5d5f4d28ff98dd4136396f31236d65f01d039493268b3f8599ff29d8248d2d84d7bb75b6425f53e44f697309bedfee17c4a7acc0d7deb6676b4ce6dd3c1901d2a642d95c52cc2e20e5e30e4e41ec4c435214668187eace6c25b434bcf40d54ffdd71b56e3caca9c0f1d7af60dbded9f5606aaa4ef027cb7c258d229adf20ce8fd853266748a3c6cc40e48", 0x92}], 0x7, &(0x7f00000014c0)=[@prinfo={0x18, 0x84, 0x5, {0x0, 0xffff}}], 0x18, 0x10}, 0x20000000) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 00:06:41 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9b00000000000000}]}, 0x78) 00:06:41 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000040)={0x12, 0x26, &(0x7f0000000000)="aaa51ba61884aa424569bfe50bbeed74f00478f7125f3838e6f165877c2f32a7d96a9d419c27"}) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 00:06:41 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x2) 00:06:42 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) socket$kcm(0x29, 0x2, 0x0) write$tun(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000f5000000000000400000ffffff001e000000000000ffffffffffff000000000000ffffffffffff0000"], 0x2c) socketpair(0x21, 0x5, 0x8, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000000100), &(0x7f0000000180)=0x4) 00:06:42 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x3) 00:06:42 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r2 = syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0x3f, 0x361c00) fcntl$addseals(r1, 0x409, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$USBDEVFS_FREE_STREAMS(r2, 0x8008551d, &(0x7f0000000180)={0x4306, 0x12, [{0xe, 0x1}, {0xb}, {0xd, 0x1}, {0x8, 0x1}, {0x5}, {0xf, 0x1}, {0x2}, {0xa, 0x1}, {}, {0x4}, {0x6}, {0xd, 0x1}, {0x5}, {0xd}, {0x4, 0x1}, {0x9, 0x1}, {0x6}, {0x8}]}) write$tun(r0, &(0x7f0000000040)=ANY=[], 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x1, 0x0) ioctl$KVM_SET_XSAVE(r3, 0x5000aea5, &(0x7f00000001c0)={[0x1, 0x1, 0x0, 0x8, 0xffff, 0x2, 0x0, 0x1000, 0x2fa, 0x80000001, 0x9e87, 0x1000, 0xff26, 0x400, 0x3, 0x3, 0x7, 0x5, 0x8, 0x10001, 0x8, 0x8, 0x4, 0x9, 0x5, 0x9, 0x3ff, 0xfffff800, 0x0, 0x5, 0x9, 0x9b, 0x0, 0x1, 0xffff, 0x0, 0x5e4, 0x7f, 0xfffffffd, 0x1, 0x4cb, 0x0, 0x7, 0xffff, 0x8, 0x10001, 0x3ff, 0x7e9, 0x0, 0x3, 0x8001, 0x8001, 0x1, 0x9, 0x0, 0x81, 0xff2, 0x1, 0xfffffff9, 0xb2e2, 0x81, 0xc62c, 0x10001, 0x3, 0x0, 0x2a82, 0x40, 0x0, 0x3, 0xfff, 0x0, 0x3, 0x401, 0x8, 0x4d2d, 0x5, 0x2, 0x101, 0x800, 0x1000, 0x1, 0x8897, 0x1ff, 0x101, 0x80, 0x6, 0x3d88, 0x934, 0x5, 0x0, 0x8000, 0x9, 0xb9b, 0x80000001, 0xf9, 0x5, 0x20, 0x5, 0x5, 0x80000000, 0x4, 0x2, 0x2, 0x1f, 0x9, 0xfffffffd, 0x9, 0x0, 0x5, 0x10001, 0x5, 0x5, 0x6, 0xb4, 0x3, 0x1, 0x20aa28ee, 0xdd, 0x8000, 0x8, 0xffffffff, 0x80000000, 0x100, 0x1, 0x1, 0x401, 0x1, 0x0, 0x200, 0x10001, 0x1f, 0x4, 0x3, 0x2, 0x0, 0x6, 0x1, 0x9, 0x1, 0x4, 0xb5, 0x3, 0x2, 0x4, 0x0, 0x2, 0xe18, 0xff, 0x6, 0x4, 0x5, 0x2, 0x8911, 0x4da, 0x164640, 0x1, 0x0, 0x1, 0x4, 0x1000, 0x53ed, 0x16df9266, 0x8, 0x0, 0x20, 0x80000001, 0x2, 0xffffff81, 0x0, 0x9f7, 0x8001, 0x100, 0x15c1, 0x100, 0xfffffff7, 0xff, 0xa6b, 0x1, 0x4, 0x100, 0xffff389c, 0x5a7, 0x4, 0x4, 0x96bb, 0x10001, 0x5, 0x6, 0x6, 0x7, 0x80000001, 0x6, 0xff, 0xffffffff, 0x100, 0xb4, 0x5, 0x3, 0x3, 0x4, 0x1, 0x4, 0x40, 0x1, 0x2, 0xfffffffa, 0x6, 0xffffff7f, 0x7fffffff, 0x7fff, 0xec7a, 0x3, 0x4, 0x7fff, 0x4, 0x40, 0x1ff, 0x5, 0x8, 0x7, 0xfff, 0x8001, 0x4, 0x58, 0x2, 0x8, 0x6, 0xbd, 0x2, 0x40, 0x3, 0x3fd, 0x5, 0x55, 0xf8e3, 0x4, 0x4, 0xdc8, 0x200, 0x6, 0x2, 0x200, 0x1000, 0x6, 0x3ff, 0x6, 0x81, 0x800, 0x5, 0x5, 0x1f, 0x8000, 0xbad6, 0x5, 0x6, 0x8, 0x10, 0x4, 0x7fffffff, 0x8, 0x9, 0x6, 0x100, 0x20, 0x6, 0xe50, 0x7f, 0x5, 0x7, 0xf5, 0x2, 0x4, 0x8, 0x0, 0x9, 0x7, 0x4, 0x7, 0x3, 0x3, 0x4, 0x662, 0x3, 0xffff5c8a, 0x8d, 0x2, 0x8001, 0x3bbe, 0x9, 0x0, 0x1ff, 0x1, 0x5, 0xffffffff, 0x7ff, 0x5, 0x2, 0xffffffff, 0x3f, 0x84, 0x1, 0x3, 0x240478d7, 0x0, 0x9, 0x81, 0x3, 0x80, 0xa2, 0xa3, 0x9, 0x100, 0x4, 0x7, 0x8, 0xfc3f, 0x1f, 0x7ff, 0x7298, 0x0, 0x2, 0x0, 0x2, 0x9, 0x1ff, 0xfffffffd, 0x5, 0x9d11, 0x0, 0xb3a, 0x0, 0x7, 0x2, 0x400, 0x3, 0x50000000, 0x3d, 0x6, 0xff9, 0x0, 0x400, 0x80000000, 0x8, 0x2, 0x0, 0x3, 0x2, 0x0, 0xfffffffe, 0x9, 0x3, 0x4, 0x5, 0x7841, 0x9, 0x1, 0x20, 0x7, 0x1b, 0x3ff, 0x101, 0xf6, 0xffffffc1, 0x8, 0xfffffffa, 0x780, 0xc6, 0x8, 0x101, 0xdcc, 0x7, 0x5, 0x9, 0xcd, 0x100, 0x9ccf, 0x10000, 0x0, 0x5, 0x1, 0x7, 0xd59a, 0x6, 0x4, 0x1000, 0x80000001, 0xfff, 0x40, 0x4, 0x1, 0x1, 0x512f, 0x100, 0x1, 0x588a000, 0x95, 0x2, 0x3, 0x80, 0x8, 0xad21, 0x264a, 0x7fffffff, 0x3f, 0x3, 0x80000000, 0x5, 0xd82, 0x5, 0xffff, 0x6, 0x2, 0x3, 0x3, 0xb13, 0x0, 0x2, 0x1, 0xfffffffa, 0x8e, 0x101, 0x7f, 0x5, 0xbf6, 0xfffffffb, 0x8, 0x20, 0x80, 0x9, 0x8fa2, 0x4, 0x2, 0x40, 0x0, 0xfffffff8, 0x0, 0x200, 0x3, 0xe233, 0x10001, 0x200, 0xffffffff, 0x6, 0x7fff, 0x400, 0x8000, 0x1, 0x2, 0x7fff, 0x56, 0x2, 0xffff, 0x5, 0x2, 0x1f, 0x101, 0x9, 0x0, 0x5, 0x401, 0x8, 0x8, 0x6, 0xffffff81, 0x9, 0x0, 0xfffffc01, 0x80000000, 0x5, 0x126, 0x2, 0x3, 0x6, 0x3ff, 0x0, 0x1, 0xfffffffc, 0x401, 0x7, 0xd8, 0x8, 0x10000, 0x16, 0x0, 0x3, 0x4, 0x12, 0xffff, 0x2, 0xe4b, 0x0, 0x2, 0x2, 0xfffffff9, 0x3, 0x2, 0x193, 0x768, 0x3, 0xffffffe1, 0x0, 0x4, 0x1, 0x7fff, 0x7, 0x4, 0x5, 0x6, 0x7, 0x0, 0xc32, 0x7f, 0xfffff5c4, 0x200, 0x3, 0x10000, 0x8, 0x3, 0x5, 0x80, 0x5, 0x401, 0x0, 0x1000, 0x7fff, 0x1, 0x5c80, 0xbaaa, 0x18, 0xfffffffc, 0x7, 0x1f, 0x8001, 0x0, 0xffff, 0x92a7, 0x0, 0x4, 0x9, 0x761, 0x8, 0x2, 0x1d4, 0x8, 0x200, 0x3, 0x4, 0x7, 0x8000, 0xa012, 0x2, 0xca7, 0x401, 0x0, 0x7, 0x0, 0x0, 0x6, 0x8b17, 0x4, 0x7, 0xfffffffb, 0x1, 0xfff, 0x4, 0x6, 0x4, 0x6, 0x8, 0x101, 0xc624, 0x4, 0x6, 0x3, 0x401, 0xff, 0x1, 0x9, 0x1ff, 0x6, 0x80, 0x80000001, 0x1, 0x20, 0x0, 0x100, 0xfffffc00, 0x86e6, 0x40, 0x80000001, 0x6, 0x3664, 0x6, 0x9, 0x40, 0x3, 0x2, 0x800, 0x401, 0x9, 0x5, 0x8, 0x5, 0x81, 0x0, 0x3, 0x100, 0x7f, 0x8, 0x10000, 0x100, 0xe7b, 0x5, 0x800, 0x3, 0x69b3, 0x1ff, 0x8, 0x1, 0xa87f, 0x7, 0x8, 0x101, 0x1000, 0x4, 0x7, 0x3, 0x7, 0xa41, 0x5, 0xbce4, 0x8964, 0x9, 0x9, 0x101, 0x2, 0x8, 0x9, 0x7, 0x9, 0x80000000, 0x2, 0x800, 0x3, 0x20, 0x0, 0x1b6, 0x6, 0x90, 0x9, 0x1, 0xffffff9c, 0x0, 0x9a, 0x100, 0x4, 0x1, 0xffffffff, 0x4, 0x8, 0x8000, 0x6, 0x1f, 0x3e, 0x0, 0x2, 0x1, 0xffffffff, 0x1, 0x7, 0x4, 0xff, 0x8, 0x8001, 0x74, 0x6, 0x4, 0x913e, 0xb0, 0x1a8, 0x81, 0x1, 0xb, 0x4, 0x4, 0x4, 0x1, 0x7f, 0xffffff80, 0x101, 0x5, 0x1f, 0x9, 0x40, 0x40, 0x2, 0x2, 0x101, 0x3, 0x50, 0x0, 0x3, 0x3, 0x2, 0x8, 0x1, 0x5, 0x3b1, 0x8000, 0x400, 0x96, 0x800, 0x2, 0x7, 0x8, 0x1, 0x101, 0x7, 0xfd92f16, 0x6, 0x6, 0xe1, 0x2, 0x1, 0xd99, 0xfffffbff, 0x10000, 0x3c, 0x0, 0x2, 0xff, 0xb97, 0x5, 0x9, 0x401, 0x5, 0x7d, 0x81, 0x1ff, 0x7, 0xf54, 0x7, 0x5, 0x6, 0x8001, 0xefe, 0x20, 0xccb, 0xc0000000, 0x3, 0x2d, 0x8, 0x10000, 0xe00, 0x6, 0x7, 0x35a1c477, 0x0, 0x4625, 0x9, 0xf969, 0x866, 0x9, 0x54, 0xb9d, 0x3, 0x7, 0x3ff, 0x6, 0xfff, 0x80000000, 0x8, 0x200, 0x7, 0x9, 0x0, 0x2, 0xd6a, 0x40, 0xc25, 0x4, 0x4, 0x5, 0xffffb0f5, 0x5, 0x4, 0x9, 0x6, 0x7fffffff, 0x350, 0x7, 0x100, 0xffffffff, 0x3, 0x1, 0x81, 0x9, 0x80, 0x1, 0x60, 0x1f, 0xd64, 0x10000, 0x20, 0x100, 0x9, 0x1cd7, 0x7fffffff, 0x8, 0x7, 0x9, 0x6, 0x7fffffff, 0x8e7, 0x8000, 0x7, 0x4, 0x80000000, 0x27, 0x7fff, 0x9, 0x8, 0x1, 0x3f, 0x8, 0x8d, 0x9, 0x7, 0x1, 0x1, 0x99a6, 0x5, 0x8000, 0x2, 0x0, 0x5, 0x3ff, 0x8a0, 0x8, 0x7, 0x1f, 0xbe, 0xffffffc0, 0x0, 0x800, 0xfffffff9, 0x8, 0x200, 0xc61a, 0xffff7f98, 0x0, 0x0, 0x7, 0x3f, 0x9, 0x5, 0x5, 0xb767, 0x3, 0x8, 0x2, 0x9, 0x3ff, 0x200, 0x520, 0x7, 0x4, 0x7, 0xfff, 0x2, 0x9, 0xdcfc33f5, 0x50ec, 0x1, 0x17, 0x1ccabb5d, 0x3f, 0xf4f, 0x6, 0x0, 0x5, 0x6, 0x752c, 0x9, 0x3, 0x430a, 0x4, 0x1ff, 0x2f, 0x4, 0x0, 0x0, 0x8, 0x8, 0x9, 0x7, 0x2, 0x7, 0x9, 0x6885, 0xf530000, 0x0, 0x101, 0x1, 0x8, 0x5, 0x6, 0x7, 0x8, 0x3, 0xec, 0x6, 0x4, 0x9, 0x3f, 0x6, 0x1, 0x400, 0xff, 0x3, 0x0, 0x6, 0x3, 0x9, 0x5, 0x4, 0x80000001, 0x8, 0x200, 0x74e85657, 0x7fffffff, 0x6ee67df1, 0x9, 0x7f, 0x4, 0x7, 0x40, 0x9558, 0x3, 0xc7, 0x8, 0xfffffffe, 0xffff7fff, 0x4, 0x80, 0x5, 0x8, 0x1000, 0xaff, 0x401, 0x0, 0x2, 0x0, 0x5, 0x43a, 0x40, 0x401, 0xffffffff, 0x4, 0x7ff, 0x9c, 0x3, 0x2, 0x6, 0x6, 0x0, 0x1, 0x2, 0xa1, 0x0, 0xd0, 0xffff, 0x0, 0x4, 0xfff, 0x9, 0x200, 0x8, 0x6, 0x0, 0x1, 0x5, 0xffff, 0x9, 0x4, 0x8, 0x0, 0x5, 0x400, 0xdde9, 0x33b8, 0x10001, 0x5, 0xffc00, 0x6, 0xfffffffd, 0x4, 0x5, 0x8, 0xfffffffa, 0x1ff, 0x1, 0x4df, 0x16b, 0x80, 0x1ff, 0x202, 0xa8, 0x7ff, 0x7e2, 0x5, 0xffffffff, 0x744d, 0x0, 0x1, 0x3, 0x7, 0x3ff, 0x101, 0x200800, 0xd96, 0x1, 0x7]}) 00:06:42 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) bind$can_raw(r1, &(0x7f0000000000), 0x10) splice(r0, 0x0, r2, 0x0, 0x3979, 0x0) 00:06:42 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 00:06:42 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x4) 00:06:42 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r5, 0x0, 0x3979, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = fcntl$dupfd(r7, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) sendmsg$IPSET_CMD_RENAME(r8, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x50, 0x5, 0x6, 0x3, 0x0, 0x0, {0xf, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x20040000) 00:06:42 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000740)=@raw={'raw\x00', 0x2, 0x3, 0x1f8, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x160, 0x160, 0x160, 0x160, 0x160, 0x3, 0x0, {[{{@ip={@empty, @rand_addr, 0x0, 0x0, 'dummy0\x00', 'dummy0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'hsr0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x258) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RELDISP(r1, 0x5605) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 00:06:42 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x5) 00:06:42 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x6) 00:06:43 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x7) 00:06:43 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x8) 00:06:44 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x9) 00:06:44 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080)='wireguard\x00') r8 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r8, 0x8933, &(0x7f00000000c0)={'wg0\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000000300)={0x68, r7, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r9}, @WGDEVICE_A_PEERS={0x4c, 0x8, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x20, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6, 0x1, 0x3}, {0x8, 0x2, @loopback}, {0x5}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g='\x97\\\x9d\x81\xc9\x83\xc8 \x9e\xe7\x81%K\x89\x9f\x8e\xd9%\xae\x9f\t#\xc20xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x200, 0x8000, 0x2, 0x8, 0x1}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000000c0)={r2, 0xb54e, 0x30}, &(0x7f0000000100)=0xc) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r3, 0x0, 0x3979, 0x0) 00:06:44 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0xf11a, 0x4000) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180)='nbd\x00') pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0xffc1) ioctl$RNDZAPENTCNT(r4, 0x5204, &(0x7f0000000280)=0x3) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="20d3c7e21438d15cf75b7091976a2f64ee2370bef216ac7b2d3da8d50fa9c62afa2d9d9a3d5856e35fd99a5ab1c6f272d62e4d3e5d6e7e11a818637429e76c058fa543379af2a3a9e47cef7a1f53b45bd444f52b3612fed0de753f7febfd51809224f6937bea8818036d82cc83e8d457ac4faad45692d04288b86a57d5d71a9612e4f7997ba1dcde0c973965de7fbb0ff119ca9c4a17f55a002b63479aac81b2dcab64851ab588bb703302077d2f100c47c7da2c3d8a28c93a9a95c35f88425dd6", @ANYRES16=r3, @ANYBLOB="10002abd7000fddbdf25030000000800010000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x8081}, 0x20010811) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f00000002c0)='\\user,procposix_acl_access\x00', 0x1b) write$tun(r0, &(0x7f0000000000)={@void, @val, @ipx={0xffff, 0x1e, 0x0, 0x0, {@broadcast, @broadcast}, {@current, @broadcast}}}, 0x28) 00:06:44 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0xa) 00:06:44 executing program 0: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000240)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2}}, 0x0, 0x0, 0x0, 0x0, 0x1f4}, 0x98) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) fcntl$getownex(r4, 0x10, &(0x7f0000000180)={0x0, 0x0}) pidfd_open(r5, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) sendmsg$IPSET_CMD_GET_BYINDEX(r6, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0x2c, 0xf, 0x6, 0x5, 0x0, 0x0, {0x7, 0x0, 0x8}, [@IPSET_ATTR_INDEX={0x6, 0xb, 0x3}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8044}, 0x0) write$tun(r1, &(0x7f0000000000)={@val={0x0, 0xf5}, @val={0x0, 0x0, 0x0, 0x8}, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast}}}, 0x2c) r7 = creat(&(0x7f0000000040)='./file0\x00', 0x126) openat$cgroup(r7, &(0x7f0000000100)='syz0\x00', 0x200002, 0x0) 00:06:44 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0xb) 00:06:44 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0xc) 00:06:45 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0xd) 00:06:45 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0xe) 00:06:45 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000), 0x10) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f0000000140)=ANY=[], 0xffc1) ioctl$VIDIOC_SUBDEV_G_CROP(r5, 0xc038563b, &(0x7f0000000040)={0x1, 0x0, {0x4, 0x7, 0x2, 0x3ff}}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r6, 0x0, 0x3979, 0x0) 00:06:45 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) setsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@int=0x80000001, 0x4) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r2, 0x0, 0x3979, 0x0) 00:06:45 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0xf) 00:06:45 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x10) 00:06:45 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x11) 00:06:46 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) prlimit64(r2, 0x6, 0x0, &(0x7f0000000040)) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:06:46 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x12) 00:06:46 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000180)={'nat\x00', 0x65, "58e03f1794a3962cc424baafc719254cb79c76722542fab48b2b28bebd4ea3f056ebffed9f2af2f42fc3b5858cb55e8c2b8c87f70878d6cde47634030e8fe022cb43609e76472e15c19a640ff9d806223225e7c19c64eb546613729d84a7bb20d6d4309d61"}, &(0x7f0000000040)=0x89) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r6, 0x0, r5) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYRES16=r6, @ANYRES16, @ANYRESHEX], 0x16) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) getpeername$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @empty}, &(0x7f00000000c0)=0x10) r7 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r7, 0x0, 0x3979, 0x4) 00:06:46 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000f500000000080000000000ffff001e000000000000ffffffffffff00000000f4ffffffffffffff0000"], 0x2c) r2 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x9, 0x230000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) accept4$phonet_pipe(r5, &(0x7f0000000300), &(0x7f0000000380)=0x10, 0x800) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r6, &(0x7f0000000140)=ANY=[], 0xffc1) r7 = syz_open_dev$vcsu(&(0x7f00000002c0)='/dev/vcsu#\x00', 0x747b09e0, 0x80) getsockopt$bt_hci(r7, 0x0, 0x1, &(0x7f0000000300), &(0x7f0000000340)) setsockopt$inet_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f0000000280)='tls\x00', 0x4) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000180)={{{@in=@loopback, @in=@broadcast}}, {{@in6=@mcast2}, 0x0, @in=@multicast1}}, &(0x7f0000000100)=0xe8) 00:06:46 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(0xffffffffffffffff, 0xc0984124, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) ptrace$setopts(0x4206, r2, 0xe0, 0x100035) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000000)=0x4, 0x4) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r4) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r7, &(0x7f0000000140)=ANY=[], 0xffc1) ioctl$PPPIOCGFLAGS(r7, 0x8004745a, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r8 = socket$alg(0x26, 0x5, 0x0) setsockopt$SO_BINDTODEVICE_wg(r8, 0x1, 0x19, &(0x7f00000000c0)='wg2\x00', 0x4) ioctl$PIO_UNISCRNMAP(r6, 0x4b6a, &(0x7f0000000240)="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") splice(r0, 0x0, r3, 0x0, 0x3979, 0x0) 00:06:46 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x13) 00:06:46 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x14) 00:06:46 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x15) 00:06:47 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x16) 00:06:47 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x17) 00:06:47 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x200000, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r6, 0x0, 0x3, &(0x7f0000000040)=0xfffffff9, 0x4) splice(r0, 0x0, r5, 0x0, 0x3979, 0x0) 00:06:47 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x18) 00:06:48 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val={0x0, 0x0, 0x6}, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast}}}, 0x2c) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0x18, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0e36d0e7a146630c4000000000000000005c8d55907f5eece0a80000090001000000000017c0fc6ca1b6f8db3590cdd3153a01f8ebf7ab2440c065add0bdc5a27bfb9cc3e8471c2933babf64597f7f24c659b0756fa3e3ba42a8bd831754000000000000000000"], 0xb0, 0x0, &(0x7f0000000180)="68aaff816c96bd6d8aa0df0ae3e5135e3ce56b2a132d53221d438b1c3bcc800b876ac5bb9a43f3cdfe2db151a9a0c2d39169393552871d10342877820940e08e3f307ccce7429e503b3684ea68c6ee8aac4da1b564f4fbd97ddc6c14d2f5186a3e755d79d518f3a2af6b33e92672cdf697aab40d17e68dcd7c994f3cd747ffe369584d8931cb5533fd2717b86f9ce03689553954155e28477225c118ce74b4037619b6e5ca0f19fd7bd36706e2cc3b9f"}) 00:06:48 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x19) 00:06:48 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r3, 0x0, r2) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) splice(r4, 0x0, r5, 0x0, 0x4ffe0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r7, 0x0, r6) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYPTR=&(0x7f0000000000)=ANY=[@ANYRES16=r0], @ANYRESDEC=r0, @ANYRESHEX=r2, @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYPTR64=&(0x7f0000000040)=ANY=[@ANYRES64, @ANYRES16=r7], @ANYRES64=0x0]], 0x36) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r8 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r8, 0x0, 0x3979, 0x0) 00:06:48 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0xe) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) ioctl$UI_SET_SNDBIT(0xffffffffffffffff, 0x4004556a, 0x5) write$tun(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000f500000000080000000000ffff001e000000000000ffdfffffffff000000000000ffffff7fffff0000"], 0x2c) 00:06:48 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f0000000140)=ANY=[], 0xffc1) mmap$perf(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x4010, r5, 0x5) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r6, 0x0, 0x3979, 0x0) 00:06:48 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x1a) 00:06:49 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x1b) 00:06:49 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x1c) 00:06:49 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x1d) 00:06:49 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x1e) 00:06:49 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$GIO_UNISCRNMAP(r2, 0x4b69, &(0x7f0000000180)=""/214) pipe(&(0x7f0000000140)={0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYRESOCT], 0x17) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r3, 0x0, r4, 0x0, 0x3979, 0x0) 00:06:49 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r1, 0x0, r3, 0x0, 0x4ffe0, 0x0) fsetxattr$security_ima(r2, &(0x7f00000002c0)='security.ima\x00', &(0x7f0000000300)=@sha1={0x1, "171987012b736f813247cbcc8dfbeef845bb6671"}, 0x15, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r5, 0x0, r4) r6 = pidfd_getfd(r2, r3, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000100)={&(0x7f00000001c0)="212b35587ae09c8fa571e14a2b911ecc3a1f21c58354d64713230d5b5bdf6e846cb1146243b38e3446c208c363a21f7074758aa13eb4b15d2fcb79adb88262cc63416e913e4da70b6c62577ba9d56cc14edc471fed8a2012b898402e9e8ccf5c6ae396455b8d4c575d055b9921cf3bc03162ab6c95bb06d634a31ee28b4e4898e082eac04a7f703fb60692746ad3653faf14fa4f57b3f0d1a98883", 0x9b, 0x0}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r6, 0xc01064bd, &(0x7f0000000280)={&(0x7f0000000000)="534f54727c9c56f3ba44b1be9540e708a36cc1f0fca03a9760e6f75dcd0b8ac080b3ef60a81954fd257c429e21723e7a8d920fae8a116354fe8adda36f8e40ce8b9377feeb4587a9495496e17799846099497952e06de94fde46c5261de1652c0e83f2346167dccc0772126c56690d1e7534d3aeb129bd75a08912d147ff2e9f19ecfc637e0c6c5fd36d3d4c0e470150775773268b9f9a87cdcebeb536a3b586a85dec99219552171b04467992defb57960c7dd679e2cdb69e516233501e539093c626487e39d5435ea493291d14a2678f42ba10041f0ac0180658a2cbd12220f2b71f6ac8d4eb137a07a0d2f11e658cb7450169", 0xf4, r7}) write$binfmt_elf64(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="0e9b419b0000500000000000000000d8547c000000000000000000000000000000004000000000000000000000000000000000000000000038000000000000000000000000000000000000000000000000ff00"/136], 0x78) 00:06:49 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x21) 00:06:49 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r1, 0xc0485661, &(0x7f0000000000)={0x1, 0x2, @raw_data=[0x40000, 0x2, 0x4, 0x1146, 0x6, 0x5403cf49, 0x7f, 0x9, 0x400, 0x2, 0x3, 0xee37, 0x4, 0x1, 0xffffffc1, 0x4]}) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2) r2 = epoll_create1(0x80000) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, r4, 0x0, 0x4ffe0, 0x0) sendmsg$NFNL_MSG_COMPAT_GET(r3, &(0x7f0000001440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000001480)=ANY=[@ANYRES16=r4], 0x1}, 0x1, 0x0, 0x0, 0x90}, 0x2000000) write$binfmt_elf32(r2, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x1f, 0x0, 0x9, 0x3f, 0x10000, 0x3, 0x3e, 0x3, 0x2ce, 0x38, 0x4b, 0x6b7, 0x7ff, 0x20, 0x1, 0x8, 0x800, 0x800}, [{0x60000000, 0xfffffffe, 0x6, 0x91f, 0xc70, 0x7, 0xd23, 0x3a2}, {0x0, 0x3f, 0x4, 0x0, 0x0, 0x0, 0x6}], "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", [[], []]}, 0x1278) write$binfmt_elf64(r0, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], 0x78) ioctl$TIOCGICOUNT(0xffffffffffffffff, 0x545d, 0x0) 00:06:49 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = getpgid(r0) process_vm_readv(r1, &(0x7f0000000480)=[{&(0x7f0000000000)=""/107, 0x6b}, {&(0x7f0000000180)=""/140, 0x8c}, {&(0x7f0000000240)=""/210, 0xd2}, {&(0x7f00000000c0)=""/114, 0x72}, {&(0x7f0000000340)=""/177, 0xb1}, {&(0x7f0000000400)=""/93, 0x5d}], 0x6, &(0x7f0000000940)=[{&(0x7f0000000500)=""/114, 0x72}, {&(0x7f0000000580)=""/50, 0x32}, {&(0x7f00000005c0)=""/184, 0xb8}, {&(0x7f0000000680)=""/235, 0xeb}, {&(0x7f0000000780)=""/93, 0x5d}, {&(0x7f0000000800)=""/161, 0xa1}, {&(0x7f00000008c0)=""/80, 0x50}], 0x7, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = dup3(r5, r4, 0x0) sendmsg$NL80211_CMD_GET_REG(r6, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x20, 0x0, 0x800, 0x70bd2c, 0x25dfdbfe, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4890}, 0x40000) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB='\b \x00', @ANYRESOCT], 0x1a) write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xfffffecc) r7 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r2, 0x0, r7, 0x0, 0x3979, 0x0) 00:06:50 executing program 0: pipe(&(0x7f00000003c0)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(r0, 0x0, r1, 0x0, 0x4ffe0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)=0x518) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x8000, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r4, 0x84, 0x18, &(0x7f00000000c0)={r6}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000340)={r6, 0x30, &(0x7f0000000100)=[@in={0x2, 0x4e22, @empty}, @in={0x2, 0x4e21, @multicast1}, @in={0x2, 0x4e20, @multicast1}]}, &(0x7f0000000380)=0x10) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r2, 0x40806685, &(0x7f00000002c0)={0x1, 0x1, 0x1000, 0x1000, &(0x7f0000000400)="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", 0x80, 0x0, &(0x7f0000000240)="d4fc76322babc1a2748921cfc2579cfaef8abbb572bd3e0b3cffe1ad7dc43dcd852aead4b8bec7a622b3a3aec26e3402e6f7c730b22f9f48f1f9189e44231c796a8aa7646a24072b65487d97b3b61c7e935dfb1ecc7403a2fb64d2de6adcca7a6638a0fbeb60888003699cbad65b5c3e20b5cdbd649e36f76148efb35096decd"}) ioctl$sock_inet_SIOCSIFADDR(r7, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x4e24, @multicast2}}) write$tun(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="009a00f500000000080000000000ffff001e000000000000ffff0000000000ff38df0000ff00000000000000f38604adb6f98b19b310c4e86887c8090eb749f0cced2d229506bb001b7d205c92b7bf3d8ce8b89b198c4daa4b905206903230c24f989801e92e79efeef28a625ff090aa49fb1510280d1fb814e4aa220fa55023f803d8336beda40ccd277d5cfd4c6800853aa8cc0c9dff70"], 0x2c) 00:06:50 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x90080, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f0000000180)={0x5, &(0x7f0000000100)=[0x9, 0x401, 0xdb, 0x200, 0x0]}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) ioctl$UI_SET_PHYS(r1, 0x4008556c, &(0x7f00000001c0)='syz0\x00') r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:06:50 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x22) 00:06:50 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x4ffe0, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fb0\x00', 0x40000, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) splice(r4, 0x0, r5, 0x0, 0x4ffe0, 0x0) r6 = fcntl$dupfd(r4, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') pipe(&(0x7f00000003c0)={0xffffffffffffffff}) r9 = socket$inet_udp(0x2, 0x2, 0x0) close(r9) splice(r8, 0x0, r9, 0x0, 0x4ffe0, 0x0) ioctl$CAPI_INSTALLED(r8, 0x80024322) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r6, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r7, 0x31, 0x70bd2d, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40004}, 0x4000040) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 00:06:50 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x23) 00:06:50 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x310, 0x40}}, 0x40) 00:06:50 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x24) 00:06:50 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b0950", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ocfs2_control\x00', 0x40c001, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r4, 0xc0605345, &(0x7f00000000c0)={0xffffffff, 0x2, {0x1, 0x3, 0xfffffff8, 0x3, 0x1aa9}, 0x72d}) r5 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$FS_IOC_MEASURE_VERITY(r5, 0xc0046686, &(0x7f0000000180)={0x4, 0x86, "d6529c5c847915b57320a7eeb842ff29e69afd9025fdb29fca6eb0e1c2e746d4dfcbbddd86405e578c7fb02d1a33eda8935af66dc450824b8dee1a56ab9a4954b48e6de3b9ca6fa0bb09e5cb87f3a4f6c6689d3f4f52efb8df955c24f90fdbbc72cea510a751c04da426db4dc324127b75022f1002bbb87712d4ee1f9b8d8b56050e1a43b8d3"}) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r6, 0x0, 0x3979, 0x0) 00:06:50 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="0e9b419b000050000000010000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c3158d1e16cc8f8ea558b5a2e867300c37ef9600c7f2bfc0af7"], 0x78) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = fcntl$dupfd(r7, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r9, &(0x7f0000000140)=ANY=[], 0xffc1) r10 = pidfd_getfd(r8, r9, 0x0) ioctl$VIDIOC_STREAMON(r10, 0x40045612, &(0x7f0000000100)=0xfffffffd) r11 = dup3(r2, r5, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r12, &(0x7f0000000140)=ANY=[], 0xffc1) getsockopt$inet_sctp_SCTP_MAX_BURST(r12, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r11, 0x84, 0x72, &(0x7f0000000080)={r13, 0x9, 0x30}, &(0x7f00000000c0)=0xc) 00:06:50 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x25) 00:06:50 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f0000000140)=ANY=[], 0xffc1) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) splice(r6, 0x0, r7, 0x0, 0x4ffe0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) r9 = socket$inet_udp(0x2, 0x2, 0x0) close(r9) splice(r8, 0x0, r9, 0x0, 0x4ffe0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) r11 = socket$inet_udp(0x2, 0x2, 0x0) close(r11) splice(r10, 0x0, r11, 0x0, 0x4ffe0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) r13 = socket$inet_udp(0x2, 0x2, 0x0) close(r13) splice(r12, 0x0, r13, 0x0, 0x4ffe0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r14, &(0x7f0000000140)=ANY=[], 0xffc1) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYRES16=r1, @ANYPTR64=&(0x7f0000000040)=ANY=[@ANYPTR=&(0x7f0000000000)=ANY=[@ANYPTR64, @ANYPTR, @ANYRES32=r2, @ANYRES64=r5], @ANYPTR=&(0x7f0000000100)=ANY=[@ANYPTR64=&(0x7f0000000180)=ANY=[@ANYRES64, @ANYRES64=0x0, @ANYBLOB="19c5b6807cd14ac985ab57f785077c2107bd74af03dc6210ea943e5e7b2f43f13323e00f492d3110980d47438fbec69968b781b20d934ffb773de1d7a4b39972f74bb90b2a00f99c8d424c74578e25fddbce60fea11fa329fb667fb898f4118f2e193170cda3475712840c1c631ecf4a4a6f4483f99c563c0d5a8354b7c0a18528f85c85758cc3b706a2db163eebe6466fa7", @ANYBLOB="cd910e2d6ae02aa73cc31dc0ccd7372b97344fd0ccc2214d84acb2e8c3754fa6284b572fe80d5199dcabb1dc3c6a18ce2e35ab72460a2ac28690a7f48dcdd0435b20b4d126e3fa10601c4ff67e499d58786846171777d442e99133cdd81bed1b08b4503923a969b7a543b244e624c766e742ff1cbb4cc4b3c6729eef4008de70bab265149900a3ba5540afa9ff18191624e8139a46b1276478bd9499fc77197281cdd1050563a3488653fcc33d7854b5ac5065c6772262540161b59ff832fb4d222c3c74728f93ccffbd2f85a0b4f554736a7a28c5fdcc4e3ca03c3ec35de87d477d5d7006", @ANYRES16=r13], @ANYRES64=r14]], @ANYRES64=r8, @ANYRESHEX=r10], 0x21) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) syz_mount_image$ceph(&(0x7f0000000080)='ceph\x00', &(0x7f0000000340)='./file0\x00', 0x1ff, 0x4, &(0x7f00000006c0)=[{&(0x7f0000000400)="136cfbc9564c69a77e1a5131b3f73b99bde18a4980fe7ae40269f70dc4c156fd6b55d21c81e5e81a372dede8adace0f51daf1517c27bd64a03d6410d866bf16f8548551248b3570a8807ce0641974f73adabdcc34ddc9d96e20280cbae9b0299bef95593d90507db70f5f1df3544da20eebc18b83d826b3a1313416ad9ee7afb522b991c6310343dcba894e775b975390b68be1e839ea99504a269f748232621a960a601c02d43095216d31b83b619b8b25a3d9d267ddf49623bfbf5857a9c52e15570aabb3318f3106c46dc8d1125766d082e7eda3d168951b13fe57dfabc103fb4", 0xe2, 0x8}, {&(0x7f0000000500)="4607966b49cde16c947d364c7ccd98739dcb59548fb5688c0b736c6a63af877eb99df0790de8af9af82d87fdcbe756458e557a8d8689ad5b4863f268cf17345eeffbf426ad8463c791209a9b461533672295c313a40e9758e2488007405a01e65f570ecf52926e7332814078bb74c06330a082ca349678bd3dbae5d7c30ae4ba6cff", 0x82, 0x4}, {&(0x7f0000000380)="d66e2f55709d0b278374e65b33c05c10b32c99cf5bfded6206fab3208fda4eae974f0ceab16b398f0933ea", 0x2b, 0x2}, {&(0x7f00000005c0)="56c60a05761163991908bb42320b3c1c6efff0018b73e40608dc7d337d9322c1a0b3fccaf97ae0ff4fdd1d70569fc908897239631ca67e0a5bbda50592a892ff94c00815d72e0d5a684c22da16dd089c2dcd17a5bfce2b1b13bfa474879db8fa3cd4688a557aed2ea0cbde19db0c301f84261b9d95db8ed35171f3ae371822f0c525751b48921a85fd8cd3d93d71d30365d1c88f5b2ade6b398a0f7e415137c995c7593098876228876fe7b0a40564dd2856c6ebbde439c5f76835a5db6efbd78ce262f3dbb461537906cd", 0xcb, 0x8}], 0x811808, &(0x7f0000000740)='vboxnet0wlan0keyringselinux.\x00') r15 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r15, 0x0, 0x3979, 0x0) 00:06:50 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x26) 00:06:51 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x46f337473c245a83, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val={0x0, 0x0, 0x0, 0x8}, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:06:51 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r3, 0x0, r2) fcntl$setsig(r3, 0xa, 0x12) fgetxattr(r1, &(0x7f0000000000)=@known='trusted.overlay.redirect\x00', &(0x7f0000000040)=""/1, 0x1) 00:06:51 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x27) 00:06:51 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000f500f1ffffff0000000000ffff001e000000000000ffffffffffff000000000000ffffffffffff0000"], 0x2c) 00:06:51 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) ioctl$VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f00000000c0)={0x7, 0x6, 0x4, 0x1, 0x200, {r2, r3/1000+30000}, {0x1, 0x0, 0x3, 0x81, 0x7, 0x29, "0a384dee"}, 0x596, 0x2, @planes=&(0x7f0000000040)={0x4, 0x9, @userptr=0x6e62, 0x3}, 0x2}) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r4, 0x0, 0x3979, 0x0) 00:06:51 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(r0, 0x0, r5, 0x0, 0x3979, 0x0) 00:06:51 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x28) 00:06:51 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="0e9b419b00005000000080000000000000000000000000000000000000000000400000000000000000000000000000000000000000003800000000000000000000004a739bece49abcd15dfc7f1239f04dea00"/120], 0x78) 00:06:51 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x29) 00:06:52 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000100)="7b49e0b22a036496b85debdcd200a7efdb0ad5a355626e9a2d70931c8e5eeb703f1f9d867f956796022f57f4d8b152fb37e6102da8fee1f30e763f08483f942e0d61a916158171eaaa644a2915d87f64a5f9eec00e93586c149ea7894ce317c144d74ff5aabd1afde367ec49e45681061639bbdcca1b4546693c0cbb287d58cf36a87bdf20b5c15b3de8654f13d79518ce1e1f9cb388ed9735188c34152eb5f4fe2c993eade8f3ec68f736c22cac8518dcc586b9463897fb28668cc785b5fadc97adc5535e5b2e976d5ea3527ad56dab27556c307108a97f764785804bc4cc837d22176404390b1f0cfe", 0xea}, {&(0x7f0000000200)="e9f651ab57892d94ff596412454b65b9a2728590ec08", 0x16}, {&(0x7f0000000240)="cf5a76c6f973b0bea4cff5706dfefb7bf327e5cc6b8b29944e61d2849ce07e2585eb5e206caa8f9cae14f521cd8a95e1e0f146", 0x33}, {&(0x7f0000000280)="e6ece72bd588e86b8e6af97eb42406e63c1c563ee689ecc8a7969648232434304158255275ae71078853d05b2c06ceb7ac1ef386fe513f8568d168a6194e70b32e58f9dd4c8946b9a94f1f8e223b5025ce882c637cb5dadb6ff9f63b8e550b2523a4686a393985c1644d5990cff93daf969f53da3a6d96e3b149d5d78625c993beacbebe082ab0467f49438f9921f6050ac1c35d683a8ed04c4e9c2ab3169fa0500c68c82d05124ee5cda59fc550c6a12e220efb174654e34d6c6fd74140819caa19ceac0307cf2b69ed7e1e7cba2a7fb69ced878593b6a3148842a53245f58fdf2765b86052c309500dbb319800b4445404dfae743f900510159a1b", 0xfc}, {&(0x7f0000000380)="086b0e7a12b8a35a4468b2d0951e6f5914829b6319debf1999b5321fde8d17ee49b2", 0x22}, {&(0x7f00000003c0)="87c73b17cc0c2c4ea50e010731e848015c4a51c769f6eefeccbf235d16978f32a69cd8be1bd0686bd570424965815431c35cb7eeb88a432e056243986462b63ac426cbef5de1e3a1a0d97e21fda2090e6328fa9355bdb96e2f77828993ad6098b28a6341a1cb46b93f736eadea40b2d4f8c4077a61c590accba5dc1f836291f906e419ae860eaada131866b378e52436e74da2c5d6d264dbb85184dbcfe4170d27b08502cc4059d8cf7702ad483031ab7189c0166400e9a7840982af34b07984344be614fe421faf03d69870644dd28c0d", 0xd1}], 0x6, 0x80000000) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000540)='/dev/ocfs2_control\x00', 0x8000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000580)={0x0, 0x0, r4}) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e9b419b000050000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000038000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000041fc1ba941fcfd92925b82debce1b45b9df646da7e1caed74a2e93c932cbe96835cc223483e74e02e5b6b15cf7a13b597fc417a7e43450e34b140002ca9ab6320ed5d7ce2f966c76a613905d539b51113f3e711be8d9c8da4b60136c0c692f9775964e8b029bc17fde64a4ad3876de1deeb52d2861"], 0x78) 00:06:52 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x2a) 00:06:52 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x2b) 00:06:52 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1000}) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0xffc1) write$P9_RSTATFS(r2, &(0x7f0000000180)={0x43, 0x9, 0x2, {0xaaba, 0x367, 0x7, 0xffffffff, 0x8000, 0x7, 0x6, 0x4, 0x767216f0}}, 0x43) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val={0x0, 0x0, 0x0, 0x8}, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:06:52 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TIOCSRS485(r3, 0x542f, &(0x7f0000000000)={0x7f, 0x40, 0x1}) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="0e9b419b00005000000000000000000000000000000000000000000000000000400000000000000000022000000000000000000000003800"/120], 0x78) 00:06:52 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = syz_open_procfs(r1, &(0x7f0000000000)='net/wireless\x00') r3 = dup(r0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000040)="0f20e06635000020000f22e00f01cf66b9040100c00f3264dbe1650f01c8f30fc77100670f01cfbaf80c66b8c348f38e66efbafc0cb093eed8c33e0f20c5", 0x3e}], 0x1, 0xab, &(0x7f00000000c0)=[@efer={0x2, 0x1}], 0x1) 00:06:53 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x12) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="0086b8e650ad70b6750000f50000000000000000002bf8ff001e00000000008200"/44], 0x2c) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttynull\x00', 0x18d881, 0x0) 00:06:53 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x2c) 00:06:53 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r2, 0x0, 0x3979, 0x0) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x24082, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0xffc1) ioctl$LOOP_CLR_FD(r4, 0x4c01) ioctl$KVM_GET_ONE_REG(r3, 0x4010aeab, &(0x7f0000000040)={0x7fffffff, 0x8000}) 00:06:53 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x141) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x4ffe0, 0x0) sendto$llc(r2, &(0x7f0000000040)="a74ea583167e81eab06960aecb3204088bb409223d553bcd0c57e78ead258a92382652b963411bcb3849a850e52b384c2880ea44107d5f8458c0f647859e91243d1eec94427fc64d2d6ea967e297d2d28cf2a4888e7bec80fa0ed0da8e622f1010d5cd2b6fd129cc960cc298761f9511920e7edb75bf3f15a72dc69df3a1e21e38ba240b872a8291d2024672b2359a8a41c5ae0bbc147e99dc973c4fb18b968b364d2351a34f9ae787284cf0402b5fcb59827b864b53bce4ef403ee6bc3c27984843546b83aecb30ceec9cc861d8300cf9487ff8a7d5", 0xd6, 0x4008000, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r1, 0x0, r4, 0x0, 0x4ffe0, 0x0) ioctl$TCSETXF(r1, 0x5434, &(0x7f0000000000)={0x100, 0x8001, [0xee1, 0xffff, 0x7, 0x7, 0x1ff], 0x7fff}) 00:06:53 executing program 3: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.opaque\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES32=r2, @ANYRESOCT], 0x1b) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r5, 0x0, 0x3979, 0x0) 00:06:53 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x2d) 00:06:53 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) fcntl$getflags(r0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="0e9b419b00005000000000000000000000060000000000000000000000000400400000000000000000000000000000000000000000003800"/113], 0x78) 00:06:53 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x2e) 00:06:53 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) splice(r5, 0x0, r7, 0x0, 0x4ffe0, 0x0) splice(r7, 0x0, r4, 0x0, 0x4ffe0, 0x0) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000025c0)="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", 0x100b}], 0x1, &(0x7f0000002000)=[{0xd0, 0x116, 0xfffffff6, "2cebd938ff2789aefbc111a6c75f81a36349bea640c1b21989a62c2f8ae8941db97f51ae9c1326dee5f9b66c540272458c3d91c14ebe97a4b8abc851a8a1cd4344cc3d8fe1901a93177e6b823b5f83db1ff39bfb3c85c421925248cf710a9ec8a81cd62bf5953f2cfafe9e9468c0d3cd20ff2bb9d6b9db3d7f0723cd962fa72485f08987bdfdfefc065d8d92ced708a30e9144ced168634b61e123cc4e756ee8afa268b282de77b3392f94b7aa568067c6cb3eb710dcd565de0a"}, {0xf0, 0x10f, 0xfffffffb, "89730a5165ab4b09971f6087e1a8cfdd9b4cd61ee2ffb64e228869a815ba35f1a769bc016c5401f65d7338caf0e0dfe250b5e35c60d92b8c3e23ba982f2fec169ddeff3ee58e4c509e78cc5d14cfb30dab6b5e516533d696307704e7a70ea8bd5aad19655448704c07e38aeed52947fccde3515f62ea97b014d7ce4b285567c2c27f36ea6a1f35c48b06202fd8cc944e118b94ed70627e1afb051a49ebb58d0b4d885e16381d7902300e2e819641eec7bfa89c786cb6627335641a864f60ad7038ee3192ec43b75efa33103e0c97054b6bfb2015b11256b3086f3c0b4be0"}, {0x78, 0x10f, 0x7, "2b41c7f18bae5b18d2ca6dc890bb0026536370820b967c2212d11d5aa77fc12f9bc9241727db3cf16fff8a8f020a6e6e8453d604b0b92b575f06bcb8c49d3f63ae6a20bdebd7a66f676f78da03e32656e88e4098f88a9f92a4f54101010b84bc6f648e6f2b2d72e7"}, {0x40, 0x109, 0x3, "d63b7e8eebc67f678e1fd8f983bae603ac0d7c5e337ca054bd2a3370081a3226f234b051cf03989d92d18c08a2"}, {0x48, 0x117, 0x9, "c8625c8d4346330c0810cbbc10513ebc94364c1d9b9f6964b5f8267af02085f643f420ba38eefe0892f54ebd6711054368a861"}, {0xa8, 0x10a, 0x80000000, "2fd80b65e57bf0571710ae6b07dda6dc5b3dec582c3d77dc7b9b799665fe129f81334db537e38e2fa7461c5ba1bceb82d0af907607f3e9e3c7b6a3f057fec46b662523c0fa20846faec56c36fe5051257e7416f1d6bf4e14a0ae9939ef6b06e81c94d94577276168497e8a93baaa679edb91ecb4d1971ac3259e5a84e71aa9a76eba8d7cd64f540bd6af9b7b6709d44baa570fb35684"}, {0xd8, 0x0, 0x4, "010d09cdc6374a551e869bfcb4d6cb6509a97f1ddc4261632bd0a0399db5e61b34e8f455b387a7a8d30a1205d48466342b6472c91e0fafc33aa4335d6a74367935fbb314b3fa060fa447dbbb1e77273611ec89d5ad5954a0871172b14f4ffbd6cc664db3b5b045223c9dd61941abe540fdef80c688203cb4c719ad7fd271eb3dc710fc9001785f4c6d4fa910e98a22faec8301ff4e49bb522d7ae434516ae4ffd324a04ab2c18435758025b67e6299f4763022c998592515a7d3cf5b35a5242fe33d6835d2"}, {0x90, 0x6, 0x80, "b7fa7348e1b4b333ad491f5b26ecea3346bd48f918f69888a57180b62c4f55e33a626ee1e0e046d15fa152d2ae4d85647bcb6c87aa7d7a9b245407c57afbe5550418773c4a8b2059ce40c65314dd881dcd46be818bad812017a747a805255ef537cb1aac9b15e740cb95b2987879a7362d70f6858d733e3365d1a6452525dfd6"}, {0x30, 0x108, 0x2, "163aad62eeb6787aa8aea6dd0f868abd802eae827776212378e725b85f55"}, {0x98, 0x10c, 0x5, "515291c2b1b8386d84d74c6901619073581e45be9358756074cdc14aa94feb992adceae825b6360cd9830fd1f604178d48ab490f4ce347c503b96c01268aa6092e2e7ed4166cbfe37ec73c82cb0b3e7a548efe4e9cc47af6253d5f0347af01eb482980c443e3dbf3657bfce3d86d04f54ebf000ce07c505b15710e2a13c14a5f852f"}], 0x598}, 0x40) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) remap_file_pages(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8, 0x7fffffff, 0x100) write$tun(r6, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = fcntl$dupfd(r9, 0x0, r8) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) statx(r10, &(0x7f0000001e00)='./file0\x00', 0x0, 0x7ff, &(0x7f0000001e40)={0x0, 0x0, 0x0, 0x0, 0x0}) r12 = getpid() sched_setscheduler(r12, 0x5, &(0x7f0000000380)) open$dir(&(0x7f00000001c0)='./file0\x00', 0x40042, 0x0) ioctl$TUNSETSNDBUF(r3, 0x400454d4, &(0x7f0000001280)=0x5) eventfd(0x47a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r14, 0x0, r13) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r15, &(0x7f0000000140)=ANY=[], 0xffc1) fstat(r15, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r16) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000001f40)={0xff, 0x6, {r12}, {r16}, 0x7ff, 0x8000}) mount$overlay(0x0, &(0x7f0000001880)='./file0\x00', &(0x7f0000001dc0)='overlay\x00', 0x210061, &(0x7f0000000200)=ANY=[@ANYBLOB='upperdir=./file0,workdir=./file0,smackfsroot=vlan0\x00,euid=', @ANYRESDEC=r11, @ANYBLOB="2c666f776e65726ecf7f94ad03e6b9d5265d4abe4cee7845bb4dc441ca7f9534d547a40054b58cf669ff199401f75d992d7181bd0051e04be9339b1f1a4f9724b9c102ba0c6391a99730426f843e2adce83de9f526a55dc57a1cba0f074bff644ed5feaf19a9b2020050fd9912b6f97359b67809c9ba8f331e9a2258cfd2582136f0b77737bcc1102b95df00f4493e90329eb35e96d721f8af707d37b4183bbc5fb01f3ea811768fa15f2b823c9ffde1f1b239c90dff586ef6e706016cd08339ca7ffba22113e0b5ba92d98fda66bb6a6e5f890adbfb756e0d456d16e91b089cc11e344881761095b73e25642147944ec732e52f43", @ANYRESDEC=r17, @ANYBLOB=',seclabel,\x00']) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) r19 = socket$inet_udp(0x2, 0x2, 0x0) close(r19) writev(0xffffffffffffffff, &(0x7f0000001d40)=[{&(0x7f0000001840)="e45addf695ba9a69aaf6ffe57974906ceda83ca29621e9498568a1deed2020302b5f8225f04a2bef38c2011490f17dd2", 0x30}, {&(0x7f0000001880)}, {&(0x7f00000018c0)="8ed06ac1e00a41aac17410655ba053e321e94d574f1275e2bf39110a4f6870227798ed5a49d9a1c1bdebbc87b5b8a021d2d595a4abff6720bbf4fa7bfe9301b5dce7b3fdf676c03919c162b8631315232f57b5d9af9691ec200a8eff3d7f9f4bfa221b43c913a3633353ace4301aa4ced8bfd6723bb340e758e87fcbec71e357392e8387e320506a42e3c3a717698283830e7d5be51fad0a4f51af2f786d35f7e16a5e4d3234651f7a5455832ef3ad87d94d01eb305f50226e5b8a587a18703e824e11369dee40374df159d2204dc292940b91ee1fd97937", 0xd8}, {&(0x7f00000019c0)="e6a42d65e1548a298080f229c1fa419d08b2000782cfc1cf3ee742c4ffac3010b29ec65d308c9dcc9654c248dbeb6c9205e955d1ca76c7532f99e6963e33f12f09387a0701c659ddd0c44480d7626d4f4731e6a5b0986e1f0e1b0d67b70a7c1517aba92639788c56ebdcf7e3a17c2f7a4bb52ff8d61f105d6e17c6615a94e8d9e5620a567cb283dfaaaa0c68840691901e74f1514d4a666930b30b8c2071f722cfff91dbdef8130d86ee2f9a6935b70d4484c4e046c254ea25645722c5d9ac74eb696ac5fa3fa0ccf869bbcef944064f28e7a962dfb23556127d4b10", 0xdc}, {&(0x7f0000001ac0)="8dab294ed659177bbbc842286d309e38bdb9144d95cb26c410e4a51f4a9679d9cecf97516c117523ac3c38e5bc26c2a5f298fcec93d44665daaabe4a960233ce5407d544022d5d47199e6352d9b836f12f1349a245fe0b2a9c79d9e411bada4faac28d1e5873cb13c94a8704d5fc6e174b0cffce35a26a7050dcb63eb911434f158ceac7088efa1ed6c1ec092e88e735dc973c9cf45129b04e58ff6de961741d257b68740887a68ad13e78597022cfa44e3485b5ed7866ffda2ebd20ef27bd189bdf86e413c9e638c1b20a54cd4a0b2d7fd7889fb3aeb38db8b886554f565d30320cd8857abc2e7552e19c24913b873b65d7fe7f", 0xf4}, {&(0x7f0000001bc0)="f5797c8ffba8ef03d2058ca787f45d02cd79202520ae43e753d8bec6cd1cae19eeeef67b830fc6181d04a92bf8a5cffaaa4cf304f5898d793c81e6381ad5ef1ff37e915ce5f00c7871d56a0532e4753fa4", 0x51}, {&(0x7f0000001c40)="236a1057885282fa83ccdb7a5f3249feb4744813c04aaa2bb9e0c84d1d603968191c5eab3421cb1050b0ed7e5c02e924003cbe434bfef03964b08a2d94f1d1cfe0ffb452e158c78df149d74fca5cbe03b108dab8f8e87b5d99cd81eff546a31a4748d4cd07220ed03a3e7e4ef9b96b250e97a413fead86af8db7b3d144d09f733ef752950c60ccc62b95ac370546dcbf710cd7c720452a81aed82b3a0a7894b06af7cb85d87ce83bd15b9acc8ce369a8fd7f26236020c7e154fc407831a02389f77faf8094f07a7df9d43fc36bfe2c2cb240203b0a23d84fa2ac15c22674dc", 0xdf}], 0x7) splice(r18, 0x0, r19, 0x0, 0x4ffe0, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r18, 0x891c, &(0x7f0000000100)={'vlan0\x00', {0x2, 0x4e22, @loopback}}) 00:06:53 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe0, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000200)={0x990000, 0x8, 0x200, r1, 0x0, &(0x7f0000000140)={0x9c0901, 0x3, [], @p_u8=&(0x7f0000000100)=0x6}}) ioctl$TUNGETIFF(r3, 0x800454d2, &(0x7f0000000240)) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000180)=""/95) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e9b419b00005000000000000000000000000000000000008100000000000000400000000000000000fd1b0000000000000000000000381300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000492b33488b7374d83a908f0000bed96339ae94415ae9d0da874ddf991468e055fad087b2a6684c5309d4f4cd9883f22231d0e3cba99838795dde1eb8bb3d90962e0d4feeff6bc7665afff1a9e71109e2f45a7d628abdbe96cb5ece37a1997618250dff087b262cad55e75efdbcfc80e276c1ea7a3b85dfda8c1c091aac"], 0x78) 00:06:53 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x2f) 00:06:53 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe0, 0x0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f00000001c0)=@urb_type_iso={0x0, {0xc}, 0x200, 0x42, &(0x7f0000000000)="0e59eceb809e36d615c0a677a7b8f9c52b061931f49bcfdce5bf4086749d535d2edb9b39a66a555c7fdb6763d2a34617012cbacc75548c33eab8e5177a5884b4d727f50d13b54ed0d2f23870bca4c801a720c7cae5c907eafeaca79d0311abddf04aac83de197ec344df5737f96d73746fc30ee85477", 0x76, 0x40, 0x7, 0x34, 0x0, 0x4, &(0x7f0000000080)="bc6e1e80e3981a5bc85de8e884e2f098f51578f117be43e75210322c2b8f3adee7c49268a3541ff6515e8d4c15cd38e8bdda01070bd1f3a9485b34d6ce579133f02fcc384423141b2e9c4a30f2a762b38fc1926f2650f910556b1279c659be0e22a193b05e8c3a9aa02291", [{0x1ff, 0x5, 0x1}, {0x800, 0x9, 0x100}, {0x0, 0x4, 0xffffff17}, {0xf2, 0xffffffff, 0x80}, {0x0, 0x200, 0x80000001}, {0x80000000, 0x9, 0xff}, {0x5, 0x6, 0x2}, {0x8, 0x9, 0x3adf}, {0x7fffffff, 0x8487, 0x4}, {0x5b9, 0x1, 0x4f5c5f5b}, {0x0, 0x9, 0x6}, {0x101, 0x400, 0x401}, {0x10001, 0x5, 0x6}, {0x4, 0x4, 0x7}, {0xf73, 0x0, 0x6}, {0x101, 0x3f, 0xad07}, {0x1, 0x8, 0x8001}, {0x6, 0x10000}, {0x5, 0x0, 0xf5}, {0x5, 0x5, 0x7ff}, {0x1, 0x10000}, {0x151, 0x1996e6bd, 0x2}, {0xfffffff8, 0xffc, 0x1}, {0x0, 0x91, 0x4}, {0x873, 0x80000001, 0x2}, {0x8, 0x792, 0x8000}, {0x401, 0x7f}, {0xffffffff, 0x7, 0x2}, {0x4, 0x401, 0x3a8d842e}, {0x6, 0x4ad4db9d, 0x9}, {0x9, 0x9, 0x1}, {0x6, 0x1f, 0x3}, {0x2000, 0xffffffff, 0x8}, {0x7f, 0x4, 0x20}, {0x5, 0xd5, 0x200}, {0x6, 0x587a, 0xfff}, {0x1, 0x8, 0x9}, {0x3, 0x4000}, {0x6, 0x9, 0x3ff}, {0x3f, 0x30000, 0x1ff}, {0x8001, 0xbc2, 0x7}, {0x3f, 0x3, 0x4}, {0x7ff, 0xfff, 0x5d}, {0xffffffc3, 0x0, 0x8}, {0x2, 0x3, 0x1a3}, {0x10001, 0x6, 0x2}, {0x6, 0x5, 0x6}, {0x4, 0x5, 0x2}, {0x1, 0x9, 0x2}, {0x7ff, 0x4, 0x2}, {0x10001, 0x400, 0x2}, {0xcb, 0x0, 0xffff}]}) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 00:06:54 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x109200, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0000000000000000000000000000ffff001e000000000000ffffffffff0101000000000000ffffffffff0000cc47ada0cdd716e8d6cdc0b19fc6000b9ef4b2c13510e30d14a0d1b57b94eca69e117967944e9c44fbac68773b52b6548862e012092c1f0d97c9"], 0x2c) 00:06:54 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x30) 00:06:54 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TIOCSLCKTRMIOS(r3, 0x5457, &(0x7f0000000100)) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000000)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}], "f2d3a06ce6fd392a0f968c8f9632cb0efb0e510da2723bd6819e462bbdaf5615a0883ffc927542dfc291c82c5b463acf32c10026269b11ae19ba4b7e6d91750007759330d6a4bf91296b8521028097d7ef6ff24ce55f7fec5518cccf2b7e11c45c8c11bfe9c889688d141452005114552f6e3dc0d85409b7"}, 0xf0) 00:06:54 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r2, 0x0, 0x3979, 0x0) 00:06:54 executing program 3: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r5, 0x0, 0x3979, 0x0) 00:06:54 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x31) 00:06:54 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="069b419b0000500000000000000000000000000000000000000000000000eaff3f000000000000000000000000000000000000000000380000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000015b1306e68d5ed648231dea3fc95f678294b78037a7636731d72828b4bb6f3e53870e6587ae11ec568d9b1ddb6d598dae8507b9c79ace4648821835d727056239fb1fef8662055767f95589134f2c178b61a7a0b4aaf22ddc7fbebec7df84d91a"], 0x78) 00:06:54 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x32) 00:06:54 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) ioctl$int_in(r2, 0x800000c004500a, &(0x7f0000000240)) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000080)=0x4) read$FUSE(r2, &(0x7f0000000380), 0x313) read$dsp(r2, &(0x7f0000000080)=""/161, 0xa1) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val={0x0, 0x0, 0x0, 0x8}, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:06:54 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TIOCSERGETLSR(r3, 0x5459, &(0x7f0000000040)) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x4, 0xfffc}, [{}]}, 0x78) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0xffc1) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f0000000140)=ANY=[], 0xffc1) ioctl$PIO_UNIMAP(r5, 0x4b67, &(0x7f00000000c0)={0x4, &(0x7f0000000080)=[{0x2, 0x8}, {0x7f}, {0x20, 0x95}, {0xff, 0x1}]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = fcntl$dupfd(r7, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r8, 0x84, 0x16, &(0x7f0000000100)={0x5, [0xc86, 0x2, 0x6, 0x4, 0x66a5]}, 0xe) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000000)={0xff, 0x8, 0x4, 0x8, 0x8, "40be93052457e3d81402901cc41d2427e816a8"}) 00:06:54 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x33) 00:06:55 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000040)={0x7f, 0xb, 0x4, 0x40, 0x6, {0x0, 0x7530}, {0x1, 0xc, 0x7, 0x20, 0x1, 0xcf, "ba05c67a"}, 0x4, 0x3, @planes=&(0x7f0000000000)={0x4, 0x200, @mem_offset=0x2, 0x3}, 0xa26, 0x0, 0xffffffffffffffff}) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0xa8, 0x0, 0x2, 0x401, 0x0, 0x0, {0x5, 0x0, 0x3}, [@CTA_EXPECT_NAT={0x10, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0xc, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}]}, @CTA_EXPECT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @CTA_EXPECT_MASK={0x50, 0x3, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={[], [], @broadcast}}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x3}, @CTA_EXPECT_ZONE={0x6}]}, 0xa8}, 0x1, 0x0, 0x0, 0x800}, 0x2400c005) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0xffc1) ioctl$TCGETA(r2, 0x5405, &(0x7f00000002c0)) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 00:06:56 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x4ffe0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r5, 0x0, r4) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r6, &(0x7f0000000140)=ANY=[], 0xffc1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r8, 0x0, r7) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYPTR64=&(0x7f0000000280)=ANY=[@ANYPTR=&(0x7f00000000c0)=ANY=[@ANYRESHEX, @ANYRESOCT, @ANYRESHEX=r4, @ANYPTR, @ANYPTR, @ANYRES32=r0], @ANYRES32=r0, @ANYRESOCT=r0, @ANYPTR64=&(0x7f0000000140)=ANY=[@ANYRES16=0x0, @ANYRESDEC=r6, @ANYRES16=r0, @ANYRES16=r8, @ANYRES64=0x0, @ANYBLOB="a1df16ee1675f3198571d38bc1dbe853cc83dc027bd78fdc1d25c5adca7d442dfe1a5e84acb360694f134323ea6afcef981688b7ecc1fc50a3c6c89c8d1b4b200d9adcec4b98007e82293eae19151da174a6e7fc05cc4d6537dafcd62f452d7d46c95f7c3b3c9c993e4bde98f85fdecae602043e1693f59142951ed37bc31a368b159aa39a6fc1d9531f39b0aeadf2e1df1d385349eab209bb4c0c0dd2208df81c1c02b30a7704a4b180f96f3771be0edab1610d12a404b38767abc57cdaa963ad52bbcb995d85ce016ed119772fd82d99d173b695ed14ce0cc95ba3973929fb"], @ANYRES16=r1, @ANYRES64, @ANYRES32=r0, @ANYBLOB="344030903a6725b4b098b363c6d3afded5b9e570df694659690ced662fc4a3df839d64143654d3bb96f2fd9b0b0e7df1e1ae7857d89ea671c9ffd215d055e2f5bf3e3546c1bf1e1e02a4464edb7a6c1171c5e04e2dd6bc39a834b5f29e2cb5582075de2d6b205edd764f61b559dd10f36b5de5588f7a532b6dbf3cf142f7de9d1216b1c555fd8b97f4c596424a4f7d88a9507d278289c7a4207740d2568e97355459298fbf998c7014c2a9b32bfac1944ccac6394bebeaddd3b7b14b82400d3b38ee18cfb9dbbf"]], 0x8) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r9 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r9, 0x0, 0x3979, 0x0) 00:06:56 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x34) 00:06:56 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe0, 0x0) r3 = clone3(&(0x7f0000000400)={0x1a001000, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140), {0x21}, &(0x7f0000000180)=""/248, 0xf8, &(0x7f0000000280)=""/182, &(0x7f0000000340)=[0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x4}, 0x50) r4 = open$dir(&(0x7f00000001c0)='./file0\x00', 0x40042, 0x0) fstat(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r5) fstat(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r6) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000380)={r3, r5, r6}, 0xc) fcntl$setsig(r2, 0xa, 0x2a) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000000)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [], "573d0aa80fadda8fb4a2e27582b05b0bc1df94ee2b2d8d700e356cf3dc6c18ac92b50a0b55c40d99fb443b37d7f27cd36ad5d87b18a924858005cce45b615baf6a2786769e4aa3342b3099ea5306d484fd321a26260123d0d36c69"}, 0x9b) 00:06:56 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xffc1) close(0xffffffffffffffff) splice(r1, 0x0, r2, 0x0, 0x4ffe0, 0x0) ioctl$DRM_IOCTL_GET_MAP(r1, 0xc0286404, &(0x7f0000000200)={&(0x7f0000ffc000/0x1000)=nil, 0x81, 0x1, 0x4, &(0x7f0000ffc000/0x3000)=nil, 0x2}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r5 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x100, 0x0) getsockopt$XDP_MMAP_OFFSETS(r5, 0x11b, 0x1, &(0x7f0000000180), &(0x7f0000000100)=0x80) write$tun(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000f50000000000000000603a130f8fc2b311f4fe79d67d5000800000000000000000000000ffffffffff"], 0x2c) 00:06:56 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x35) 00:06:56 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/snapshot\x00', 0x232200, 0x0) write$P9_RXATTRCREATE(r1, &(0x7f0000000300)={0x7, 0x21, 0x2}, 0x7) r2 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x7, 0x2080) ioctl$DRM_IOCTL_SET_UNIQUE(r2, 0x40106410, &(0x7f0000000100)={0x4f, &(0x7f0000000180)="d1612ab5020805f61defbd7fed210d4b4d103502dbf305649928efa10ef568ecf385314829f8285f10f175692ada311847940c429dc7ac7bd47ec67dfdaf2d88eb0ada68605c399a9dc7e1085d1d7f"}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = openat(r5, &(0x7f0000000200)='./file0\x00', 0x20802, 0x110) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={r6, 0x3, 0x0, 0xffff, &(0x7f0000000240)=[0x0, 0x0], 0x2}, 0x20) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r7, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val={0x0, 0x0, 0x0, 0x8}, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:06:56 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x36) 00:06:56 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0x2, 0x0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x622000, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r2, 0xc018643a, &(0x7f0000000080)={0x40000000, 0x80000000, 0x34}) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x632, 0x6) write$binfmt_elf64(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="0e9b419b00005000000000000000000000000000000000000000000000000000400000000000000000ecff0000000000000000000000380000000000000000000000000000000000001700000008000000580000000000000000000000000000000000000000000000000000000000000000000000000000c1598706f0f31b771eb011539bcbd289ac4d7c1ef94d32e5f590575ee78f0b161498f011f9b598854ad12bbd297012580e4a362544d7d2e763ffd10759cdcc3a3a8037468fe7006d598bfc402a52e9a603f0cafa617c51ec"], 0x78) 00:06:56 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x37) 00:06:56 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0xffc1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x1, 0x5, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x184, 0x40, 0x5e, 0x0, 0x0, 0x38, 0x3, 0x0, 0xffff}}, 0x40) 00:06:56 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x38) 00:06:57 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0xffc1) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) fstat(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r4) fchown(r2, r3, r4) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r5, 0x0, 0x3979, 0x0) 00:06:57 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x39) 00:06:57 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x3a) 00:06:57 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x3b) 00:06:58 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000000)={0x9, 0x5, 0x4, 0x40000000, 0x0, {0x77359400}, {0x1, 0x2, 0x20, 0xe9, 0x7, 0x7, "e47a4ce9"}, 0xf76, 0x2, @userptr=0x7, 0x4, 0x0, r1}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[@ANYPTR64=&(0x7f00000000c0)=ANY=[@ANYRES32=r1, @ANYRES16, @ANYRES32=r5], @ANYRESOCT], 0x1f) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r6, 0x0, 0x3979, 0x0) 00:06:58 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x88003, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000f500000000000000000000ffff001e000080000000ffffffffffff000000000000ffffffffffff0000"], 0x2c) 00:06:58 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x3c) 00:06:58 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000f500000000080000000000ffff1c1e000000000000ffffff7fffff000000000000ffffffffffff0000"], 0x2c) 00:06:58 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) ioctl$DRM_IOCTL_AUTH_MAGIC(r1, 0x40046411, &(0x7f0000000000)=0x7fff) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 00:06:58 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x3d) 00:06:58 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x53, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, &(0x7f0000000000)='async\x00', 0x0, 0x0) 00:06:58 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}]}, 0x78) 00:06:58 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x3e) 00:06:58 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x41) 00:06:58 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, r1) fsync(r2) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 00:06:59 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x0) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e9b419b000050000000000000000000000000000000000000000000000000004000004291c515f6ee21c10000000000000000000000380000000000000000d7c439790000000000000000000000000000000000000000000000000000000000002ba02265a65dc6f0dae2ca951077391e83e9b243b1c6771eb1ee03f53173a0fdf0a06945357f31578ab72600"/164], 0x78) 00:06:59 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x42) 00:07:00 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="000000f500000000ffff001e000000000000ffffffffffff000000000000f846611b061257129e5be9a6fe1c07757c6d4a56f7fa859c3d89106ea88728584727d8a345dc848dfd21d87bc1b39ee4c3f74b1fcdac78a5e0ec1acb2e6187586d1abd71246bfca0ba5215fd06109a34be4405053e7cfc9af8d2034bbafb643829ece8dd2f0a131b1ad90a87823b6a2f830b7dbe8e0add55b0fcfb08fa1097a4bfe638df7de93d18f14c66bc6640e2ffe9d9ef1974ad8ac50e5f752a5e2620a7f204282e2c6e5b65e326c4590e6afc7b8c074c37dd07fb0644fc0538be94e51a23984215"], 0x2c) 00:07:00 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r2, 0x0, 0x3979, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$TIOCMGET(r5, 0x5415, &(0x7f0000000000)) 00:07:00 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, 0x8) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 00:07:00 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x43) 00:07:00 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000040)='trusted.overlay.opaque\x00', &(0x7f0000000100)='y\x00', 0x2, 0x2) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val={0x0, 0x0, 0x0, 0x8}, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast}}}, 0x2c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r4, 0x84, 0x21, &(0x7f0000000180), &(0x7f00000001c0)=0x4) 00:07:00 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x44) 00:07:00 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SCSI_IOCTL_SYNC(r1, 0x4) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 00:07:00 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x8, 0x0, 0x42, 0x9, 0x0, 0x40, 0x0, 0x0, 0x2, 0x38, 0x0, 0x1, 0x0, 0x1000}, [{0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd7}]}, 0x78) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0x800, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000280)=0x7) r5 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$SNDCTL_DSP_POST(r5, 0x5008, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r6, &(0x7f0000000140)=ANY=[], 0xffc1) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r7, &(0x7f0000000140)=ANY=[], 0xffc1) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x1f, &(0x7f0000000300)={0x0, @in={{0x2, 0x4e24, @multicast2}}, 0xff65, 0x27}, &(0x7f0000000400)=0x90) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r6, 0x84, 0x73, &(0x7f00000002c0)={r8, 0x20, 0x0, 0x2, 0x4000004}, &(0x7f00000001c0)=0x18) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000200)={r9, 0x7}, &(0x7f0000000240)=0x8) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f0000000000)={@any, 0x6}) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r10, 0x29, 0x41, &(0x7f0000000040)={'nat\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) 00:07:00 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x45) 00:07:01 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x46) 00:07:01 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x47) 00:07:01 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x32) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xffc1) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[@ANYPTR=&(0x7f0000000400)=ANY=[@ANYRESOCT=r2, @ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES64=r0, @ANYRES32=r3, @ANYRESHEX, @ANYRES64=0x0]], 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r6, 0xc1205531, &(0x7f0000000000)={0x1f, 0x1, 0x0, 0x7fffffff, [], [], [], 0x101, 0xa0, 0x4, 0x1f, "f81e9977f77b973b5068e334bb30311b"}) 00:07:01 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast}}}, 0x2c) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x4ffe0, 0x0) ioctl$BLKRRPART(r2, 0x125f, 0x0) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x80000, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r4, 0xc0506617, &(0x7f0000000180)={{0x3, 0x0, @descriptor="ea2f916f944f39cc"}, 0x30, [], "e3edae9aa3541fa6b178e69769502545928343db39c24b6ed515e51c4e77a735dd25eaf8d598ac59db5e5bcd29d3716f"}) 00:07:01 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d05", @ANYRESHEX=r0], 0x15) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xffc1) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r3, 0x80dc5521, &(0x7f0000000180)=""/129) splice(r0, 0x0, r2, 0x0, 0x3979, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000000)=0x200000, 0x4) 00:07:01 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6(0xa, 0x2, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x200, 0x0) ioctl$VIDIOC_SUBDEV_G_SELECTION(r3, 0xc040563d, &(0x7f0000000280)={0x0, 0x0, 0x100, 0x1, {0xfff, 0x5, 0x3}}) r4 = dup3(r2, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) r8 = semget(0x2, 0x4, 0x0) semctl$SEM_STAT(r8, 0x0, 0x12, &(0x7f00000001c0)=""/29) splice(r6, 0x0, r7, 0x0, 0x4ffe0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) close(0xffffffffffffffff) splice(r9, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe0, 0x0) ioctl$KDGETLED(r9, 0x4b31, &(0x7f0000000200)) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) r11 = socket$inet_udp(0x2, 0x2, 0x0) close(r11) splice(r10, 0x0, r11, 0x0, 0x4ffe0, 0x0) r12 = dup(r11) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r12, 0xc01064b5, &(0x7f0000000340)={&(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) ioctl$DRM_IOCTL_MODE_GETPLANE(r5, 0xc02064b6, &(0x7f0000000180)={r13, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000100)=[0x0]}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="1ba9ea124e0d4681ee96bfffb44cd8785676", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r14 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r14, 0x0, 0x3979, 0x0) 00:07:01 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x48) 00:07:02 executing program 0: pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000002480)=0x81, 0x4) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) ioctl$SOUND_MIXER_INFO(r0, 0x805c4d65, &(0x7f0000002400)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) futex(&(0x7f00000024c0), 0x9, 0x2, &(0x7f0000002500)={0x77359400}, &(0x7f0000002540)=0x1, 0x1) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r3, &(0x7f0000002580)=ANY=[@ANYBLOB="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"], 0x2c) syz_read_part_table(0x63, 0x6, &(0x7f0000002340)=[{&(0x7f0000000180)="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", 0x1000, 0x6}, {&(0x7f0000001180)="423fe8d3af68501446bc2c9636076758f3a97b9a330c8f12b23ac5082b6a5d99fab8382fa487f685e2f1a4958632395ac8aac158b9bde8ce87b045dec9a53dd39b8630475832ed1ec548efbda865a93e9c1b77c530c06008037242fb26de104f9d102b93c7819c0c2c01630e623f8614cdebde9efd5bfbdf65d33ca7ed191f26b01b926f97492d02288abe20fd42c9d6f39e91a740b31f604e79e21d06ff", 0x9e, 0x8000}, {&(0x7f0000001240)="dbaa8793884aff2cd3963e12e0cd028f2f301b4a2393127bbef2c88a89d141f5a6f06cce75978e1beda17fe85f4854905121e52fcb552ed3bfb15bdc92f1df2221041fef100a58ca7c442f13af776cad65821e65e15eeca52ff8cec996b0ef66b044e9ca27cab3ff7bbc0e25f22224c98a7037639f00bba95d444c55dd9609028ff7cd49b098d71aa4a37c5cd42dd9e4be110ce60bb25287eef876b78fec4d8fc278a19b4b07d9a74084d873e567a4529e4976948759c20a11a0b6bacd5f293cfeb9f382cd618d", 0xc7, 0x8}, {&(0x7f0000000040)="2f37f9cb919e7074e312c98fa9bec8cc80ce8d531704b8df9409508b05b2ae018b6248", 0x23, 0x9}, {&(0x7f0000000100)="91a7aea3e74c210389668b7a6ecd3929138aab64be82319ada596caa47a1254dcb663224536e728c3d608da36238e72a9673504471087111ef0d792f7cab", 0x3e, 0x5}, {&(0x7f0000001340)="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", 0x1000, 0x800}]) 00:07:02 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000000)={0x80000000, 0xc, 0x4, 0x400000, 0x8001, {0x0, 0x7530}, {0x2, 0xc, 0xfa, 0x1f, 0x1f, 0x1f, "4cc49c62"}, 0x5a, 0x4, @userptr=0x1, 0x6}) 00:07:02 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x49) 00:07:02 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x4a) 00:07:02 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$IOC_PR_CLEAR(r3, 0x401070cd, &(0x7f0000000000)={0x5}) write$binfmt_elf64(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="0e9b419b00005000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000003800000000000000000000000000000000000300"/120], 0x78) 00:07:02 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x4b) 00:07:02 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x4c) 00:07:02 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x4d) 00:07:03 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x4e) 00:07:03 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r2, 0x0, 0x3979, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x1f4, r4, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2dec}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x403}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7fffffff}]}, @TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x68d}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}]}, @TIPC_NLA_NET={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xffffffff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x100}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}]}, @TIPC_NLA_MEDIA={0x88, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_BEARER={0x88, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xea33}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @rand_addr=0x9}}, {0x14, 0x2, @in={0x2, 0x4e20, @local}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e23, @rand_addr=0x10000}}}}]}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x4000}, 0x440c0) 00:07:03 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x84, 0x1, 0x1, 0x101, 0x0, 0x0, {0xc, 0x0, 0x6}, [@CTA_SEQ_ADJ_REPLY={0x44, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x8001}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x100}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x3}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x3}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x47335323}]}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0x9, 0x1, 'syz1\x00'}}, @CTA_LABELS_MASK={0x1c, 0x17, [0x0, 0x7fffffff, 0x4, 0x6603, 0x3f, 0xfffffffd]}]}, 0x84}, 0x1, 0x0, 0x0, 0x20008840}, 0x1) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast}}}, 0x2c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$KDGETMODE(r4, 0x4b3b, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getpeername$l2tp(r4, &(0x7f0000000040)={0x2, 0x0, @local}, &(0x7f0000000100)=0x10) 00:07:03 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000000), &(0x7f0000000040)=0x4) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 00:07:04 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'dummy0\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="000000f500000000080000000000ffff001e000000000000ffffffffffff000000000001ffffffffffff00004af46731e5924ddddf66f90e5bf58a25d324c22a1f3bc3104b81359dc924c5ec3f11bb8e4e5501941c4554a4c2bca384c682c152cbc125"], 0x2c) 00:07:04 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x4f) 00:07:04 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000040)={0x7, 0x9, 0x1, 'queue0\x00', 0x1}) ioctl$TUNSETSNDBUF(r3, 0x400454d4, &(0x7f0000000000)=0x2c86) 00:07:04 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$KVM_GET_IRQCHIP(r6, 0xc208ae62, &(0x7f0000000d00)) r7 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r10, &(0x7f0000000140)=ANY=[], 0xffc1) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r11, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r13 = syz_genetlink_get_family_id$team(&(0x7f0000000000)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x58, r13, 0x1, 0x0, 0x0, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r12}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x34, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8}}}]}}]}, 0x58}}, 0x0) r14 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r16 = dup(r15) getsockname$packet(r16, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r14, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r17}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc}]}]}]}, 0x34}}, 0x0) r18 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r20 = dup(r19) getsockname$packet(r20, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r18, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="3400000010000108000000000000000000000000506eb7de3560ee83da4d480000000000000000", @ANYRES32=r21, @ANYBLOB="000000000000000014001680100001800c0005000000000000000000"], 0x34}}, 0x0) r22 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r24 = dup(r23) getsockname$packet(r24, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r22, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r25}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc}]}]}]}, 0x34}}, 0x0) r26 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r28 = dup(r27) getsockname$packet(r28, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r26, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r29}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc}]}]}]}, 0x34}}, 0x0) r30 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r32 = dup(r31) getsockname$packet(r32, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r30, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="3400000010000108000000000000000000fdd901636c2500004d", @ANYRES32=r33, @ANYBLOB="000000000000000014001680100001800c0005000000000000000000"], 0x34}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000019c0)={'team0\x00', r33}) r35 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r37 = dup(r36) getsockname$packet(r37, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r35, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r38}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc}]}]}]}, 0x34}}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000002b00)={0x0, @initdev, @broadcast}, &(0x7f0000002b40)=0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r41 = fcntl$dupfd(r40, 0x0, r39) ioctl$PERF_EVENT_IOC_ENABLE(r41, 0x8912, 0x400200) getsockopt$inet_IP_IPSEC_POLICY(r41, 0x0, 0x10, &(0x7f0000002b80)={{{@in6=@mcast2, @in6=@mcast1}}, {{@in6=@mcast2}, 0x0, @in=@multicast2}}, &(0x7f0000000200)=0xe8) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) r43 = socket$inet_udp(0x2, 0x2, 0x0) close(r43) splice(r42, 0x0, r43, 0x0, 0x4ffe0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r43, 0x0, 0x11, &(0x7f0000002cc0)={{{@in=@multicast1, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@empty}}, &(0x7f0000002dc0)=0xe8) r45 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r47 = dup(r46) getsockname$packet(r47, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r45, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r48}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc}]}]}]}, 0x34}}, 0x0) r49 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r51 = dup(r50) getsockname$packet(r51, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r49, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=@newlink={0x24, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r52}, [@IFLA_VFINFO_LIST={0x4}]}, 0x24}}, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r10, &(0x7f0000003180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000003140)={&(0x7f0000002e00)={0x13c, r13, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [{{0x8, 0x1, r17}, {0x4}}, {{0x8, 0x1, r25}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8, 0x4, r29}}}]}}, {{0x8, 0x1, r34}, {0x4}}, {{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r44}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x7}}}]}}, {{0x8, 0x1, r48}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0xd21d}}, {0x8, 0x6, r52}}}]}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x80000}, 0x80) splice(r8, &(0x7f00000000c0), r9, &(0x7f0000000100)=0xfe000, 0x2, 0x0) r53 = socket$inet_udp(0x2, 0x2, 0x0) close(r53) splice(r8, 0x0, r53, 0x0, 0x4ffe0, 0x0) getsockopt$inet_sctp6_SCTP_EVENTS(r8, 0x84, 0xb, &(0x7f0000000440), &(0x7f0000000040)=0xe) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r54 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r54, 0x0, 0x3979, 0x0) 00:07:04 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) accept4$phonet_pipe(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x800) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, &(0x7f00000000c0)=0x8) splice(r0, 0x0, r2, 0x0, 0x3979, 0x0) 00:07:04 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x50) 00:07:04 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="0e9b419b00005000000000000000000000000000ffffffff000000000000000040000000000000000000000000000000000000000000000100000000000000000000000000000001ffffffffffffff0000000000000000000000000200"/120], 0x78) [ 808.611546][T32346] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 808.648263][T32346] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 00:07:04 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe0, 0x0) write(r1, &(0x7f00000001c0)="386df514af258475facab8398949e1e88420b926e2b66d507b306799e26a498d45bd8c01e6b62007b047c0e88065aa224f6d8f0855ad58937b9cc23e12e47de406f3cbf7a82360081455c4ae282afa47e236684aea19fa7f338d648d730a7bc8082ee717363eb8f8c3091906a8ac1a7bde4a2fa3762e66", 0x77) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller1\x00', 0x1}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$IMCTRLREQ(0xffffffffffffffff, 0x80044945, &(0x7f0000000100)={0x20, 0x8, 0x6, 0x2}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) pselect6(0x40, &(0x7f00000002c0), &(0x7f0000000340)={0x48}, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}}) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf7}, @val={0x0, 0x0, 0x4}, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:07:04 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="00003bf5000000000000000000ffffffffffff000010000000ffffffffffff00"/44], 0x2c) 00:07:04 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x51) 00:07:04 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e9b419b00005000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000003800000000000000000000000000000000000000000000000000000000000000000000000000000000000000007a9e3085d6355700"/127], 0x78) 00:07:05 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x52) 00:07:05 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(r0, 0x0, r1, 0x0, 0x4ffe0, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000000)=0x2) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r2, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x100}}, 0x40) 00:07:05 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x53) 00:07:05 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x54) 00:07:05 executing program 3: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r5, 0x0, 0x3979, 0x0) 00:07:05 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}]}, 0x78) 00:07:05 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x4ffe0, 0x0) write$P9_RREAD(r2, &(0x7f0000000000)={0x61, 0x75, 0x1, {0x56, "693dbbeb3fa863e07bc48defc786edf3eb3455a74abd0760b7ee83761ba42cfab9ae2c2d784a6f344c5bcca8a03fded1e62373d77f716a8844cd4f6c0ff2720cf5e7974202e05f538f60cc5260d96daf4462f623ea08"}}, 0x61) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r4, 0x0, 0x3979, 0x0) 00:07:05 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x55) 00:07:06 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'veth0_to_bond\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x3f, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r2 = dup(r0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000180)={{0x2, 0x10000, 0x10, 0x4, 0x7, 0x62, 0x6a, 0x4, 0xd1, 0xfa, 0x5, 0x9}, {0x4000, 0xf000, 0x4, 0x6, 0x3, 0x81, 0x0, 0x2, 0x1, 0x3, 0x8}, {0x10000, 0x4, 0x8, 0x3, 0x0, 0x8, 0x2, 0xff, 0x10, 0x0, 0x4, 0x6}, {0x13800, 0x100000, 0xb, 0x40, 0x6, 0x0, 0x0, 0xf7, 0x7, 0x3, 0xe, 0xfe}, {0x0, 0x3000, 0x4, 0xff, 0xba, 0x1, 0x6, 0x0, 0x1f, 0x81, 0x0, 0xa}, {0x1, 0x5000, 0x9, 0x6, 0x80, 0xab, 0x6, 0xd2, 0x20, 0x4d, 0x81, 0x5e}, {0x4000, 0x5000, 0x10, 0x6, 0x4, 0x8, 0x0, 0x8, 0xfa, 0x3f, 0xc3, 0x7f}, {0x0, 0xf000, 0x0, 0xd4, 0x8, 0x20, 0x5, 0x0, 0xd8, 0x20, 0x66, 0x6}, {0x1000, 0x1}, {0x4000, 0x4}, 0x8, 0x0, 0x9004, 0x10000, 0xa, 0x2801, 0x5000, [0xffffffff, 0xffffffffffffffff, 0x7, 0x1000]}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="000000f500000000000000000000ffff001e000000000000ffffffffffff000000000000ffffffffff400000f7127fe2ba1e31a2cd7a041e62843247e2c7cd"], 0x2c) 00:07:06 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xea, 0x9) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 00:07:06 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x56) 00:07:06 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) request_key(&(0x7f0000000040)='pkcs7_test\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000180)='ppp1procbdevppp1\x00', 0xfffffffffffffffc) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000f500000000080000000000ffff001e00617f8b53e9847c99ffffff000000000000ffffffffffff0000"], 0x2c) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x4ffe0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0xffc1) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') r7 = socket(0x200000000000011, 0x3, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r7, &(0x7f0000000240)={0x11, 0x0, r9}, 0x14) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$BATADV_CMD_GET_DAT_CACHE(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)={0x1c, r6, 0x31905e13403123b7, 0x0, 0x0, {0x9, 0x0, 0xf000}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r10}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r6, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20044040) openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0x141200, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = fcntl$dupfd(r12, 0x0, r11) ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200) read$rfkill(r13, &(0x7f00000000c0), 0x8) 00:07:06 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYRESHEX, @ANYRESHEX, @ANYRES64=r0, @ANYPTR=&(0x7f0000000180)=ANY=[@ANYPTR64, @ANYPTR, @ANYRES32, @ANYRESHEX=r1]], @ANYRESHEX=r0], 0x1a) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timerfd_settime(r1, 0x0, &(0x7f0000000040)={{0x77359400}, {r2, r3+10000000}}, &(0x7f00000000c0)) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = fcntl$dupfd(r6, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) write$binfmt_misc(r7, &(0x7f0000000200)={'syz0', "12c00338517ca2bf6dd629272e7c1563ab8c5e0cedcaeb5de1a80c9a3eb68ec776eba3515578276c4ec05faaf9d70b7660295ef6742316885e8ebb87975445e7f5de6d6623670f52f9c7fc796f94d0cf5b60426ff7d44278998bceb9474a3cf0c40eaaf5ce18af139eb857c61cebb739b62be279d3a114f081994d54991391c38fb1c9f7f1311da9fc82e0c11c4ae55cebb70f9b276f918a14a4997fc1"}, 0xa1) splice(r0, 0x0, r4, 0x0, 0x3979, 0x0) 00:07:06 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) memfd_create(&(0x7f0000000040)='\x00', 0x4) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$SIOCX25SCUDMATCHLEN(0xffffffffffffffff, 0x89e7, &(0x7f0000000000)={0x7}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r5, 0x0, 0x3979, 0x0) syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x2, 0x40801) 00:07:06 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x57) 00:07:06 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe0, 0x0) r3 = syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x68, r3, 0x0, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r3, 0x200, 0x70bd29, 0x25dfdbfc, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc004}, 0x10) 00:07:06 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) socket$inet_smc(0x2b, 0x1, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x4ffe0, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x541c, &(0x7f0000000000)) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f0000000140)=ANY=[], 0xffc1) setsockopt$inet6_icmp_ICMP_FILTER(r5, 0x1, 0x1, &(0x7f0000000040)={0x5}, 0x4) splice(r0, 0x0, r4, 0x0, 0x3979, 0x0) 00:07:06 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB='\r]P', @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r5, 0x0, 0x3979, 0x0) 00:07:06 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x58) 00:07:06 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0xffffffffffffffff}, [{}]}, 0x78) 00:07:07 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'veth1\x00', 0x1000}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:07:07 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x59) 00:07:07 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x20000, 0x0) write$P9_RLINK(r1, &(0x7f0000000040)={0x7, 0x47, 0x2}, 0x7) 00:07:07 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val={0x0, 0x0, 0x0, 0x8}, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast}}}, 0x2c) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0xffc1) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f0000000040)={0x2, 'vlan0\x00', {0x1}}) 00:07:07 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x5a) 00:07:07 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="0e9b419b0000500000000000000000000000000000000000000000000000000040000000000000000000000000000000000000003800000000000000000000000000000000000000000000000000040000000000000700"/118], 0x78) 00:07:07 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x8000}) r1 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, r1) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$HCIINQUIRY(r3, 0x800448f0, &(0x7f0000000100)={0x1, 0x8, "d07802", 0x5, 0x2}) ioctl$SNDRV_PCM_IOCTL_TTSTAMP(r3, 0x40044103, &(0x7f00000002c0)=0x2400) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0xffc1) setsockopt$SO_BINDTODEVICE_wg(r4, 0x1, 0x19, &(0x7f0000000300)='wg2\x00', 0x4) ioctl$USBDEVFS_GETDRIVER(r3, 0x41045508, &(0x7f0000000180)={0x5, "ce6a3aa442ea90795b2e7c86a645cc127e891e4aa2574bb62c8cbf454bc99a561a083fe91b8ee99b96fcf2f14cf2a385070fdf89039822cf3170b48c8b78ddd50cb74fcf0d6462334760f0a2714e700274b132f8ef2d9b798f3e85746aa5bca88f3b1259e94f0fb0a24a1b5efd5db05a8cd48e110d5420a160f31a98373b783439c824a47937c3d9e143dae01d4bc5f6635698b0c15de068f926b31470ba4ca2d6ed2b6a369af1d20d22c534a2c5c26eb10fadf8b7f99c90d3d4136ba23fa67b03bf4b45083db4a21c4cb879cbde5f0c044167b568e7c5b4aa54537e689d54a286f311c238c2c9137a43d311ce8a5f8cb484c0516d3a5cf8bcd1eeea4e17f1be"}) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) setsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, &(0x7f0000000340)={0x400, 0x1, 0x0, 0xf, 0x5, 0x6, 0x81}, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = fcntl$dupfd(r6, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$EVIOCSKEYCODE(r7, 0x40084504, &(0x7f0000000380)=[0x3, 0xffff8001]) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast}}}, 0x2c) socket$bt_bnep(0x1f, 0x3, 0x4) 00:07:07 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000000)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x1, 0x95, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x8000}], "9416361393361789bfbdb7e5042022a30ea998be81cd71fff0d70c3b8bd77c9f714497422801691abe432ef5bc69c64ad2d9963106704a3d04c69402245b32c21751be6cd427c70c87ef36bea22c9a40c6c520d84a66ce5eeb8b7e"}, 0xd3) 00:07:07 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x5b) 00:07:07 executing program 3: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x400440, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x40, r1, 0xe08, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0_to_team\x00'}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x80) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = dup3(r5, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xfffffecc) r7 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r2, 0x0, r7, 0x0, 0x3979, 0x6) 00:07:07 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0xffc1) openat$cgroup_ro(r2, &(0x7f0000000180)='memory.stat\x00', 0x0, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r3, 0x0, 0x3979, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0xffc1) r5 = accept$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, &(0x7f0000000040)=0x1c) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/nvram\x00', 0x509002, 0x0) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240)='batadv\x00') sendmsg$BATADV_CMD_TP_METER_CANCEL(r6, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x64, r7, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x401}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x0) getsockopt$IP_SET_OP_VERSION(r5, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) 00:07:07 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f00000001c0)={{0x0, 0x0, @identifier="652ad5b789d1920585e810a345592b7d"}, 0xa8, [], "27cbf02d28d1c944696f5dc2b8501847afba99c1928aa186dd73191bc8dcf0c15b9975c2214cebaada86bc7a57984bddc7af6c2b001f3c28f0d01181fc4241493f98ce12d08de61859e9e0f8ce48f611047fd851d2f4f74c96fde01518d30543b63947eac98e4e17b4db59e703f59bbfa0a66f02d1c531f60d6d66b1b125881c1cb6b2184d7cdcc20fbed39fba4a920381244a480a3bad8285f94cb33aeeda735bb8682ffe8144c7"}) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c0000000a0a01010000000000000000020000010900010073797a310000000008000640ffffff0034000980080001400006000000000800014000000007080001400000000108000140000000040800014000000007080001400000"], 0x5c}, 0x1, 0x0, 0x0, 0x4010}, 0xc004080) write$binfmt_elf64(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="0e9b419b0000500000000000000000000000000000000000000000000000000000000000000000000000000000003800"/120], 0x78) 00:07:07 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x5c) 00:07:08 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = accept$unix(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x6e) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r2, 0x0, r4, 0x0, 0x4ffe0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = fcntl$dupfd(r6, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r9, 0x0, r8) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r8, 0x8982, &(0x7f0000000e80)={0x7, 'veth0_virt_wifi\x00', {0x1}, 0x2}) r10 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000c40), 0x800) r11 = getpid() sched_setscheduler(r11, 0x5, &(0x7f0000000380)) r12 = open$dir(&(0x7f00000001c0)='./file0\x00', 0x40042, 0x0) fstat(r12, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r13) statx(0xffffffffffffffff, &(0x7f0000000c80)='./file0\x00', 0x0, 0x1, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r15 = getpid() sched_setscheduler(r15, 0x5, &(0x7f0000000380)) fstat(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r16) sendmsg$unix(r1, &(0x7f0000000e40)={&(0x7f00000000c0)=@abs={0x3, 0x0, 0x4e24}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000140)="448a5e8e1b0a325eacfc71041560f27a80641fff7d5af25c7678356f6647a9879b36485d02551e461a5181b81594aa1db3146520c7e3ab820fc43e515d6eac8e7bf2c51192f57d", 0x47}], 0x1, &(0x7f0000000dc0)=[@rights={{0x20, 0x1, 0x1, [r2, r0, r7, r10]}}, @cred={{0x1c, 0x1, 0x2, {r11, r13, r14}}}, @cred={{0x1c, 0x1, 0x2, {r15, 0xffffffffffffffff, r16}}}], 0x60, 0xc0c0}, 0x4000040) getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000ec0), &(0x7f0000000f00)=0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x5, 0x0, 0x100, 0x0, 0x0, 0x2, 0x0, 0x40, 0x0, 0xffffffff}, [], "", [[], [], [], [], [], [], [], [], [], []]}, 0xa40) 00:07:08 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x5d) 00:07:08 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'vlan0\x00', 0x1000}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0x3, &(0x7f0000000040)=0x9, 0x4) write$tun(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000f500000000080000000000ffff001e000000000000ffffffffffff000000000080ffffffffffff0000"], 0x2c) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x4ffe0, 0x0) getsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000100), &(0x7f0000000180)=0x4) 00:07:08 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x2, 0xfffffffffffffffc}]}, 0x78) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) 00:07:08 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x5e) 00:07:08 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="030008000000758ce10413059351000100000000ffffffffffff000100000005fffffffffffffffe126cb4d4fec3f33de707213c69d8d63f57"], 0x39) 00:07:08 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) r2 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000100)='rxrpc_s\x00', 0x0, &(0x7f0000000180)="d7067bd119f0ffe1", 0x8, r2) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000000)={r2, 0x65, 0xd5}, &(0x7f00000000c0)={'enc=', 'raw', ' hash=', {'blake2b-160-generic\x00'}}, &(0x7f0000000180)="14f53b3981deba44ccaf9ce0a3def253a930e36a7cc856183868cab0914e3515dbb8966608f48690a4d96fcc09b3f573b91ca71dd46686609b57f201b364aab54f43f3b55b46cb87d47e2d1018c532586d0967f42a3e7b88aebbb976edf3a3f9acab4f3cae", &(0x7f0000000200)=""/213) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r3, 0x0, 0x3979, 0x0) 00:07:08 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x5f) 00:07:08 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x400}]}, 0x78) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvme-fabrics\x00', 0x80080, 0x0) 00:07:09 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe0, 0x0) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000000)={0x3, 0x6, 0x4, 0x70000, 0x8, {}, {0x3, 0x8, 0x0, 0x0, 0x6, 0x1, "32e700eb"}, 0x10, 0x2, @userptr=0x7, 0x3, 0x0, r1}) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 00:07:09 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x60) 00:07:09 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x61) 00:07:09 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x600000, 0x0) sendmsg$OSF_MSG_REMOVE(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0x268, 0x1, 0x5, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1}, [{{0x254, 0x1, {{0x2, 0x3f}, 0x5, 0x8, 0x6, 0x8, 0x1e, 'syz0\x00', "ac09c04f23cfbfe36e39984419f8d63c6cb0149cf6613a4fa00f1d5e6bb282e4", "ab9686fb1e7cd956f0c16cb01c4ae32a54f0f890b92c1f9abfab105d21497882", [{0x0, 0x5, {0x3, 0x3}}, {0x7, 0x1, {0x2}}, {0xfffb, 0xfff, {0x0, 0x8}}, {0x3, 0x8, {0x2, 0x7}}, {0x7, 0x2, {0x2, 0x8000000}}, {0x8, 0xbe86, {0x2, 0x80000000}}, {0x7f, 0x5, {0x1, 0x1}}, {0x0, 0x7, {0x0, 0x5}}, {0x9, 0x3f, {0x3, 0x2d1}}, {0x8, 0x7f, {0x3, 0x6}}, {0x40e, 0x7ff, {0x1, 0x101}}, {0xf001, 0x4, {0x3, 0xfffffffb}}, {0x2, 0x9, {0x2, 0x8001}}, {0x5, 0x182, {0x0, 0xfffffffb}}, {0x4, 0x1, {0x0, 0x6f4}}, {0x6, 0x6, {0x2, 0x6}}, {0x80b1, 0x4, {0x1, 0x5}}, {0x2, 0x81, {0x1, 0x1ff}}, {0x0, 0x1, {0x2, 0x7}}, {0x8, 0x8, {0x7, 0xfff}}, {0x200, 0x2}, {0x9, 0x8, {0x1, 0x1}}, {0x7, 0x7f, {0x3, 0x100}}, {0x60, 0x81, {0xba88a3dac458f600, 0x3592}}, {0x81, 0x40, {0x2, 0x2}}, {0x3, 0x2, {0x2, 0x2}}, {0x3, 0x7f, {0x1, 0x7}}, {0x0, 0x7, {0x1, 0x2}}, {0x8001, 0x39f, {0x1, 0x3}}, {0x6, 0x8, {0x2, 0x1}}, {0x7ff, 0x7, {0x2, 0x8}}, {0x0, 0x3, {0x2, 0x7fffffff}}, {0x152, 0x7, {0x1, 0xffff0001}}, {0x8}, {0x4, 0x7, {0x0, 0x8}}, {0x7, 0xff, {0x1, 0x2}}, {0x9, 0x525, {0x0, 0x1000}}, {0x7, 0x2, {0x2, 0x3}}, {0x8, 0x7f, {0x2, 0x9ad}}, {0x916, 0x3, {0x0, 0x5}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x24004004}, 0x4004000) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x78) 00:07:09 executing program 5: sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x13, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4c001}, 0xc019) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x5}, [{0x60000000}], "f23f490b2e7be4510120aad37b17e32cfe0f87e24bc97f75b1dc24f2734225b4f4ee3c1a64a860625f4dcfc47d137f772e85a11452efcba10180000000000000", [[], [], [], [], [], [], [], [], [], []]}, 0xab8) 00:07:09 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe0, 0x0) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000040)=0x1) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r3 = socket$netlink(0x10, 0x3, 0x0) io_setup(0x0, &(0x7f0000000100)) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val={0x0, 0x0, 0x0, 0x8}, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:07:09 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x62) 00:07:09 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) splice(r0, &(0x7f0000000000)=0x14, r1, &(0x7f0000000040), 0x0, 0xb) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r2, 0x0, 0x3979, 0x0) 00:07:10 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', {0x7, 0x0, @empty}}) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video37\x00', 0x2, 0x0) write$tun(r0, &(0x7f0000000000)={@void, @val, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast}}}, 0x28) 00:07:10 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="0e9b419b0000500000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000380000000000000000000000000000000000000000000000000000000000000000000000000000000000faffffff00"/120], 0x78) 00:07:10 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x63) 00:07:10 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5dc9", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x2) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r2, 0x0, 0x3979, 0x0) 00:07:10 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x64) 00:07:10 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe1, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x18, &(0x7f00000000c0)={r5}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000000)={r5, 0x3, "8f1f2b"}, &(0x7f0000000040)=0xb) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x5, 0x0, 0x50, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 00:07:11 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x65) 00:07:11 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x66) 00:07:11 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r2, 0x0, 0x3979, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f0000000140)=ANY=[], 0xffc1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = fcntl$dupfd(r7, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r8, 0x84, 0x76, &(0x7f0000000480)={0x0, 0x800000}, &(0x7f00000004c0)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000500)={r9, 0x1}, 0x8) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) r11 = socket$inet_udp(0x2, 0x2, 0x0) close(r11) splice(r10, 0x0, r11, 0x0, 0x4ffe0, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r10, 0x84, 0x8, &(0x7f0000000400), &(0x7f0000000440)=0x4) splice(r3, 0x0, r4, 0x0, 0x4ffe0, 0x0) r12 = getpid() sched_setscheduler(r12, 0x5, &(0x7f0000000380)) r13 = clone3(&(0x7f0000000340)={0xc00000, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100), {0x8}, &(0x7f0000000180)=""/118, 0x76, &(0x7f0000000200)=""/250, &(0x7f0000000300)=[r12], 0x1}, 0x50) r14 = getpid() sched_setscheduler(r14, 0x5, &(0x7f0000000380)) sendmsg$nl_netfilter(r3, &(0x7f0000000900)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000940)={0x50c, 0x12, 0x3, 0x5, 0x70bd28, 0x25dfdbfb, {0x5, 0x0, 0x1}, [@generic="21cca6c186350d88260a54dc05e325a0ee34c9cec4acd3267a9153cbfd6d92798a5cfe7bfd3d3626bc91f5c2b44a61f2bf2eb3de1568d554e90c1081e0b238aa633fd9ab9f78f5305903fc4b079c10b9a926cdb6ac414ae31763fc1d2d1cd45a23f53bec45258cc825a83473cc12c499aef93f317f034d92731848bda55843a8acd69a9189ba42f38e36b29681ed8ebe5687f6f6", @generic="346469330048700713f87818ef9394ede7293f8a7bb01d00906884252720bc1bb3776edcf2328d298bad924d6159d37ccb19bfc0124e4328826104f5893f062672d98a984386b50b540f9368283d9de6151f326f4b62a3e4a4605d2eaabca1f00f9212d0f2f510e0befa0fcebfe46b72cc764827907f88ab356dff2eefa9971afba0c1b9c6d86fd83c4043dfc9cad6debae3d0b3e417a7881b7b3a28d2b12ce7bf049c07c82c235e06b005ad28b219499c65", @generic="aa42b0efbdaf510866b3b476703274b77c177788878171a2c711834c4efa7c019ff875cfe853bf7cdf3910d489a278d1a98455554670067e0f8f062703c09167992bb7183b488d96a2c2f90b2cdde349b4a8a7ce1295018ba4397391bdf68285bf457822c164a132cc7cd4f2b38bcd684c3ab0cd1f48ccb6e71ae90aa922cfaeef96a5f8bc010506150118cba6a589eae2924bf45e33e272945b60e836dd69db57412585bf8c3b0a7a94737f2d773a27cf5278198a9bee6b5c02d0f2b2d6a5cc6749673abf311d6998436ffe0f2efe189c882fee3497e9dbb65d042eebfe245d76e2b615e6588a", @generic="fb57fddef8c5e1fcd5aa805c4bbca261b731cd21e5f49eba8a24b8ba970655ea7f959e6e6ae66466d6d2bc", @nested={0x27b, 0x21, 0x0, 0x1, [@typed={0x8, 0x1e, 0x0, 0x0, @pid=r13}, @generic, @generic="f96b6234ea48d2330addc96432b278e4e74924d28bc48757b4ae6ee5e61c188dd356b7b09fe0b8679a8d67f3b1ba84c05d674330b6", @generic="4d5f5f12fdde53db5458120e520c6cdea5655df29e3c2536233054ed0db539dcdfcd82bc181f5ad1579ddb84d0d5ede39a50419e24efca812e0e98fdf9ae8c960015ff559b4b1a6ec1d25634bc092b00a0989d777dc607d8f02c8879e7d9a847d71640ab40722e6661d332c61c298514a492763e133327a1062b50f28eef2ceb5abb7598759b41997c0ec857e1393a71c9372fda03a345b23157cc7796998f7b493e642f1124c09edb76716ddca69473d6", @generic="91219f3ead0c2a4642d429589d4dae19a16e8601c6c13829f2392912cf8f1c5233868bbe8832a0497574592f1d73c4dfbd0d1d9675cd2bdcbd92ab7574decd3fb87647d6893cabec111e0289791818e29a54908d91c6d0a52c295208691b9a44404569366ef1430c87cbb79c08abaddc670a9c5f24e4e9eb1635", @generic="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", @typed={0x8, 0x50, 0x0, 0x0, @pid=r14}, @typed={0x8, 0x91, 0x0, 0x0, @pid}]}, @typed={0x8, 0x47, 0x0, 0x0, @ipv4=@empty}, @typed={0x8, 0x17, 0x0, 0x0, @fd}, @typed={0x14, 0x76, 0x0, 0x0, @ipv6=@mcast1}]}, 0x50c}, 0x1, 0x0, 0x0, 0x240100e0}, 0x40010) 00:07:11 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x67) 00:07:11 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = fcntl$dupfd(r8, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) r10 = socket$inet_sctp(0x2, 0x1, 0x84) r11 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r11, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r10, 0x84, 0x18, &(0x7f00000000c0)={r12}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r9, 0x84, 0x75, &(0x7f0000000100)={r12, 0x826}, 0x8) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r13, &(0x7f0000000140)=ANY=[], 0xffc1) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r14, &(0x7f0000000140)=ANY=[], 0xffc1) ioctl$VIDIOC_DQBUF(r4, 0xc0585611, &(0x7f0000000080)={0x40, 0x5, 0x4, 0x4, 0xffffffff, {r5, r6/1000+10000}, {0x1, 0x8, 0x81, 0x4, 0x2, 0x4, "e03cb698"}, 0x5, 0x4, @fd=r13, 0x1, 0x0, r14}) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 00:07:11 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x181102, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000040)={0x1, 'dummy0\x00', 0x2}, 0x18) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) r7 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) flistxattr(r7, &(0x7f0000000300)=""/73, 0x49) splice(r5, 0x0, r6, 0x0, 0x4ffe0, 0x0) r8 = syz_genetlink_get_family_id$fou(&(0x7f0000000180)='fou\x00') sendmsg$FOU_CMD_DEL(r5, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES16=r8, @ANYBLOB="100028bd7000ffdbdf250200000006000a004e230000140009000000000000000000000000000000000008000800ac1e010114000900ff0100000000000000000000000000010800060000000000"], 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x24004821) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val={0x0, 0x0, 0x0, 0x8}, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:07:12 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'veth0\x00', 0x800}) write$tun(r0, &(0x7f0000000180)={@val={0x0, 0xf5}, @val, @ipv4=@tipc={{0x1f, 0x4, 0x3, 0x3, 0x97, 0x66, 0x0, 0x7, 0x6, 0x0, @local, @multicast2, {[@ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x44, 0x83, 0x3, 0x9, [{@loopback, 0x81}, {@loopback, 0x5}, {@loopback, 0x401}, {@dev={0xac, 0x14, 0x14, 0x1e}, 0x5}, {@loopback, 0x8000}, {@multicast2, 0x7}, {@multicast2, 0x2000000}, {@dev={0xac, 0x14, 0x14, 0x43}, 0x2}]}, @end, @lsrr={0x83, 0xb, 0xc5, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2a}]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0xc, 0xfc, 0x1, 0x0, [{@rand_addr=0x4c, 0x9}]}, @noop]}}, @payload_conn={{{0x1b, 0x0, 0x0, 0x0, 0x1, 0x6, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6, 0x2, 0x0, 0x2, 0x80, 0x0, 0x4e20, 0x4e20}}, [0x0, 0x0, 0x0]}}}, 0xa5) 00:07:12 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x68) 00:07:12 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x4, 0x1) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp1\x00', 0x10000, 0x0) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, @any, 0x7f}, 0xa) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0xfffffffffffffffe, 0x0) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="0e9b419b000050000000000000000000000000000000000000000000000000004000000000000000000000a3a500000000000000000038000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000083caa57a7cdc0c31384d298d5e5d7cfc934d885c7863ba90d9f4ca49bc1bbe1298aa374f2e693bd9160e76218c4ec7518af47d099928cc4cd5b24493e50259110ec953b6a551ada82db7d4131be594ca911297c7593edfa155caff318929a878c45db11f93b602073b23de8aef0289e5f7041ed882762619f45c7d4f3bdaf91faf4d1065c2b5e0303c69dc616d4a0676ad3d4387a256ba55ad151c01cb46e68cf817441aab687ddde84b3018fee70f552a1c507f8348adb1bc95e9dd11"], 0x78) 00:07:12 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="1bcb733122c4e7de7bb9f7eca57a9dc5d010baeeec8f0e38e200cc5ef69536d8b34c1d3e712c427eabcdd76e1d0bc044bc46be", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r2, 0x0, 0x3979, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x18, &(0x7f00000000c0)={r5}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000080)={r5, 0x2}, &(0x7f00000000c0)=0x8) 00:07:12 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x69) 00:07:12 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000800)) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$X25_QBITINCL(r3, 0x106, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) execveat(r3, &(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=[&(0x7f00000000c0)='selinuxem1em0(:-]\x00', &(0x7f0000000100)='\\selinux\x00', &(0x7f0000000140)='ppp0\x00', &(0x7f0000000180)='vboxnet0%mime_type-\x00'], &(0x7f0000000780)=[&(0x7f0000000200)=']md5sum,\x00', &(0x7f0000000240)='\x00', &(0x7f0000000280)='\x00', &(0x7f00000002c0)='\\%)em1!wlan1\x00', &(0x7f0000000300)='cpuset\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='trustedtrusted\'vboxnet1@%\xa0+proc\x00', &(0x7f00000003c0)='cpusetvboxnet1selinux(\xa1{vboxnet0ppp0eth1{$-\x00', &(0x7f0000000400)='\xbe\xba\x00'], 0x400) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000440)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24c, 0x40, 0x2, 0x0, 0x2, 0x38, 0x2}, [{0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x80000000}], "8f55896e3fa8373c2fe888b2eddeb6a830afb010107c4c81dc13945e7969ac78a035f01953ba226a73992019cec189887199351727c4f6edfa745e6044a8245f85c8c9104243cb74db7ed63512f9dc8701aef3d8130d6cfe0ba774115dc901a1bf6f185865e5015633f6a956f8c201600ea84d9c7cd5365e87fde7902189355b9eddacb018c55b0d08854154f80600000000000000a2ff9e21e14c289d6a080f171a02f88a2a6c8c0bc4771865f14b", [[], []]}, 0x327) ioctl$SCSI_IOCTL_START_UNIT(r3, 0x5) 00:07:12 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x6a) 00:07:13 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x6b) 00:07:13 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x6c) 00:07:13 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0xfffffffffffffffa, 0x400) ioctl$TIOCL_SELLOADLUT(r1, 0x541c, &(0x7f0000000040)={0x5, 0x400, 0x7, 0xaa, 0xff}) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 00:07:13 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x3979, 0x0) 00:07:14 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x98981, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000f500000000080000000000ffff001e000000000000ffffffffdfff000000000000ffffffffffff0000"], 0x2c) 00:07:14 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x501040, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000180)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:07:14 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x6d) 00:07:14 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, 0x0, 0x3, 0x0, 0x38, 0x0, 0x0, 0x0, 0x3}, [{}], "", [[], [], [], [], []]}, 0x578) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe0, 0x0) write$P9_RLOPEN(r1, &(0x7f0000000000)={0x18, 0xd, 0x1, {{0x20, 0x2, 0x5}, 0x9f}}, 0x18) 00:07:14 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYRESOCT], 0x1b) setsockopt$inet_buf(r1, 0x0, 0x28, &(0x7f00000001c0)="f85781208d3f4234a743d3e5ce3995aa332da61c8f404ad515d873178834aa73844bff2090a8f710e7fd66b6d84bb8e871820d5453dad8430e41044ccb8cabfef80680ef0a93649efea62cdc131eb5aace68a5c1d3beb535514a822a1e05a05fa76e1f94f64ebe1261570e0e50b38b0649a8042851688b33c8cb2eca51e8f5c5bc5ecd5b69d9b4cd57d753d98fbd1213caa861e04fb4c23c219c78e7babf12", 0x9f) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_GET_NODES(r4, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r5, 0x200, 0x70bd2d, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x10) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r6, &(0x7f0000000140)=ANY=[], 0xffc1) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r6, 0x80585414, &(0x7f0000000280)) r7 = syz_open_dev$tty20(0xc, 0x4, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = fcntl$dupfd(r9, 0x0, r8) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$TIOCL_SETSEL(r10, 0x541c, &(0x7f0000000380)={0x2, {0x2, 0xff, 0x2, 0x48, 0x6}}) syz_emit_ethernet(0x26, &(0x7f0000000300)={@dev={[], 0x1c}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @val={@val={0x9100, 0x7, 0x0, 0x4}, {0x8100, 0x7, 0x1, 0x1}}, {@can={0xc, {{0x0, 0x1, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, "a9fd7951c53a5bf4"}}}}, &(0x7f0000000340)={0x1, 0x1, [0xc74, 0xf95, 0x8cc, 0x5e5]}) splice(r0, 0x0, r7, 0x0, 0x3979, 0x0) r11 = socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r10, 0xc01064b5, &(0x7f0000000400)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6}) close(r11) 00:07:14 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}}) write$tun(r0, &(0x7f0000000100)={@val={0x0, 0xf5}, @val={0x0, 0x1, 0x54, 0x2, 0x200, 0x6}, @eth={@empty, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @val={@void, {0x8100, 0x3, 0x0, 0x2}}, {@can={0xc, {{0x4, 0x0, 0x1, 0x1}, 0x3, 0x2, 0x0, 0x0, "d2659663ed54aec2"}}}}}, 0x30) 00:07:14 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x6e) 00:07:15 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000000)={0xab, 0x7fff, 0x401}) 00:07:15 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x6f) 00:07:15 executing program 3: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0xffc1) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000000)={0x30, 0x4, 0x0, {0x5, 0x1, 0x8, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x30) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000180)={&(0x7f0000000040)="66ca617dce9f854f65db715b490bb1f18d4634f2542371fc7e88f38ae4f4a5a664", 0x21, 0x1}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000280)={r3, 0x9e, &(0x7f00000001c0)=""/158}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6(0xa, 0x80802, 0xe2) r6 = dup3(r5, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) ioctl$FBIOGET_FSCREENINFO(r0, 0x4602, &(0x7f00000000c0)) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) r7 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r1, 0x0, r7, 0x0, 0x3979, 0x0) 00:07:15 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x70) 00:07:15 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, r1) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xffc1) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000300)=0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0}, &(0x7f0000000380)=0xc) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r6, &(0x7f0000000140)=ANY=[], 0xffc1) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000003c0)={{{@in=@multicast1, @in6=@ipv4={[], [], @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@mcast1}}, &(0x7f00000004c0)=0x2f) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = getpid() sched_setscheduler(r9, 0x5, &(0x7f0000000380)) r10 = open$dir(&(0x7f00000001c0)='./file0\x00', 0x40042, 0x0) fstat(r10, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r11) fstat(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r12) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r14, 0x0, r13) ioctl$sock_FIOGETOWN(r13, 0x8903, &(0x7f00000005c0)=0x0) r16 = open$dir(&(0x7f00000001c0)='./file0\x00', 0x40042, 0x0) fstat(r16, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r17) fstat(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x212, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0xb, 0x2, 0xffff}, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0xfffffffffffffff5) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r19}, 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r19}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000080)='/dev/autofs\x00', r19}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000000)='\'-/-\x00', r19}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x14, &(0x7f0000000600)='\':vboxnet0vboxnet1+\x00', r19}, 0x30) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000680)={0x0, 0x0}, &(0x7f00000006c0)=0xc) r22 = getgid() sendmsg$unix(r1, &(0x7f00000007c0)={&(0x7f0000000000)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000002c0)=[{&(0x7f0000000080)="61e8a3522e4e966cbd19d0bc6eb026e9ee6d2bfd747400057d05de738e4b7a2c42c007c0e813f1a0ebb8d63b95f20bd08517c274611f", 0x36}, {&(0x7f00000001c0)="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", 0xff}, {&(0x7f00000000c0)="7c5c7007fd818be81c9ecaebaabd00ce01594dfa1f9d26a04ca76f91dd0a2daed82eb7753238dc1b1862be3e4f1cb106f998c09fc22fb132af19ae26977a24150985e4b4b04c4fbeefc9367cae", 0x4d}], 0x3, &(0x7f0000000700)=[@cred={{0x1c, 0x1, 0x2, {r4, r5, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r7, r8}}}, @cred={{0x1c, 0x1, 0x2, {r9, r11, r12}}}, @cred={{0x1c, 0x1, 0x2, {r15, r17, r18}}}, @rights={{0x18, 0x1, 0x1, [r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r20, r21, r22}}}], 0xb8, 0x4000001}, 0x8004) 00:07:15 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x71) 00:07:16 executing program 2: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'geneve0\x00'}) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="000000f500000000000000000000ffff001e000000080000ffffffffffff00000008f5fffeffffffffff0000"], 0x2c) 00:07:16 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r7, 0x0, r6) r8 = epoll_create(0x2) splice(r8, 0x0, r5, 0x0, 0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) r10 = socket$inet_udp(0x2, 0x2, 0x0) close(r10) splice(r9, 0x0, r10, 0x0, 0x4ffe0, 0x0) sendmsg$NLBL_CALIPSO_C_LISTALL(r9, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 00:07:16 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x72) 00:07:16 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000000000)={'security\x00'}, &(0x7f00000000c0)=0x54) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r0, 0x0, r5, 0x0, 0x3979, 0x0) 00:07:16 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0x4, 0x8, 0x6, r1, 0x0, &(0x7f0000000040)={0x0, 0x992b, [], @ptr=0xfffffffffffff515}}) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000180)=0x2) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller1\x00', 0x1}) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xffc1) accept4$tipc(0xffffffffffffffff, &(0x7f0000000240)=@id, &(0x7f0000000280)=0x10, 0x80000) splice(r3, &(0x7f00000001c0)=0x80000001, r0, &(0x7f0000000200)=0x7, 0x199, 0xf) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000f500000000080000000000ffff001e000000400000ffffffffffff000000000000ffffffffffff0000"], 0x2c) 00:07:16 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r1, 0xc0096616, &(0x7f0000000400)={0x1, [0x0]}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5d50", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x3979, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0xffc1) r3 = syz_open_procfs(0x0, &(0x7f0000000380)='net/udplite\x00') sendfile(0xffffffffffffffff, r3, &(0x7f0000000240)=0x202, 0x4000000000dc) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000340)='nbd\x00') pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_GET_REG_LIST(r6, 0xc008aeb0, &(0x7f0000000300)={0x6, [0x5, 0xc74, 0x7f, 0xffff, 0x7, 0x3]}) write$binfmt_misc(r5, &(0x7f0000000140)=ANY=[], 0xffc1) sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000040", @ANYRESOCT=r5, @ANYBLOB="050c27bd7000ffdbdf2503000000"], 0x3}, 0x1, 0x0, 0x0, 0x4}, 0x8040) sendmsg$NBD_CMD_STATUS(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3b00941f", @ANYRES16=r4, @ANYBLOB="000826bd7000fedbdf25050000000c00060002000000000000000c00078008000100", @ANYRES32, @ANYBLOB="0c00030007000000000000000c0003000104000000000000"], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) 00:07:16 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x73) 00:07:16 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="6ffed56f12a2fbdbdf25030000000000098000000200070019a53f0d0200010004000000010001040000ff285dc091da25580098850076d10000"], 0x54}}, 0x0) sendmsg$TIPC_NL_MON_GET(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)={0x1c4, r2, 0x800, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffff}]}, @TIPC_NLA_NET={0x50, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x400}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x81}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5056}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}]}, @TIPC_NLA_NODE={0x1c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8000}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0x10, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}]}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8000}]}, @TIPC_NLA_LINK={0x40, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffff8}]}, @TIPC_NLA_SOCK={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x5c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffc00}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x91e}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000001}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7ff}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x4008802}, 0x4000800) 00:07:16 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x74) [ 820.756610][ T305] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.5'. 00:07:16 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvme-fabrics\x00', 0x400000, 0x0) write$FUSE_INIT(r2, &(0x7f0000000180)={0x50, 0x0, 0x7, {0x7, 0x1f, 0x9, 0x200200, 0x80, 0x20, 0x3, 0x5}}, 0x50) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast}}}, 0x2c) 00:07:16 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x75) 00:07:16 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x76) 00:07:17 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x77) [ 821.192593][ T308] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.5'. 00:07:17 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x200001b8) 00:07:17 executing program 3: request_key(&(0x7f0000000080)='id_resolver\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='GPL\"security\x00', 0xfffffffffffffffb) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6(0xa, 0x2, 0x0) r3 = dup3(r0, r2, 0x80000) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockname$ax25(r3, &(0x7f0000000000)={{0x3, @rose}, [@remote, @rose, @remote, @null, @default, @null, @bcast, @rose]}, &(0x7f00000000c0)=0x48) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="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", @ANYRESOCT], 0x1a) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = fcntl$dupfd(r6, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) mq_timedreceive(r7, &(0x7f0000000200)=""/189, 0xbd, 0x6, 0x0) splice(r0, 0x0, r4, 0x0, 0x3979, 0x0) 00:07:17 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000ff0)={&(0x7f0000002c40)={0x2, 0x18, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @loopback}}]}, 0x50}}, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00', @ANYRESOCT], 0x1a) creat(&(0x7f0000000000)='./file0\x00', 0x0) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) splice(r1, 0x0, r3, 0x0, 0x3979, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000040)="1fd0147dc3678567f856bb1473c9136f", 0x10) 00:07:17 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf5}, @val={0x0, 0x0, 0x0, 0x8}, @ipx={0xffff, 0x1e, 0x0, 0x0, {@current, @broadcast}, {@current, @broadcast}}}, 0x2c) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0xffc1) ioctl$sock_bt_bnep_BNEPCONNADD(r2, 0x400442c8, &(0x7f0000000180)=ANY=[@ANYRES32=r1, @ANYBLOB="ce0e00001f0025af20eed2cd03c7843ab39e0cc395b271e0306cf46f630c9180f67712b5192aa5d42aee7d5c85520a0157c81ef5d3b17d538c07ee15d08c72f37b6ba42250d126f49e1c2258"]) 00:07:17 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x12, 0x20, 0x2, 0x1e, 0x0, 0x70bd27, 0x25dfdbfd, [@sadb_x_filter={0x5, 0x1a, @in=@empty, @in=@rand_addr=0xffffffff, 0x1f, 0x18, 0x14}, @sadb_spirange={0x2, 0x10, 0x4d2, 0x4d6}, @sadb_ident={0x2, 0xb, 0xd8, 0x0, 0x67ca}, @sadb_x_sa2={0x2, 0x13, 0x1, 0x0, 0x0, 0x70bd2c}, @sadb_x_nat_t_type={0x1, 0x14, 0xff}, @sadb_key={0x10, 0x9, 0x390, 0x0, "90cdf470d04f3737a24fa43a2b0906d2fd4fc1971a66d90c1cc07ca84c74b9377aafa1868139e4bbeff56107f3a810d61734e82fbf4511e4688540971b72cd1b2f073d6c3018a26d04dae04af0a334365aa9702d41882cce62490f057d11de215e29566ada54d9e7aab424af721840209960"}]}, 0xf0}}, 0x40000) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 00:07:18 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_DISALLOCATE(r3, 0x5608) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r1, 0x0, r4, 0x0, 0x4ffe0, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_inet6_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000100)) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r5, 0x84, 0x18, &(0x7f00000000c0)={r7}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000000)={0x6, 0x8004, 0x739, 0x7, r7}, &(0x7f0000000040)=0x10) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000080)={r8, 0x40}, &(0x7f00000000c0)=0x8) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x41, 0x9b, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 00:07:18 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000140)={{0xe, 0x9b, 0x4c, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) fcntl$getflags(r1, 0xb) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x800, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, &(0x7f0000000040), &(0x7f0000000080)=0x4) [ 822.357396][ T332] ================================================================== [ 822.357520][ T332] BUG: KASAN: use-after-free in con_shutdown+0x85/0x90 [ 822.357534][ T332] Write of size 8 at addr ffff88809faf0108 by task syz-executor.3/332 [ 822.357538][ T332] [ 822.357555][ T332] CPU: 0 PID: 332 Comm: syz-executor.3 Not tainted 5.6.0-rc1-next-20200212-syzkaller #0 [ 822.357564][ T332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 822.357570][ T332] Call Trace: [ 822.357592][ T332] dump_stack+0x197/0x210 [ 822.357610][ T332] ? con_shutdown+0x85/0x90 [ 822.357639][ T332] print_address_description.constprop.0.cold+0xd4/0x30b [ 822.357653][ T332] ? con_shutdown+0x85/0x90 [ 822.357669][ T332] ? con_shutdown+0x85/0x90 [ 822.357686][ T332] __kasan_report.cold+0x1b/0x32 [ 822.357706][ T332] ? con_shutdown+0x85/0x90 [ 822.357729][ T332] kasan_report+0x12/0x20 [ 822.357747][ T332] __asan_report_store8_noabort+0x17/0x20 [ 822.357762][ T332] con_shutdown+0x85/0x90 [ 822.357777][ T332] ? update_region+0x150/0x150 [ 822.357794][ T332] release_tty+0xd3/0x470 [ 822.357816][ T332] tty_release_struct+0x3c/0x50 [ 822.357839][ T332] tty_release+0xbcb/0xe90 [ 822.357875][ T332] __fput+0x2ff/0x890 [ 822.357896][ T332] ? do_tty_hangup+0x30/0x30 [ 822.357917][ T332] ____fput+0x16/0x20 [ 822.357990][ T332] task_work_run+0x145/0x1c0 [ 822.358017][ T332] do_exit+0xbcb/0x3030 [ 822.358032][ T332] ? lockdep_hardirqs_on+0x421/0x5e0 [ 822.358071][ T332] ? get_signal+0x392/0x24f0 [ 822.358090][ T332] ? get_signal+0x311/0x24f0 [ 822.358105][ T332] ? mm_update_next_owner+0x7c0/0x7c0 [ 822.358129][ T332] ? lock_downgrade+0x920/0x920 [ 822.358147][ T332] ? _raw_spin_unlock_irq+0x23/0x80 [ 822.358165][ T332] ? get_signal+0x392/0x24f0 [ 822.358180][ T332] ? _raw_spin_unlock_irq+0x23/0x80 [ 822.358204][ T332] do_group_exit+0x135/0x360 [ 822.358226][ T332] get_signal+0x47c/0x24f0 [ 822.358286][ T332] ? debug_object_deactivate+0x320/0x320 [ 822.358305][ T332] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 822.358329][ T332] ? task_work_run+0x118/0x1c0 [ 822.358383][ T332] do_signal+0x87/0x1700 [ 822.358414][ T332] ? setup_sigcontext+0x7d0/0x7d0 [ 822.358467][ T332] ? blkcg_maybe_throttle_current+0x5ca/0xfc0 [ 822.358481][ T332] ? _raw_spin_unlock_irq+0x23/0x80 [ 822.358498][ T332] ? lockdep_hardirqs_on+0x421/0x5e0 [ 822.358520][ T332] ? __blkcg_punt_bio_submit+0x1e0/0x1e0 [ 822.358541][ T332] ? exit_to_usermode_loop+0x43/0x380 [ 822.358557][ T332] ? do_syscall_64+0x676/0x790 [ 822.358573][ T332] ? exit_to_usermode_loop+0x43/0x380 [ 822.358590][ T332] ? lockdep_hardirqs_on+0x421/0x5e0 [ 822.358608][ T332] ? trace_hardirqs_on+0x67/0x240 [ 822.358635][ T332] exit_to_usermode_loop+0x286/0x380 [ 822.358658][ T332] do_syscall_64+0x676/0x790 [ 822.358681][ T332] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 822.358691][ T332] RIP: 0033:0x414f51 [ 822.358706][ T332] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 822.358714][ T332] RSP: 002b:00007ffcafaa2bd0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 822.358727][ T332] RAX: 0000000000000000 RBX: 0000000000000006 RCX: 0000000000414f51 [ 822.358736][ T332] RDX: 0000000000000000 RSI: 0000000000001dfb RDI: 0000000000000005 [ 822.358745][ T332] RBP: 0000000000000001 R08: 0000000050369dfe R09: 0000000024dbf314 [ 822.358754][ T332] R10: 00007ffcafaa2cb0 R11: 0000000000000293 R12: 000000000075c9a0 [ 822.358763][ T332] R13: 000000000075c9a0 R14: 0000000000760a70 R15: 000000000075c07c [ 822.358795][ T332] [ 822.358803][ T332] Allocated by task 10060: [ 822.358819][ T332] save_stack+0x23/0x90 [ 822.358832][ T332] __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 822.358847][ T332] kasan_kmalloc+0x9/0x10 [ 822.358861][ T332] kmem_cache_alloc_trace+0x158/0x790 [ 822.358876][ T332] vc_allocate+0x1fc/0x760 [ 822.358889][ T332] con_install+0x52/0x410 [ 822.358903][ T332] tty_init_dev+0xf9/0x470 [ 822.358915][ T332] tty_open+0x4a5/0xbb0 [ 822.358929][ T332] chrdev_open+0x245/0x6b0 [ 822.358942][ T332] do_dentry_open+0x4ca/0x1350 [ 822.358955][ T332] vfs_open+0xa0/0xd0 [ 822.358969][ T332] path_openat+0x12ee/0x33f0 [ 822.358990][ T332] do_filp_open+0x192/0x260 [ 822.359004][ T332] do_sys_openat2+0x5eb/0x7e0 [ 822.359018][ T332] do_sys_open+0xf2/0x180 [ 822.359033][ T332] __x64_sys_open+0x7e/0xc0 [ 822.359048][ T332] do_syscall_64+0xfa/0x790 [ 822.359063][ T332] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 822.359066][ T332] [ 822.359073][ T332] Freed by task 355: [ 822.359086][ T332] save_stack+0x23/0x90 [ 822.359101][ T332] __kasan_slab_free+0x102/0x150 [ 822.359114][ T332] kasan_slab_free+0xe/0x10 [ 822.359126][ T332] kfree+0x10a/0x2c0 [ 822.359142][ T332] vt_disallocate_all+0x2bd/0x3e0 [ 822.359155][ T332] vt_ioctl+0xc38/0x26d0 [ 822.359168][ T332] tty_ioctl+0xa37/0x14f0 [ 822.359182][ T332] ksys_ioctl+0x123/0x180 [ 822.359197][ T332] __x64_sys_ioctl+0x73/0xb0 [ 822.359212][ T332] do_syscall_64+0xfa/0x790 [ 822.359228][ T332] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 822.359232][ T332] [ 822.359243][ T332] The buggy address belongs to the object at ffff88809faf0000 [ 822.359243][ T332] which belongs to the cache kmalloc-2k of size 2048 [ 822.359256][ T332] The buggy address is located 264 bytes inside of [ 822.359256][ T332] 2048-byte region [ffff88809faf0000, ffff88809faf0800) [ 822.359261][ T332] The buggy address belongs to the page: [ 822.359274][ T332] page:ffffea00027ebc00 refcount:1 mapcount:0 mapping:ffff8880aa400e00 index:0x0 [ 822.359285][ T332] flags: 0xfffe0000000200(slab) [ 822.359304][ T332] raw: 00fffe0000000200 ffffea0002632c48 ffffea00027bcc08 ffff8880aa400e00 [ 822.359321][ T332] raw: 0000000000000000 ffff88809faf0000 0000000100000001 0000000000000000 [ 822.359327][ T332] page dumped because: kasan: bad access detected [ 822.359331][ T332] [ 822.359336][ T332] Memory state around the buggy address: [ 822.359348][ T332] ffff88809faf0000: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 822.359360][ T332] ffff88809faf0080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 822.359373][ T332] >ffff88809faf0100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 822.359378][ T332] ^ [ 822.359390][ T332] ffff88809faf0180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 822.359402][ T332] ffff88809faf0200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 822.359407][ T332] ================================================================== [ 822.359412][ T332] Disabling lock debugging due to kernel taint [ 822.359512][ T332] Kernel panic - not syncing: panic_on_warn set ... [ 822.359528][ T332] CPU: 0 PID: 332 Comm: syz-executor.3 Tainted: G B 5.6.0-rc1-next-20200212-syzkaller #0 [ 822.359536][ T332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 822.359539][ T332] Call Trace: [ 822.359556][ T332] dump_stack+0x197/0x210 [ 822.359604][ T332] panic+0x2e3/0x75c [ 822.359619][ T332] ? add_taint.cold+0x16/0x16 [ 822.359634][ T332] ? con_shutdown+0x85/0x90 [ 822.359648][ T332] ? preempt_schedule+0x4b/0x60 [ 822.359663][ T332] ? ___preempt_schedule+0x16/0x18 [ 822.359677][ T332] ? trace_hardirqs_on+0x5e/0x240 [ 822.359694][ T332] ? con_shutdown+0x85/0x90 [ 822.359710][ T332] end_report+0x47/0x4f [ 822.359723][ T332] ? con_shutdown+0x85/0x90 [ 822.359738][ T332] __kasan_report.cold+0xe/0x32 [ 822.359754][ T332] ? con_shutdown+0x85/0x90 [ 822.359771][ T332] kasan_report+0x12/0x20 [ 822.359785][ T332] __asan_report_store8_noabort+0x17/0x20 [ 822.359798][ T332] con_shutdown+0x85/0x90 [ 822.359811][ T332] ? update_region+0x150/0x150 [ 822.359823][ T332] release_tty+0xd3/0x470 [ 822.359839][ T332] tty_release_struct+0x3c/0x50 [ 822.359853][ T332] tty_release+0xbcb/0xe90 [ 822.359874][ T332] __fput+0x2ff/0x890 [ 822.359891][ T332] ? do_tty_hangup+0x30/0x30 [ 822.359906][ T332] ____fput+0x16/0x20 [ 822.359922][ T332] task_work_run+0x145/0x1c0 [ 822.359940][ T332] do_exit+0xbcb/0x3030 [ 822.359953][ T332] ? lockdep_hardirqs_on+0x421/0x5e0 [ 822.359968][ T332] ? get_signal+0x392/0x24f0 [ 822.359991][ T332] ? get_signal+0x311/0x24f0 [ 822.360005][ T332] ? mm_update_next_owner+0x7c0/0x7c0 [ 822.360023][ T332] ? lock_downgrade+0x920/0x920 [ 822.360039][ T332] ? _raw_spin_unlock_irq+0x23/0x80 [ 822.360051][ T332] ? get_signal+0x392/0x24f0 [ 822.360065][ T332] ? _raw_spin_unlock_irq+0x23/0x80 [ 822.360082][ T332] do_group_exit+0x135/0x360 [ 822.360099][ T332] get_signal+0x47c/0x24f0 [ 822.360117][ T332] ? debug_object_deactivate+0x320/0x320 [ 822.360134][ T332] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 822.360153][ T332] ? task_work_run+0x118/0x1c0 [ 822.360170][ T332] do_signal+0x87/0x1700 [ 822.360190][ T332] ? setup_sigcontext+0x7d0/0x7d0 [ 822.360204][ T332] ? blkcg_maybe_throttle_current+0x5ca/0xfc0 [ 822.360217][ T332] ? _raw_spin_unlock_irq+0x23/0x80 [ 822.360230][ T332] ? lockdep_hardirqs_on+0x421/0x5e0 [ 822.360245][ T332] ? __blkcg_punt_bio_submit+0x1e0/0x1e0 [ 822.360261][ T332] ? exit_to_usermode_loop+0x43/0x380 [ 822.360273][ T332] ? do_syscall_64+0x676/0x790 [ 822.360285][ T332] ? exit_to_usermode_loop+0x43/0x380 [ 822.360297][ T332] ? lockdep_hardirqs_on+0x421/0x5e0 [ 822.360308][ T332] ? trace_hardirqs_on+0x67/0x240 [ 822.360325][ T332] exit_to_usermode_loop+0x286/0x380 [ 822.360341][ T332] do_syscall_64+0x676/0x790 [ 822.360358][ T332] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 822.360366][ T332] RIP: 0033:0x414f51 [ 822.360378][ T332] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 822.360385][ T332] RSP: 002b:00007ffcafaa2bd0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 822.360396][ T332] RAX: 0000000000000000 RBX: 0000000000000006 RCX: 0000000000414f51 [ 822.360403][ T332] RDX: 0000000000000000 RSI: 0000000000001dfb RDI: 0000000000000005 [ 822.360411][ T332] RBP: 0000000000000001 R08: 0000000050369dfe R09: 0000000024dbf314 [ 822.360418][ T332] R10: 00007ffcafaa2cb0 R11: 0000000000000293 R12: 000000000075c9a0 [ 822.360425][ T332] R13: 000000000075c9a0 R14: 0000000000760a70 R15: 000000000075c07c [ 822.361713][ T332] Kernel Offset: disabled